GremlinResourceGremlinRoleDefinitionArgs

data class GremlinResourceGremlinRoleDefinitionArgs(val accountName: Output<String>? = null, val assignableScopes: Output<List<String>>? = null, val id: Output<String>? = null, val permissions: Output<List<PermissionArgs>>? = null, val resourceGroupName: Output<String>? = null, val roleDefinitionId: Output<String>? = null, val roleName: Output<String>? = null, val type: Output<RoleDefinitionType>? = null) : ConvertibleToJava<GremlinResourceGremlinRoleDefinitionArgs>

Parameters to create and update an Azure Cosmos DB Gremlin Role Definition. Uses Azure REST API version 2025-05-01-preview.

Example Usage

CosmosDBGremlinRoleDefinitionCreateUpdate

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var gremlinResourceGremlinRoleDefinition = new AzureNative.CosmosDB.GremlinResourceGremlinRoleDefinition("gremlinResourceGremlinRoleDefinition", new()
{
AccountName = "myAccountName",
AssignableScopes = new[]
{
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales",
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases",
},
Permissions = new[]
{
new AzureNative.CosmosDB.Inputs.PermissionArgs
{
DataActions = new[]
{
"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/containers/entities/create",
"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/containers/entities/read",
},
NotDataActions = new() { },
},
},
ResourceGroupName = "myResourceGroupName",
RoleDefinitionId = "myRoleDefinitionId",
RoleName = "myRoleName",
Type = AzureNative.CosmosDB.RoleDefinitionType.CustomRole,
});
});
package main
import (
cosmosdb "github.com/pulumi/pulumi-azure-native-sdk/cosmosdb/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cosmosdb.NewGremlinResourceGremlinRoleDefinition(ctx, "gremlinResourceGremlinRoleDefinition", &cosmosdb.GremlinResourceGremlinRoleDefinitionArgs{
AccountName: pulumi.String("myAccountName"),
AssignableScopes: pulumi.StringArray{
pulumi.String("/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales"),
pulumi.String("/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases"),
},
Permissions: cosmosdb.PermissionArray{
&cosmosdb.PermissionArgs{
DataActions: pulumi.StringArray{
pulumi.String("Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/containers/entities/create"),
pulumi.String("Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/containers/entities/read"),
},
NotDataActions: pulumi.StringArray{},
},
},
ResourceGroupName: pulumi.String("myResourceGroupName"),
RoleDefinitionId: pulumi.String("myRoleDefinitionId"),
RoleName: pulumi.String("myRoleName"),
Type: cosmosdb.RoleDefinitionTypeCustomRole,
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cosmosdb.GremlinResourceGremlinRoleDefinition;
import com.pulumi.azurenative.cosmosdb.GremlinResourceGremlinRoleDefinitionArgs;
import com.pulumi.azurenative.cosmosdb.inputs.PermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var gremlinResourceGremlinRoleDefinition = new GremlinResourceGremlinRoleDefinition("gremlinResourceGremlinRoleDefinition", GremlinResourceGremlinRoleDefinitionArgs.builder()
.accountName("myAccountName")
.assignableScopes(
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales",
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases")
.permissions(PermissionArgs.builder()
.dataActions(
"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/containers/entities/create",
"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/containers/entities/read")
.notDataActions()
.build())
.resourceGroupName("myResourceGroupName")
.roleDefinitionId("myRoleDefinitionId")
.roleName("myRoleName")
.type("CustomRole")
.build());
}
}

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:cosmosdb:GremlinResourceGremlinRoleDefinition myRoleDefinitionId /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.DocumentDB/databaseAccounts/{accountName}/gremlinRoleDefinitions/{roleDefinitionId}

Constructors

Link copied to clipboard
constructor(accountName: Output<String>? = null, assignableScopes: Output<List<String>>? = null, id: Output<String>? = null, permissions: Output<List<PermissionArgs>>? = null, resourceGroupName: Output<String>? = null, roleDefinitionId: Output<String>? = null, roleName: Output<String>? = null, type: Output<RoleDefinitionType>? = null)

Properties

Link copied to clipboard
val accountName: Output<String>? = null

Cosmos DB database account name.

Link copied to clipboard
val assignableScopes: Output<List<String>>? = null

A set of fully qualified Scopes at or below which Gremlin Role Assignments may be created using this Role Definition. This will allow application of this Role Definition on the entire database account or any underlying Database / Collection. Must have at least one element. Scopes higher than Database account are not enforceable as assignable Scopes. Note that resources referenced in assignable Scopes need not exist.

Link copied to clipboard
val id: Output<String>? = null

The path id for the Role Definition.

Link copied to clipboard
val permissions: Output<List<PermissionArgs>>? = null

The set of operations allowed through this Role Definition.

Link copied to clipboard
val resourceGroupName: Output<String>? = null

The name of the resource group. The name is case insensitive.

Link copied to clipboard
val roleDefinitionId: Output<String>? = null

The GUID for the Role Definition.

Link copied to clipboard
val roleName: Output<String>? = null

A user-friendly name for the Role Definition. Must be unique for the database account.

Link copied to clipboard
val type: Output<RoleDefinitionType>? = null

Indicates whether the Role Definition was built-in or user created.

Functions

Link copied to clipboard
open override fun toJava(): GremlinResourceGremlinRoleDefinitionArgs