Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Bicep resource definition
The accounts/projects/applications resource type can be deployed with operations that target:
- Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.CognitiveServices/accounts/projects/applications resource, add the following Bicep to your template.
resource symbolicname 'Microsoft.CognitiveServices/accounts/projects/applications@2026-03-01' = {
parent: resourceSymbolicName
name: 'string'
properties: {
agentIdentityBlueprint: {
clientId: 'string'
kind: 'string'
principalId: 'string'
subject: 'string'
tenantId: 'string'
type: 'string'
}
agents: [
{
agentId: 'string'
agentName: 'string'
}
]
authorizationPolicy: {
type: 'string'
// For remaining properties, see ApplicationAuthorizationPolicy objects
}
baseUrl: 'string'
defaultInstanceIdentity: {
clientId: 'string'
kind: 'string'
principalId: 'string'
subject: 'string'
tenantId: 'string'
type: 'string'
}
description: 'string'
displayName: 'string'
tags: {
{customized property}: 'string'
}
trafficRoutingPolicy: {
protocol: 'string'
rules: [
{
deploymentId: 'string'
description: 'string'
ruleId: 'string'
trafficPercentage: int
}
]
}
}
}
ApplicationAuthorizationPolicy objects
Set the type property to specify the type of object.
For Channels, use:
{
type: 'Channels'
}
For Default, use:
{
type: 'Default'
}
For OrganizationScope, use:
{
type: 'OrganizationScope'
}
Property Values
Microsoft.CognitiveServices/accounts/projects/applications
| Name | Description | Value |
|---|---|---|
| name | The resource name | string (required) |
| parent | In Bicep, you can specify the parent resource for a child resource. You only need to add this property when the child resource is declared outside of the parent resource. For more information, see Child resource outside parent resource. |
Symbolic name for resource of type: accounts/projects |
| properties | [Required] Additional attributes of the entity. | AgenticApplicationProperties (required) |
AgenticApplicationProperties
| Name | Description | Value |
|---|---|---|
| agentIdentityBlueprint | The EntraId Agentic Blueprint of the application. | AssignedIdentity |
| agents | The list of agent definitions comprising this application, returned as references to the objects under the parent project; use this to obtain a flat list of all agent-version pairs represented by this application. | AgentReferenceProperties[] |
| authorizationPolicy | Gets or sets the authorization policy associated with this agentic application instance. | ApplicationAuthorizationPolicy |
| baseUrl | The application's dedicated invocation endpoint. | string |
| defaultInstanceIdentity | The (default) agent instance identity of the application. | AssignedIdentity |
| description | The asset description text. | string |
| displayName | The display name of the application. | string |
| tags | Tag dictionary. Tags can be added, removed, and updated. | ResourceBaseTags |
| trafficRoutingPolicy | Gets or sets the traffic routing policy for the application's deployments. | ApplicationTrafficRoutingPolicy |
AgentReferenceProperties
| Name | Description | Value |
|---|---|---|
| agentId | Gets the agent's unique identifier within the organization (subscription). | string |
| agentName | Gets the agent's name (unique within the project/app). | string |
ApplicationAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Set to 'Channels' for type ChannelsBuiltInAuthorizationPolicy. Set to 'Default' for type RoleBasedBuiltInAuthorizationPolicy. Set to 'OrganizationScope' for type OrganizationSharedBuiltInAuthorizationPolicy. | 'Channels' 'Default' 'OrganizationScope' (required) |
ApplicationTrafficRoutingPolicy
| Name | Description | Value |
|---|---|---|
| protocol | Methodology used to route traffic to the application's deployments. | 'FixedRatio' |
| rules | Gets or sets the collection of traffic routing rules. | TrafficRoutingRule[] |
AssignedIdentity
| Name | Description | Value |
|---|---|---|
| clientId | The client ID of the identity. | string (required) |
| kind | Specifies the kind of Entra identity described by this object. | 'AgentBlueprint' 'AgenticUser' 'AgentInstance' 'Managed' 'None' (required) |
| principalId | The principal ID of the identity. | string (required) |
| subject | The subject of this identity assignment. | string |
| tenantId | The tenant ID of the identity. | string (required) |
| type | Enumeration of identity types, from the perspective of management. | 'None' 'System' 'User' (required) |
ChannelsBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'Channels' (required) |
OrganizationSharedBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'OrganizationScope' (required) |
ResourceBaseTags
| Name | Description | Value |
|---|
RoleBasedBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'Default' (required) |
TrafficRoutingRule
| Name | Description | Value |
|---|---|---|
| deploymentId | The unique identifier of the deployment to which traffic is routed by this rule. | string |
| description | A user-provided description for this traffic routing rule. | string |
| ruleId | The identifier of this traffic routing rule. | string |
| trafficPercentage | Gets or sets the percentage of traffic allocated to this instance. | int |
ARM template resource definition
The accounts/projects/applications resource type can be deployed with operations that target:
- Resource groups - See resource group deployment commands
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.CognitiveServices/accounts/projects/applications resource, add the following JSON to your template.
{
"type": "Microsoft.CognitiveServices/accounts/projects/applications",
"apiVersion": "2026-03-01",
"name": "string",
"properties": {
"agentIdentityBlueprint": {
"clientId": "string",
"kind": "string",
"principalId": "string",
"subject": "string",
"tenantId": "string",
"type": "string"
},
"agents": [
{
"agentId": "string",
"agentName": "string"
}
],
"authorizationPolicy": {
"type": "string"
// For remaining properties, see ApplicationAuthorizationPolicy objects
},
"baseUrl": "string",
"defaultInstanceIdentity": {
"clientId": "string",
"kind": "string",
"principalId": "string",
"subject": "string",
"tenantId": "string",
"type": "string"
},
"description": "string",
"displayName": "string",
"tags": {
"{customized property}": "string"
},
"trafficRoutingPolicy": {
"protocol": "string",
"rules": [
{
"deploymentId": "string",
"description": "string",
"ruleId": "string",
"trafficPercentage": "int"
}
]
}
}
}
ApplicationAuthorizationPolicy objects
Set the type property to specify the type of object.
For Channels, use:
{
"type": "Channels"
}
For Default, use:
{
"type": "Default"
}
For OrganizationScope, use:
{
"type": "OrganizationScope"
}
Property Values
Microsoft.CognitiveServices/accounts/projects/applications
| Name | Description | Value |
|---|---|---|
| apiVersion | The api version | '2026-03-01' |
| name | The resource name | string (required) |
| properties | [Required] Additional attributes of the entity. | AgenticApplicationProperties (required) |
| type | The resource type | 'Microsoft.CognitiveServices/accounts/projects/applications' |
AgenticApplicationProperties
| Name | Description | Value |
|---|---|---|
| agentIdentityBlueprint | The EntraId Agentic Blueprint of the application. | AssignedIdentity |
| agents | The list of agent definitions comprising this application, returned as references to the objects under the parent project; use this to obtain a flat list of all agent-version pairs represented by this application. | AgentReferenceProperties[] |
| authorizationPolicy | Gets or sets the authorization policy associated with this agentic application instance. | ApplicationAuthorizationPolicy |
| baseUrl | The application's dedicated invocation endpoint. | string |
| defaultInstanceIdentity | The (default) agent instance identity of the application. | AssignedIdentity |
| description | The asset description text. | string |
| displayName | The display name of the application. | string |
| tags | Tag dictionary. Tags can be added, removed, and updated. | ResourceBaseTags |
| trafficRoutingPolicy | Gets or sets the traffic routing policy for the application's deployments. | ApplicationTrafficRoutingPolicy |
AgentReferenceProperties
| Name | Description | Value |
|---|---|---|
| agentId | Gets the agent's unique identifier within the organization (subscription). | string |
| agentName | Gets the agent's name (unique within the project/app). | string |
ApplicationAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Set to 'Channels' for type ChannelsBuiltInAuthorizationPolicy. Set to 'Default' for type RoleBasedBuiltInAuthorizationPolicy. Set to 'OrganizationScope' for type OrganizationSharedBuiltInAuthorizationPolicy. | 'Channels' 'Default' 'OrganizationScope' (required) |
ApplicationTrafficRoutingPolicy
| Name | Description | Value |
|---|---|---|
| protocol | Methodology used to route traffic to the application's deployments. | 'FixedRatio' |
| rules | Gets or sets the collection of traffic routing rules. | TrafficRoutingRule[] |
AssignedIdentity
| Name | Description | Value |
|---|---|---|
| clientId | The client ID of the identity. | string (required) |
| kind | Specifies the kind of Entra identity described by this object. | 'AgentBlueprint' 'AgenticUser' 'AgentInstance' 'Managed' 'None' (required) |
| principalId | The principal ID of the identity. | string (required) |
| subject | The subject of this identity assignment. | string |
| tenantId | The tenant ID of the identity. | string (required) |
| type | Enumeration of identity types, from the perspective of management. | 'None' 'System' 'User' (required) |
ChannelsBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'Channels' (required) |
OrganizationSharedBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'OrganizationScope' (required) |
ResourceBaseTags
| Name | Description | Value |
|---|
RoleBasedBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'Default' (required) |
TrafficRoutingRule
| Name | Description | Value |
|---|---|---|
| deploymentId | The unique identifier of the deployment to which traffic is routed by this rule. | string |
| description | A user-provided description for this traffic routing rule. | string |
| ruleId | The identifier of this traffic routing rule. | string |
| trafficPercentage | Gets or sets the percentage of traffic allocated to this instance. | int |
Usage Examples
Terraform (AzAPI provider) resource definition
The accounts/projects/applications resource type can be deployed with operations that target:
- Resource groups
For a list of changed properties in each API version, see change log.
Resource format
To create a Microsoft.CognitiveServices/accounts/projects/applications resource, add the following Terraform to your template.
resource "azapi_resource" "symbolicname" {
type = "Microsoft.CognitiveServices/accounts/projects/applications@2026-03-01"
name = "string"
parent_id = "string"
body = {
properties = {
agentIdentityBlueprint = {
clientId = "string"
kind = "string"
principalId = "string"
subject = "string"
tenantId = "string"
type = "string"
}
agents = [
{
agentId = "string"
agentName = "string"
}
]
authorizationPolicy = {
type = "string"
// For remaining properties, see ApplicationAuthorizationPolicy objects
}
baseUrl = "string"
defaultInstanceIdentity = {
clientId = "string"
kind = "string"
principalId = "string"
subject = "string"
tenantId = "string"
type = "string"
}
description = "string"
displayName = "string"
tags = {
{customized property} = "string"
}
trafficRoutingPolicy = {
protocol = "string"
rules = [
{
deploymentId = "string"
description = "string"
ruleId = "string"
trafficPercentage = int
}
]
}
}
}
}
ApplicationAuthorizationPolicy objects
Set the type property to specify the type of object.
For Channels, use:
{
type = "Channels"
}
For Default, use:
{
type = "Default"
}
For OrganizationScope, use:
{
type = "OrganizationScope"
}
Property Values
Microsoft.CognitiveServices/accounts/projects/applications
| Name | Description | Value |
|---|---|---|
| name | The resource name | string (required) |
| parent_id | The ID of the resource that is the parent for this resource. | ID for resource of type: accounts/projects |
| properties | [Required] Additional attributes of the entity. | AgenticApplicationProperties (required) |
| type | The resource type | "Microsoft.CognitiveServices/accounts/projects/applications@2026-03-01" |
AgenticApplicationProperties
| Name | Description | Value |
|---|---|---|
| agentIdentityBlueprint | The EntraId Agentic Blueprint of the application. | AssignedIdentity |
| agents | The list of agent definitions comprising this application, returned as references to the objects under the parent project; use this to obtain a flat list of all agent-version pairs represented by this application. | AgentReferenceProperties[] |
| authorizationPolicy | Gets or sets the authorization policy associated with this agentic application instance. | ApplicationAuthorizationPolicy |
| baseUrl | The application's dedicated invocation endpoint. | string |
| defaultInstanceIdentity | The (default) agent instance identity of the application. | AssignedIdentity |
| description | The asset description text. | string |
| displayName | The display name of the application. | string |
| tags | Tag dictionary. Tags can be added, removed, and updated. | ResourceBaseTags |
| trafficRoutingPolicy | Gets or sets the traffic routing policy for the application's deployments. | ApplicationTrafficRoutingPolicy |
AgentReferenceProperties
| Name | Description | Value |
|---|---|---|
| agentId | Gets the agent's unique identifier within the organization (subscription). | string |
| agentName | Gets the agent's name (unique within the project/app). | string |
ApplicationAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Set to 'Channels' for type ChannelsBuiltInAuthorizationPolicy. Set to 'Default' for type RoleBasedBuiltInAuthorizationPolicy. Set to 'OrganizationScope' for type OrganizationSharedBuiltInAuthorizationPolicy. | 'Channels' 'Default' 'OrganizationScope' (required) |
ApplicationTrafficRoutingPolicy
| Name | Description | Value |
|---|---|---|
| protocol | Methodology used to route traffic to the application's deployments. | 'FixedRatio' |
| rules | Gets or sets the collection of traffic routing rules. | TrafficRoutingRule[] |
AssignedIdentity
| Name | Description | Value |
|---|---|---|
| clientId | The client ID of the identity. | string (required) |
| kind | Specifies the kind of Entra identity described by this object. | 'AgentBlueprint' 'AgenticUser' 'AgentInstance' 'Managed' 'None' (required) |
| principalId | The principal ID of the identity. | string (required) |
| subject | The subject of this identity assignment. | string |
| tenantId | The tenant ID of the identity. | string (required) |
| type | Enumeration of identity types, from the perspective of management. | 'None' 'System' 'User' (required) |
ChannelsBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'Channels' (required) |
OrganizationSharedBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'OrganizationScope' (required) |
ResourceBaseTags
| Name | Description | Value |
|---|
RoleBasedBuiltInAuthorizationPolicy
| Name | Description | Value |
|---|---|---|
| type | Authorization scheme type. | 'Default' (required) |
TrafficRoutingRule
| Name | Description | Value |
|---|---|---|
| deploymentId | The unique identifier of the deployment to which traffic is routed by this rule. | string |
| description | A user-provided description for this traffic routing rule. | string |
| ruleId | The identifier of this traffic routing rule. | string |
| trafficPercentage | Gets or sets the percentage of traffic allocated to this instance. | int |