# Validate the portal control's values against the deployment template

> A working createUiDefinition control can still produce a name, type or default that the ARM template does not accept.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-402-validate-the-portal-control-s-values-against-the-deployment-template/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:25:14+00:00
- Modified: 2026-09-10T02:04:56+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, Networks & Infrastructure
- Reading time: 2 minutes

## What you need to know

A working createUiDefinition control can still produce a name, type or default that the ARM template does not accept.

## Potentially affected

Azure managed-application createUiDefinition.json interfaces paired with ARM templates.

## DSE recommendation

Test the UI definition and main template as one parameter contract.

## Article

## Source facts

The template test toolkit checks that control values in createUiDefinition.json are allowed by the main template’s parameters. Microsoft’s examples fail when parameter names differ or when a template integer parameter receives a control’s string value. A template default must also be one of the control’s allowed values.

For a VM SizeSelector, the tests compare the UI outputs with the main template parameters and require a template default to match the control’s allowedSizes. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/createuidefinition-test-cases).

## Applicability

Identify the exact UI definition and main template released together. Distinguish a control’s displayed label from the output parameter name and the value’s actual type.

## DSE recommendation

DSE recommends reviewing every UI output alongside the receiving parameter before publication. Compare names, types, defaults and permitted choices, especially after changing a dropdown or size selector. Keep the two files versioned as one deliverable. Do not bypass a contract failure by accepting all values or changing a parameter type without checking the deployment’s real requirement.

## Verification

Run the relevant toolkit tests against the paired files, then exercise representative UI selections in an approved test experience. Include the default and boundary choices, and inspect the resulting parameter values without exposing secrets. Retain both file revisions and test results. A successful portal preview alone should not replace the cross-file validation evidence.

## Official references

[Microsoft Learn: createUiDefinition.json test cases for Azure Resource Manager test toolkit](https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/createuidefinition-test-cases). Source retrieved September 9, 2026.

## Primary reference

- Name: createUiDefinition.json test cases for Azure Resource Manager test toolkit - Azure Resource Manager | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/createuidefinition-test-cases
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Validate the portal control's values against the deployment template,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-402-validate-the-portal-control-s-values-against-the-deployment-template/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.