https://github.com/Azure/azure-sdk-for-java: This package contains Microsoft Azure Key Vault Management SDK. A new set of management libraries are now Generally Available. For documentation on how to use the new libraries, please see https://aka.ms/azsdk/java/mgmt
  • Microsoft 
Copyright (c) Microsoft Corporation. All rights reserved.
Licensed under the MIT License. See License.txt in the project root for
license information.

/**
 * Copyright (c) Microsoft Corporation. All rights reserved.
 * Licensed under the MIT License. See License.txt in the project root for
 * license information.
 */

package com.microsoft.azure.management.keyvault;

import com.microsoft.azure.management.apigeneration.Fluent;
import com.microsoft.azure.management.apigeneration.Method;
import com.microsoft.azure.management.graphrbac.ActiveDirectoryGroup;
import com.microsoft.azure.management.graphrbac.ActiveDirectoryUser;
import com.microsoft.azure.management.graphrbac.ServicePrincipal;
import com.microsoft.azure.management.resources.fluentcore.arm.models.ChildResource;
import com.microsoft.azure.management.resources.fluentcore.model.Attachable;
import com.microsoft.azure.management.resources.fluentcore.model.HasInner;
import com.microsoft.azure.management.resources.fluentcore.model.Settable;

import java.util.List;


An immutable client-side representation of a key vault access policy.

/**
 * An immutable client-side representation of a key vault access policy.
 */
@Fluent(ContainerName = "/Microsoft.Azure.Management.Fluent.KeyVault")
public interface AccessPolicy extends
        ChildResource<Vault>,
        HasInner<AccessPolicyEntry> {
    
Returns:The Azure Active Directory tenant ID that should be used for
authenticating requests to the key vault.
/**
     * @return The Azure Active Directory tenant ID that should be used for
     * authenticating requests to the key vault.
     */
    String tenantId();

    
Returns:The object ID of a user or service principal in the Azure Active
Directory tenant for the vault.
/**
     * @return The object ID of a user or service principal in the Azure Active
     * Directory tenant for the vault.
     */
    String objectId();

    
Returns:Application ID of the client making request on behalf of a principal.
/**
     * @return Application ID of the client making request on behalf of a principal.
     */
    String applicationId();

    
Returns:Permissions the identity has for keys and secrets.
/**
     * @return Permissions the identity has for keys and secrets.
     */
    Permissions permissions();

    /**************************************************************
     * Fluent interfaces to attach an access policy
     **************************************************************/

    
The entirety of an access policy definition.

Type parameters:
/**
     * The entirety of an access policy definition.
     * @param <ParentT> the return type of the final {@link Attachable#attach()}
     */
    interface Definition<ParentT> extends
            DefinitionStages.Blank<ParentT>,
            DefinitionStages.WithAttach<ParentT> {
    }

    
Grouping of access policy definition stages applicable as part of a key vault creation.

/**
     * Grouping of access policy definition stages applicable as part of a key vault creation.
     */
    interface DefinitionStages {
        
The first stage of an access policy definition.

Type parameters:
  • <ParentT> – the stage of the parent definition to return to after attaching this definition
/**
         * The first stage of an access policy definition.
         *
         * @param <ParentT> the stage of the parent definition to return to after attaching this definition
         */
        interface Blank<ParentT> extends WithIdentity<ParentT> {
        }

        
The access policy definition stage allowing the Active Directory identity to be specified.

Type parameters:
  • <ParentT> – the stage of the parent definition to return to after attaching this definition
/**
         * The access policy definition stage allowing the Active Directory identity to be specified.
         * @param <ParentT> the stage of the parent definition to return to after attaching this definition
         */
        interface WithIdentity<ParentT> {
            
Specifies the object ID of the Active Directory identity this access policy is for.

Params:
  • objectId – the object ID of the AD identity
Returns:the next stage of access policy definition
/**
             * Specifies the object ID of the Active Directory identity this access policy is for.
             *
             * @param objectId the object ID of the AD identity
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forObjectId(String objectId);

            
Specifies the Active Directory user this access policy is for.

Params:
  • user – the AD user object
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory user this access policy is for.
             *
             * @param user the AD user object
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forUser(ActiveDirectoryUser user);
            
            
Specifies the Active Directory user this access policy is for.

Params:
  • userPrincipalName – the user principal name of the AD user
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory user this access policy is for.
             *
             * @param userPrincipalName the user principal name of the AD user
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forUser(String userPrincipalName);
            
            
Application ID of the client making request on behalf of a principal.

Params:
  • applicationId – the application ID
Returns:the next stage of access policy definition
/**
             * Application ID of the client making request on behalf of a principal.
             * 
             * @param applicationId the application ID
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forApplicationId(String applicationId);
            
            
Specifies the Azure Active Directory tenant ID that should be used for
authenticating requests to the key vault.

Params:
  • tenantId – the tenant ID for the key vault.
Returns:the next stage of access policy definition
/**
             * Specifies the Azure Active Directory tenant ID that should be used for
             * authenticating requests to the key vault.
             * 
             * @param tenantId the tenant ID for the key vault.
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forTenantId(String tenantId);

            
Specifies the Active Directory group this access policy is for.

Params:
  • activeDirectoryGroup – the AD group object
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory group this access policy is for.
             *
             * @param activeDirectoryGroup the AD group object
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forGroup(ActiveDirectoryGroup activeDirectoryGroup);

            
Specifies the Active Directory service principal this access policy is for.

Params:
  • servicePrincipal – the AD service principal object
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory service principal this access policy is for.
             *
             * @param servicePrincipal the AD service principal object
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forServicePrincipal(ServicePrincipal servicePrincipal);

            
Specifies the Active Directory service principal this access policy is for.

Params:
  • servicePrincipalName – the service principal name of the AD user
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory service principal this access policy is for.
             *
             * @param servicePrincipalName the service principal name of the AD user
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forServicePrincipal(String servicePrincipalName);
        }

        
The access policy definition stage allowing permissions to be added.

Type parameters:
  • <ParentT> – the stage of the parent definition to return to after attaching this definition
/**
         * The access policy definition stage allowing permissions to be added.
         * @param <ParentT> the stage of the parent definition to return to after attaching this definition
         */
        interface WithPermissions<ParentT> {
            
Allow all permissions for the AD identity to access keys.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the AD identity to access keys.
             *
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowKeyAllPermissions();

            
Allow a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowKeyPermissions(KeyPermissions... permissions);

            
Allow a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowKeyPermissions(List<KeyPermissions> permissions);

            
Allow all permissions for the AD identity to access secrets.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the AD identity to access secrets.
             *
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowSecretAllPermissions();

            
Allow a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowSecretPermissions(SecretPermissions... permissions);

            
Allow a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowSecretPermissions(List<SecretPermissions> permissions);

            
Allow all permissions for the AD identity to access certificates.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the AD identity to access certificates.
             *
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowCertificateAllPermissions();

            
Allow a list of permissions for the AD identity to access certificates.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access certificates.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowCertificatePermissions(CertificatePermissions... permissions);

            
Allow a list of permissions for the AD identity to access certificates.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access certificates.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowCertificatePermissions(List<CertificatePermissions> permissions);
            
            
Allow all permissions for the Ad identity to access storage.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the Ad identity to access storage.
             * 
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowStorageAllPermissions();
            
            
Allow a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowStoragePermissions(StoragePermissions...permissions);
            
            
Allow a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowStoragePermissions(List<StoragePermissions> permissions);
        }

        
The final stage of the access policy definition.

 At this stage, more permissions can be added or application ID can be specified, or the access policy definition can be attached to the parent key vault definition using InUpdate.attach(). 
Type parameters:
/** The final stage of the access policy definition.
         * <p>
         * At this stage, more permissions can be added or application ID can be specified,
         * or the access policy definition can be attached to the parent key vault definition
         * using {@link WithAttach#attach()}.
         * @param <ParentT> the return type of {@link WithAttach#attach()}
         */
        interface WithAttach<ParentT> extends
                Attachable.InUpdate<ParentT>,
                WithPermissions<ParentT> {
        }
    }

    
The entirety of an access policy definition as part of a key vault update.

Type parameters:
/**
     * The entirety of an access policy definition as part of a key vault update.
     * @param <ParentT> the return type of the final {@link UpdateDefinitionStages.WithAttach#attach()}
     */
    interface UpdateDefinition<ParentT> extends
            UpdateDefinitionStages.Blank<ParentT>,
            UpdateDefinitionStages.WithAttach<ParentT> {
    }

    
Grouping of access policy definition stages applicable as part of a key vault update.

/**
     * Grouping of access policy definition stages applicable as part of a key vault update.
     */
    interface UpdateDefinitionStages {
        
The first stage of an access policy definition.

Type parameters:
  • <ParentT> – the stage of the parent definition to return to after attaching this definition
/**
         * The first stage of an access policy definition.
         *
         * @param <ParentT> the stage of the parent definition to return to after attaching this definition
         */
        interface Blank<ParentT> extends WithIdentity<ParentT> {
        }

        
The access policy definition stage allowing the Active Directory identity to be specified.

Type parameters:
  • <ParentT> – the stage of the parent definition to return to after attaching this definition
/**
         * The access policy definition stage allowing the Active Directory identity to be specified.
         * @param <ParentT> the stage of the parent definition to return to after attaching this definition
         */
        interface WithIdentity<ParentT> {
            
Specifies the object ID of the Active Directory identity this access policy is for.

Params:
  • objectId – the object ID of the AD identity
Returns:the next stage of access policy definition
/**
             * Specifies the object ID of the Active Directory identity this access policy is for.
             *
             * @param objectId the object ID of the AD identity
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forObjectId(String objectId);

            
Specifies the Active Directory user this access policy is for.

Params:
  • user – the AD user object
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory user this access policy is for.
             *
             * @param user the AD user object
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forUser(ActiveDirectoryUser user);

            
Specifies the Active Directory user this access policy is for.

Params:
  • userPrincipalName – the user principal name of the AD user
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory user this access policy is for.
             *
             * @param userPrincipalName the user principal name of the AD user
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forUser(String userPrincipalName);
            
            
Application ID of the client making request on behalf of a principal.

Params:
  • applicationId – the application ID
Returns:the next stage of access policy definition
/**
             * Application ID of the client making request on behalf of a principal.
             * 
             * @param applicationId the application ID
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forApplicationId(String applicationId);
            
            
Specifies the Azure Active Directory tenant ID that should be used for
authenticating requests to the key vault.

Params:
  • tenantId – the tenant ID for the key vault.
Returns:the next stage of access policy definition
/**
             * Specifies the Azure Active Directory tenant ID that should be used for
             * authenticating requests to the key vault.
             * 
             * @param tenantId the tenant ID for the key vault.
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forTenantId(String tenantId);

            
Specifies the Active Directory group this access policy is for.

Params:
  • activeDirectoryGroup – the AD group object
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory group this access policy is for.
             *
             * @param activeDirectoryGroup the AD group object
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forGroup(ActiveDirectoryGroup activeDirectoryGroup);

            
Specifies the Active Directory service principal this access policy is for.

Params:
  • servicePrincipal – the AD service principal object
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory service principal this access policy is for.
             *
             * @param servicePrincipal the AD service principal object
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forServicePrincipal(ServicePrincipal servicePrincipal);

            
Specifies the Active Directory service principal this access policy is for.

Params:
  • servicePrincipalName – the service principal name of the AD user
Returns:the next stage of access policy definition
/**
             * Specifies the Active Directory service principal this access policy is for.
             *
             * @param servicePrincipalName the service principal name of the AD user
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> forServicePrincipal(String servicePrincipalName);
        }

        
The access policy definition stage allowing permissions to be added.

Type parameters:
  • <ParentT> – the stage of the parent definition to return to after attaching this definition
/**
         * The access policy definition stage allowing permissions to be added.
         * @param <ParentT> the stage of the parent definition to return to after attaching this definition
         */
        interface WithPermissions<ParentT> {
            
Allow all permissions for the AD identity to access keys.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the AD identity to access keys.
             *
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowKeyAllPermissions();

            
Allow a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowKeyPermissions(KeyPermissions... permissions);

            
Allow a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowKeyPermissions(List<KeyPermissions> permissions);

            
Allow all permissions for the AD identity to access secrets.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the AD identity to access secrets.
             *
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowSecretAllPermissions();

            
Allow a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowSecretPermissions(SecretPermissions... permissions);

            
Allow a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowSecretPermissions(List<SecretPermissions> permissions);
            
            
Allow all permissions for the Ad identity to access storage.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the Ad identity to access storage.
             * 
             * @return the next stage of access policy definition
             */
            @Method
            WithAttach<ParentT> allowStorageAllPermissions();
            
            
Allow a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowStoragePermissions(StoragePermissions...permissions);
            
            
Allow a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            WithAttach<ParentT> allowStoragePermissions(List<StoragePermissions> permissions);
        }

        
The final stage of the access policy definition.

 At this stage, more permissions can be added or application ID can be specified, or the access policy definition can be attached to the parent key vault update using InDefinition.attach(). 
Type parameters:
/** The final stage of the access policy definition.
         * <p>
         * At this stage, more permissions can be added or application ID can be specified,
         * or the access policy definition can be attached to the parent key vault update
         * using {@link WithAttach#attach()}.
         * @param <ParentT> the return type of {@link WithAttach#attach()}
         */
        interface WithAttach<ParentT> extends
                Attachable.InDefinition<ParentT>,
                WithPermissions<ParentT> {
        }
    }

    
Grouping of all the key vault update stages.

/**
     * Grouping of all the key vault update stages.
     */
    interface UpdateStages {
        
The access policy update stage allowing permissions to be added or removed.

/**
         * The access policy update stage allowing permissions to be added or removed.
         */
        interface WithPermissions {
            
Allow all permissions for the AD identity to access keys.

Returns:the next stage of access policy update
/**
             * Allow all permissions for the AD identity to access keys.
             *
             * @return the next stage of access policy update
             */
            @Method
            Update allowKeyAllPermissions();

            
Allow a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy update
/**
             * Allow a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy update
             */
            Update allowKeyPermissions(KeyPermissions... permissions);

            
Allow a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy update
/**
             * Allow a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy update
             */
            Update allowKeyPermissions(List<KeyPermissions> permissions);

            
Revoke all permissions for the AD identity to access keys.

Returns:the next stage of access policy update
/**
             * Revoke all permissions for the AD identity to access keys.
             *
             * @return the next stage of access policy update
             */
            @Method
            Update disallowKeyAllPermissions();

            
Revoke a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions to revoke
Returns:the next stage of access policy update
/**
             * Revoke a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions to revoke
             * @return the next stage of access policy update
             */
            Update disallowKeyPermissions(KeyPermissions... permissions);

            
Revoke a list of permissions for the AD identity to access keys.

Params:
  • permissions – the list of permissions to revoke
Returns:the next stage of access policy update
/**
             * Revoke a list of permissions for the AD identity to access keys.
             *
             * @param permissions the list of permissions to revoke
             * @return the next stage of access policy update
             */
            Update disallowKeyPermissions(List<KeyPermissions> permissions);

            
Allow all permissions for the AD identity to access secrets.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the AD identity to access secrets.
             *
             * @return the next stage of access policy definition
             */
            @Method
            Update allowSecretAllPermissions();

            
Allow a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            Update allowSecretPermissions(SecretPermissions... permissions);

            
Allow a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            Update allowSecretPermissions(List<SecretPermissions> permissions);

            
Revoke all permissions for the AD identity to access secrets.

Returns:the next stage of access policy update
/**
             * Revoke all permissions for the AD identity to access secrets.
             *
             * @return the next stage of access policy update
             */
            @Method
            Update disallowSecretAllPermissions();

            
Revoke a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions to revoke
Returns:the next stage of access policy update
/**
             * Revoke a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions to revoke
             * @return the next stage of access policy update
             */
            Update disallowSecretPermissions(SecretPermissions... permissions);

            
Revoke a list of permissions for the AD identity to access secrets.

Params:
  • permissions – the list of permissions to revoke
Returns:the next stage of access policy update
/**
             * Revoke a list of permissions for the AD identity to access secrets.
             *
             * @param permissions the list of permissions to revoke
             * @return the next stage of access policy update
             */
            Update disallowSecretPermissions(List<SecretPermissions> permissions);

            
Allow all permissions for the AD identity to access certificates.

Returns:the next stage of access policy update
/**
             * Allow all permissions for the AD identity to access certificates.
             *
             * @return the next stage of access policy update
             */
            @Method
            Update allowCertificateAllPermissions();

            
Allow a list of permissions for the AD identity to access certificates.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy update
/**
             * Allow a list of permissions for the AD identity to access certificates.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy update
             */
            Update allowCertificatePermissions(CertificatePermissions... permissions);

            
Allow a list of permissions for the AD identity to access certificates.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy update
/**
             * Allow a list of permissions for the AD identity to access certificates.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy update
             */
            Update allowCertificatePermissions(List<CertificatePermissions> permissions);

            
Revoke all permissions for the AD identity to access certificates.

Returns:the next stage of access policy update
/**
             * Revoke all permissions for the AD identity to access certificates.
             *
             * @return the next stage of access policy update
             */
            @Method
            Update disallowCertificateAllPermissions();

            
Revoke a list of permissions for the AD identity to access certificates.

Params:
  • permissions – the list of permissions to revoke
Returns:the next stage of access policy update
/**
             * Revoke a list of permissions for the AD identity to access certificates.
             *
             * @param permissions the list of permissions to revoke
             * @return the next stage of access policy update
             */
            Update disallowCertificatePermissions(CertificatePermissions... permissions);

            
Revoke a list of permissions for the AD identity to access certificates.

Params:
  • permissions – the list of permissions to revoke
Returns:the next stage of access policy update
/**
             * Revoke a list of permissions for the AD identity to access certificates.
             *
             * @param permissions the list of permissions to revoke
             * @return the next stage of access policy update
             */
            Update disallowCertificatePermissions(List<CertificatePermissions> permissions);
            
            
Allow all permissions for the Ad identity to access storage.

Returns:the next stage of access policy definition
/**
             * Allow all permissions for the Ad identity to access storage.
             * 
             * @return the next stage of access policy definition
             */
            @Method
            Update allowStorageAllPermissions();
            
            
Allow a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            Update allowStoragePermissions(StoragePermissions...permissions);
            
            
Allow a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Allow a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            Update allowStoragePermissions(List<StoragePermissions> permissions);
            
            
Revoke all permissions for the Ad identity to access storage.

Returns:the next stage of access policy definition
/**
             * Revoke all permissions for the Ad identity to access storage.
             * 
             * @return the next stage of access policy definition
             */
            @Method
            Update disallowStorageAllPermissions();
            
            
Revoke a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Revoke a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            Update disallowStoragePermissions(StoragePermissions...permissions);
            
            
Revoke a list of permissions for the AD identity to access storage.

Params:
  • permissions – the list of permissions allowed
Returns:the next stage of access policy definition
/**
             * Revoke a list of permissions for the AD identity to access storage.
             *
             * @param permissions the list of permissions allowed
             * @return the next stage of access policy definition
             */
            Update disallowStoragePermissions(List<StoragePermissions> permissions);
        }
    }

    
The entirety of an access policy update as part of a key vault update.

/**
     * The entirety of an access policy update as part of a key vault update.
     */
    interface Update extends
            UpdateStages.WithPermissions,
            Settable<Vault.Update> {
    }
}