Access Management
Provides a Cloud SSO Access Assignment resource. For information about Cloud SSO Access Assignment and how to use it, see What is Access Assignment.
NOTE: When you configure access assignment for the first time, access configuration will be automatically deployed. NOTE: Available since v1.145.0. NOTE: Cloud SSO Only Support
cn-shanghai
Andus-west-1
Region
Import
Cloud SSO Access Assignment can be imported using the id, e.g.
$ pulumi import alicloud:cloudsso/accessManagement:AccessManagement example <directory_id>:<access_configuration_id>:<target_type>:<target_id>:<principal_type>:<principal_id>
Properties
The Access configuration ID.
The deprovision strategy. Valid values: DeprovisionForLastAccessAssignmentOnAccount
and None
. Default Value: DeprovisionForLastAccessAssignmentOnAccount
. NOTE: When deprovision_strategy
is DeprovisionForLastAccessAssignmentOnAccount
, and the access assignment to be deleted is the last access assignment for the same account and the same AC, this option is used for the undeployment operation。
The ID of the Directory.
The ID of the access assignment.
The identity type of the access assignment, which can be a user or a user group. Valid values: Group
, User
.
The type of the resource range target to be accessed. Valid values: RD-Account
.