// Copyright (c) Microsoft Corporation. All rights reserved.
// Licensed under the MIT License.
// Code generated by Microsoft (R) AutoRest Code Generator.

package com.azure.resourcemanager.keyvault.models;

import com.azure.core.annotation.Fluent;
import com.azure.core.util.logging.ClientLogger;
import com.fasterxml.jackson.annotation.JsonIgnore;
import com.fasterxml.jackson.annotation.JsonProperty;
import java.util.UUID;

/**
 * An identity that have access to the key vault. All identities in the array must use the same tenant ID as the key
 * vault's tenant ID.
 */
@Fluent
public final class AccessPolicyEntry {
    @JsonIgnore private final ClientLogger logger = new ClientLogger(AccessPolicyEntry.class);

    /*
     * The Azure Active Directory tenant ID that should be used for
     * authenticating requests to the key vault.
     */
    @JsonProperty(value = "tenantId", required = true)
    private UUID tenantId;

    /*
     * The object ID of a user, service principal or security group in the
     * Azure Active Directory tenant for the vault. The object ID must be
     * unique for the list of access policies.
     */
    @JsonProperty(value = "objectId", required = true)
    private String objectId;

    /*
     * Application ID of the client making request on behalf of a principal
     */
    @JsonProperty(value = "applicationId")
    private UUID applicationId;

    /*
     * Permissions the identity has for keys, secrets and certificates.
     */
    @JsonProperty(value = "permissions", required = true)
    private Permissions permissions;

    /**
     * Get the tenantId property: The Azure Active Directory tenant ID that should be used for authenticating requests
     * to the key vault.
     *
     * @return the tenantId value.
     */
    public UUID tenantId() {
        return this.tenantId;
    }

    /**
     * Set the tenantId property: The Azure Active Directory tenant ID that should be used for authenticating requests
     * to the key vault.
     *
     * @param tenantId the tenantId value to set.
     * @return the AccessPolicyEntry object itself.
     */
    public AccessPolicyEntry withTenantId(UUID tenantId) {
        this.tenantId = tenantId;
        return this;
    }

    /**
     * Get the objectId property: The object ID of a user, service principal or security group in the Azure Active
     * Directory tenant for the vault. The object ID must be unique for the list of access policies.
     *
     * @return the objectId value.
     */
    public String objectId() {
        return this.objectId;
    }

    /**
     * Set the objectId property: The object ID of a user, service principal or security group in the Azure Active
     * Directory tenant for the vault. The object ID must be unique for the list of access policies.
     *
     * @param objectId the objectId value to set.
     * @return the AccessPolicyEntry object itself.
     */
    public AccessPolicyEntry withObjectId(String objectId) {
        this.objectId = objectId;
        return this;
    }

    /**
     * Get the applicationId property: Application ID of the client making request on behalf of a principal.
     *
     * @return the applicationId value.
     */
    public UUID applicationId() {
        return this.applicationId;
    }

    /**
     * Set the applicationId property: Application ID of the client making request on behalf of a principal.
     *
     * @param applicationId the applicationId value to set.
     * @return the AccessPolicyEntry object itself.
     */
    public AccessPolicyEntry withApplicationId(UUID applicationId) {
        this.applicationId = applicationId;
        return this;
    }

    /**
     * Get the permissions property: Permissions the identity has for keys, secrets and certificates.
     *
     * @return the permissions value.
     */
    public Permissions permissions() {
        return this.permissions;
    }

    /**
     * Set the permissions property: Permissions the identity has for keys, secrets and certificates.
     *
     * @param permissions the permissions value to set.
     * @return the AccessPolicyEntry object itself.
     */
    public AccessPolicyEntry withPermissions(Permissions permissions) {
        this.permissions = permissions;
        return this;
    }

    /**
     * Validates the instance.
     *
     * @throws IllegalArgumentException thrown if the instance is not valid.
     */
    public void validate() {
        if (tenantId() == null) {
            throw logger
                .logExceptionAsError(
                    new IllegalArgumentException("Missing required property tenantId in model AccessPolicyEntry"));
        }
        if (objectId() == null) {
            throw logger
                .logExceptionAsError(
                    new IllegalArgumentException("Missing required property objectId in model AccessPolicyEntry"));
        }
        if (permissions() == null) {
            throw logger
                .logExceptionAsError(
                    new IllegalArgumentException("Missing required property permissions in model AccessPolicyEntry"));
        } else {
            permissions().validate();
        }
    }
}
