Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Bicep resource definition
The elasticAccounts resource type can be deployed with operations that target:
- Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.NetApp/elasticAccounts resource, add the following Bicep to your template.
resource symbolicname 'Microsoft.NetApp/elasticAccounts@2025-12-15-preview' = {
identity: {
type: 'string'
userAssignedIdentities: {
{customized property}: {}
}
}
location: 'string'
name: 'string'
properties: {
encryption: {
identity: {
federatedClientId: 'string'
userAssignedIdentity: 'string'
}
keySource: 'string'
keyVaultProperties: {
keyName: 'string'
keyVaultResourceId: 'string'
keyVaultUri: 'string'
}
}
}
tags: {
{customized property}: 'string'
}
}
Property Values
Microsoft.NetApp/elasticAccounts
| Name | Description | Value |
|---|---|---|
| identity | The managed service identities assigned to this resource. | ManagedServiceIdentity |
| location | The geo-location where the resource lives | string (required) |
| name | The resource name | string Constraints: Pattern = ^[a-zA-Z0-9][a-zA-Z0-9\-_]{0,127}$ (required) |
| properties | The resource-specific properties for this resource. | ElasticAccountProperties |
| tags | Resource tags | Dictionary of tag names and values. See Tags in templates |
ElasticAccountProperties
| Name | Description | Value |
|---|---|---|
| encryption | Encryption settings | ElasticEncryption |
ElasticEncryption
| Name | Description | Value |
|---|---|---|
| identity | Identity used to authenticate to KeyVault. Applicable if keySource is 'Microsoft.KeyVault'. | ElasticEncryptionIdentity |
| keySource | The encryption keySource (provider). Possible values (case-insensitive): Microsoft.NetApp, Microsoft.KeyVault | 'Microsoft.KeyVault' 'Microsoft.NetApp' |
| keyVaultProperties | Properties provided by KeyVault. Applicable if keySource is 'Microsoft.KeyVault'. | ElasticKeyVaultProperties |
ElasticEncryptionIdentity
| Name | Description | Value |
|---|---|---|
| federatedClientId | ClientId of the multi-tenant Entra ID Application. Used to access cross-tenant keyvaults. | string |
| userAssignedIdentity | The ARM resource identifier of the user assigned identity used to authenticate with key vault. Applicable if identity.type has 'UserAssigned'. It should match key of identity.userAssignedIdentities. | string |
ElasticKeyVaultProperties
| Name | Description | Value |
|---|---|---|
| keyName | The name of KeyVault key. | string Constraints: Min length = 1 Max length = 127 Pattern = ^[a-zA-Z0-9-]{1,127}$ |
| keyVaultResourceId | The resource ID of KeyVault. | string |
| keyVaultUri | The Uri of KeyVault. | string |
ManagedServiceIdentity
| Name | Description | Value |
|---|---|---|
| type | Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). | 'None' 'SystemAssigned' 'SystemAssigned,UserAssigned' 'UserAssigned' (required) |
| userAssignedIdentities | The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests. | ManagedServiceIdentityUserAssignedIdentities |
ManagedServiceIdentityUserAssignedIdentities
| Name | Description | Value |
|---|
TrackedResourceTags
| Name | Description | Value |
|---|
UserAssignedIdentity
| Name | Description | Value |
|---|
ARM template resource definition
The elasticAccounts resource type can be deployed with operations that target:
- Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.NetApp/elasticAccounts resource, add the following JSON to your template.
{
"type": "Microsoft.NetApp/elasticAccounts",
"apiVersion": "2025-12-15-preview",
"name": "string",
"identity": {
"type": "string",
"userAssignedIdentities": {
"{customized property}": {
}
}
},
"location": "string",
"properties": {
"encryption": {
"identity": {
"federatedClientId": "string",
"userAssignedIdentity": "string"
},
"keySource": "string",
"keyVaultProperties": {
"keyName": "string",
"keyVaultResourceId": "string",
"keyVaultUri": "string"
}
}
},
"tags": {
"{customized property}": "string"
}
}
Property Values
Microsoft.NetApp/elasticAccounts
| Name | Description | Value |
|---|---|---|
| apiVersion | The api version | '2025-12-15-preview' |
| identity | The managed service identities assigned to this resource. | ManagedServiceIdentity |
| location | The geo-location where the resource lives | string (required) |
| name | The resource name | string Constraints: Pattern = ^[a-zA-Z0-9][a-zA-Z0-9\-_]{0,127}$ (required) |
| properties | The resource-specific properties for this resource. | ElasticAccountProperties |
| tags | Resource tags | Dictionary of tag names and values. See Tags in templates |
| type | The resource type | 'Microsoft.NetApp/elasticAccounts' |
ElasticAccountProperties
| Name | Description | Value |
|---|---|---|
| encryption | Encryption settings | ElasticEncryption |
ElasticEncryption
| Name | Description | Value |
|---|---|---|
| identity | Identity used to authenticate to KeyVault. Applicable if keySource is 'Microsoft.KeyVault'. | ElasticEncryptionIdentity |
| keySource | The encryption keySource (provider). Possible values (case-insensitive): Microsoft.NetApp, Microsoft.KeyVault | 'Microsoft.KeyVault' 'Microsoft.NetApp' |
| keyVaultProperties | Properties provided by KeyVault. Applicable if keySource is 'Microsoft.KeyVault'. | ElasticKeyVaultProperties |
ElasticEncryptionIdentity
| Name | Description | Value |
|---|---|---|
| federatedClientId | ClientId of the multi-tenant Entra ID Application. Used to access cross-tenant keyvaults. | string |
| userAssignedIdentity | The ARM resource identifier of the user assigned identity used to authenticate with key vault. Applicable if identity.type has 'UserAssigned'. It should match key of identity.userAssignedIdentities. | string |
ElasticKeyVaultProperties
| Name | Description | Value |
|---|---|---|
| keyName | The name of KeyVault key. | string Constraints: Min length = 1 Max length = 127 Pattern = ^[a-zA-Z0-9-]{1,127}$ |
| keyVaultResourceId | The resource ID of KeyVault. | string |
| keyVaultUri | The Uri of KeyVault. | string |
ManagedServiceIdentity
| Name | Description | Value |
|---|---|---|
| type | Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). | 'None' 'SystemAssigned' 'SystemAssigned,UserAssigned' 'UserAssigned' (required) |
| userAssignedIdentities | The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests. | ManagedServiceIdentityUserAssignedIdentities |
ManagedServiceIdentityUserAssignedIdentities
| Name | Description | Value |
|---|
TrackedResourceTags
| Name | Description | Value |
|---|
UserAssignedIdentity
| Name | Description | Value |
|---|
Usage Examples
Terraform (AzAPI provider) resource definition
The elasticAccounts resource type can be deployed with operations that target:
- Resource groups
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.NetApp/elasticAccounts resource, add the following Terraform to your template.
resource "azapi_resource" "symbolicname" {
type = "Microsoft.NetApp/elasticAccounts@2025-12-15-preview"
name = "string"
parent_id = "string"
identity {
type = "string"
identity_ids = [
"string"
]
}
location = "string"
tags = {
{customized property} = "string"
}
body = {
properties = {
encryption = {
identity = {
federatedClientId = "string"
userAssignedIdentity = "string"
}
keySource = "string"
keyVaultProperties = {
keyName = "string"
keyVaultResourceId = "string"
keyVaultUri = "string"
}
}
}
}
}
Property Values
Microsoft.NetApp/elasticAccounts
| Name | Description | Value |
|---|---|---|
| identity | The managed service identities assigned to this resource. | ManagedServiceIdentity |
| location | The geo-location where the resource lives | string (required) |
| name | The resource name | string Constraints: Pattern = ^[a-zA-Z0-9][a-zA-Z0-9\-_]{0,127}$ (required) |
| properties | The resource-specific properties for this resource. | ElasticAccountProperties |
| tags | Resource tags | Dictionary of tag names and values. |
| type | The resource type | "Microsoft.NetApp/elasticAccounts@2025-12-15-preview" |
ElasticAccountProperties
| Name | Description | Value |
|---|---|---|
| encryption | Encryption settings | ElasticEncryption |
ElasticEncryption
| Name | Description | Value |
|---|---|---|
| identity | Identity used to authenticate to KeyVault. Applicable if keySource is 'Microsoft.KeyVault'. | ElasticEncryptionIdentity |
| keySource | The encryption keySource (provider). Possible values (case-insensitive): Microsoft.NetApp, Microsoft.KeyVault | 'Microsoft.KeyVault' 'Microsoft.NetApp' |
| keyVaultProperties | Properties provided by KeyVault. Applicable if keySource is 'Microsoft.KeyVault'. | ElasticKeyVaultProperties |
ElasticEncryptionIdentity
| Name | Description | Value |
|---|---|---|
| federatedClientId | ClientId of the multi-tenant Entra ID Application. Used to access cross-tenant keyvaults. | string |
| userAssignedIdentity | The ARM resource identifier of the user assigned identity used to authenticate with key vault. Applicable if identity.type has 'UserAssigned'. It should match key of identity.userAssignedIdentities. | string |
ElasticKeyVaultProperties
| Name | Description | Value |
|---|---|---|
| keyName | The name of KeyVault key. | string Constraints: Min length = 1 Max length = 127 Pattern = ^[a-zA-Z0-9-]{1,127}$ |
| keyVaultResourceId | The resource ID of KeyVault. | string |
| keyVaultUri | The Uri of KeyVault. | string |
ManagedServiceIdentity
| Name | Description | Value |
|---|---|---|
| type | Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). | 'None' 'SystemAssigned' 'SystemAssigned,UserAssigned' 'UserAssigned' (required) |
| userAssignedIdentities | The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests. | ManagedServiceIdentityUserAssignedIdentities |
ManagedServiceIdentityUserAssignedIdentities
| Name | Description | Value |
|---|
TrackedResourceTags
| Name | Description | Value |
|---|
UserAssignedIdentity
| Name | Description | Value |
|---|