Azure Authorization Authorization Roledefinitionscalls

Connector for the azure-authorization-authorization-roledefinitionscalls API, generated deterministically from its OpenAPI spec (endpoints, auth, and methods match the spec exactly — nothing is invented).

• Base URL: https://management.azure.com
• Auth: OAuth 2.0 (user-delegated) — attach an InTouch oauth credential. Mint one with itcli.py /oauth <provider> (device-code) or /google-auth (Google); the server auto-refreshes the access token before each run, so the connector never handles or stores tokens.

Operations

• permissions_listforresourcegroup — GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/Microsoft.Authorization/permissions — Gets all permissions the caller has for a resource group.
• permissions_listforresource — GET /subscriptions/{subscriptionId}/resourcegroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{parentResourcePath}/{resourceType}/{resourceName}/providers/Microsoft.Authorization/permissions — Gets all permissions the caller has for a resource.
• roledefinitions_list — GET /{scope}/providers/Microsoft.Authorization/roleDefinitions — Get all role definitions that are applicable at scope and above.
• roledefinitions_get — GET /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId} — Get role definition by name (GUID).
• roledefinitions_createorupdate — PUT /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId} — Creates or updates a role definition.
• roledefinitions_delete — DELETE /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId} — Deletes a role definition.

Inputs

• a linked oauth credential (no key inputs) — the server injects a fresh Authorization: Bearer from it
• operation — one of the operations above
• path parameters when an operation's path contains {...}
• query — optional JSON object of query params
• body — JSON object for create/update ops

Example

operation: permissions_listforresourcegroup
# (attach an 'oauth' credential to the task — no inline secrets)