pulumi-alicloud-kotlin/com.pulumi.alicloud.cloudsso.kotlin/AccessManagementArgs

AccessManagementArgs

data class AccessManagementArgs(val accessConfigurationId: Output<String>? = null, val deprovisionStrategy: Output<String>? = null, val directoryId: Output<String>? = null, val principalId: Output<String>? = null, val principalType: Output<String>? = null, val targetId: Output<String>? = null, val targetType: Output<String>? = null) : ConvertibleToJava<AccessManagementArgs>

Provides a Cloud SSO Access Assignment resource. For information about Cloud SSO Access Assignment and how to use it, see What is Access Assignment.

NOTE: When you configure access assignment for the first time, access configuration will be automatically deployed. NOTE: Available since v1.145.0. NOTE: Cloud SSO Only Support cn-shanghai And us-west-1 Region

Import

Cloud SSO Access Assignment can be imported using the id, e.g.

$ pulumi import alicloud:cloudsso/accessManagement:AccessManagement example <directory_id>:<access_configuration_id>:<target_type>:<target_id>:<principal_type>:<principal_id>

Constructors

AccessManagementArgs

constructor(accessConfigurationId: Output<String>? = null, deprovisionStrategy: Output<String>? = null, directoryId: Output<String>? = null, principalId: Output<String>? = null, principalType: Output<String>? = null, targetId: Output<String>? = null, targetType: Output<String>? = null)

Properties

accessConfigurationId

val accessConfigurationId: Output<String>? = null

The Access configuration ID.

deprovisionStrategy

val deprovisionStrategy: Output<String>? = null

The deprovision strategy. Valid values: DeprovisionForLastAccessAssignmentOnAccount and None. Default Value: DeprovisionForLastAccessAssignmentOnAccount. NOTE: When deprovision_strategy is DeprovisionForLastAccessAssignmentOnAccount, and the access assignment to be deleted is the last access assignment for the same account and the same AC, this option is used for the undeployment operation。