Share via


Services - Update

Updates an existing search service in the given resource group.

PATCH https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Search/searchServices/{searchServiceName}?api-version=2022-09-01

URI Parameters

Name In Required Type Description
resourceGroupName
path True

string

The name of the resource group within the current subscription. You can obtain this value from the Azure Resource Manager API or the portal.

searchServiceName
path True

string

The name of the Azure Cognitive Search service to update.

subscriptionId
path True

string

The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal.

api-version
query True

string

The API version to use for each request.

Request Header

Name Required Type Description
x-ms-client-request-id

string (uuid)

A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request.

Request Body

Name Type Description
identity

Identity

The identity of the resource.

location

string

The geographic location of the resource. This must be one of the supported and registered Azure Geo Regions (for example, West US, East US, Southeast Asia, and so forth). This property is required when creating a new resource.

properties.authOptions

DataPlaneAuthOptions

Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true.

properties.disableLocalAuth

boolean

When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined.

properties.encryptionWithCmk

EncryptionWithCmk

Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service.

properties.hostingMode

HostingMode

Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'.

properties.networkRuleSet

NetworkRuleSet

Network specific rules that determine how the Azure Cognitive Search service may be reached.

properties.partitionCount

integer (int32)

minimum: 1
maximum: 12

The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3.

properties.publicNetworkAccess

PublicNetworkAccess

This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.

properties.replicaCount

integer (int32)

minimum: 1
maximum: 12

The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU.

sku

Sku

The SKU of the Search Service, which determines price tier and capacity limits. This property is required when creating a new Search Service.

tags

object

Tags to help categorize the resource in the Azure portal.

Responses

Name Type Description
200 OK

SearchService

The existing service definition was successfully updated. If you changed the number of replicas or partitions, the scale operation will happen asynchronously. You can periodically get your service definition and monitor progress via the provisioningState property.

Other Status Codes

CloudError

HTTP 400 (Bad Request): The given service definition is invalid or you attempted to change a property that is immutable; See the error code and message in the response for details. HTTP 404 (Not Found): The subscription or resource group could not be found. HTTP 409 (Conflict): The specified subscription is disabled.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

SearchUpdateService
SearchUpdateServiceAuthOptions
SearchUpdateServiceDisableLocalAuth
SearchUpdateServiceToAllowAccessFromPrivateEndpoints
SearchUpdateServiceToAllowAccessFromPublicCustomIPs
SearchUpdateServiceToRemoveIdentity
SearchUpdateServiceWithCmkEnforcement

SearchUpdateService

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "properties": {
    "replicaCount": 2
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "sku": {
    "name": "standard"
  },
  "properties": {
    "replicaCount": 2,
    "partitionCount": 1,
    "status": "provisioning",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "provisioning",
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": []
    },
    "privateEndpointConnections": []
  }
}

SearchUpdateServiceAuthOptions

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "properties": {
    "replicaCount": 2,
    "authOptions": {
      "aadOrApiKey": {
        "aadAuthFailureMode": "http401WithBearerChallenge"
      }
    }
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "sku": {
    "name": "standard"
  },
  "properties": {
    "replicaCount": 2,
    "partitionCount": 1,
    "status": "provisioning",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "provisioning",
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": []
    },
    "authOptions": {
      "aadOrApiKey": {
        "aadAuthFailureMode": "http401WithBearerChallenge"
      }
    }
  }
}

SearchUpdateServiceDisableLocalAuth

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "properties": {
    "replicaCount": 2,
    "disableLocalAuth": true
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "sku": {
    "name": "standard"
  },
  "properties": {
    "replicaCount": 2,
    "partitionCount": 1,
    "status": "provisioning",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "provisioning",
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": []
    },
    "disableLocalAuth": true,
    "authOptions": null
  }
}

SearchUpdateServiceToAllowAccessFromPrivateEndpoints

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "properties": {
    "replicaCount": 1,
    "partitionCount": 1,
    "publicNetworkAccess": "disabled"
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "sku": {
    "name": "basic"
  },
  "properties": {
    "replicaCount": 1,
    "partitionCount": 1,
    "status": "running",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "succeeded",
    "publicNetworkAccess": "disabled",
    "networkRuleSet": {
      "ipRules": []
    },
    "privateEndpointConnections": []
  }
}

SearchUpdateServiceToAllowAccessFromPublicCustomIPs

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "properties": {
    "replicaCount": 3,
    "partitionCount": 1,
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": [
        {
          "value": "123.4.5.6"
        },
        {
          "value": "123.4.6.0/18"
        }
      ]
    }
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "sku": {
    "name": "standard"
  },
  "properties": {
    "replicaCount": 3,
    "partitionCount": 1,
    "status": "running",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "succeeded",
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": [
        {
          "value": "10.2.3.4"
        }
      ]
    },
    "privateEndpointConnections": []
  }
}

SearchUpdateServiceToRemoveIdentity

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "sku": {
    "name": "standard"
  },
  "identity": {
    "type": "None"
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {},
  "sku": {
    "name": "standard"
  },
  "properties": {
    "replicaCount": 3,
    "partitionCount": 1,
    "status": "running",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "succeeded",
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": []
    },
    "privateEndpointConnections": []
  },
  "identity": {
    "type": "None"
  }
}

SearchUpdateServiceWithCmkEnforcement

Sample request

PATCH https://management.azure.com/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice?api-version=2022-09-01

{
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "properties": {
    "replicaCount": 2,
    "encryptionWithCmk": {
      "enforcement": "Enabled"
    }
  }
}

Sample response

{
  "id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Search/searchServices/mysearchservice",
  "name": "mysearchservice",
  "location": "westus",
  "type": "Microsoft.Search/searchServices",
  "tags": {
    "app-name": "My e-commerce app",
    "new-tag": "Adding a new tag"
  },
  "sku": {
    "name": "standard"
  },
  "properties": {
    "replicaCount": 2,
    "partitionCount": 1,
    "status": "provisioning",
    "statusDetails": "",
    "hostingMode": "default",
    "provisioningState": "provisioning",
    "publicNetworkAccess": "enabled",
    "networkRuleSet": {
      "ipRules": []
    },
    "privateEndpointConnections": [],
    "sharedPrivateLinkResources": [],
    "encryptionWithCmk": {
      "enforcement": "Enabled",
      "encryptionComplianceStatus": "Compliant"
    },
    "disableLocalAuth": false,
    "authOptions": {
      "apiKeyOnly": {}
    }
  }
}

Definitions

Name Description
AadAuthFailureMode

Describes what response the data plane API of a Search service would send for requests that failed authentication.

ApiKeyOnly

Indicates that only the API key needs to be used for authentication.

CloudError

Contains information about an API error.

CloudErrorBody

Describes a particular API error with an error code and a message.

DataPlaneAadOrApiKeyAuthOption

Indicates that either the API key or an access token from Azure Active Directory can be used for authentication.

DataPlaneAuthOptions

Defines the options for how the data plane API of a Search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true.

EncryptionWithCmk

Describes a policy that determines how resources within the search service are to be encrypted with Customer Managed Keys.

HostingMode

Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'.

Identity

Identity for the resource.

IdentityType

The identity type.

IpRule

The IP restriction rule of the Azure Cognitive Search service.

NetworkRuleSet

Network specific rules that determine how the Azure Cognitive Search service may be reached.

PrivateEndpoint

The private endpoint resource from Microsoft.Network provider.

PrivateEndpointConnection

Describes an existing Private Endpoint connection to the Azure Cognitive Search service.

PrivateEndpointConnectionProperties

Describes the properties of an existing Private Endpoint connection to the Azure Cognitive Search service.

PrivateLinkServiceConnectionProvisioningState

The provisioning state of the private link service connection. Can be Updating, Deleting, Failed, Succeeded, or Incomplete

PrivateLinkServiceConnectionState

Describes the current state of an existing Private Link Service connection to the Azure Private Endpoint.

PrivateLinkServiceConnectionStatus

Status of the the private link service connection. Can be Pending, Approved, Rejected, or Disconnected.

ProvisioningState

The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'succeeded' or 'failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.

PublicNetworkAccess

This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.

SearchEncryptionComplianceStatus

Describes whether the search service is compliant or not with respect to having non customer encrypted resources. If a service has more than one non customer encrypted resource and 'Enforcement' is 'enabled' then the service will be marked as 'nonCompliant'.

SearchEncryptionWithCmk

Describes how a search service should enforce having one or more non customer encrypted resources.

SearchService

Describes an Azure Cognitive Search service and its current state.

SearchServiceStatus

The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. If your service is in the degraded, disabled, or error states, it means the Azure Cognitive Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned.

SearchServiceUpdate

The parameters used to update an Azure Cognitive Search service.

SharedPrivateLinkResource

Describes a Shared Private Link Resource managed by the Azure Cognitive Search service.

SharedPrivateLinkResourceProperties

Describes the properties of an existing Shared Private Link Resource managed by the Azure Cognitive Search service.

SharedPrivateLinkResourceProvisioningState

The provisioning state of the shared private link resource. Can be Updating, Deleting, Failed, Succeeded or Incomplete.

SharedPrivateLinkResourceStatus

Status of the shared private link resource. Can be Pending, Approved, Rejected or Disconnected.

Sku

Defines the SKU of an Azure Cognitive Search Service, which determines price tier and capacity limits.

SkuName

The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.'

AadAuthFailureMode

Describes what response the data plane API of a Search service would send for requests that failed authentication.

Value Description
http403

Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden).

http401WithBearerChallenge

Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge.

ApiKeyOnly

Indicates that only the API key needs to be used for authentication.

CloudError

Contains information about an API error.

Name Type Description
error

CloudErrorBody

Describes a particular API error with an error code and a message.

CloudErrorBody

Describes a particular API error with an error code and a message.

Name Type Description
code

string

An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases.

details

CloudErrorBody[]

Contains nested errors that are related to this error.

message

string

A message that describes the error in detail and provides debugging information.

target

string

The target of the particular error (for example, the name of the property in error).

DataPlaneAadOrApiKeyAuthOption

Indicates that either the API key or an access token from Azure Active Directory can be used for authentication.

Name Type Description
aadAuthFailureMode

AadAuthFailureMode

Describes what response the data plane API of a Search service would send for requests that failed authentication.

DataPlaneAuthOptions

Defines the options for how the data plane API of a Search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true.

Name Type Description
aadOrApiKey

DataPlaneAadOrApiKeyAuthOption

Indicates that either the API key or an access token from Azure Active Directory can be used for authentication.

apiKeyOnly

ApiKeyOnly

Indicates that only the API key needs to be used for authentication.

EncryptionWithCmk

Describes a policy that determines how resources within the search service are to be encrypted with Customer Managed Keys.

Name Type Description
encryptionComplianceStatus

SearchEncryptionComplianceStatus

Describes whether the search service is compliant or not with respect to having non customer encrypted resources. If a service has more than one non customer encrypted resource and 'Enforcement' is 'enabled' then the service will be marked as 'nonCompliant'.

enforcement

SearchEncryptionWithCmk

Describes how a search service should enforce having one or more non customer encrypted resources.

HostingMode

Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'.

Value Description
default

The limit on number of indexes is determined by the default limits for the SKU.

highDensity

Only application for standard3 SKU, where the search service can have up to 1000 indexes.

Identity

Identity for the resource.

Name Type Description
principalId

string

The principal ID of the system-assigned identity of the search service.

tenantId

string

The tenant ID of the system-assigned identity of the search service.

type

IdentityType

The identity type.

IdentityType

The identity type.

Value Description
None
SystemAssigned

IpRule

The IP restriction rule of the Azure Cognitive Search service.

Name Type Description
value

string

Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed.

NetworkRuleSet

Network specific rules that determine how the Azure Cognitive Search service may be reached.

Name Type Description
ipRules

IpRule[]

A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method.

PrivateEndpoint

The private endpoint resource from Microsoft.Network provider.

Name Type Description
id

string

The resource id of the private endpoint resource from Microsoft.Network provider.

PrivateEndpointConnection

Describes an existing Private Endpoint connection to the Azure Cognitive Search service.

Name Type Description
id

string

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

name

string

The name of the resource

properties

PrivateEndpointConnectionProperties

Describes the properties of an existing Private Endpoint connection to the Azure Cognitive Search service.

type

string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

PrivateEndpointConnectionProperties

Describes the properties of an existing Private Endpoint connection to the Azure Cognitive Search service.

Name Type Description
groupId

string

The group id from the provider of resource the private link service connection is for.

privateEndpoint

PrivateEndpoint

The private endpoint resource from Microsoft.Network provider.

privateLinkServiceConnectionState

PrivateLinkServiceConnectionState

Describes the current state of an existing Private Link Service connection to the Azure Private Endpoint.

provisioningState

PrivateLinkServiceConnectionProvisioningState

The provisioning state of the private link service connection. Can be Updating, Deleting, Failed, Succeeded, or Incomplete

PrivateLinkServiceConnectionProvisioningState

The provisioning state of the private link service connection. Can be Updating, Deleting, Failed, Succeeded, or Incomplete

Value Description
Updating

The private link service connection is in the process of being created along with other resources for it to be fully functional.

Deleting

The private link service connection is in the process of being deleted.

Failed

The private link service connection has failed to be provisioned or deleted.

Succeeded

The private link service connection has finished provisioning and is ready for approval.

Incomplete

Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet.

Canceled

Provisioning request for the private link service connection resource has been canceled

PrivateLinkServiceConnectionState

Describes the current state of an existing Private Link Service connection to the Azure Private Endpoint.

Name Type Default value Description
actionsRequired

string

None

A description of any extra actions that may be required.

description

string

The description for the private link service connection state.

status

PrivateLinkServiceConnectionStatus

Status of the the private link service connection. Can be Pending, Approved, Rejected, or Disconnected.

PrivateLinkServiceConnectionStatus

Status of the the private link service connection. Can be Pending, Approved, Rejected, or Disconnected.

Value Description
Pending

The private endpoint connection has been created and is pending approval.

Approved

The private endpoint connection is approved and is ready for use.

Rejected

The private endpoint connection has been rejected and cannot be used.

Disconnected

The private endpoint connection has been removed from the service.

ProvisioningState

The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'succeeded' or 'failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.

Value Description
succeeded

The last provisioning operation has completed successfully.

provisioning

The search service is being provisioned or scaled up or down.

failed

The last provisioning operation has failed.

PublicNetworkAccess

This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.

Value Description
enabled
disabled

SearchEncryptionComplianceStatus

Describes whether the search service is compliant or not with respect to having non customer encrypted resources. If a service has more than one non customer encrypted resource and 'Enforcement' is 'enabled' then the service will be marked as 'nonCompliant'.

Value Description
Compliant

Indicates that the search service is compliant, either because number of non customer encrypted resources is zero or enforcement is disabled.

NonCompliant

Indicates that the search service has more than 1 non customer encrypted resources.

SearchEncryptionWithCmk

Describes how a search service should enforce having one or more non customer encrypted resources.

Value Description
Disabled

No enforcement will be made and the search service can have non customer encrypted resources.

Enabled

Search service will be marked as non-compliant if there are one or more non customer encrypted resources.

Unspecified

Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'.

SearchService

Describes an Azure Cognitive Search service and its current state.

Name Type Default value Description
id

string

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

identity

Identity

The identity of the resource.

location

string

The geo-location where the resource lives

name

string

The name of the resource

properties.authOptions

DataPlaneAuthOptions

Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true.

properties.disableLocalAuth

boolean

When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined.

properties.encryptionWithCmk

EncryptionWithCmk

Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service.

properties.hostingMode

HostingMode

default

Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'.

properties.networkRuleSet

NetworkRuleSet

Network specific rules that determine how the Azure Cognitive Search service may be reached.

properties.partitionCount

integer (int32)

minimum: 1
maximum: 12
1

The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3.

properties.privateEndpointConnections

PrivateEndpointConnection[]

The list of private endpoint connections to the Azure Cognitive Search service.

properties.provisioningState

ProvisioningState

The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'succeeded' or 'failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.

properties.publicNetworkAccess

PublicNetworkAccess

enabled

This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.

properties.replicaCount

integer (int32)

minimum: 1
maximum: 12
1

The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU.

properties.sharedPrivateLinkResources

SharedPrivateLinkResource[]

The list of shared private link resources managed by the Azure Cognitive Search service.

properties.status

SearchServiceStatus

The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. If your service is in the degraded, disabled, or error states, it means the Azure Cognitive Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned.

properties.statusDetails

string

The details of the search service status.

sku

Sku

The SKU of the Search Service, which determines price tier and capacity limits. This property is required when creating a new Search Service.

tags

object

Resource tags.

type

string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

SearchServiceStatus

The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. If your service is in the degraded, disabled, or error states, it means the Azure Cognitive Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned.

Value Description
running

The search service is running and no provisioning operations are underway.

provisioning

The search service is being provisioned or scaled up or down.

deleting

The search service is being deleted.

degraded

The search service is degraded because underlying search units are not healthy.

disabled

The search service is disabled and all API requests will be rejected.

error

The search service is in error state, indicating either a failure to provision or to be deleted.

SearchServiceUpdate

The parameters used to update an Azure Cognitive Search service.

Name Type Default value Description
id

string

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

identity

Identity

The identity of the resource.

location

string

The geographic location of the resource. This must be one of the supported and registered Azure Geo Regions (for example, West US, East US, Southeast Asia, and so forth). This property is required when creating a new resource.

name

string

The name of the resource

properties.authOptions

DataPlaneAuthOptions

Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true.

properties.disableLocalAuth

boolean

When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined.

properties.encryptionWithCmk

EncryptionWithCmk

Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service.

properties.hostingMode

HostingMode

default

Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'.

properties.networkRuleSet

NetworkRuleSet

Network specific rules that determine how the Azure Cognitive Search service may be reached.

properties.partitionCount

integer (int32)

minimum: 1
maximum: 12
1

The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3.

properties.privateEndpointConnections

PrivateEndpointConnection[]

The list of private endpoint connections to the Azure Cognitive Search service.

properties.provisioningState

ProvisioningState

The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'succeeded' or 'failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up.

properties.publicNetworkAccess

PublicNetworkAccess

enabled

This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.

properties.replicaCount

integer (int32)

minimum: 1
maximum: 12
1

The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU.

properties.sharedPrivateLinkResources

SharedPrivateLinkResource[]

The list of shared private link resources managed by the Azure Cognitive Search service.

properties.status

SearchServiceStatus

The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. If your service is in the degraded, disabled, or error states, it means the Azure Cognitive Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned.

properties.statusDetails

string

The details of the search service status.

sku

Sku

The SKU of the Search Service, which determines price tier and capacity limits. This property is required when creating a new Search Service.

tags

object

Tags to help categorize the resource in the Azure portal.

type

string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

SharedPrivateLinkResource

Describes a Shared Private Link Resource managed by the Azure Cognitive Search service.

Name Type Description
id

string

Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}

name

string

The name of the resource

properties

SharedPrivateLinkResourceProperties

Describes the properties of a Shared Private Link Resource managed by the Azure Cognitive Search service.

type

string

The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

SharedPrivateLinkResourceProperties

Describes the properties of an existing Shared Private Link Resource managed by the Azure Cognitive Search service.

Name Type Description
groupId

string

The group id from the provider of resource the shared private link resource is for.

privateLinkResourceId

string

The resource id of the resource the shared private link resource is for.

provisioningState

SharedPrivateLinkResourceProvisioningState

The provisioning state of the shared private link resource. Can be Updating, Deleting, Failed, Succeeded or Incomplete.

requestMessage

string

The request message for requesting approval of the shared private link resource.

resourceRegion

string

Optional. Can be used to specify the Azure Resource Manager location of the resource to which a shared private link is to be created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service).

status

SharedPrivateLinkResourceStatus

Status of the shared private link resource. Can be Pending, Approved, Rejected or Disconnected.

SharedPrivateLinkResourceProvisioningState

The provisioning state of the shared private link resource. Can be Updating, Deleting, Failed, Succeeded or Incomplete.

Value Description
Updating
Deleting
Failed
Succeeded
Incomplete

SharedPrivateLinkResourceStatus

Status of the shared private link resource. Can be Pending, Approved, Rejected or Disconnected.

Value Description
Pending
Approved
Rejected
Disconnected

Sku

Defines the SKU of an Azure Cognitive Search Service, which determines price tier and capacity limits.

Name Type Description
name

SkuName

The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.'

SkuName

The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.'

Value Description
free

Free tier, with no SLA guarantees and a subset of features offered to paid tiers.

basic

Paid tier dedicated service with up to 3 replicas.

standard

Paid tier dedicated service with up to 12 partitions and 12 replicas.

standard2

Similar to 'standard', but with more capacity per search unit.

standard3

The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity').

storage_optimized_l1

Paid tier dedicated service that supports 1TB per partition, up to 12 partitions.

storage_optimized_l2

Paid tier dedicated service that supports 2TB per partition, up to 12 partitions.