---
title: "PUT /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}"
method: PUT
path: "/{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}"
tags: ["RoleDefinitions"]
---

# PUT /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}

`PUT /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}`

Creates or updates a role definition.

## Path parameters

- `scope` string, required
- `roleDefinitionId` string, required

## Parameters

- `../../../../../common-types/resource-management/v2/types.json#/components/parameters/ApiVersionParameter` — unresolved $ref

## Request body

- RoleDefinition — Role definition.
  - `id` string — The role definition ID.
  - `name` string — The role definition name.
  - `type` string — The role definition type.
  - `properties` RoleDefinitionProperties — Role definition properties.
    - `roleName` string — The role name.
    - `description` string — The role definition description.
    - `type` string — The role type.
    - `permissions` Permission[] — Role definition permissions.
      - `actions` string[] — Allowed actions.
      - `notActions` string[] — Denied actions.
      - `dataActions` string[] — Allowed Data actions.
      - `notDataActions` string[] — Denied Data actions.
    - `assignableScopes` string[] — Role definition assignable scopes.

## Response `201`

OK - Returns information about the role definition.

- RoleDefinition — Role definition.
  - `id` string — The role definition ID.
  - `name` string — The role definition name.
  - `type` string — The role definition type.
  - `properties` RoleDefinitionProperties — Role definition properties.
    - `roleName` string — The role name.
    - `description` string — The role definition description.
    - `type` string — The role type.
    - `permissions` Permission[] — Role definition permissions.
      - `actions` string[] — Allowed actions.
      - `notActions` string[] — Denied actions.
      - `dataActions` string[] — Allowed Data actions.
      - `notDataActions` string[] — Denied Data actions.
    - `assignableScopes` string[] — Role definition assignable scopes.

## Other responses

- `default` — Error response describing why the operation failed.

## Changes

- **2021-02-21** (2018-01-01-preview) `a515c056fd69` — 1 warning
  - deleted the `query` request parameter `api-version`

[Change history](https://skmtc.dev/azure/apis/authorizationmanagementclient-6/changes/:scope/providers/Microsoft.Authorization/roleDefinitions/:roleDefinitionId/put.md)

---

[API](https://skmtc.dev/azure/apis/authorizationmanagementclient-6.md) · [All operations](https://skmtc.dev/azure/apis/authorizationmanagementclient-6/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azure/authorizationmanagementclient-6/revisions/95efc3a827fd/schema)