Azure Resource Graph table and resource type reference

Azure Resource Graph supports the following resource types of Azure Resource Manager. Each resource type is part of a table in Resource Graph.

advisorresources

For sample queries for this table, see Resource Graph sample queries for advisorresources.

• microsoft.advisor/configurations
• microsoft.advisor/recommendations
  • Sample query: Get cost savings summary from Azure Advisor
  • Sample query: List Arc-enabled servers not running latest released agent version
• microsoft.advisor/suppressions

aksresources

• microsoft.containerservice/fleets/autoupgradeprofiles
• microsoft.containerservice/fleets/members
• microsoft.containerservice/fleets/updateruns
• microsoft.containerservice/fleets/updatestrategies

alertsmanagementresources

• microsoft.alertsmanagement/alerts

authorizationresources

• microsoft.authorization/roleassignments
• microsoft.authorization/roledefinitions

batchresources

• microsoft.batch/batchaccounts/pools

computeresources

• microsoft.compute/virtualmachinescalesets/virtualmachines/networkinterfaces/ipconfigurations/publicipaddresses

deploymentresources

• microsoft.resources/deploymentstacks

extensibilityresourcechanges

• microsoft.resources/changes

guestconfigurationresources

For sample queries for this table, see Resource Graph sample queries for guestconfigurationresources.

• microsoft.guestconfiguration/guestconfigurationassignments
  • Sample query: Count machines in scope of guest configuration policies
  • Sample query: Count of non-compliant guest configuration assignments
  • Sample query: Find all reasons a machine is non-compliant for guest configuration assignments

healthresourcechanges

• microsoft.resources/changes

healthresources

For sample queries for this table, see Resource Graph sample queries for healthresources.

• microsoft.resourcehealth/availabilitystatuses
  • Sample query: Count of virtual machines by availability state and Subscription ID
  • Sample query: List of virtual machines and associated availability states by Resource IDs
  • Sample query: List of virtual machines by availability state and power state with Resource IDs and resource Groups
  • Sample query: List of virtual machines that are not Available by Resource IDs

insightresources

• microsoft.insights/datacollectionruleassociations

kubernetesconfigurationresources

For sample queries for this table, see Resource Graph sample queries for kubernetesconfigurationresources.

• microsoft.kubernetesconfiguration/extensions
  • Sample query: List all Azure Arc-enabled Kubernetes clusters with Azure Monitor extension
  • Sample query: List all Azure Arc-enabled Kubernetes clusters without Azure Monitor extension
• microsoft.kubernetesconfiguration/fluxconfigurations
• microsoft.kubernetesconfiguration/sourcecontrolconfigurations

maintenanceresourcechanges

• microsoft.resources/changes

maintenanceresources

• microsoft.maintenance/applyupdates
• microsoft.maintenance/configurationassignments
• microsoft.maintenance/maintenanceconfigurations/applyupdates
• microsoft.maintenance/updates

networkresourcechanges

• microsoft.resources/changes

patchassessmentresources

For sample queries for this table, see Resource Graph sample queries for patchassessmentresources.

• microsoft.compute/virtualmachines/patchassessmentresults
• microsoft.compute/virtualmachines/patchassessmentresults/softwarepatches
• microsoft.hybridcompute/machines/patchassessmentresults
• microsoft.hybridcompute/machines/patchassessmentresults/softwarepatches

patchinstallationresources

• microsoft.compute/virtualmachines/patchinstallationresults
• microsoft.compute/virtualmachines/patchinstallationresults/softwarepatches
• microsoft.hybridcompute/machines/patchinstallationresults
• microsoft.hybridcompute/machines/patchinstallationresults/softwarepatches

policyresources

For sample queries for this table, see Resource Graph sample queries for policyresources.

• microsoft.authorization/policyassignments
• microsoft.authorization/policydefinitions
• microsoft.authorization/policydefinitions/versions
• microsoft.authorization/policysetdefinitions
• microsoft.policyinsights/policystates
  • Sample query: Compliance by policy assignment
  • Sample query: Compliance by resource type
  • Sample query: List all non-compliant resources
  • Sample query: Summarize resource compliance by state
  • Sample query: Summarize resource compliance by state per location

recoveryservicesresources

• microsoft.dataprotection/backupvaults/backupinstances
• microsoft.dataprotection/backupvaults/backupjobs
• microsoft.dataprotection/backupvaults/backuppolicies
• microsoft.dataprotection/backupvaults/deletedbackupinstances
• microsoft.recoveryservices/locations/deletedvaults
• microsoft.recoveryservices/vaults/alerts
• microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems (Backup Items)
• microsoft.recoveryservices/vaults/backupjobs
• microsoft.recoveryservices/vaults/backuppolicies
• microsoft.recoveryservices/vaults/replicationfabrics/replicationprotectioncontainers/replicationprotecteditems

resourcechanges

• microsoft.resources/changes

resourcecontainerchanges

• microsoft.resources/changes

resourcecontainers

For sample queries for this table, see Resource Graph sample queries for resourcecontainers.

• microsoft.resources/subscriptions (Subscriptions)
  • Sample query: Count of subscriptions per management group
  • Sample query: Key vaults with subscription name
  • Sample query: List all management group ancestors for a specified subscription
  • Sample query: List all subscriptions under a specified management group
  • Sample query: Remove columns from results
  • Sample query: Secure score per management group

resources

For sample queries for this table, see Resource Graph sample queries for resources.

• microsoft.AAD/domainServices (Azure AD Domain Services)
• microsoft.alertsmanagement/actionrules
• microsoft.alertsmanagement/prometheusrulegroups
• microsoft.alertsmanagement/smartdetectoralertrules
• microsoft.analysisservices/servers
• microsoft.apimanagement/service
• microsoft.app/containerapps
• microsoft.app/jobs
• microsoft.app/managedenvironments
• microsoft.app/managedenvironments/certificates
• microsoft.appconfiguration/configurationstores
• microsoft.appplatform/spring
• microsoft.attestation/attestationproviders
• microsoft.automation/automationaccounts
• microsoft.automation/automationaccounts/configurations
• microsoft.automation/automationaccounts/runbooks
• microsoft.autonomousdevelopmentplatform/accounts
• microsoft.autonomousdevelopmentplatform/workspaces
• microsoft.AzureActiveDirectory/b2cDirectories (B2C Tenants)
• microsoft.AzureActiveDirectory/guestUsages (Guest Usages)
• microsoft.azuredatatransfer/connections
• microsoft.azuredatatransfer/connections/flows
• microsoft.azuredatatransfer/pipelines
• microsoft.azurestack/linkedsubscriptions
• microsoft.azurestack/registrations
• microsoft.azurestackhci/clusters
• microsoft.Batch/batchAccounts (Batch accounts)
• microsoft.BotService/botServices (Bot Services)
• microsoft.Cache/Redis (Azure Cache for Redis)
• microsoft.cdn/profiles (Front Doors Standard/Premium (Preview))
• microsoft.Cdn/Profiles/AfdEndpoints (Endpoints)
• microsoft.cdn/profiles/endpoints (Endpoints)
• microsoft.CertificateRegistration/certificateOrders (App Service Certificates)
• microsoft.classicCompute/domainNames (Cloud services (classic))
• microsoft.ClassicCompute/VirtualMachines (Virtual machines (classic))
• microsoft.ClassicNetwork/networkSecurityGroups (Network security groups (classic))
• microsoft.ClassicNetwork/reservedIps (Reserved IP addresses (classic))
• microsoft.ClassicNetwork/virtualNetworks (Virtual networks (classic))
• microsoft.ClassicStorage/StorageAccounts (Storage accounts (classic))
• microsoft.CloudTest/accounts (CloudTest Accounts)
• microsoft.CloudTest/hostedpools (1ES Hosted Pools)
• microsoft.CloudTest/images (CloudTest Images)
• microsoft.CloudTest/pools (CloudTest Pools)
• microsoft.CognitiveServices/accounts (Cognitive Services)
• microsoft.Compute/VirtualMachines (Virtual machines)
  • Sample query: Count of virtual machines by power state
  • Sample query: Count virtual machines by OS type
  • Sample query: Count virtual machines by OS type with extend
  • Sample query: List all extensions installed on a virtual machine
  • Sample query: List machines that are not running and the last compliance status
  • Sample query: List of virtual machines by availability state and power state with Resource IDs and resource Groups
  • Sample query: List virtual machines with their network interface and public IP
  • Sample query: Show all virtual machines ordered by name in descending order
  • Sample query: Show first five virtual machines by name and their OS type
  • Sample query: Summarize virtual machine by the power states extended property
  • Sample query: Virtual machines matched by regex
• microsoft.compute/virtualmachines/extensions
  • Sample query: List all extensions installed on a virtual machine
• microsoft.compute/virtualmachines/runcommands
• microsoft.compute/virtualmachines/vmapplications
• microsoft.Compute/virtualMachineScaleSets (Virtual machine scale sets)
  • Sample query: Get virtual machine scale set capacity and size
• microsoft.compute/virtualmachinescalesets/virtualmachines/networkinterfaces/ipconfigurations/publicipaddresses
• microsoft.ConnectedVehicle/platformAccounts (Connected Vehicle Platforms)
• microsoft.ContainerInstance/containerGroups (Container instances)
• microsoft.ContainerRegistry/registries (Container registries)
• microsoft.ContainerRegistry/registries/replications (Container registry replications)
• microsoft.containerregistry/registries/taskruns
• microsoft.containerregistry/registries/tasks
• microsoft.ContainerRegistry/registries/webhooks (Container registry webhooks)
• microsoft.containerservice/fleets
• microsoft.ContainerService/managedClusters (Kubernetes services)
  • Sample query: List impacted resources when transferring an Azure subscription
• microsoft.contoso/clusters
• microsoft.contoso/employees
• microsoft.contoso/towers
• microsoft.Dashboard/grafana (Grafana Workspaces)
• microsoft.dashboard/grafana/managedprivateendpoints
• microsoft.DataBox/jobs (Azure Data Box)
• microsoft.databricks/accessconnectors
• microsoft.Databricks/workspaces (Azure Databricks Services)
• microsoft.DataFactory/factories (Data factories (V2))
• microsoft.DataMigration/services (Azure Database Migration Services)
• microsoft.DataMigration/services/projects (Azure Database Migration Projects)
• microsoft.datamigration/slots
• microsoft.datamigration/sqlmigrationservices (Azure Database Migration Services)
• microsoft.DataProtection/BackupVaults (Backup vaults)
• microsoft.DataProtection/resourceGuards (Resource Guards (Preview))
• microsoft.DBforMariaDB/servers (Azure Database for MariaDB servers)
• microsoft.DBforMySQL/flexibleServers (Azure Database for MySQL flexible servers)
• microsoft.DBforMySQL/servers (Azure Database for MySQL servers)
• microsoft.DBforPostgreSQL/flexibleServers (Azure Database for PostgreSQL flexible servers)
• microsoft.desktopvirtualization/appattachpackages
• microsoft.DesktopVirtualization/ApplicationGroups (Application groups)
• microsoft.DesktopVirtualization/HostPools (Host pools)
• microsoft.DesktopVirtualization/ScalingPlans (Scaling plans)
• microsoft.DesktopVirtualization/Workspaces (Workspaces)
• microsoft.Devices/IotHubs (IoT Hub)
• microsoft.Devices/ProvisioningServices (Device Provisioning Services)
• microsoft.DigitalTwins/digitalTwinsInstances (Azure Digital Twins)
• microsoft.DocumentDb/databaseAccounts (Azure Cosmos DB accounts)
  • Sample query: List Azure Cosmos DB with specific write locations
• microsoft.EventGrid/domains (Event Grid domains)
• microsoft.eventgrid/namespaces
• microsoft.eventgrid/partnerconfigurations
• microsoft.eventgrid/partnerdestinations
• microsoft.EventGrid/partnerNamespaces (Event Grid partner namespaces)
• microsoft.EventHub/clusters (Event Hubs Clusters)
• microsoft.EventHub/namespaces (Event Hubs Namespaces)
• microsoft.ExtendedLocation/CustomLocations (Custom locations)
  • Sample query: List Azure Arc-enabled custom locations with VMware or SCVMM enabled
• microsoft.extendedlocation/customlocations/resourcesyncrules
• microsoft.FluidRelay/fluidRelayServers (Fluid Relay)
• microsoft.HDInsight/clusters (HDInsight clusters)
• microsoft.HybridCompute/machines (Servers - Azure Arc)
  • Sample query: Get count and percentage of Arc-enabled servers by domain
  • Sample query: List all extensions installed on an Azure Arc-enabled server
  • Sample query: List Arc-enabled servers not running latest released agent version
• microsoft.hybridcompute/machines/extensions
  • Sample query: List all extensions installed on an Azure Arc-enabled server
• microsoft.hybridcompute/machines/runcommands
• microsoft.HybridCompute/privateLinkScopes (Azure Arc Private Link Scopes)
• microsoft.importexport/jobs
• microsoft.insights/actiongroups
• microsoft.insights/activitylogalerts
• microsoft.insights/autoscalesettings
• microsoft.iotcentral/iotapps
• microsoft.keyvault/managedhsms
• microsoft.KeyVault/vaults (Key vaults)
  • Sample query: Count key vault resources
  • Sample query: Key vaults with subscription name
  • Sample query: List impacted resources when transferring an Azure subscription
• microsoft.Kubernetes/connectedClusters (Kubernetes - Azure Arc)
  • Sample query: List all Azure Arc-enabled Kubernetes clusters without Azure Monitor extension
  • Sample query: List all Azure Arc-enabled Kubernetes resources
• microsoft.kubernetes/connectedclusters
• microsoft.kubernetesconfiguration/privatelinkscopes
• microsoft.Kusto/clusters (Azure Data Explorer Clusters)
• microsoft.Logic/integrationAccounts (Integration accounts)
• microsoft.Logic/workflows (Logic apps)
• microsoft.machinelearning/webservices
• microsoft.machinelearningservices/registries
• microsoft.machinelearningservices/workspaces
• microsoft.machinelearningservices/workspaces/batchendpoints
• microsoft.machinelearningservices/workspaces/batchendpoints/deployments
• microsoft.MachineLearningServices/workspaces/onlineEndpoints (Machine learning online endpoints)
• microsoft.MachineLearningServices/workspaces/onlineEndpoints/deployments (Machine learning online deployments)
• microsoft.Maintenance/maintenanceConfigurations (Maintenance Configurations)
• microsoft.ManagedIdentity/userAssignedIdentities (Managed Identities)
  • Sample query: List impacted resources when transferring an Azure subscription
• microsoft.migrate/assessmentprojects
• microsoft.migrate/migrateprojects
• microsoft.migrate/movecollections
• microsoft.monitor/accounts
• microsoft.Network/applicationGateways (Application gateways)
• microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies (Web application firewall policies (WAF))
• microsoft.Network/applicationSecurityGroups (Application security groups)
• microsoft.Network/azureFirewalls (Firewalls)
• microsoft.Network/bastionHosts (Bastions)
• microsoft.Network/connections (Connections)
• microsoft.Network/dnsForwardingRulesets (Dns Forwarding Rulesets)
• microsoft.Network/dnsResolvers (DNS Private Resolvers)
• microsoft.network/dnsresolvers/inboundendpoints
• microsoft.network/dnsresolvers/outboundendpoints
• microsoft.Network/dnsZones (DNS zones)
• microsoft.Network/expressRouteCircuits (ExpressRoute circuits)
• microsoft.network/expressroutecrossconnections
• microsoft.network/expressroutegateways
• microsoft.Network/expressRoutePorts (ExpressRoute Direct)
• microsoft.Network/firewallPolicies (Firewall Policies)
• microsoft.Network/ipGroups (IP Groups)
• microsoft.Network/LoadBalancers (Load balancers)
• microsoft.Network/localnetworkgateways (Local network gateways)
• microsoft.network/natgateways
• microsoft.network/networkintentpolicies
• microsoft.network/networkinterfaces
• microsoft.network/networkmanagers
• microsoft.network/networkprofiles
• microsoft.network/networksecuritygroups
• microsoft.network/networksecurityperimeters
• microsoft.network/networkwatchers
• microsoft.network/networkwatchers/connectionmonitors
• microsoft.network/networkwatchers/flowlogs
• microsoft.network/p2svpngateways
• microsoft.network/privatednszones
• microsoft.network/privatednszones/virtualnetworklinks
• microsoft.network/privateendpointredirectmaps
• microsoft.network/privateendpoints
• microsoft.network/privatelinkservices
• microsoft.network/publicipaddresses
• microsoft.network/publicipprefixes
• microsoft.network/routefilters
• microsoft.network/routetables
• microsoft.network/securitypartnerproviders
• microsoft.network/serviceendpointpolicies
• microsoft.network/trafficmanagerprofiles
• microsoft.network/virtualhubs
• microsoft.network/virtualnetworkgateways
• microsoft.network/virtualnetworks
• microsoft.network/virtualwans
• microsoft.network/vpngateways
• microsoft.network/vpnserverconfigurations
• microsoft.network/vpnsites
• microsoft.notificationhubs/namespaces
• microsoft.notificationhubs/namespaces/notificationhubs
• microsoft.offazure/hypervsites
• microsoft.offazure/importsites
• microsoft.offazure/mastersites
• microsoft.offazure/serversites
• microsoft.offazure/vmwaresites
• microsoft.operationalinsights/clusters
• microsoft.OperationalInsights/querypacks (Log Analytics query packs)
• microsoft.OperationalInsights/workspaces (Log Analytics workspaces)
• microsoft.OperationsManagement/solutions (Solutions)
• microsoft.Portal/dashboards (Shared dashboards)
• microsoft.portalsdk/rootresources
• microsoft.portalservices/dashboards
• microsoft.portalservices/extensions
• microsoft.portalservices/extensions/slots
• microsoft.portalservices/extensions/versions
• microsoft.powerbi/privatelinkservicesforpowerbi
• microsoft.powerbi/tenants
• microsoft.powerbi/workspacecollections
• microsoft.powerbidedicated/autoscalevcores
• microsoft.PowerBIDedicated/capacities (Power BI Embedded)
• microsoft.powerplatform/enterprisepolicies
• microsoft.purview/accounts
• microsoft.relay/namespaces
• microsoft.resourcegraph/queries
• microsoft.resources/deploymentscripts
• microsoft.resources/templatespecs (Template specs)
• microsoft.resources/templatespecs/versions
• microsoft.Search/searchServices (Search services)
• microsoft.security/assignments
• microsoft.security/automations
• microsoft.servicebus/namespaces
• microsoft.servicefabric/clusters
• microsoft.ServiceBus/namespaces (Service Bus Namespaces)
• microsoft.ServiceFabric/clusters (Service Fabric clusters)
• microsoft.ServiceFabric/managedclusters (Service Fabric managed clusters)
• microsoft.ServicesHub/connectors (Services Hub Connectors)
• microsoft.SignalRService/SignalR (SignalR)
• microsoft.signalrservice/signalr/replicas
• microsoft.SignalRService/WebPubSub (Web PubSub Service)
• microsoft.signalrservice/webpubsub/replicas
• microsoft.Solutions/applicationDefinitions (Service catalog managed application definitions)
• microsoft.Solutions/applications (Managed applications)
• microsoft.Sql/managedInstances (SQL managed instances)
• microsoft.Sql/managedInstances/databases (Managed databases)
• microsoft.Sql/servers (SQL servers)
• microsoft.Sql/servers/databases (SQL databases)
  • Sample query: List impacted resources when transferring an Azure subscription
  • Sample query: List SQL Databases and their elastic pools
• microsoft.Sql/servers/elasticpools (SQL elastic pools)
  • Sample query: List SQL Databases and their elastic pools
• microsoft.Sql/servers/jobAgents (Elastic Job agents)
• microsoft.Sql/virtualClusters (Virtual clusters)
• microsoft.sqlvirtualmachine/sqlvirtualmachinegroups
• microsoft.SqlVirtualMachine/SqlVirtualMachines (SQL virtual machines)
• microsoft.Storage/StorageAccounts (Storage accounts)
  • Sample query: Find storage accounts with a specific case-insensitive tag on the resource group
  • Sample query: Find storage accounts with a specific case-sensitive tag on the resource group
  • Sample query: List all storage accounts with specific tag value
  • Sample query: List impacted resources when transferring an Azure subscription
• microsoft.StorageCache/caches (HPC caches)
• microsoft.StorageSync/storageSyncServices (Storage Sync Services)
• microsoft.StreamAnalytics/clusters (Stream Analytics clusters)
• microsoft.StreamAnalytics/StreamingJobs (Stream Analytics jobs)
• microsoft.Synapse/privateLinkHubs (Azure Synapse Analytics (private link hubs))
• microsoft.Synapse/workspaces (Azure Synapse Analytics)
• microsoft.Synapse/workspaces/bigDataPools (Apache Spark pools)
• microsoft.synapse/workspaces/sqlpools
• microsoft.timeseriesinsights/environments
• microsoft.timeseriesinsights/environments/eventsources
• microsoft.timeseriesinsights/environments/referencedatasets
• microsoft.usagebilling/accounts
• microsoft.virtualmachineimages/imagetemplates
• microsoft.web/certificates
• microsoft.Web/connectionGateways (On-premises data gateways)
• microsoft.Web/connections (API Connections)
• microsoft.Web/customApis (Logic Apps Custom Connector)
• microsoft.Web/HostingEnvironments (App Service Environments)
• providers.test/statefulibizaengines
• providers.test/statefulresources

securityresources

For sample queries for this table, see Resource Graph sample queries for securityresources.

• microsoft.security/assessments
  • Sample query: Count healthy, unhealthy, and not applicable resources per recommendation
  • Sample query: List Azure Security Center recommendations
  • Sample query: List Container Registry vulnerability assessment results
  • Sample query: List Qualys vulnerability assessment results
• microsoft.security/assessments/subassessments
  • Sample query: List Container Registry vulnerability assessment results
  • Sample query: List Qualys vulnerability assessment results
• microsoft.security/locations/alerts (Security Alerts)
• microsoft.security/pricings
  • Sample query: Show Azure Defender pricing tier per subscription
• microsoft.security/regulatorycompliancestandards
  • Sample query: Regulatory compliance state per compliance standard
• microsoft.security/regulatorycompliancestandards/regulatorycompliancecontrols
• microsoft.security/regulatorycompliancestandards/regulatorycompliancecontrols/regulatorycomplianceassessments
  • Sample query: Regulatory compliance assessments state
• microsoft.security/securescores
  • Sample query: Secure score per management group
  • Sample query: Secure score per subscription
• microsoft.security/securescores/securescorecontrols
  • Sample query: Controls secure score per subscription

servicehealthresources

For sample queries for this table, see Resource Graph sample queries for servicehealthresources.

• microsoft.resourcehealth/events
  • Sample query: Active Service Health event subscription impact
  • Sample query: All active health advisory events
  • Sample query: All active planned maintenance events
  • Sample query: All active Service Health events
  • Sample query: All active service issue events
• microsoft.resourcehealth/events/impactedresources

Next steps

• Learn more about the query language.
• Learn more about how to explore resources.
• See samples of Starter queries.