Microsoft Defender Standard Assignments API

The StandardAssignments API from Microsoft Defender — 2 operation(s) for standardassignments.

Operations 4

GET /{scope}/providers/Microsoft.Security/standardAssignments Standard assignments list #
GET /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName} Retrieves a standard assignment #
PUT /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName} Creates or updates a standard assignment #
DELETE /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName} Deletes a standard assignment #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/microsoft-defender:microsoft-defender-standardassignments-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

microsoft-defender-standardassignments-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Microsoft Defender for Cloud REST API (Microsoft.Security)…
  version: stable-composite
  description: Composite of the latest stable Microsoft.Security resource-manager swagger files published by Microsoft in Azure/azure-rest-api-specs. Each path keeps its own api-version via x-source.
  x-source-repo: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security/resource-manager/Microsoft.Security/Security
servers:
- url: https://management.azure.com
security:
- azure_auth:
  - user_impersonation
tags:
- name: StandardAssignments
paths:
  /{scope}/providers/Microsoft.Security/standardAssignments:
    get:
      operationId: StandardAssignments_List
      tags:
      - StandardAssignments
      description: Get a list of all relevant standard assignments over a scope
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - name: scope
        in: path
        description: The fully qualified Azure Resource manager identifier of the resource.
        required: true
        x-ms-skip-url-encoding: true
        schema:
          type: string
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StandardAssignmentsList'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        List standard assignments:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/StandardAssignments/ListStandardAssignments.json
      x-ms-pageable:
        nextLinkName: nextLink
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
      summary: Standard assignments list
      x-summary-source: derived
  /{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}:
    get:
      operationId: StandardAssignments_Get
      tags:
      - StandardAssignments
      summary: Retrieves a standard assignment
      description: This operation retrieves a single standard assignment, given its name and the scope it was created at.
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - name: resourceId
        in: path
        description: The fully qualified Azure Resource manager identifier of the resource.
        required: true
        x-ms-skip-url-encoding: true
        schema:
          type: string
      - name: standardAssignmentName
        in: path
        description: The standard assignments assignment key - unique key for the standard assignment
        required: true
        schema:
          type: string
          pattern: '[{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$'
      responses:
        '200':
          description: Azure operation completed successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StandardAssignment'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Retrieve a standard assignment:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/StandardAssignments/GetStandardAssignment.json
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
    put:
      operationId: StandardAssignments_Create
      tags:
      - StandardAssignments
      summary: Creates or updates a standard assignment
      description: This operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - name: resourceId
        in: path
        description: The fully qualified Azure Resource manager identifier of the resource.
        required: true
        x-ms-skip-url-encoding: true
        schema:
          type: string
      - name: standardAssignmentName
        in: path
        description: The standard assignments assignment key - unique key for the standard assignment
        required: true
        schema:
          type: string
          pattern: '[{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$'
      responses:
        '200':
          description: Resource 'StandardAssignment' update operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StandardAssignment'
        '201':
          description: Resource 'StandardAssignment' create operation succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StandardAssignment'
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Put an audit standard assignment:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/StandardAssignments/PutStandardAssignment.json
        Put exemption standard assignment:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/StandardAssignments/PutExemptionStandardAssignment.json
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/StandardAssignment'
        description: Custom standard assignment over a pre-defined scope
        required: true
    delete:
      operationId: StandardAssignments_Delete
      tags:
      - StandardAssignments
      summary: Deletes a standard assignment
      description: This operation deletes a standard assignment, given its name and the scope it was created in. The scope of a standard assignment is the part of its ID preceding '/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}'.
      parameters:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/parameters/ApiVersionParameter
      - name: resourceId
        in: path
        description: The fully qualified Azure Resource manager identifier of the resource.
        required: true
        x-ms-skip-url-encoding: true
        schema:
          type: string
      - name: standardAssignmentName
        in: path
        description: The standard assignments assignment key - unique key for the standard assignment
        required: true
        schema:
          type: string
          pattern: '[{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$'
      responses:
        '200':
          description: Resource deleted successfully.
        '204':
          description: Resource does not exist.
        default:
          description: An unexpected error response.
          content:
            application/json:
              schema:
                $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ErrorResponse
      x-ms-examples:
        Delete a standard assignment:
          $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/examples/StandardAssignments/DeleteStandardAssignment.json
      x-source: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/security/resource-manager/Microsoft.Security/Security/stable/2024-08-01/security-SecurityStandards.json
components:
  schemas:
    Effect:
      type: string
      description: Expected effect of this assignment (Audit/Exempt/Attest)
      enum:
      - Audit
      - Exempt
      - Attest
      x-ms-enum:
        name: Effect
        modelAsString: true
        values:
        - name: Audit
          value: Audit
          description: Audit
        - name: Exempt
          value: Exempt
          description: Exempt
        - name: Attest
          value: Attest
          description: Attest
    attestationComplianceState:
      type: string
      description: Attest category of this assignment
      enum:
      - unknown
      - compliant
      - nonCompliant
      x-ms-enum:
        name: attestationComplianceState
        modelAsString: true
        values:
        - name: unknown
          value: unknown
          description: unknown
        - name: compliant
          value: compliant
          description: compliant
        - name: nonCompliant
          value: nonCompliant
          description: nonCompliant
    StandardAssignmentPropertiesAttestationData:
      type: object
      description: Additional data about assignment that has Attest effect
      properties:
        complianceState:
          $ref: '#/components/schemas/attestationComplianceState'
          description: Attest category of this assignment
        assignedAssessment:
          $ref: '#/components/schemas/AssignedAssessmentItem'
          description: Component item with key as applied to this standard assignment over the given scope
        complianceDate:
          type: string
          format: date-time
          description: Attestation compliance date
          readOnly: true
        evidence:
          type: array
          description: Array of links to attestation evidence
          items:
            $ref: '#/components/schemas/AttestationEvidence'
          x-ms-identifiers: []
    StandardAssignmentPropertiesExemptionData:
      type: object
      description: Additional data about assignment that has Exempt effect
      properties:
        exemptionCategory:
          $ref: '#/components/schemas/ExemptionCategory'
          description: Exemption category of this assignment
        assignedAssessment:
          $ref: '#/components/schemas/AssignedAssessmentItem'
          description: Component item with key as applied to this standard assignment over the given scope
    StandardAssignmentProperties:
      type: object
      description: Describes the properties of a standardAssignment
      properties:
        displayName:
          type: string
          description: Display name of the standardAssignment
        description:
          type: string
          description: Description of the standardAssignment
        assignedStandard:
          $ref: '#/components/schemas/Common.AssignedStandardItem'
          description: Standard item with key as applied to this standard assignment over the given scope
        effect:
          $ref: '#/components/schemas/Effect'
          description: Expected effect of this assignment (Audit/Exempt/Attest)
        excludedScopes:
          type: array
          description: Excluded scopes, filter out the descendants of the scope (on management scopes)
          items:
            type: string
        expiresOn:
          type: string
          format: date-time
          description: Expiration date of this assignment as a full ISO date
        exemptionData:
          $ref: '#/components/schemas/StandardAssignmentPropertiesExemptionData'
          description: Additional data about assignment that has Exempt effect
        attestationData:
          $ref: '#/components/schemas/StandardAssignmentPropertiesAttestationData'
          description: Additional data about assignment that has Attest effect
        metadata:
          $ref: '#/components/schemas/StandardAssignmentMetadata'
          description: The standard assignment metadata.
    AssignedAssessmentItem:
      type: object
      description: Describe the properties of a security assessment object reference (by key)
      properties:
        assessmentKey:
          type: string
          description: Unique key to a security assessment object
    Common.AssignedStandardItem:
      type: object
      description: Describe the properties of a of a standard assignments object reference
      properties:
        id:
          type: string
          description: Full resourceId of the Microsoft.Security/standard object
    StandardAssignmentMetadata:
      type: object
      description: The standard assignment metadata
      properties:
        createdBy:
          type: string
          description: Standard assignment Created by object id (GUID)
          readOnly: true
        createdOn:
          type: string
          format: date-time
          description: Standard assignment creation date
          readOnly: true
        lastUpdatedBy:
          type: string
          description: Standard assignment last updated by object id (GUID)
          readOnly: true
        lastUpdatedOn:
          type: string
          format: date-time
          description: Standard assignment last update date
          readOnly: true
    AttestationEvidence:
      type: object
      description: Describe the properties of a assignment attestation
      properties:
        description:
          type: string
          description: The description of the evidence
        sourceUrl:
          type: string
          description: The source url of the evidence
    StandardAssignment:
      type: object
      description: Security Assignment on a resource group over a given scope
      properties:
        properties:
          $ref: '#/components/schemas/StandardAssignmentProperties'
          description: Properties of a standard assignments assignment
          x-ms-client-flatten: true
      allOf:
      - $ref: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/specification/common-types/resource-management/v5/types.json#/definitions/ProxyResource
    ExemptionCategory:
      type: string
      description: Exemption category of this assignment
      enum:
      - waiver
      - mitigated
      x-ms-enum:
        name: ExemptionCategory
        modelAsString: true
        values:
        - name: waiver
          value: waiver
          description: waiver
        - name: mitigated
          value: mitigated
          description: mitigated
    StandardAssignmentsList:
      type: object
      description: Page of a standard assignment list
      properties:
        value:
          type: array
          description: Collection of standardAssignments in this page
          items:
            $ref: '#/components/schemas/StandardAssignment'
          readOnly: true
        nextLink:
          type: string
          description: The URI to fetch the next page
          readOnly: true
      required:
      - value
  securitySchemes:
    azure_auth:
      type: oauth2
      flows:
        implicit:
          scopes:
            user_impersonation: impersonate your user account
          authorizationUrl: https://login.microsoftonline.com/common/oauth2/authorize
      description: Azure Active Directory OAuth2 Flow.