{ "info": { "_postman_id": "c8ca2201-2ffe-401e-acc0-3bd8a7661f6f", "name": "Microsoft Azure PolicyEventsClient", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "lastUpdatedBy": "35240", "uid": "35240-c8ca2201-2ffe-401e-acc0-3bd8a7661f6f" }, "item": [ { "name": "providers", "item": [ { "name": "{managementGroupsNamespace}", "item": [ { "name": "managementGroups", "item": [ { "name": "{managementGroupName}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Providers Managementgroupsnamespace Managementgroups Managementgroupname Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "24062329-c261-49b9-a7be-b257065f6527", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/providers/:managementGroupsNamespace/managementGroups/:managementGroupName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "providers", ":managementGroupsNamespace", "managementGroups", ":managementGroupName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "bcf6f6b1-d9d5-4ceb-bc41-3f8c39bc60ef", "key": "managementGroupsNamespace", "value": "Microsoft.Management", "description": "(Required) The namespace for Microsoft Management RP; only \"Microsoft.Management\" is allowed." }, { "id": "803472c4-7d08-43d3-af9d-424b60c5db23", "key": "managementGroupName", "value": "", "description": "(Required) Management group name." }, { "id": "9ac08748-26ad-4dbc-9983-d6a4eb2d5f44", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the resources under the management group." }, "response": [ { "id": "a67b3e43-1e5b-4e1d-9957-9c6a1ad256e9", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/providers/:managementGroupsNamespace/managementGroups/:managementGroupName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "providers", ":managementGroupsNamespace", "managementGroups", ":managementGroupName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "managementGroupsNamespace" }, { "key": "managementGroupName" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-a67b3e43-1e5b-4e1d-9957-9c6a1ad256e9" }, { "id": "a69bd208-bb0e-439c-87dd-0abcb95c406c", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/providers/:managementGroupsNamespace/managementGroups/:managementGroupName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "providers", ":managementGroupsNamespace", "managementGroups", ":managementGroupName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "managementGroupsNamespace" }, { "key": "managementGroupName" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-a69bd208-bb0e-439c-87dd-0abcb95c406c" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-24062329-c261-49b9-a7be-b257065f6527" } ], "id": "f48d060f-8a1a-42d9-90b2-86246cf9f511", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-f48d060f-8a1a-42d9-90b2-86246cf9f511" } ], "id": "d00cdc86-f0e7-434b-a690-e07591f86e57", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-d00cdc86-f0e7-434b-a690-e07591f86e57" } ], "id": "8573d4b2-8466-4f56-b685-7c312e2e57c9", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-8573d4b2-8466-4f56-b685-7c312e2e57c9" } ], "id": "68f5f016-712c-430a-bab7-5d26a7234881", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-68f5f016-712c-430a-bab7-5d26a7234881" } ], "id": "2bf1bf43-fac8-48f5-b17e-361c5a2e082b", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-2bf1bf43-fac8-48f5-b17e-361c5a2e082b" } ], "id": "ebef8533-c8a7-4bc1-8d09-62abd264c9c0", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-ebef8533-c8a7-4bc1-8d09-62abd264c9c0" } ], "id": "05748e7c-5b0c-4835-8f75-2067acb0df49", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-05748e7c-5b0c-4835-8f75-2067acb0df49" } ], "id": "8e9faad7-ea03-4305-b9ca-d3195220feda", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-8e9faad7-ea03-4305-b9ca-d3195220feda" } ], "id": "f64723fd-fcd2-4e38-9429-71abd9be1b8e", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-f64723fd-fcd2-4e38-9429-71abd9be1b8e" }, { "name": "subscriptions", "item": [ { "name": "{subscriptionId}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Subscriptions Subscriptionid Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "f323c9ed-3d37-4778-b7bd-0a1bdbec5ed4", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "2bc77fd3-33a1-4abb-84bf-a34ab2cfcccf", "key": "subscriptionId", "value": "", "description": "(Required) Microsoft Azure subscription ID." }, { "id": "0f8febc3-a23b-4d35-8c30-34d3b6e042ae", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the resources under the subscription." }, "response": [ { "id": "116d6271-4ab9-435d-8eda-6b0f758082f6", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-116d6271-4ab9-435d-8eda-6b0f758082f6" }, { "id": "d6af4c2a-07a5-4106-b2d5-5d70452040a6", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-d6af4c2a-07a5-4106-b2d5-5d70452040a6" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-f323c9ed-3d37-4778-b7bd-0a1bdbec5ed4" } ], "id": "623d7f52-c5a5-46e7-b8a6-91473e7b45b9", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-623d7f52-c5a5-46e7-b8a6-91473e7b45b9" } ], "id": "c37b3483-79cc-4561-99c5-2efbfc4bd2c7", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-c37b3483-79cc-4561-99c5-2efbfc4bd2c7" } ], "id": "857237c6-f372-4316-a0f0-32055bef82a1", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-857237c6-f372-4316-a0f0-32055bef82a1" } ], "id": "7509c1cb-d78e-467f-875d-92ba346eed92", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-7509c1cb-d78e-467f-875d-92ba346eed92" }, { "name": "{authorizationNamespace}", "item": [ { "name": "policySetDefinitions", "item": [ { "name": "{policySetDefinitionName}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Subscriptions Subscriptionid Providers Authorizationnamespace Policysetdefinitions Policysetdefinitionname Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "a76fbeab-f95a-4243-8c37-d76b20e36fe8", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policySetDefinitions/:policySetDefinitionName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policySetDefinitions", ":policySetDefinitionName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "c0eb7723-57d4-44ac-8d9e-9c44dbbad8e1", "key": "subscriptionId", "value": "", "description": "(Required) Microsoft Azure subscription ID." }, { "id": "1079a9be-f870-46d1-9dc8-3de1261018f5", "key": "authorizationNamespace", "value": "Microsoft.Authorization", "description": "(Required) The namespace for Microsoft Authorization resource provider; only \"Microsoft.Authorization\" is allowed." }, { "id": "5b14381d-714e-48de-a005-82afd761b6bb", "key": "policySetDefinitionName", "value": "", "description": "(Required) Policy set definition name." }, { "id": "9b1a5334-2c00-48d7-b91e-a414a702caac", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the subscription level policy set definition." }, "response": [ { "id": "5843d9cf-4034-4fd6-bae1-616012a19d6f", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policySetDefinitions/:policySetDefinitionName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policySetDefinitions", ":policySetDefinitionName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "authorizationNamespace" }, { "key": "policySetDefinitionName" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-5843d9cf-4034-4fd6-bae1-616012a19d6f" }, { "id": "14ce601b-410e-495f-a4ef-18a0c1f6e49b", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policySetDefinitions/:policySetDefinitionName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policySetDefinitions", ":policySetDefinitionName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "authorizationNamespace" }, { "key": "policySetDefinitionName" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-14ce601b-410e-495f-a4ef-18a0c1f6e49b" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-a76fbeab-f95a-4243-8c37-d76b20e36fe8" } ], "id": "c51531cb-d654-45e9-a808-800df287e51c", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-c51531cb-d654-45e9-a808-800df287e51c" } ], "id": "df7c7088-464f-47a3-a58d-f4d80586d311", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-df7c7088-464f-47a3-a58d-f4d80586d311" } ], "id": "e6b1d428-261a-424f-bd04-e8398dc82acf", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-e6b1d428-261a-424f-bd04-e8398dc82acf" } ], "id": "4e9500dc-9e18-4ef6-ad8d-1dffc0672d85", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-4e9500dc-9e18-4ef6-ad8d-1dffc0672d85" } ], "id": "1dac8406-eace-4df9-9592-1045e8cf6697", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-1dac8406-eace-4df9-9592-1045e8cf6697" } ], "id": "332b8b8e-fb96-4f67-afe1-318455b18c51", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-332b8b8e-fb96-4f67-afe1-318455b18c51" } ], "id": "604c5972-75c0-40c9-8871-44daeb84c4c4", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-604c5972-75c0-40c9-8871-44daeb84c4c4" }, { "name": "policyDefinitions", "item": [ { "name": "{policyDefinitionName}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Subscriptions Subscriptionid Providers Authorizationnamespace Policydefinitions Policydefinitionname Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "d14f082c-31e6-4b27-9539-ca8dded858aa", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policyDefinitions/:policyDefinitionName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policyDefinitions", ":policyDefinitionName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "f55944f3-99a5-4728-898e-e997e7851efd", "key": "subscriptionId", "value": "", "description": "(Required) Microsoft Azure subscription ID." }, { "id": "959734ee-f61e-4712-8a0d-e1510eb89169", "key": "authorizationNamespace", "value": "Microsoft.Authorization", "description": "(Required) The namespace for Microsoft Authorization resource provider; only \"Microsoft.Authorization\" is allowed." }, { "id": "6edd884b-d2a9-4f9b-8cfa-6a83f3983bae", "key": "policyDefinitionName", "value": "", "description": "(Required) Policy definition name." }, { "id": "0e78d7c0-22d9-4492-86d0-ee7b6e777fd5", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the subscription level policy definition." }, "response": [ { "id": "abaac890-bbe0-4a5a-b932-5eadfcd5f803", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policyDefinitions/:policyDefinitionName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policyDefinitions", ":policyDefinitionName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "authorizationNamespace" }, { "key": "policyDefinitionName" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-abaac890-bbe0-4a5a-b932-5eadfcd5f803" }, { "id": "cd5d63dc-4b99-4895-be9e-9b4480bc46d7", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policyDefinitions/:policyDefinitionName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policyDefinitions", ":policyDefinitionName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "authorizationNamespace" }, { "key": "policyDefinitionName" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-cd5d63dc-4b99-4895-be9e-9b4480bc46d7" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-d14f082c-31e6-4b27-9539-ca8dded858aa" } ], "id": "bbe69781-4658-4421-b444-cf596de4d619", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-bbe69781-4658-4421-b444-cf596de4d619" } ], "id": "32e2d805-5119-4610-8c2f-1cb407c708c7", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-32e2d805-5119-4610-8c2f-1cb407c708c7" } ], "id": "f1007113-4743-43eb-8dcf-05bedab91df5", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-f1007113-4743-43eb-8dcf-05bedab91df5" } ], "id": "972d6dea-0c07-467d-9cd8-509bea5a3507", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-972d6dea-0c07-467d-9cd8-509bea5a3507" } ], "id": "09526530-71e9-45a5-a3c5-2cac2524984f", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-09526530-71e9-45a5-a3c5-2cac2524984f" } ], "id": "ff085f44-2ec6-4e8f-b97a-218349095b8f", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-ff085f44-2ec6-4e8f-b97a-218349095b8f" } ], "id": "87fa9737-7b97-4d85-84a6-53ce11e03ad8", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-87fa9737-7b97-4d85-84a6-53ce11e03ad8" }, { "name": "policyAssignments", "item": [ { "name": "{policyAssignmentName}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Subscriptions Subscriptionid Providers Authorizationnamespace Policyassignments Policyassignmentname Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "8a6b1238-c12e-47b8-99da-c280004b33bd", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policyAssignments/:policyAssignmentName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policyAssignments", ":policyAssignmentName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "24f6caf8-e2a9-4286-8188-5435e3dc83d6", "key": "subscriptionId", "value": "", "description": "(Required) Microsoft Azure subscription ID." }, { "id": "f783b6c1-bfbf-4dd6-9234-4ab4c1b69087", "key": "authorizationNamespace", "value": "Microsoft.Authorization", "description": "(Required) The namespace for Microsoft Authorization resource provider; only \"Microsoft.Authorization\" is allowed." }, { "id": "cb7099e5-d176-4113-9400-c98008344d44", "key": "policyAssignmentName", "value": "", "description": "(Required) Policy assignment name." }, { "id": "fc4d43ce-d1d5-45cd-aa22-d45b10bc62dc", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the subscription level policy assignment." }, "response": [ { "id": "96c7910c-9584-4ddb-8f9c-0721a64bd7e5", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policyAssignments/:policyAssignmentName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policyAssignments", ":policyAssignmentName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "authorizationNamespace" }, { "key": "policyAssignmentName" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-96c7910c-9584-4ddb-8f9c-0721a64bd7e5" }, { "id": "01e3d924-2237-48a5-acb7-c9fca08c5bdf", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/providers/:authorizationNamespace/policyAssignments/:policyAssignmentName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "providers", ":authorizationNamespace", "policyAssignments", ":policyAssignmentName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "authorizationNamespace" }, { "key": "policyAssignmentName" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-01e3d924-2237-48a5-acb7-c9fca08c5bdf" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-8a6b1238-c12e-47b8-99da-c280004b33bd" } ], "id": "dc7d1ab1-b8c5-45ad-9d9d-4f5fc365ed21", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-dc7d1ab1-b8c5-45ad-9d9d-4f5fc365ed21" } ], "id": "43c9745d-af1f-461b-9ebe-44dd89b17fbd", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-43c9745d-af1f-461b-9ebe-44dd89b17fbd" } ], "id": "5cffb090-eb71-4d53-965a-ee5372e205aa", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-5cffb090-eb71-4d53-965a-ee5372e205aa" } ], "id": "3c211e95-41df-414f-b374-72fce23fab19", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-3c211e95-41df-414f-b374-72fce23fab19" } ], "id": "4a9c8157-729b-400c-9d27-a9bb689f97d8", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-4a9c8157-729b-400c-9d27-a9bb689f97d8" } ], "id": "f4742f6e-14c6-4bc3-a5ec-9cd216d7675f", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-f4742f6e-14c6-4bc3-a5ec-9cd216d7675f" } ], "id": "64970b38-7db2-44d2-b024-b2a187cbce93", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-64970b38-7db2-44d2-b024-b2a187cbce93" } ], "id": "4872aa95-3b97-4aac-b857-bdfa7c4b977e", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-4872aa95-3b97-4aac-b857-bdfa7c4b977e" } ], "id": "7785395f-3965-4a1d-8c45-da4adce4e556", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-7785395f-3965-4a1d-8c45-da4adce4e556" }, { "name": "resourceGroups", "item": [ { "name": "{resourceGroupName}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "79546568-135d-4c90-a1bd-b520d2d29123", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/resourceGroups/:resourceGroupName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "resourceGroups", ":resourceGroupName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "9f8b1112-164f-480f-a8bd-9d06b9bf02d9", "key": "subscriptionId", "value": "", "description": "(Required) Microsoft Azure subscription ID." }, { "id": "ac7c24fd-b33d-4098-af15-bfad49fb917b", "key": "resourceGroupName", "value": "", "description": "(Required) Resource group name." }, { "id": "44da70b3-e825-4772-a22f-83917c029ecf", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the resources under the resource group." }, "response": [ { "id": "0910020d-3f45-4025-a50c-66835cd5c31d", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/resourceGroups/:resourceGroupName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "resourceGroups", ":resourceGroupName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "resourceGroupName" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-0910020d-3f45-4025-a50c-66835cd5c31d" }, { "id": "7901440d-a0f2-4d41-a53f-47cbb9c9ed29", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/resourceGroups/:resourceGroupName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "resourceGroups", ":resourceGroupName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "resourceGroupName" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-7901440d-a0f2-4d41-a53f-47cbb9c9ed29" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-79546568-135d-4c90-a1bd-b520d2d29123" } ], "id": "80b2a662-76bc-4f91-a6e2-4e9942794b2b", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-80b2a662-76bc-4f91-a6e2-4e9942794b2b" } ], "id": "ceed2ba1-16cd-444f-9537-531e3892a59e", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-ceed2ba1-16cd-444f-9537-531e3892a59e" } ], "id": "c45d91e4-7980-4454-a85d-0bb8f3078ed0", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-c45d91e4-7980-4454-a85d-0bb8f3078ed0" } ], "id": "f18cc94f-4efe-4904-ba72-146062ab352b", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-f18cc94f-4efe-4904-ba72-146062ab352b" } ], "id": "b0f403b7-5ff3-4a3c-8e94-a4fc0eabeb93", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-b0f403b7-5ff3-4a3c-8e94-a4fc0eabeb93" } ], "id": "2adf57b8-2212-470c-9379-4d66115641ca", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-2adf57b8-2212-470c-9379-4d66115641ca" } ], "id": "e3d6cfca-6da5-4e45-8258-f7606bd6f042", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-e3d6cfca-6da5-4e45-8258-f7606bd6f042" }, { "name": "resourcegroups", "item": [ { "name": "{resourceGroupName}", "item": [ { "name": "providers", "item": [ { "name": "{authorizationNamespace}", "item": [ { "name": "policyAssignments", "item": [ { "name": "{policyAssignmentName}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Subscriptions Subscriptionid Resourcegroups Resourcegroupname Providers Authorizationnamespace Policyassignments Policyassignmentname Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "359d6be2-eae7-48c2-b35f-6b9784f687e3", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/resourcegroups/:resourceGroupName/providers/:authorizationNamespace/policyAssignments/:policyAssignmentName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "resourcegroups", ":resourceGroupName", "providers", ":authorizationNamespace", "policyAssignments", ":policyAssignmentName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "1ed9d3a0-9f1a-44be-8bc1-7f4e6120a8a0", "key": "subscriptionId", "value": "", "description": "(Required) Microsoft Azure subscription ID." }, { "id": "fb6b0a91-89b5-4787-83ab-5d8546c1654f", "key": "resourceGroupName", "value": "", "description": "(Required) Resource group name." }, { "id": "4cd1e161-6be1-4d8c-814b-34b7d8d2976c", "key": "authorizationNamespace", "value": "Microsoft.Authorization", "description": "(Required) The namespace for Microsoft Authorization resource provider; only \"Microsoft.Authorization\" is allowed." }, { "id": "d78b71b7-802d-4933-bc47-7d0d1fae6d8e", "key": "policyAssignmentName", "value": "", "description": "(Required) Policy assignment name." }, { "id": "d7377bec-1359-405c-8547-e61f58af9b8a", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the resource group level policy assignment." }, "response": [ { "id": "2c82eec3-1624-4920-98ed-233d5a3705b1", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/resourcegroups/:resourceGroupName/providers/:authorizationNamespace/policyAssignments/:policyAssignmentName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "resourcegroups", ":resourceGroupName", "providers", ":authorizationNamespace", "policyAssignments", ":policyAssignmentName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "resourceGroupName" }, { "key": "authorizationNamespace" }, { "key": "policyAssignmentName" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-2c82eec3-1624-4920-98ed-233d5a3705b1" }, { "id": "e62eb370-4eca-4ec1-95eb-30b9daee9bd2", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/subscriptions/:subscriptionId/resourcegroups/:resourceGroupName/providers/:authorizationNamespace/policyAssignments/:policyAssignmentName/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ "subscriptions", ":subscriptionId", "resourcegroups", ":resourceGroupName", "providers", ":authorizationNamespace", "policyAssignments", ":policyAssignmentName", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "subscriptionId" }, { "key": "resourceGroupName" }, { "key": "authorizationNamespace" }, { "key": "policyAssignmentName" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-e62eb370-4eca-4ec1-95eb-30b9daee9bd2" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-359d6be2-eae7-48c2-b35f-6b9784f687e3" } ], "id": "0f464c60-266f-4622-b4f0-5a1a7e662226", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-0f464c60-266f-4622-b4f0-5a1a7e662226" } ], "id": "fdd09582-58b5-4268-a08b-3ebf9a796e50", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-fdd09582-58b5-4268-a08b-3ebf9a796e50" } ], "id": "d8b23bec-f882-46a9-bdbf-a5f401da290b", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-d8b23bec-f882-46a9-bdbf-a5f401da290b" } ], "id": "325c08a1-fc4a-4f28-b059-3a3814002d4a", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-325c08a1-fc4a-4f28-b059-3a3814002d4a" } ], "id": "2e206294-2a5f-4eec-b845-108250ace8ad", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-2e206294-2a5f-4eec-b845-108250ace8ad" } ], "id": "1a5b2537-ff69-4cb8-81aa-4a8cce1ef815", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-1a5b2537-ff69-4cb8-81aa-4a8cce1ef815" } ], "id": "b8d89046-4360-433f-8972-13e175dfe9c7", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-b8d89046-4360-433f-8972-13e175dfe9c7" } ], "id": "09e09ed7-bbca-4b41-a8d6-2ee73e230337", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-09e09ed7-bbca-4b41-a8d6-2ee73e230337" } ], "id": "b648bb64-dbdd-4ec7-868f-ccdad39bf369", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-b648bb64-dbdd-4ec7-868f-ccdad39bf369" } ], "id": "c57d06fb-acd0-404d-8471-e42b4ed34d07", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-c57d06fb-acd0-404d-8471-e42b4ed34d07" } ], "id": "529ede4b-7a78-4196-be9f-db14856a46ad", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-529ede4b-7a78-4196-be9f-db14856a46ad" } ], "id": "19a36a43-0d5e-4ac4-a5df-57822efe34ee", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-19a36a43-0d5e-4ac4-a5df-57822efe34ee" } ], "id": "983c08d7-7bc9-4379-a21d-56eb8ac30d32", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-983c08d7-7bc9-4379-a21d-56eb8ac30d32" }, { "name": "{resourceId}", "item": [ { "name": "providers", "item": [ { "name": "Microsoft.PolicyInsights", "item": [ { "name": "policyEvents", "item": [ { "name": "{policyEventsResource}", "item": [ { "name": "queryResults", "item": [ { "name": "Microsoft Azure Post Resourceid Providers Microsoft Policyinsights Policyevents Policyeventsresource Queryresults", "id": "a92f8b82-3971-4be4-a734-8feea90fd52b", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/:resourceId/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ ":resourceId", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "id": "adf26a9c-a095-4099-9301-5118b894af95", "key": "resourceId", "value": "", "description": "(Required) Resource ID." }, { "id": "5f50ac7d-4c58-46df-aace-cc04172ea84d", "key": "policyEventsResource", "value": "default", "description": "(Required) The name of the virtual resource under PolicyEvents resource type; only \"default\" is allowed." } ] }, "description": "Queries policy events for the resource." }, "response": [ { "id": "10d7d542-920e-4842-874b-b6a3b6d7533a", "name": "Query results.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/:resourceId/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ ":resourceId", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "resourceId" }, { "key": "policyEventsResource" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"@odata.context\": \"\",\n \"@odata.count\": \"\",\n \"@odata.nextLink\": \"\",\n \"value\": [\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n },\n {\n \"@odata.id\": \"\",\n \"@odata.context\": \"\",\n \"timestamp\": \"\",\n \"resourceId\": \"\",\n \"policyAssignmentId\": \"\",\n \"policyDefinitionId\": \"\",\n \"effectiveParameters\": \"\",\n \"isCompliant\": \"\",\n \"subscriptionId\": \"\",\n \"resourceType\": \"\",\n \"resourceLocation\": \"\",\n \"resourceGroup\": \"\",\n \"resourceTags\": \"\",\n \"policyAssignmentName\": \"\",\n \"policyAssignmentOwner\": \"\",\n \"policyAssignmentParameters\": \"\",\n \"policyAssignmentScope\": \"\",\n \"policyDefinitionName\": \"\",\n \"policyDefinitionAction\": \"\",\n \"policyDefinitionCategory\": \"\",\n \"policySetDefinitionId\": \"\",\n \"policySetDefinitionName\": \"\",\n \"policySetDefinitionOwner\": \"\",\n \"policySetDefinitionCategory\": \"\",\n \"policySetDefinitionParameters\": \"\",\n \"managementGroupIds\": \"\",\n \"policyDefinitionReferenceId\": \"\",\n \"tenantId\": \"\",\n \"principalOid\": \"\"\n }\n ]\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-10d7d542-920e-4842-874b-b6a3b6d7533a" }, { "id": "3af4ff3c-2f21-41c6-bc8c-c8afb2da8aee", "name": "Error response describing why the operation failed.", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/:resourceId/providers/Microsoft.PolicyInsights/policyEvents/:policyEventsResource/queryResults?api-version=&$top=&$orderby=&$select=&$from=&$to=&$filter=&$apply=&$skiptoken=", "host": [ "{{baseUrl}}" ], "path": [ ":resourceId", "providers", "Microsoft.PolicyInsights", "policyEvents", ":policyEventsResource", "queryResults" ], "query": [ { "description": "(Required) Client Api Version.", "key": "api-version", "value": "" }, { "description": "Maximum number of records to return.", "key": "$top", "value": "" }, { "description": "Ordering expression using OData notation. One or more comma-separated column names with an optional \"desc\" (the default) or \"asc\", e.g. \"$orderby=PolicyAssignmentId, ResourceId asc\".", "key": "$orderby", "value": "" }, { "description": "Select expression using OData notation. Limits the columns on each record to just those requested, e.g. \"$select=PolicyAssignmentId, ResourceId\".", "key": "$select", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the start time of the interval to query. When not specified, the service uses ($to - 1-day).", "key": "$from", "value": "" }, { "description": "ISO 8601 formatted timestamp specifying the end time of the interval to query. When not specified, the service uses request time.", "key": "$to", "value": "" }, { "description": "OData filter expression.", "key": "$filter", "value": "" }, { "description": "OData apply expression for aggregations.", "key": "$apply", "value": "" }, { "description": "Skiptoken is only provided if a previous response returned a partial result as a part of nextLink element.", "key": "$skiptoken", "value": "" } ], "variable": [ { "key": "resourceId" }, { "key": "policyEventsResource" } ] } }, "status": "Internal Server Error", "code": 500, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"error\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-3af4ff3c-2f21-41c6-bc8c-c8afb2da8aee" } ], "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-a92f8b82-3971-4be4-a734-8feea90fd52b" } ], "id": "8d4ec5eb-b387-4d87-adb1-8a9bd4bf3909", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-8d4ec5eb-b387-4d87-adb1-8a9bd4bf3909" } ], "id": "055499b0-3635-451c-a6d8-675bdaee8b72", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-055499b0-3635-451c-a6d8-675bdaee8b72" } ], "id": "87423077-27b8-4fb0-a46d-4778b16f36fa", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-87423077-27b8-4fb0-a46d-4778b16f36fa" } ], "id": "ea996e93-92a7-4552-b8e1-7545811cb737", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-ea996e93-92a7-4552-b8e1-7545811cb737" } ], "id": "4b5d7dfb-2eb4-4d88-ae01-34d38a6c2211", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-4b5d7dfb-2eb4-4d88-ae01-34d38a6c2211" } ], "id": "49b4b511-a0f3-4251-a3ec-32a4dd4a7d31", "createdAt": "2026-06-05T15:23:02.000Z", "updatedAt": "2026-06-05T15:23:02.000Z", "uid": "35240-49b4b511-a0f3-4251-a3ec-32a4dd4a7d31" } ], "auth": { "type": "oauth2", "oauth2": [ { "key": "scope", "value": "user_impersonation", "type": "string" }, { "key": "authUrl", "value": "https://login.microsoftonline.com/common/oauth2/authorize", "type": "string" }, { "key": "grant_type", "value": "implicit", "type": "string" } ] }, "variable": [ { "key": "baseUrl", "value": "https://management.azure.com" } ] }