Microsoft.App agentSpaces

Bicep resource definition

The agentSpaces resource type can be deployed with operations that target:

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.App/agentSpaces resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.App/agentSpaces@2026-01-01' = {
  identity: {
    type: 'string'
    userAssignedIdentities: {
      {customized property}: {}
    }
  }
  location: 'string'
  name: 'string'
  properties: {
    description: 'string'
    maxAgentCount: int
    policies: {
      genevaActionsConfiguration: {
        acisEndpoint: 'string'
        allowedActions: [
          {
            actionName: 'string'
            actionParameters: [
              {
                name: 'string'
                type: 'string'
              }
            ]
            approvalRequired: bool
            extension: 'string'
          }
        ]
        authenticationMode: 'string'
        certificateSubjectName: 'string'
        clientId: 'string'
        extensionName: 'string'
      }
    }
    serviceTreeId: 'string'
  }
  tags: {
    {customized property}: 'string'
  }
}

Property Values

Microsoft.App/agentSpaces

Name Description Value
identity The managed service identities assigned to this resource. ManagedServiceIdentity
location The geo-location where the resource lives string (required)
name The resource name string

Constraints:
Pattern = ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])$ (required)
properties The resource-specific properties for this resource. AgentSpaceProperties
tags Resource tags Dictionary of tag names and values. See Tags in templates

AgentSpacePolicies

Name Description Value
genevaActionsConfiguration Configuration for Geneva Actions policy GenevaActionsPolicy

AgentSpaceProperties

Name Description Value
description Description of the Agent Space string
maxAgentCount Maximum number of agents allowed in the Agent Space int
policies Policy configurations for the Agent Space AgentSpacePolicies
serviceTreeId Universal unique ID (UUID) of the Service Tree associated with this Agent Space string

GenevaActionConfig

Name Description Value
actionName Name of the Geneva action string
actionParameters Parameters for the Geneva action GenevaActionParameter[]
approvalRequired Indicates whether approval is required for this action bool
extension Extension associated with the action string

GenevaActionParameter

Name Description Value
name Name of the parameter string
type Type of the parameter string

GenevaActionsPolicy

Name Description Value
acisEndpoint ACIS (Azure Container Instance Service) endpoint URL string
allowedActions Collection of allowed Geneva actions GenevaActionConfig[]
authenticationMode Authentication mode for Geneva Actions 'OAuth'
'WS-Trust'
certificateSubjectName Subject name of the certificate used for authentication string
clientId Client ID for authentication string
extensionName Name of the Geneva extension string (required)

ManagedServiceIdentity

Name Description Value
type Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). 'None'
'SystemAssigned'
'SystemAssigned,UserAssigned'
'UserAssigned' (required)
userAssignedIdentities The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests. ManagedServiceIdentityUserAssignedIdentities

ManagedServiceIdentityUserAssignedIdentities

Name Description Value

TrackedResourceTags

Name Description Value

UserAssignedIdentity

Name Description Value

ARM template resource definition

The agentSpaces resource type can be deployed with operations that target:

Usage Examples

Resource format

To create a Microsoft.App/agentSpaces resource, add the following JSON to your template.

{
  "type": "Microsoft.App/agentSpaces",
  "apiVersion": "2026-01-01",
  "name": "string",
  "identity": {
    "type": "string",
    "userAssignedIdentities": {
      "{customized property}": {
      }
    }
  },
  "location": "string",
  "properties": {
    "description": "string",
    "maxAgentCount": "int",
    "policies": {
      "genevaActionsConfiguration": {
        "acisEndpoint": "string",
        "allowedActions": [
          {
            "actionName": "string",
            "actionParameters": [
              {
                "name": "string",
                "type": "string"
              }
            ],
            "approvalRequired": "bool",
            "extension": "string"
          }
        ],
        "authenticationMode": "string",
        "certificateSubjectName": "string",
        "clientId": "string",
        "extensionName": "string"
      }
    },
    "serviceTreeId": "string"
  },
  "tags": {
    "{customized property}": "string"
  }
}

Property Values

Microsoft.App/agentSpaces

Name Description Value
apiVersion The api version '2026-01-01'
identity The managed service identities assigned to this resource. ManagedServiceIdentity
location The geo-location where the resource lives string (required)
name The resource name string

Constraints:
Pattern = ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])$ (required)
properties The resource-specific properties for this resource. AgentSpaceProperties
tags Resource tags Dictionary of tag names and values. See Tags in templates
type The resource type 'Microsoft.App/agentSpaces'

AgentSpacePolicies

Name Description Value
genevaActionsConfiguration Configuration for Geneva Actions policy GenevaActionsPolicy

AgentSpaceProperties

Name Description Value
description Description of the Agent Space string
maxAgentCount Maximum number of agents allowed in the Agent Space int
policies Policy configurations for the Agent Space AgentSpacePolicies
serviceTreeId Universal unique ID (UUID) of the Service Tree associated with this Agent Space string

GenevaActionConfig

Name Description Value
actionName Name of the Geneva action string
actionParameters Parameters for the Geneva action GenevaActionParameter[]
approvalRequired Indicates whether approval is required for this action bool
extension Extension associated with the action string

GenevaActionParameter

Name Description Value
name Name of the parameter string
type Type of the parameter string

GenevaActionsPolicy

Name Description Value
acisEndpoint ACIS (Azure Container Instance Service) endpoint URL string
allowedActions Collection of allowed Geneva actions GenevaActionConfig[]
authenticationMode Authentication mode for Geneva Actions 'OAuth'
'WS-Trust'
certificateSubjectName Subject name of the certificate used for authentication string
clientId Client ID for authentication string
extensionName Name of the Geneva extension string (required)

ManagedServiceIdentity

Name Description Value
type Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). 'None'
'SystemAssigned'
'SystemAssigned,UserAssigned'
'UserAssigned' (required)
userAssignedIdentities The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests. ManagedServiceIdentityUserAssignedIdentities

ManagedServiceIdentityUserAssignedIdentities

Name Description Value

TrackedResourceTags

Name Description Value

UserAssignedIdentity

Name Description Value

Terraform (AzAPI provider) resource definition

The agentSpaces resource type can be deployed with operations that target:

  • Resource groups For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.App/agentSpaces resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.App/agentSpaces@2026-01-01"
  name = "string"
  parent_id = "string"
  identity {
    type = "string"
    identity_ids = [
      "string"
    ]
  }
  location = "string"
  tags = {
    {customized property} = "string"
  }
  body = {
    properties = {
      description = "string"
      maxAgentCount = int
      policies = {
        genevaActionsConfiguration = {
          acisEndpoint = "string"
          allowedActions = [
            {
              actionName = "string"
              actionParameters = [
                {
                  name = "string"
                  type = "string"
                }
              ]
              approvalRequired = bool
              extension = "string"
            }
          ]
          authenticationMode = "string"
          certificateSubjectName = "string"
          clientId = "string"
          extensionName = "string"
        }
      }
      serviceTreeId = "string"
    }
  }
}

Property Values

Microsoft.App/agentSpaces

Name Description Value
identity The managed service identities assigned to this resource. ManagedServiceIdentity
location The geo-location where the resource lives string (required)
name The resource name string

Constraints:
Pattern = ^[A-Za-z]([-A-Za-z0-9]*[A-Za-z0-9])$ (required)
properties The resource-specific properties for this resource. AgentSpaceProperties
tags Resource tags Dictionary of tag names and values.
type The resource type "Microsoft.App/agentSpaces@2026-01-01"

AgentSpacePolicies

Name Description Value
genevaActionsConfiguration Configuration for Geneva Actions policy GenevaActionsPolicy

AgentSpaceProperties

Name Description Value
description Description of the Agent Space string
maxAgentCount Maximum number of agents allowed in the Agent Space int
policies Policy configurations for the Agent Space AgentSpacePolicies
serviceTreeId Universal unique ID (UUID) of the Service Tree associated with this Agent Space string

GenevaActionConfig

Name Description Value
actionName Name of the Geneva action string
actionParameters Parameters for the Geneva action GenevaActionParameter[]
approvalRequired Indicates whether approval is required for this action bool
extension Extension associated with the action string

GenevaActionParameter

Name Description Value
name Name of the parameter string
type Type of the parameter string

GenevaActionsPolicy

Name Description Value
acisEndpoint ACIS (Azure Container Instance Service) endpoint URL string
allowedActions Collection of allowed Geneva actions GenevaActionConfig[]
authenticationMode Authentication mode for Geneva Actions 'OAuth'
'WS-Trust'
certificateSubjectName Subject name of the certificate used for authentication string
clientId Client ID for authentication string
extensionName Name of the Geneva extension string (required)

ManagedServiceIdentity

Name Description Value
type Type of managed service identity (where both SystemAssigned and UserAssigned types are allowed). 'None'
'SystemAssigned'
'SystemAssigned,UserAssigned'
'UserAssigned' (required)
userAssignedIdentities The set of user assigned identities associated with the resource. The userAssignedIdentities dictionary keys will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}. The dictionary values can be empty objects ({}) in requests. ManagedServiceIdentityUserAssignedIdentities

ManagedServiceIdentityUserAssignedIdentities

Name Description Value

TrackedResourceTags

Name Description Value

UserAssignedIdentity

Name Description Value
  • Last updated on