---
title: "PUT /{scope}/providers/Microsoft.ManagedServices/registrationDefinitions/{registrationDefinitionId}"
method: PUT
path: "/{scope}/providers/Microsoft.ManagedServices/registrationDefinitions/{registrationDefinitionId}"
tags: ["RegistrationDefinitions"]
---

# PUT /{scope}/providers/Microsoft.ManagedServices/registrationDefinitions/{registrationDefinitionId}

`PUT /{scope}/providers/Microsoft.ManagedServices/registrationDefinitions/{registrationDefinitionId}`

Creates or updates a registration definition.

## Path parameters

- `registrationDefinitionId` string, required
- `scope` string, required

## Query parameters

- `api-version` string, required

## Request body

- RegistrationDefinition — The registration definition.
  - `properties` RegistrationDefinitionProperties — The properties of a registration definition.
    - `description` string — The description of the registration definition.
    - `authorizations` Authorization[], required — The collection of authorization objects describing the access Azure Active Directory principals in the managedBy tenant will receive on the delegated resource in the managed tenant.
      - `principalId` string, required — The identifier of the Azure Active Directory principal.
      - `principalIdDisplayName` string — The display name of the Azure Active Directory principal.
      - `roleDefinitionId` string, required — The identifier of the Azure built-in role that defines the permissions that the Azure Active Directory principal will have on the projected scope.
      - `delegatedRoleDefinitionIds` string[] — The delegatedRoleDefinitionIds field is required when the roleDefinitionId refers to the User Access Administrator Role. It is the list of role definition ids which define all the permissions that the user in the authorization can assign to other principals.
    - `eligibleAuthorizations` EligibleAuthorization[] — The collection of eligible authorization objects describing the just-in-time access Azure Active Directory principals in the managedBy tenant will receive on the delegated resource in the managed tenant.
      - `principalId` string, required — The identifier of the Azure Active Directory principal.
      - `principalIdDisplayName` string — The display name of the Azure Active Directory principal.
      - `roleDefinitionId` string, required — The identifier of the Azure built-in role that defines the permissions that the Azure Active Directory principal will have on the projected scope.
      - `justInTimeAccessPolicy` JustInTimeAccessPolicy — Just-in-time access policy setting.
        - `multiFactorAuthProvider` 'Azure' | 'None', required — The multi-factor authorization provider to be used for just-in-time access requests.
        - `maximumActivationDuration` string, duration — The maximum access duration in ISO 8601 format for just-in-time access requests.
        - `managedByTenantApprovers` EligibleApprover[] — The list of managedByTenant approvers for the eligible authorization.
          - `principalId` string, required — The identifier of the Azure Active Directory principal.
          - `principalIdDisplayName` string — The display name of the Azure Active Directory principal.
    - `registrationDefinitionName` string — The name of the registration definition.
    - `managedByTenantId` string, required — The identifier of the managedBy tenant.
    - `provisioningState` 'NotSpecified' | 'Accepted' | 'Running' | 'Ready' | 'Creating' | 'Created' | 'Deleting' | 'Deleted' | 'Canceled' | 'Failed' | 'Succeeded' | 'Updating' — The current provisioning state of the registration definition.
    - `manageeTenantId` string — The identifier of the managed tenant.
    - `manageeTenantName` string — The name of the managed tenant.
    - `managedByTenantName` string — The name of the managedBy tenant.
  - `plan` Plan — The details for the Managed Services offer’s plan in Azure Marketplace.
    - `name` string, required — Azure Marketplace plan name.
    - `publisher` string, required — Azure Marketplace publisher ID.
    - `product` string, required — Azure Marketplace product code.
    - `version` string, required — Azure Marketplace plan's version.
  - `id` string — The fully qualified path of the registration definition.
  - `type` string — The type of the Azure resource (Microsoft.ManagedServices/registrationDefinitions).
  - `name` string — The name of the registration definition.
  - `systemData` SystemData — unresolved $ref

## Response `200`

Ok - Returns information about the updated registration definition.

- RegistrationDefinition — The registration definition.
  - `properties` RegistrationDefinitionProperties — The properties of a registration definition.
    - `description` string — The description of the registration definition.
    - `authorizations` Authorization[], required — The collection of authorization objects describing the access Azure Active Directory principals in the managedBy tenant will receive on the delegated resource in the managed tenant.
      - `principalId` string, required — The identifier of the Azure Active Directory principal.
      - `principalIdDisplayName` string — The display name of the Azure Active Directory principal.
      - `roleDefinitionId` string, required — The identifier of the Azure built-in role that defines the permissions that the Azure Active Directory principal will have on the projected scope.
      - `delegatedRoleDefinitionIds` string[] — The delegatedRoleDefinitionIds field is required when the roleDefinitionId refers to the User Access Administrator Role. It is the list of role definition ids which define all the permissions that the user in the authorization can assign to other principals.
    - `eligibleAuthorizations` EligibleAuthorization[] — The collection of eligible authorization objects describing the just-in-time access Azure Active Directory principals in the managedBy tenant will receive on the delegated resource in the managed tenant.
      - `principalId` string, required — The identifier of the Azure Active Directory principal.
      - `principalIdDisplayName` string — The display name of the Azure Active Directory principal.
      - `roleDefinitionId` string, required — The identifier of the Azure built-in role that defines the permissions that the Azure Active Directory principal will have on the projected scope.
      - `justInTimeAccessPolicy` JustInTimeAccessPolicy — Just-in-time access policy setting.
        - `multiFactorAuthProvider` 'Azure' | 'None', required — The multi-factor authorization provider to be used for just-in-time access requests.
        - `maximumActivationDuration` string, duration — The maximum access duration in ISO 8601 format for just-in-time access requests.
        - `managedByTenantApprovers` EligibleApprover[] — The list of managedByTenant approvers for the eligible authorization.
          - `principalId` string, required — The identifier of the Azure Active Directory principal.
          - `principalIdDisplayName` string — The display name of the Azure Active Directory principal.
    - `registrationDefinitionName` string — The name of the registration definition.
    - `managedByTenantId` string, required — The identifier of the managedBy tenant.
    - `provisioningState` 'NotSpecified' | 'Accepted' | 'Running' | 'Ready' | 'Creating' | 'Created' | 'Deleting' | 'Deleted' | 'Canceled' | 'Failed' | 'Succeeded' | 'Updating' — The current provisioning state of the registration definition.
    - `manageeTenantId` string — The identifier of the managed tenant.
    - `manageeTenantName` string — The name of the managed tenant.
    - `managedByTenantName` string — The name of the managedBy tenant.
  - `plan` Plan — The details for the Managed Services offer’s plan in Azure Marketplace.
    - `name` string, required — Azure Marketplace plan name.
    - `publisher` string, required — Azure Marketplace publisher ID.
    - `product` string, required — Azure Marketplace product code.
    - `version` string, required — Azure Marketplace plan's version.
  - `id` string — The fully qualified path of the registration definition.
  - `type` string — The type of the Azure resource (Microsoft.ManagedServices/registrationDefinitions).
  - `name` string — The name of the registration definition.
  - `systemData` SystemData — unresolved $ref

## Other responses

- `201` — Created - Returns information about the created registration definition.
- `default` — The error response describing why the operation failed.

---

[API](https://skmtc.dev/azure/apis/managedservices-microsoft-managedservices-managedservices.md) · [All operations](https://skmtc.dev/azure/apis/managedservices-microsoft-managedservices-managedservices/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azure/managedservices-microsoft-managedservices-managedservices/revisions/d59a7f8afee7/schema)