NewRemotePDPClient returns an implementation of RemotePDPClient endpoint - the fqdn of the regional specific endpoint of PDP scope - the oauth scope required by the PDP server cred - the credential of the client to call the PDP server ClientOptions - the optional settings for a client's pipeline.

AccessDecision possible returned values.

AccessDecision possible returned values.

GroupExpansion is the value to be used with ClaimName in SubjectAttributes This value gives CheckAccess a hint that it needs to retrieve all the groups the principal belongs to and then give the response based on all group entitlements.

AccessDecision possible returned values.

ActionInfo contains an action the query checks whether the subject has access to perform.

AuthorizationDecision tells whether the subject can perform the action on the target resource.

AuthorizationDecisionResponse contains a paginated list of all decision results In case the list is more than 50, follow NextLink to retrieve the next page.

AuthorizationRequest represents the payload of the request sent to a PDP server.

RemotePDPErrorPayload represents the body content when the server returns a non-successful error.

ResourceInfo is the resource path of the target object the query checks whether the subject has access to perform against it.

SubjectAttributes contains the possible attributes to describe the subject of query (i.e.

RemotePDPClient represents the Microsoft Remote PDP API Spec.

AccessDecision can be: Allowed, NotAllowed, Denied.