pulumi-alicloud-kotlin/com.pulumi.alicloud.cloudsso.kotlin/AccessManagementArgs

AccessManagementArgs

data class AccessManagementArgs(val accessConfigurationId: Output<String>? = null, val deprovisionStrategy: Output<String>? = null, val directoryId: Output<String>? = null, val principalId: Output<String>? = null, val principalType: Output<String>? = null, val targetId: Output<String>? = null, val targetType: Output<String>? = null) : ConvertibleToJava<AccessManagementArgs>

Provides a Cloud SSO Access Assignment resource. For information about Cloud SSO Access Assignment and how to use it, see What is Access Assignment.

NOTE: When you configure access assignment for the first time, access configuration will be automatically deployed. NOTE: Available since v1.145.0. NOTE: Cloud SSO Only Support cn-shanghai And us-west-1 Region

Import

Cloud SSO Access Assignment can be imported using the id, e.g.

$ pulumi import alicloud:cloudsso/accessManagement:AccessManagement example <directory_id>:<access_configuration_id>:<target_type>:<target_id>:<principal_type>:<principal_id>
Content copied to clipboard

Constructors

Link copied to clipboard
fun AccessManagementArgs(accessConfigurationId: Output<String>? = null, deprovisionStrategy: Output<String>? = null, directoryId: Output<String>? = null, principalId: Output<String>? = null, principalType: Output<String>? = null, targetId: Output<String>? = null, targetType: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): AccessManagementArgs

Properties

Link copied to clipboard
val accessConfigurationId: Output<String>? = null

The Access configuration ID.

Link copied to clipboard
val deprovisionStrategy: Output<String>? = null

The deprovision strategy. Valid values: DeprovisionForLastAccessAssignmentOnAccount and None. Default Value: DeprovisionForLastAccessAssignmentOnAccount. NOTE: When deprovision_strategy is DeprovisionForLastAccessAssignmentOnAccount, and the access assignment to be deleted is the last access assignment for the same account and the same AC, this option is used for the undeployment operation。

Link copied to clipboard
val directoryId: Output<String>? = null

The ID of the Directory.

Link copied to clipboard
val principalId: Output<String>? = null

The ID of the access assignment.

Link copied to clipboard
val principalType: Output<String>? = null

The identity type of the access assignment, which can be a user or a user group. Valid values: Group, User.

Link copied to clipboard
val targetId: Output<String>? = null

The ID of the target to create the resource range.

Link copied to clipboard
val targetType: Output<String>? = null

The type of the resource range target to be accessed. Valid values: RD-Account.