PimRoleEligibilityScheduleArgs

data class PimRoleEligibilityScheduleArgs(val condition: Output<String>? = null, val conditionVersion: Output<String>? = null, val justification: Output<String>? = null, val principalId: Output<String>? = null, val roleDefinitionId: Output<String>? = null, val scheduleInfo: Output<RoleEligibilityScheduleRequestPropertiesScheduleInfoArgs>? = null, val scope: Output<String>? = null, val targetRoleEligibilityScheduleId: Output<String>? = null, val targetRoleEligibilityScheduleInstanceId: Output<String>? = null, val ticketInfo: Output<RoleEligibilityScheduleRequestPropertiesTicketInfoArgs>? = null) : ConvertibleToJava<PimRoleEligibilityScheduleArgs>

A PIM (Privileged Identity Management) Role Eligibility Schedule. Role Eligibility Schedules are used to limit standing administrator access to privileged roles in Azure PIM. See here for details. A Role Eligibility Schedule is uniquely defined by scope, principal, and role. At present, only one instance of this resource can exist for a given scope|principal|role tuple. Note that this resource cannot be updated. Each change leads to a recreation. Internally, this resource uses the Role Eligibility Schedule Requests API to create and delete the schedules.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:authorization:PimRoleEligibilitySchedule 64caffb6-55c0-4deb-a585-68e948ea1ad6 /{scope}/providers/Microsoft.Authorization/roleEligibilityScheduleRequests/{roleEligibilityScheduleRequestName}

Constructors

Link copied to clipboard
constructor(condition: Output<String>? = null, conditionVersion: Output<String>? = null, justification: Output<String>? = null, principalId: Output<String>? = null, roleDefinitionId: Output<String>? = null, scheduleInfo: Output<RoleEligibilityScheduleRequestPropertiesScheduleInfoArgs>? = null, scope: Output<String>? = null, targetRoleEligibilityScheduleId: Output<String>? = null, targetRoleEligibilityScheduleInstanceId: Output<String>? = null, ticketInfo: Output<RoleEligibilityScheduleRequestPropertiesTicketInfoArgs>? = null)

Properties

Link copied to clipboard
val condition: Output<String>? = null

The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @ResourceMicrosoft.Storage/storageAccounts/blobServices/containers:ContainerName StringEqualsIgnoreCase 'foo_storage_container'

Link copied to clipboard
val conditionVersion: Output<String>? = null

Version of the condition. Currently accepted value is '2.0'

Link copied to clipboard
val justification: Output<String>? = null

Justification for the role eligibility

Link copied to clipboard
val principalId: Output<String>? = null

The principal ID.

Link copied to clipboard
val roleDefinitionId: Output<String>? = null

The role definition ID.

Link copied to clipboard

Schedule info of the role eligibility schedule

Link copied to clipboard
val scope: Output<String>? = null

The scope of the role eligibility schedule request to create. The scope can be any REST resource instance. For example, use '/subscriptions/{subscription-id}/' for a subscription, '/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}' for a resource group, and '/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/{resource-provider}/{resource-type}/{resource-name}' for a resource.

Link copied to clipboard

The resultant role eligibility schedule id or the role eligibility schedule id being updated

Link copied to clipboard

The role eligibility schedule instance id being updated

Link copied to clipboard

Ticket Info of the role eligibility

Functions

Link copied to clipboard
open override fun toJava(): PimRoleEligibilityScheduleArgs