---
title: "GET /{scope}/providers/Microsoft.Authorization/denyAssignments"
method: GET
path: "/{scope}/providers/Microsoft.Authorization/denyAssignments"
tags: ["DenyAssignments"]
---

# GET /{scope}/providers/Microsoft.Authorization/denyAssignments

`GET /{scope}/providers/Microsoft.Authorization/denyAssignments`

Gets deny assignments for a scope.

## Path parameters

- `scope` string, required

## Query parameters

- `$filter` string

## Parameters

- `../../../../../common-types/resource-management/v2/types.json#/components/parameters/ApiVersionParameter` — unresolved $ref

## Response `200`

OK - Returns an array of deny assignments.

- DenyAssignmentListResult — Deny assignment list operation result.
  - `value` DenyAssignment[] — Deny assignment list.
    - `id` string — The deny assignment ID.
    - `name` string — The deny assignment name.
    - `type` string — The deny assignment type.
    - `properties` DenyAssignmentProperties — Deny assignment properties.
      - `denyAssignmentName` string — The display name of the deny assignment.
      - `description` string — The description of the deny assignment.
      - `permissions` DenyAssignmentPermission[] — An array of permissions that are denied by the deny assignment.
        - `actions` string[] — Actions to which the deny assignment does not grant access.
        - `notActions` string[] — Actions to exclude from that the deny assignment does not grant access.
        - `dataActions` string[] — Data actions to which the deny assignment does not grant access.
        - `notDataActions` string[] — Data actions to exclude from that the deny assignment does not grant access.
      - `scope` string — The deny assignment scope.
      - `doNotApplyToChildScopes` boolean — Determines if the deny assignment applies to child scopes. Default value is false.
      - `principals` Principal[] — Array of principals to which the deny assignment applies. — unresolved $ref
      - `excludePrincipals` Principal[] — Array of principals to which the deny assignment does not apply. — unresolved $ref
      - `isSystemProtected` boolean — Specifies whether this deny assignment was created by Azure and cannot be edited or deleted.
  - `nextLink` string — The URL to use for getting the next set of results.

## Other responses

- `default` — Error response describing why the operation failed.

## Changes

- **2021-02-21** (2018-07-01-preview) `9bd884b8dc22` — 1 warning
  - deleted the `query` request parameter `api-version`

[Change history](https://skmtc.dev/azure/apis/authorizationmanagementclient-2/changes/:scope/providers/Microsoft.Authorization/denyAssignments/get.md)

---

[API](https://skmtc.dev/azure/apis/authorizationmanagementclient-2.md) · [All operations](https://skmtc.dev/azure/apis/authorizationmanagementclient-2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azure/authorizationmanagementclient-2/revisions/c25a83b5285a/schema)