PimRoleEligibilitySchedule

class PimRoleEligibilitySchedule : KotlinCustomResource

A PIM (Privileged Identity Management) Role Eligibility Schedule. Role Eligibility Schedules are used to limit standing administrator access to privileged roles in Azure PIM. See here for details. A Role Eligibility Schedule is uniquely defined by scope, principal, and role. At present, only one instance of this resource can exist for a given scope|principal|role tuple. Note that this resource cannot be updated. Each change leads to a recreation. Internally, this resource uses the Role Eligibility Schedule Requests API to create and delete the schedules.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:authorization:PimRoleEligibilitySchedule 64caffb6-55c0-4deb-a585-68e948ea1ad6 /{scope}/providers/Microsoft.Authorization/roleEligibilityScheduleRequests/{roleEligibilityScheduleRequestName}

Properties

Link copied to clipboard
val approvalId: Output<String>

The approvalId of the role eligibility schedule request.

Link copied to clipboard
val condition: Output<String>?

The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @ResourceMicrosoft.Storage/storageAccounts/blobServices/containers:ContainerName StringEqualsIgnoreCase 'foo_storage_container'

Link copied to clipboard
val conditionVersion: Output<String>?

Version of the condition. Currently accepted value is '2.0'

Link copied to clipboard
val createdOn: Output<String>

DateTime when role eligibility schedule request was created

Link copied to clipboard

Additional properties of principal, scope and role definition

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val justification: Output<String>?

Justification for the role eligibility

Link copied to clipboard
val name: Output<String>

The role eligibility schedule request name.

Link copied to clipboard
val principalId: Output<String>

The principal ID.

Link copied to clipboard
val principalType: Output<String>

The principal type of the assigned principal ID.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val requestorId: Output<String>

Id of the user who created this request

Link copied to clipboard
val requestType: Output<String>?

The type of the role assignment schedule request. Eg: SelfActivate, AdminAssign etc

Link copied to clipboard

The role definition ID.

Link copied to clipboard

Schedule info of the role eligibility schedule

Link copied to clipboard
val scope: Output<String>

The role eligibility schedule request scope.

Link copied to clipboard
val status: Output<String>

The status of the role eligibility schedule request.

Link copied to clipboard

The resultant role eligibility schedule id or the role eligibility schedule id being updated

Link copied to clipboard

The role eligibility schedule instance id being updated

Link copied to clipboard

Ticket Info of the role eligibility

Link copied to clipboard
val type: Output<String>

The role eligibility schedule request type.

Link copied to clipboard
val urn: Output<String>