<?php

declare(strict_types=1);

return [
    'drift' => [
        'rbac_role_definition' => 'Intune RBAC Role Definition drift',
    ],
    'subject_types' => [
        'policy' => 'Policy',
        'intuneRoleDefinition' => 'Intune RBAC Role Definition',
    ],
    'rbac' => [
        'detail_heading' => 'Intune RBAC Role Definition drift',
        'detail_subheading' => 'Role Assignments are not included. RBAC restore is not supported.',
        'metadata_only' => 'Metadata-only change',
        'permission_change' => 'Permission change',
        'missing' => 'Missing from current tenant',
        'unexpected' => 'Unexpected in current tenant',
        'changed_fields' => 'Changed fields',
        'baseline' => 'Baseline',
        'current' => 'Current',
        'absent' => 'Absent',
        'role_source' => 'Role source',
        'permission_blocks' => 'Permission blocks',
        'built_in' => 'Built-in',
        'custom' => 'Custom',
        'assignments_excluded' => 'Role Assignments are not included in this baseline compare release.',
        'restore_unsupported' => 'RBAC restore is not supported in this release.',
    ],
];
