valid {
    input.ReqMap.marketplaceIdentifier == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.ReqMap.marketplaceIdentifier == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.properties.registrationDefinitionId == STRING
    input.ReqMap.scope == STRING
    input.ReqMap.registrationAssignmentId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.ReqMap.registrationAssignmentId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.ReqMap.registrationAssignmentId == STRING
    input.Qs.$expandRegistrationDefinition == BOOLEAN
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.Qs.$expandRegistrationDefinition == BOOLEAN
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
}

enum_JustInTimeAccessPolicyMultiFactorAuthProvider := [ "Azure", "None" ]

valid {
    input.Body.properties.description == STRING
    input.Body.properties.authorizations[_].principalId == STRING
    input.Body.properties.authorizations[_].principalIdDisplayName == STRING
    input.Body.properties.authorizations[_].roleDefinitionId == STRING
    input.Body.properties.authorizations[_].delegatedRoleDefinitionIds[_] == STRING
    input.Body.properties.eligibleAuthorizations[_].principalId == STRING
    input.Body.properties.eligibleAuthorizations[_].principalIdDisplayName == STRING
    input.Body.properties.eligibleAuthorizations[_].roleDefinitionId == STRING
    input.Body.properties.eligibleAuthorizations[_].justInTimeAccessPolicy.multiFactorAuthProvider == enum_JustInTimeAccessPolicyMultiFactorAuthProvider[_]
    input.Body.properties.eligibleAuthorizations[_].justInTimeAccessPolicy.maximumActivationDuration == STRING
    input.Body.properties.eligibleAuthorizations[_].justInTimeAccessPolicy.managedByTenantApprovers[_].principalId == STRING
    input.Body.properties.eligibleAuthorizations[_].justInTimeAccessPolicy.managedByTenantApprovers[_].principalIdDisplayName == STRING
    input.Body.properties.registrationDefinitionName == STRING
    input.Body.properties.managedByTenantId == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.version == STRING
    input.ReqMap.registrationDefinitionId == STRING
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.registrationDefinitionId == STRING
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.ReqMap.registrationDefinitionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
}