Domain Service
Domain service. Uses Azure REST API version 2022-12-01. In version 2.x of the Azure Native provider, it used API version 2022-12-01.
Example Usage
Create Domain Service
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var domainService = new AzureNative.Aad.DomainService("domainService", new()
{
DomainName = "TestDomainService.com",
DomainSecuritySettings = new AzureNative.Aad.Inputs.DomainSecuritySettingsArgs
{
NtlmV1 = AzureNative.Aad.NtlmV1.Enabled,
SyncNtlmPasswords = AzureNative.Aad.SyncNtlmPasswords.Enabled,
TlsV1 = AzureNative.Aad.TlsV1.Disabled,
},
DomainServiceName = "TestDomainService.com",
FilteredSync = AzureNative.Aad.FilteredSync.Enabled,
LdapsSettings = new AzureNative.Aad.Inputs.LdapsSettingsArgs
{
ExternalAccess = AzureNative.Aad.ExternalAccess.Enabled,
Ldaps = AzureNative.Aad.Ldaps.Enabled,
PfxCertificate = "MIIDPDCCAiSgAwIBAgIQQUI9P6tq2p9OFIJa7DLNvTANBgkqhkiG9w0BAQsFADAgMR4w...",
PfxCertificatePassword = "<pfxCertificatePassword>",
},
NotificationSettings = new AzureNative.Aad.Inputs.NotificationSettingsArgs
{
AdditionalRecipients = new[]
{
"jicha@microsoft.com",
"caalmont@microsoft.com",
},
NotifyDcAdmins = AzureNative.Aad.NotifyDcAdmins.Enabled,
NotifyGlobalAdmins = AzureNative.Aad.NotifyGlobalAdmins.Enabled,
},
ReplicaSets = new[]
{
new AzureNative.Aad.Inputs.ReplicaSetArgs
{
Location = "West US",
SubnetId = "/subscriptions/1639790a-76a2-4ac4-98d9-8562f5dfcb4d/resourceGroups/TestNetworkResourceGroup/providers/Microsoft.Network/virtualNetworks/TestVnetWUS/subnets/TestSubnetWUS",
},
},
ResourceGroupName = "TestResourceGroup",
});
});
package main
import (
aad "github.com/pulumi/pulumi-azure-native-sdk/aad/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := aad.NewDomainService(ctx, "domainService", &aad.DomainServiceArgs{
DomainName: pulumi.String("TestDomainService.com"),
DomainSecuritySettings: &aad.DomainSecuritySettingsArgs{
NtlmV1: pulumi.String(aad.NtlmV1Enabled),
SyncNtlmPasswords: pulumi.String(aad.SyncNtlmPasswordsEnabled),
TlsV1: pulumi.String(aad.TlsV1Disabled),
},
DomainServiceName: pulumi.String("TestDomainService.com"),
FilteredSync: pulumi.String(aad.FilteredSyncEnabled),
LdapsSettings: &aad.LdapsSettingsArgs{
ExternalAccess: pulumi.String(aad.ExternalAccessEnabled),
Ldaps: pulumi.String(aad.LdapsEnabled),
PfxCertificate: pulumi.String("MIIDPDCCAiSgAwIBAgIQQUI9P6tq2p9OFIJa7DLNvTANBgkqhkiG9w0BAQsFADAgMR4w..."),
PfxCertificatePassword: pulumi.String("<pfxCertificatePassword>"),
},
NotificationSettings: &aad.NotificationSettingsArgs{
AdditionalRecipients: pulumi.StringArray{
pulumi.String("jicha@microsoft.com"),
pulumi.String("caalmont@microsoft.com"),
},
NotifyDcAdmins: pulumi.String(aad.NotifyDcAdminsEnabled),
NotifyGlobalAdmins: pulumi.String(aad.NotifyGlobalAdminsEnabled),
},
ReplicaSets: aad.ReplicaSetArray{
&aad.ReplicaSetArgs{
Location: pulumi.String("West US"),
SubnetId: pulumi.String("/subscriptions/1639790a-76a2-4ac4-98d9-8562f5dfcb4d/resourceGroups/TestNetworkResourceGroup/providers/Microsoft.Network/virtualNetworks/TestVnetWUS/subnets/TestSubnetWUS"),
},
},
ResourceGroupName: pulumi.String("TestResourceGroup"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.aad.DomainService;
import com.pulumi.azurenative.aad.DomainServiceArgs;
import com.pulumi.azurenative.aad.inputs.DomainSecuritySettingsArgs;
import com.pulumi.azurenative.aad.inputs.LdapsSettingsArgs;
import com.pulumi.azurenative.aad.inputs.NotificationSettingsArgs;
import com.pulumi.azurenative.aad.inputs.ReplicaSetArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var domainService = new DomainService("domainService", DomainServiceArgs.builder()
.domainName("TestDomainService.com")
.domainSecuritySettings(DomainSecuritySettingsArgs.builder()
.ntlmV1("Enabled")
.syncNtlmPasswords("Enabled")
.tlsV1("Disabled")
.build())
.domainServiceName("TestDomainService.com")
.filteredSync("Enabled")
.ldapsSettings(LdapsSettingsArgs.builder()
.externalAccess("Enabled")
.ldaps("Enabled")
.pfxCertificate("MIIDPDCCAiSgAwIBAgIQQUI9P6tq2p9OFIJa7DLNvTANBgkqhkiG9w0BAQsFADAgMR4w...")
.pfxCertificatePassword("<pfxCertificatePassword>")
.build())
.notificationSettings(NotificationSettingsArgs.builder()
.additionalRecipients(
"jicha@microsoft.com",
"caalmont@microsoft.com")
.notifyDcAdmins("Enabled")
.notifyGlobalAdmins("Enabled")
.build())
.replicaSets(ReplicaSetArgs.builder()
.location("West US")
.subnetId("/subscriptions/1639790a-76a2-4ac4-98d9-8562f5dfcb4d/resourceGroups/TestNetworkResourceGroup/providers/Microsoft.Network/virtualNetworks/TestVnetWUS/subnets/TestSubnetWUS")
.build())
.resourceGroupName("TestResourceGroup")
.build());
}
}
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:aad:DomainService TestDomainService.com /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.AAD/domainServices/{domainServiceName}
Properties
The Azure API version of the resource.
Configuration diagnostics data containing latest execution from client.
Deployment Id
Domain Configuration Type
The name of the Azure domain that the user would like to deploy Domain Services to.
DomainSecurity Settings
Enabled or Disabled flag to turn on Group-based filtered sync
Secure LDAP Settings
Migration Properties
Notification Settings
the current deployment or provisioning state, which only appears in the response.
List of ReplicaSets
Resource Forest Settings
The unique sync application id of the Azure AD Domain Services deployment.
The system meta data relating to this resource.