import { BicepConstruct } from './bicepConstruct';
import { ExistingServicePrincipal } from './existingServicePrincipal';
import { Group } from './group';
import { ServicePrincipal } from './servicePrincipal';
import { BicepTemplate } from '../../deploy/template';
/**
 * Properties for Graph App Role Assignment construct
 */
export interface AppRoleAssignmentProps {
    /** The service principal (resource) that owns the app role */
    readonly resourceServicePrincipal: ServicePrincipal | ExistingServicePrincipal | string;
    /** The principal (group, user, or managed identity) to assign the role to */
    readonly principal: Group | string;
    /** The app role ID (use '00000000-0000-0000-0000-000000000000' for default access) */
    readonly appRoleId: string;
}
/**
 * CDK-style construct for Microsoft Graph App Role Assignment
 * Assigns a principal (group, user, managed identity) to a service principal app role
 */
export declare class AppRoleAssignment extends BicepConstruct {
    readonly props: AppRoleAssignmentProps;
    constructor(template: BicepTemplate, resourceName: string, props: AppRoleAssignmentProps);
    synthesize(): void;
}