@alicloud/cloudsso20210515 1.4.2 → 1.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/client.d.ts +1323 -711
- package/dist/client.js +1401 -716
- package/dist/client.js.map +1 -1
- package/package.json +3 -3
- package/src/client.ts +1423 -711
package/dist/client.js
CHANGED
|
@@ -27,11 +27,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
|
27
27
|
};
|
|
28
28
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
29
29
|
exports.DeleteSCIMServerCredentialResponseBody = exports.DeleteSCIMServerCredentialRequest = exports.DeleteMFADeviceForUserResponse = exports.DeleteMFADeviceForUserResponseBody = exports.DeleteMFADeviceForUserRequest = exports.DeleteGroupResponse = exports.DeleteGroupResponseBody = exports.DeleteGroupRequest = exports.DeleteDirectoryResponse = exports.DeleteDirectoryResponseBody = exports.DeleteDirectoryRequest = exports.DeleteAccessConfigurationResponse = exports.DeleteAccessConfigurationResponseBody = exports.DeleteAccessConfigurationRequest = exports.DeleteAccessAssignmentResponse = exports.DeleteAccessAssignmentResponseBody = exports.DeleteAccessAssignmentRequest = exports.CreateUserProvisioningResponse = exports.CreateUserProvisioningResponseBody = exports.CreateUserProvisioningRequest = exports.CreateUserResponse = exports.CreateUserResponseBody = exports.CreateUserRequest = exports.CreateSCIMServerCredentialResponse = exports.CreateSCIMServerCredentialResponseBody = exports.CreateSCIMServerCredentialRequest = exports.CreateGroupResponse = exports.CreateGroupResponseBody = exports.CreateGroupRequest = exports.CreateDirectoryResponse = exports.CreateDirectoryResponseBody = exports.CreateDirectoryRequest = exports.CreateAccessConfigurationResponse = exports.CreateAccessConfigurationResponseBody = exports.CreateAccessConfigurationRequest = exports.CreateAccessAssignmentResponse = exports.CreateAccessAssignmentResponseBody = exports.CreateAccessAssignmentRequest = exports.ClearExternalSAMLIdentityProviderResponse = exports.ClearExternalSAMLIdentityProviderResponseBody = exports.ClearExternalSAMLIdentityProviderRequest = exports.AddUserToGroupResponse = exports.AddUserToGroupResponseBody = exports.AddUserToGroupRequest = exports.AddPermissionPolicyToAccessConfigurationResponse = exports.AddPermissionPolicyToAccessConfigurationResponseBody = exports.AddPermissionPolicyToAccessConfigurationRequest = exports.AddExternalSAMLIdPCertificateResponse = exports.AddExternalSAMLIdPCertificateResponseBody = exports.AddExternalSAMLIdPCertificateRequest = void 0;
|
|
30
|
-
exports.
|
|
31
|
-
exports.
|
|
32
|
-
exports.
|
|
33
|
-
exports.
|
|
34
|
-
exports.
|
|
30
|
+
exports.GetMFAAuthenticationSettingsResponse = exports.GetMFAAuthenticationSettingsResponseBody = exports.GetMFAAuthenticationSettingsRequest = exports.GetMFAAuthenticationSettingInfoResponse = exports.GetMFAAuthenticationSettingInfoResponseBody = exports.GetMFAAuthenticationSettingInfoRequest = exports.GetLoginPreferenceResponse = exports.GetLoginPreferenceResponseBody = exports.GetLoginPreferenceRequest = exports.GetGroupResponse = exports.GetGroupResponseBody = exports.GetGroupRequest = exports.GetExternalSAMLIdentityProviderResponse = exports.GetExternalSAMLIdentityProviderResponseBody = exports.GetExternalSAMLIdentityProviderRequest = exports.GetDirectoryStatisticsResponse = exports.GetDirectoryStatisticsResponseBody = exports.GetDirectoryStatisticsRequest = exports.GetDirectorySAMLServiceProviderInfoResponse = exports.GetDirectorySAMLServiceProviderInfoResponseBody = exports.GetDirectorySAMLServiceProviderInfoRequest = exports.GetDirectoryResponse = exports.GetDirectoryResponseBody = exports.GetDirectoryRequest = exports.GetAccessConfigurationResponse = exports.GetAccessConfigurationResponseBody = exports.GetAccessConfigurationRequest = exports.EnableServiceResponse = exports.EnableServiceResponseBody = exports.EnableDelegateAccountResponse = exports.EnableDelegateAccountResponseBody = exports.EnableDelegateAccountRequest = exports.DisableServiceResponse = exports.DisableServiceResponseBody = exports.DisableDelegateAccountResponse = exports.DisableDelegateAccountResponseBody = exports.DisableDelegateAccountRequest = exports.DeprovisionAccessConfigurationResponse = exports.DeprovisionAccessConfigurationResponseBody = exports.DeprovisionAccessConfigurationRequest = exports.DeleteUserProvisioningEventResponse = exports.DeleteUserProvisioningEventResponseBody = exports.DeleteUserProvisioningEventRequest = exports.DeleteUserProvisioningResponse = exports.DeleteUserProvisioningResponseBody = exports.DeleteUserProvisioningRequest = exports.DeleteUserResponse = exports.DeleteUserResponseBody = exports.DeleteUserRequest = exports.DeleteSCIMServerCredentialResponse = void 0;
|
|
31
|
+
exports.ListAccessConfigurationsResponseBody = exports.ListAccessConfigurationsRequest = exports.ListAccessConfigurationProvisioningsResponse = exports.ListAccessConfigurationProvisioningsResponseBody = exports.ListAccessConfigurationProvisioningsRequest = exports.ListAccessAssignmentsResponse = exports.ListAccessAssignmentsResponseBody = exports.ListAccessAssignmentsRequest = exports.GetUserProvisioningStatisticsResponse = exports.GetUserProvisioningStatisticsResponseBody = exports.GetUserProvisioningStatisticsRequest = exports.GetUserProvisioningRdAccountStatisticsResponse = exports.GetUserProvisioningRdAccountStatisticsResponseBody = exports.GetUserProvisioningRdAccountStatisticsRequest = exports.GetUserProvisioningEventResponse = exports.GetUserProvisioningEventResponseBody = exports.GetUserProvisioningEventRequest = exports.GetUserProvisioningConfigurationResponse = exports.GetUserProvisioningConfigurationResponseBody = exports.GetUserProvisioningConfigurationRequest = exports.GetUserProvisioningResponse = exports.GetUserProvisioningResponseBody = exports.GetUserProvisioningRequest = exports.GetUserMFAAuthenticationSettingsResponse = exports.GetUserMFAAuthenticationSettingsResponseBody = exports.GetUserMFAAuthenticationSettingsRequest = exports.GetUserIdResponse = exports.GetUserIdResponseBody = exports.GetUserIdShrinkRequest = exports.GetUserIdRequest = exports.GetUserResponse = exports.GetUserResponseBody = exports.GetUserRequest = exports.GetTaskStatusResponse = exports.GetTaskStatusResponseBody = exports.GetTaskStatusRequest = exports.GetTaskResponse = exports.GetTaskResponseBody = exports.GetTaskRequest = exports.GetServiceStatusResponse = exports.GetServiceStatusResponseBody = exports.GetSCIMSynchronizationStatusResponse = exports.GetSCIMSynchronizationStatusResponseBody = exports.GetSCIMSynchronizationStatusRequest = exports.GetPasswordPolicyResponse = exports.GetPasswordPolicyResponseBody = exports.GetPasswordPolicyRequest = exports.GetMFAAuthenticationStatusResponse = exports.GetMFAAuthenticationStatusResponseBody = exports.GetMFAAuthenticationStatusRequest = void 0;
|
|
32
|
+
exports.ResetUserPasswordResponseBody = exports.ResetUserPasswordRequest = exports.RemoveUserFromGroupResponse = exports.RemoveUserFromGroupResponseBody = exports.RemoveUserFromGroupRequest = exports.RemovePermissionPolicyFromAccessConfigurationResponse = exports.RemovePermissionPolicyFromAccessConfigurationResponseBody = exports.RemovePermissionPolicyFromAccessConfigurationRequest = exports.RemoveExternalSAMLIdPCertificateResponse = exports.RemoveExternalSAMLIdPCertificateResponseBody = exports.RemoveExternalSAMLIdPCertificateRequest = exports.ProvisionAccessConfigurationResponse = exports.ProvisionAccessConfigurationResponseBody = exports.ProvisionAccessConfigurationRequest = exports.ListUsersResponse = exports.ListUsersResponseBody = exports.ListUsersRequest = exports.ListUserProvisioningsResponse = exports.ListUserProvisioningsResponseBody = exports.ListUserProvisioningsRequest = exports.ListUserProvisioningEventsResponse = exports.ListUserProvisioningEventsResponseBody = exports.ListUserProvisioningEventsRequest = exports.ListTasksResponse = exports.ListTasksResponseBody = exports.ListTasksRequest = exports.ListSCIMServerCredentialsResponse = exports.ListSCIMServerCredentialsResponseBody = exports.ListSCIMServerCredentialsRequest = exports.ListPermissionPoliciesInAccessConfigurationResponse = exports.ListPermissionPoliciesInAccessConfigurationResponseBody = exports.ListPermissionPoliciesInAccessConfigurationRequest = exports.ListMFADevicesForUserResponse = exports.ListMFADevicesForUserResponseBody = exports.ListMFADevicesForUserRequest = exports.ListJoinedGroupsForUserResponse = exports.ListJoinedGroupsForUserResponseBody = exports.ListJoinedGroupsForUserRequest = exports.ListGroupsResponse = exports.ListGroupsResponseBody = exports.ListGroupsRequest = exports.ListGroupMembersResponse = exports.ListGroupMembersResponseBody = exports.ListGroupMembersRequest = exports.ListExternalSAMLIdPCertificatesResponse = exports.ListExternalSAMLIdPCertificatesResponseBody = exports.ListExternalSAMLIdPCertificatesRequest = exports.ListDirectoriesResponse = exports.ListDirectoriesResponseBody = exports.ListAccessConfigurationsResponse = void 0;
|
|
33
|
+
exports.UpdateUserStatusRequest = exports.UpdateUserProvisioningConfigurationResponse = exports.UpdateUserProvisioningConfigurationResponseBody = exports.UpdateUserProvisioningConfigurationRequest = exports.UpdateUserProvisioningResponse = exports.UpdateUserProvisioningResponseBody = exports.UpdateUserProvisioningRequest = exports.UpdateUserMFAAuthenticationSettingsResponse = exports.UpdateUserMFAAuthenticationSettingsResponseBody = exports.UpdateUserMFAAuthenticationSettingsRequest = exports.UpdateUserResponse = exports.UpdateUserResponseBody = exports.UpdateUserRequest = exports.UpdateSCIMServerCredentialStatusResponse = exports.UpdateSCIMServerCredentialStatusResponseBody = exports.UpdateSCIMServerCredentialStatusRequest = exports.UpdateMFAAuthenticationSettingsResponse = exports.UpdateMFAAuthenticationSettingsResponseBody = exports.UpdateMFAAuthenticationSettingsRequest = exports.UpdateInlinePolicyForAccessConfigurationResponse = exports.UpdateInlinePolicyForAccessConfigurationResponseBody = exports.UpdateInlinePolicyForAccessConfigurationRequest = exports.UpdateGroupResponse = exports.UpdateGroupResponseBody = exports.UpdateGroupRequest = exports.UpdateDirectoryResponse = exports.UpdateDirectoryResponseBody = exports.UpdateDirectoryRequest = exports.UpdateAccessConfigurationResponse = exports.UpdateAccessConfigurationResponseBody = exports.UpdateAccessConfigurationRequest = exports.SetSCIMSynchronizationStatusResponse = exports.SetSCIMSynchronizationStatusResponseBody = exports.SetSCIMSynchronizationStatusRequest = exports.SetPasswordPolicyResponse = exports.SetPasswordPolicyResponseBody = exports.SetPasswordPolicyRequest = exports.SetMFAAuthenticationStatusResponse = exports.SetMFAAuthenticationStatusResponseBody = exports.SetMFAAuthenticationStatusRequest = exports.SetLoginPreferenceResponse = exports.SetLoginPreferenceResponseBody = exports.SetLoginPreferenceRequest = exports.SetExternalSAMLIdentityProviderResponse = exports.SetExternalSAMLIdentityProviderResponseBody = exports.SetExternalSAMLIdentityProviderRequest = exports.RetryUserProvisioningEventResponse = exports.RetryUserProvisioningEventResponseBody = exports.RetryUserProvisioningEventRequest = exports.ResetUserPasswordResponse = void 0;
|
|
34
|
+
exports.UpdateAccessConfigurationResponseBodyAccessConfiguration = exports.SetExternalSAMLIdentityProviderResponseBodySAMLIdentityProviderConfiguration = exports.ProvisionAccessConfigurationResponseBodyTasks = exports.ListUsersResponseBodyUsers = exports.ListUsersResponseBodyUsersExternalId = exports.ListUserProvisioningsResponseBodyUserProvisionings = exports.ListUserProvisioningEventsResponseBodyUserProvisioningEvents = exports.ListTasksResponseBodyTasks = exports.ListSCIMServerCredentialsResponseBodySCIMServerCredentials = exports.ListPermissionPoliciesInAccessConfigurationResponseBodyPermissionPolicies = exports.ListMFADevicesForUserResponseBodyMFADevices = exports.ListJoinedGroupsForUserResponseBodyJoinedGroups = exports.ListGroupsResponseBodyGroups = exports.ListGroupMembersResponseBodyGroupMembers = exports.ListExternalSAMLIdPCertificatesResponseBodySAMLIdPCertificates = exports.ListDirectoriesResponseBodyDirectories = exports.ListAccessConfigurationsResponseBodyAccessConfigurations = exports.ListAccessConfigurationProvisioningsResponseBodyAccessConfigurationProvisionings = exports.ListAccessAssignmentsResponseBodyAccessAssignments = exports.GetUserProvisioningStatisticsResponseBodyUserProvisioningStatistics = exports.GetUserProvisioningRdAccountStatisticsResponseBodyUserProvisioningStatistics = exports.GetUserProvisioningEventResponseBodyUserProvisioningEvent = exports.GetUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration = exports.GetUserProvisioningResponseBodyUserProvisioning = exports.GetUserIdRequestExternalId = exports.GetUserResponseBodyUser = exports.GetUserResponseBodyUserExternalId = exports.GetTaskStatusResponseBodyTaskStatus = exports.GetTaskResponseBodyTask = exports.GetServiceStatusResponseBodyServiceStatus = exports.GetPasswordPolicyResponseBodyPasswordPolicy = exports.GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo = exports.GetLoginPreferenceResponseBodyLoginPreference = exports.GetGroupResponseBodyGroup = exports.GetExternalSAMLIdentityProviderResponseBodySAMLIdentityProviderConfiguration = exports.GetDirectoryStatisticsResponseBodyDirectoryStatistics = exports.GetDirectorySAMLServiceProviderInfoResponseBodySAMLServiceProvider = exports.GetDirectoryResponseBodyDirectory = exports.GetAccessConfigurationResponseBodyAccessConfiguration = exports.DeprovisionAccessConfigurationResponseBodyTasks = exports.DeleteAccessAssignmentResponseBodyTask = exports.CreateUserProvisioningResponseBodyUserProvisioning = exports.CreateUserResponseBodyUser = exports.CreateSCIMServerCredentialResponseBodySCIMServerCredential = exports.CreateGroupResponseBodyGroup = exports.CreateDirectoryResponseBodyDirectory = exports.CreateAccessConfigurationResponseBodyAccessConfiguration = exports.CreateAccessAssignmentResponseBodyTask = exports.UpdateUserStatusResponse = exports.UpdateUserStatusResponseBody = void 0;
|
|
35
|
+
exports.UpdateUserProvisioningConfigurationResponseBodyUserProvisioningConfiguration = exports.UpdateUserProvisioningResponseBodyUserProvisioning = exports.UpdateUserResponseBodyUser = exports.UpdateSCIMServerCredentialStatusResponseBodySCIMServerCredential = exports.UpdateGroupResponseBodyGroup = exports.UpdateDirectoryResponseBodyDirectory = void 0;
|
|
35
36
|
// This file is auto-generated, don't edit it
|
|
36
37
|
/**
|
|
37
38
|
*
|
|
@@ -1257,6 +1258,58 @@ class DeprovisionAccessConfigurationResponse extends $tea.Model {
|
|
|
1257
1258
|
}
|
|
1258
1259
|
}
|
|
1259
1260
|
exports.DeprovisionAccessConfigurationResponse = DeprovisionAccessConfigurationResponse;
|
|
1261
|
+
class DisableDelegateAccountRequest extends $tea.Model {
|
|
1262
|
+
static names() {
|
|
1263
|
+
return {
|
|
1264
|
+
accountId: 'AccountId',
|
|
1265
|
+
};
|
|
1266
|
+
}
|
|
1267
|
+
static types() {
|
|
1268
|
+
return {
|
|
1269
|
+
accountId: 'string',
|
|
1270
|
+
};
|
|
1271
|
+
}
|
|
1272
|
+
constructor(map) {
|
|
1273
|
+
super(map);
|
|
1274
|
+
}
|
|
1275
|
+
}
|
|
1276
|
+
exports.DisableDelegateAccountRequest = DisableDelegateAccountRequest;
|
|
1277
|
+
class DisableDelegateAccountResponseBody extends $tea.Model {
|
|
1278
|
+
static names() {
|
|
1279
|
+
return {
|
|
1280
|
+
requestId: 'RequestId',
|
|
1281
|
+
};
|
|
1282
|
+
}
|
|
1283
|
+
static types() {
|
|
1284
|
+
return {
|
|
1285
|
+
requestId: 'string',
|
|
1286
|
+
};
|
|
1287
|
+
}
|
|
1288
|
+
constructor(map) {
|
|
1289
|
+
super(map);
|
|
1290
|
+
}
|
|
1291
|
+
}
|
|
1292
|
+
exports.DisableDelegateAccountResponseBody = DisableDelegateAccountResponseBody;
|
|
1293
|
+
class DisableDelegateAccountResponse extends $tea.Model {
|
|
1294
|
+
static names() {
|
|
1295
|
+
return {
|
|
1296
|
+
headers: 'headers',
|
|
1297
|
+
statusCode: 'statusCode',
|
|
1298
|
+
body: 'body',
|
|
1299
|
+
};
|
|
1300
|
+
}
|
|
1301
|
+
static types() {
|
|
1302
|
+
return {
|
|
1303
|
+
headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
|
|
1304
|
+
statusCode: 'number',
|
|
1305
|
+
body: DisableDelegateAccountResponseBody,
|
|
1306
|
+
};
|
|
1307
|
+
}
|
|
1308
|
+
constructor(map) {
|
|
1309
|
+
super(map);
|
|
1310
|
+
}
|
|
1311
|
+
}
|
|
1312
|
+
exports.DisableDelegateAccountResponse = DisableDelegateAccountResponse;
|
|
1260
1313
|
class DisableServiceResponseBody extends $tea.Model {
|
|
1261
1314
|
static names() {
|
|
1262
1315
|
return {
|
|
@@ -1293,6 +1346,58 @@ class DisableServiceResponse extends $tea.Model {
|
|
|
1293
1346
|
}
|
|
1294
1347
|
}
|
|
1295
1348
|
exports.DisableServiceResponse = DisableServiceResponse;
|
|
1349
|
+
class EnableDelegateAccountRequest extends $tea.Model {
|
|
1350
|
+
static names() {
|
|
1351
|
+
return {
|
|
1352
|
+
accountId: 'AccountId',
|
|
1353
|
+
};
|
|
1354
|
+
}
|
|
1355
|
+
static types() {
|
|
1356
|
+
return {
|
|
1357
|
+
accountId: 'string',
|
|
1358
|
+
};
|
|
1359
|
+
}
|
|
1360
|
+
constructor(map) {
|
|
1361
|
+
super(map);
|
|
1362
|
+
}
|
|
1363
|
+
}
|
|
1364
|
+
exports.EnableDelegateAccountRequest = EnableDelegateAccountRequest;
|
|
1365
|
+
class EnableDelegateAccountResponseBody extends $tea.Model {
|
|
1366
|
+
static names() {
|
|
1367
|
+
return {
|
|
1368
|
+
requestId: 'RequestId',
|
|
1369
|
+
};
|
|
1370
|
+
}
|
|
1371
|
+
static types() {
|
|
1372
|
+
return {
|
|
1373
|
+
requestId: 'string',
|
|
1374
|
+
};
|
|
1375
|
+
}
|
|
1376
|
+
constructor(map) {
|
|
1377
|
+
super(map);
|
|
1378
|
+
}
|
|
1379
|
+
}
|
|
1380
|
+
exports.EnableDelegateAccountResponseBody = EnableDelegateAccountResponseBody;
|
|
1381
|
+
class EnableDelegateAccountResponse extends $tea.Model {
|
|
1382
|
+
static names() {
|
|
1383
|
+
return {
|
|
1384
|
+
headers: 'headers',
|
|
1385
|
+
statusCode: 'statusCode',
|
|
1386
|
+
body: 'body',
|
|
1387
|
+
};
|
|
1388
|
+
}
|
|
1389
|
+
static types() {
|
|
1390
|
+
return {
|
|
1391
|
+
headers: { 'type': 'map', 'keyType': 'string', 'valueType': 'string' },
|
|
1392
|
+
statusCode: 'number',
|
|
1393
|
+
body: EnableDelegateAccountResponseBody,
|
|
1394
|
+
};
|
|
1395
|
+
}
|
|
1396
|
+
constructor(map) {
|
|
1397
|
+
super(map);
|
|
1398
|
+
}
|
|
1399
|
+
}
|
|
1400
|
+
exports.EnableDelegateAccountResponse = EnableDelegateAccountResponse;
|
|
1296
1401
|
class EnableServiceResponseBody extends $tea.Model {
|
|
1297
1402
|
static names() {
|
|
1298
1403
|
return {
|
|
@@ -6588,12 +6693,14 @@ class Client extends openapi_client_1.default {
|
|
|
6588
6693
|
return endpoint_util_1.default.getEndpointRules(productId, regionId, endpointRule, network, suffix);
|
|
6589
6694
|
}
|
|
6590
6695
|
/**
|
|
6591
|
-
|
|
6592
|
-
|
|
6593
|
-
|
|
6594
|
-
|
|
6595
|
-
|
|
6596
|
-
|
|
6696
|
+
* @summary Adds a Security Assertion Markup Language (SAML) signing certificate.
|
|
6697
|
+
*
|
|
6698
|
+
* @description You can add up to two SAML signing certificates.
|
|
6699
|
+
* This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
|
|
6700
|
+
*
|
|
6701
|
+
* @param request AddExternalSAMLIdPCertificateRequest
|
|
6702
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
6703
|
+
* @return AddExternalSAMLIdPCertificateResponse
|
|
6597
6704
|
*/
|
|
6598
6705
|
async addExternalSAMLIdPCertificateWithOptions(request, runtime) {
|
|
6599
6706
|
tea_util_1.default.validateModel(request);
|
|
@@ -6621,22 +6728,26 @@ class Client extends openapi_client_1.default {
|
|
|
6621
6728
|
return $tea.cast(await this.callApi(params, req, runtime), new AddExternalSAMLIdPCertificateResponse({}));
|
|
6622
6729
|
}
|
|
6623
6730
|
/**
|
|
6624
|
-
|
|
6625
|
-
|
|
6626
|
-
|
|
6627
|
-
|
|
6628
|
-
|
|
6731
|
+
* @summary Adds a Security Assertion Markup Language (SAML) signing certificate.
|
|
6732
|
+
*
|
|
6733
|
+
* @description You can add up to two SAML signing certificates.
|
|
6734
|
+
* This topic provides an example on how to add a SAML signing certificate to the directory `d-00fc2p61****`.
|
|
6735
|
+
*
|
|
6736
|
+
* @param request AddExternalSAMLIdPCertificateRequest
|
|
6737
|
+
* @return AddExternalSAMLIdPCertificateResponse
|
|
6629
6738
|
*/
|
|
6630
6739
|
async addExternalSAMLIdPCertificate(request) {
|
|
6631
6740
|
let runtime = new $Util.RuntimeOptions({});
|
|
6632
6741
|
return await this.addExternalSAMLIdPCertificateWithOptions(request, runtime);
|
|
6633
6742
|
}
|
|
6634
6743
|
/**
|
|
6635
|
-
|
|
6636
|
-
|
|
6637
|
-
|
|
6638
|
-
|
|
6639
|
-
|
|
6744
|
+
* @summary Adds a policy to an access configuration.
|
|
6745
|
+
*
|
|
6746
|
+
* @description This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
6747
|
+
*
|
|
6748
|
+
* @param request AddPermissionPolicyToAccessConfigurationRequest
|
|
6749
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
6750
|
+
* @return AddPermissionPolicyToAccessConfigurationResponse
|
|
6640
6751
|
*/
|
|
6641
6752
|
async addPermissionPolicyToAccessConfigurationWithOptions(request, runtime) {
|
|
6642
6753
|
tea_util_1.default.validateModel(request);
|
|
@@ -6673,22 +6784,26 @@ class Client extends openapi_client_1.default {
|
|
|
6673
6784
|
return $tea.cast(await this.callApi(params, req, runtime), new AddPermissionPolicyToAccessConfigurationResponse({}));
|
|
6674
6785
|
}
|
|
6675
6786
|
/**
|
|
6676
|
-
|
|
6677
|
-
|
|
6678
|
-
|
|
6679
|
-
|
|
6787
|
+
* @summary Adds a policy to an access configuration.
|
|
6788
|
+
*
|
|
6789
|
+
* @description This topic provides an example on how to add the system policy `AliyunECSFullAccess` to the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
6790
|
+
*
|
|
6791
|
+
* @param request AddPermissionPolicyToAccessConfigurationRequest
|
|
6792
|
+
* @return AddPermissionPolicyToAccessConfigurationResponse
|
|
6680
6793
|
*/
|
|
6681
6794
|
async addPermissionPolicyToAccessConfiguration(request) {
|
|
6682
6795
|
let runtime = new $Util.RuntimeOptions({});
|
|
6683
6796
|
return await this.addPermissionPolicyToAccessConfigurationWithOptions(request, runtime);
|
|
6684
6797
|
}
|
|
6685
6798
|
/**
|
|
6686
|
-
|
|
6687
|
-
|
|
6688
|
-
|
|
6689
|
-
|
|
6690
|
-
|
|
6691
|
-
|
|
6799
|
+
* @summary Adds a user to a group.
|
|
6800
|
+
*
|
|
6801
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
|
|
6802
|
+
* This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
|
|
6803
|
+
*
|
|
6804
|
+
* @param request AddUserToGroupRequest
|
|
6805
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
6806
|
+
* @return AddUserToGroupResponse
|
|
6692
6807
|
*/
|
|
6693
6808
|
async addUserToGroupWithOptions(request, runtime) {
|
|
6694
6809
|
tea_util_1.default.validateModel(request);
|
|
@@ -6719,23 +6834,27 @@ class Client extends openapi_client_1.default {
|
|
|
6719
6834
|
return $tea.cast(await this.callApi(params, req, runtime), new AddUserToGroupResponse({}));
|
|
6720
6835
|
}
|
|
6721
6836
|
/**
|
|
6722
|
-
|
|
6723
|
-
|
|
6724
|
-
|
|
6725
|
-
|
|
6726
|
-
|
|
6837
|
+
* @summary Adds a user to a group.
|
|
6838
|
+
*
|
|
6839
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot add a user to a group that is synchronized by using SCIM.
|
|
6840
|
+
* This topic provides an example of how to add the user `u-00q8wbq42wiltcrk****` to the group `g-00jqzghi2n3o5hkh****`.
|
|
6841
|
+
*
|
|
6842
|
+
* @param request AddUserToGroupRequest
|
|
6843
|
+
* @return AddUserToGroupResponse
|
|
6727
6844
|
*/
|
|
6728
6845
|
async addUserToGroup(request) {
|
|
6729
6846
|
let runtime = new $Util.RuntimeOptions({});
|
|
6730
6847
|
return await this.addUserToGroupWithOptions(request, runtime);
|
|
6731
6848
|
}
|
|
6732
6849
|
/**
|
|
6733
|
-
|
|
6734
|
-
|
|
6735
|
-
|
|
6736
|
-
|
|
6737
|
-
|
|
6738
|
-
|
|
6850
|
+
* @summary Clears the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
|
|
6851
|
+
*
|
|
6852
|
+
* @description If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
|
|
6853
|
+
* This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
|
|
6854
|
+
*
|
|
6855
|
+
* @param request ClearExternalSAMLIdentityProviderRequest
|
|
6856
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
6857
|
+
* @return ClearExternalSAMLIdentityProviderResponse
|
|
6739
6858
|
*/
|
|
6740
6859
|
async clearExternalSAMLIdentityProviderWithOptions(request, runtime) {
|
|
6741
6860
|
tea_util_1.default.validateModel(request);
|
|
@@ -6760,24 +6879,28 @@ class Client extends openapi_client_1.default {
|
|
|
6760
6879
|
return $tea.cast(await this.callApi(params, req, runtime), new ClearExternalSAMLIdentityProviderResponse({}));
|
|
6761
6880
|
}
|
|
6762
6881
|
/**
|
|
6763
|
-
|
|
6764
|
-
|
|
6765
|
-
|
|
6766
|
-
|
|
6767
|
-
|
|
6882
|
+
* @summary Clears the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
|
|
6883
|
+
*
|
|
6884
|
+
* @description If single sign-on (SSO) logon is disabled, you can clear the configurations of a SAML IdP. If SSO logon is enabled, you cannot clear the configurations.
|
|
6885
|
+
* This topic provides an example on how to clear the configurations of the SAML IdP within the directory `d-00fc2p61****`.
|
|
6886
|
+
*
|
|
6887
|
+
* @param request ClearExternalSAMLIdentityProviderRequest
|
|
6888
|
+
* @return ClearExternalSAMLIdentityProviderResponse
|
|
6768
6889
|
*/
|
|
6769
6890
|
async clearExternalSAMLIdentityProvider(request) {
|
|
6770
6891
|
let runtime = new $Util.RuntimeOptions({});
|
|
6771
6892
|
return await this.clearExternalSAMLIdentityProviderWithOptions(request, runtime);
|
|
6772
6893
|
}
|
|
6773
6894
|
/**
|
|
6774
|
-
|
|
6775
|
-
|
|
6776
|
-
|
|
6777
|
-
|
|
6778
|
-
|
|
6779
|
-
|
|
6780
|
-
|
|
6895
|
+
* @summary Assigns access permissions on an account in your resource directory to a user or a group by using an access configuration.
|
|
6896
|
+
*
|
|
6897
|
+
* @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
6898
|
+
* For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](https://help.aliyun.com/document_detail/266726.html).
|
|
6899
|
+
* This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
|
|
6900
|
+
*
|
|
6901
|
+
* @param request CreateAccessAssignmentRequest
|
|
6902
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
6903
|
+
* @return CreateAccessAssignmentResponse
|
|
6781
6904
|
*/
|
|
6782
6905
|
async createAccessAssignmentWithOptions(request, runtime) {
|
|
6783
6906
|
tea_util_1.default.validateModel(request);
|
|
@@ -6817,24 +6940,28 @@ class Client extends openapi_client_1.default {
|
|
|
6817
6940
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateAccessAssignmentResponse({}));
|
|
6818
6941
|
}
|
|
6819
6942
|
/**
|
|
6820
|
-
|
|
6821
|
-
|
|
6822
|
-
|
|
6823
|
-
|
|
6824
|
-
|
|
6825
|
-
|
|
6943
|
+
* @summary Assigns access permissions on an account in your resource directory to a user or a group by using an access configuration.
|
|
6944
|
+
*
|
|
6945
|
+
* @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
6946
|
+
* For more information about how to assign permissions on an account in your resource directory, see [Overview of multi-account authorization](https://help.aliyun.com/document_detail/266726.html).
|
|
6947
|
+
* This topic provides an example on how to assign access permissions on the account `114240524784****` in your resource directory to the CloudSSO user `u-00q8wbq42wiltcrk****` by using the access configuration `ac-00jhtfl8thteu6uj****`. After the call is successful, the CloudSSO user can access resources within the account in the resource directory.
|
|
6948
|
+
*
|
|
6949
|
+
* @param request CreateAccessAssignmentRequest
|
|
6950
|
+
* @return CreateAccessAssignmentResponse
|
|
6826
6951
|
*/
|
|
6827
6952
|
async createAccessAssignment(request) {
|
|
6828
6953
|
let runtime = new $Util.RuntimeOptions({});
|
|
6829
6954
|
return await this.createAccessAssignmentWithOptions(request, runtime);
|
|
6830
6955
|
}
|
|
6831
6956
|
/**
|
|
6832
|
-
|
|
6833
|
-
|
|
6834
|
-
|
|
6835
|
-
|
|
6836
|
-
|
|
6837
|
-
|
|
6957
|
+
* @summary Creates an access configuration.
|
|
6958
|
+
*
|
|
6959
|
+
* @description For more information about access configurations, see [Overview of access configurations](https://help.aliyun.com/document_detail/266737.html).
|
|
6960
|
+
* This topic provides an example on how to create an access configuration named `ECS-Admin`.
|
|
6961
|
+
*
|
|
6962
|
+
* @param request CreateAccessConfigurationRequest
|
|
6963
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
6964
|
+
* @return CreateAccessConfigurationResponse
|
|
6838
6965
|
*/
|
|
6839
6966
|
async createAccessConfigurationWithOptions(request, runtime) {
|
|
6840
6967
|
tea_util_1.default.validateModel(request);
|
|
@@ -6871,27 +6998,31 @@ class Client extends openapi_client_1.default {
|
|
|
6871
6998
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateAccessConfigurationResponse({}));
|
|
6872
6999
|
}
|
|
6873
7000
|
/**
|
|
6874
|
-
|
|
6875
|
-
|
|
6876
|
-
|
|
6877
|
-
|
|
6878
|
-
|
|
7001
|
+
* @summary Creates an access configuration.
|
|
7002
|
+
*
|
|
7003
|
+
* @description For more information about access configurations, see [Overview of access configurations](https://help.aliyun.com/document_detail/266737.html).
|
|
7004
|
+
* This topic provides an example on how to create an access configuration named `ECS-Admin`.
|
|
7005
|
+
*
|
|
7006
|
+
* @param request CreateAccessConfigurationRequest
|
|
7007
|
+
* @return CreateAccessConfigurationResponse
|
|
6879
7008
|
*/
|
|
6880
7009
|
async createAccessConfiguration(request) {
|
|
6881
7010
|
let runtime = new $Util.RuntimeOptions({});
|
|
6882
7011
|
return await this.createAccessConfigurationWithOptions(request, runtime);
|
|
6883
7012
|
}
|
|
6884
7013
|
/**
|
|
6885
|
-
|
|
6886
|
-
|
|
6887
|
-
|
|
6888
|
-
|
|
6889
|
-
|
|
6890
|
-
|
|
6891
|
-
|
|
6892
|
-
|
|
6893
|
-
|
|
6894
|
-
|
|
7014
|
+
* @summary Creates a directory.
|
|
7015
|
+
*
|
|
7016
|
+
* @description A directory is a CloudSSO instance. Before you can use CloudSSO, you must create a directory. The directory is used to manage all CloudSSO resources.
|
|
7017
|
+
* To create a directory, you must select a region. Alibaba Cloud stores data in the directory only in the region that you select. However, you can deploy Alibaba Cloud resources including Elastic Compute Service (ECS) instances and ApsaraDB RDS instances in other regions. You can also use your cloud account for logons and access the Alibaba Cloud resources in other regions. You can select a region to create a directory based on your security compliance requirements and the geographic location of specific users. If you do not have strict security compliance requirements, we recommend that you select a region that is the closest to the geographical location of the specific users. This way, access to cloud resources is accelerated. You can create the CloudSSO directory in the China (Shanghai), China (Hong Kong), US (Silicon Valley), or Germany (Frankfurt) region.
|
|
7018
|
+
* This topic provides an example on how to create a directory named `example` in the China (Shanghai) region.
|
|
7019
|
+
* ## Limits
|
|
7020
|
+
* - You can create only one directory for a management account.
|
|
7021
|
+
* - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
|
|
7022
|
+
*
|
|
7023
|
+
* @param request CreateDirectoryRequest
|
|
7024
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7025
|
+
* @return CreateDirectoryResponse
|
|
6895
7026
|
*/
|
|
6896
7027
|
async createDirectoryWithOptions(request, runtime) {
|
|
6897
7028
|
tea_util_1.default.validateModel(request);
|
|
@@ -6916,26 +7047,30 @@ class Client extends openapi_client_1.default {
|
|
|
6916
7047
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateDirectoryResponse({}));
|
|
6917
7048
|
}
|
|
6918
7049
|
/**
|
|
6919
|
-
|
|
6920
|
-
|
|
6921
|
-
|
|
6922
|
-
|
|
6923
|
-
|
|
6924
|
-
|
|
6925
|
-
|
|
6926
|
-
|
|
6927
|
-
|
|
7050
|
+
* @summary Creates a directory.
|
|
7051
|
+
*
|
|
7052
|
+
* @description A directory is a CloudSSO instance. Before you can use CloudSSO, you must create a directory. The directory is used to manage all CloudSSO resources.
|
|
7053
|
+
* To create a directory, you must select a region. Alibaba Cloud stores data in the directory only in the region that you select. However, you can deploy Alibaba Cloud resources including Elastic Compute Service (ECS) instances and ApsaraDB RDS instances in other regions. You can also use your cloud account for logons and access the Alibaba Cloud resources in other regions. You can select a region to create a directory based on your security compliance requirements and the geographic location of specific users. If you do not have strict security compliance requirements, we recommend that you select a region that is the closest to the geographical location of the specific users. This way, access to cloud resources is accelerated. You can create the CloudSSO directory in the China (Shanghai), China (Hong Kong), US (Silicon Valley), or Germany (Frankfurt) region.
|
|
7054
|
+
* This topic provides an example on how to create a directory named `example` in the China (Shanghai) region.
|
|
7055
|
+
* ## Limits
|
|
7056
|
+
* - You can create only one directory for a management account.
|
|
7057
|
+
* - If you want to change the region of a directory, you must delete the directory and then create a directory in a different region.
|
|
7058
|
+
*
|
|
7059
|
+
* @param request CreateDirectoryRequest
|
|
7060
|
+
* @return CreateDirectoryResponse
|
|
6928
7061
|
*/
|
|
6929
7062
|
async createDirectory(request) {
|
|
6930
7063
|
let runtime = new $Util.RuntimeOptions({});
|
|
6931
7064
|
return await this.createDirectoryWithOptions(request, runtime);
|
|
6932
7065
|
}
|
|
6933
7066
|
/**
|
|
6934
|
-
|
|
6935
|
-
|
|
6936
|
-
|
|
6937
|
-
|
|
6938
|
-
|
|
7067
|
+
* @summary Creates a group.
|
|
7068
|
+
*
|
|
7069
|
+
* @description This topic provides an example on how to create a group named `TestGroup`.
|
|
7070
|
+
*
|
|
7071
|
+
* @param request CreateGroupRequest
|
|
7072
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7073
|
+
* @return CreateGroupResponse
|
|
6939
7074
|
*/
|
|
6940
7075
|
async createGroupWithOptions(request, runtime) {
|
|
6941
7076
|
tea_util_1.default.validateModel(request);
|
|
@@ -6966,22 +7101,26 @@ class Client extends openapi_client_1.default {
|
|
|
6966
7101
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateGroupResponse({}));
|
|
6967
7102
|
}
|
|
6968
7103
|
/**
|
|
6969
|
-
|
|
6970
|
-
|
|
6971
|
-
|
|
6972
|
-
|
|
7104
|
+
* @summary Creates a group.
|
|
7105
|
+
*
|
|
7106
|
+
* @description This topic provides an example on how to create a group named `TestGroup`.
|
|
7107
|
+
*
|
|
7108
|
+
* @param request CreateGroupRequest
|
|
7109
|
+
* @return CreateGroupResponse
|
|
6973
7110
|
*/
|
|
6974
7111
|
async createGroup(request) {
|
|
6975
7112
|
let runtime = new $Util.RuntimeOptions({});
|
|
6976
7113
|
return await this.createGroupWithOptions(request, runtime);
|
|
6977
7114
|
}
|
|
6978
7115
|
/**
|
|
6979
|
-
|
|
6980
|
-
|
|
6981
|
-
|
|
6982
|
-
|
|
6983
|
-
|
|
6984
|
-
|
|
7116
|
+
* @summary Creates a Cross-domain Identity Management (SCIM) credential.
|
|
7117
|
+
*
|
|
7118
|
+
* @description SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
|
|
7119
|
+
* This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
|
|
7120
|
+
*
|
|
7121
|
+
* @param request CreateSCIMServerCredentialRequest
|
|
7122
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7123
|
+
* @return CreateSCIMServerCredentialResponse
|
|
6985
7124
|
*/
|
|
6986
7125
|
async createSCIMServerCredentialWithOptions(request, runtime) {
|
|
6987
7126
|
tea_util_1.default.validateModel(request);
|
|
@@ -7006,22 +7145,26 @@ class Client extends openapi_client_1.default {
|
|
|
7006
7145
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateSCIMServerCredentialResponse({}));
|
|
7007
7146
|
}
|
|
7008
7147
|
/**
|
|
7009
|
-
|
|
7010
|
-
|
|
7011
|
-
|
|
7012
|
-
|
|
7013
|
-
|
|
7148
|
+
* @summary Creates a Cross-domain Identity Management (SCIM) credential.
|
|
7149
|
+
*
|
|
7150
|
+
* @description SCIM credentials are required for SCIM synchronization. You can create up to two SCIM credentials.
|
|
7151
|
+
* This topic provides an example on how to create a SCIM credential within the directory `d-00fc2p61****`.
|
|
7152
|
+
*
|
|
7153
|
+
* @param request CreateSCIMServerCredentialRequest
|
|
7154
|
+
* @return CreateSCIMServerCredentialResponse
|
|
7014
7155
|
*/
|
|
7015
7156
|
async createSCIMServerCredential(request) {
|
|
7016
7157
|
let runtime = new $Util.RuntimeOptions({});
|
|
7017
7158
|
return await this.createSCIMServerCredentialWithOptions(request, runtime);
|
|
7018
7159
|
}
|
|
7019
7160
|
/**
|
|
7020
|
-
|
|
7021
|
-
|
|
7022
|
-
|
|
7023
|
-
|
|
7024
|
-
|
|
7161
|
+
* @summary Creates a user.
|
|
7162
|
+
*
|
|
7163
|
+
* @description This topic provides an example on how to create a user named `Alice`.
|
|
7164
|
+
*
|
|
7165
|
+
* @param request CreateUserRequest
|
|
7166
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7167
|
+
* @return CreateUserResponse
|
|
7025
7168
|
*/
|
|
7026
7169
|
async createUserWithOptions(request, runtime) {
|
|
7027
7170
|
tea_util_1.default.validateModel(request);
|
|
@@ -7067,15 +7210,24 @@ class Client extends openapi_client_1.default {
|
|
|
7067
7210
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateUserResponse({}));
|
|
7068
7211
|
}
|
|
7069
7212
|
/**
|
|
7070
|
-
|
|
7071
|
-
|
|
7072
|
-
|
|
7073
|
-
|
|
7213
|
+
* @summary Creates a user.
|
|
7214
|
+
*
|
|
7215
|
+
* @description This topic provides an example on how to create a user named `Alice`.
|
|
7216
|
+
*
|
|
7217
|
+
* @param request CreateUserRequest
|
|
7218
|
+
* @return CreateUserResponse
|
|
7074
7219
|
*/
|
|
7075
7220
|
async createUser(request) {
|
|
7076
7221
|
let runtime = new $Util.RuntimeOptions({});
|
|
7077
7222
|
return await this.createUserWithOptions(request, runtime);
|
|
7078
7223
|
}
|
|
7224
|
+
/**
|
|
7225
|
+
* @summary Creates a Resource Access Management (RAM) user provisioning.
|
|
7226
|
+
*
|
|
7227
|
+
* @param request CreateUserProvisioningRequest
|
|
7228
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7229
|
+
* @return CreateUserProvisioningResponse
|
|
7230
|
+
*/
|
|
7079
7231
|
async createUserProvisioningWithOptions(request, runtime) {
|
|
7080
7232
|
tea_util_1.default.validateModel(request);
|
|
7081
7233
|
let query = {};
|
|
@@ -7119,17 +7271,25 @@ class Client extends openapi_client_1.default {
|
|
|
7119
7271
|
});
|
|
7120
7272
|
return $tea.cast(await this.callApi(params, req, runtime), new CreateUserProvisioningResponse({}));
|
|
7121
7273
|
}
|
|
7274
|
+
/**
|
|
7275
|
+
* @summary Creates a Resource Access Management (RAM) user provisioning.
|
|
7276
|
+
*
|
|
7277
|
+
* @param request CreateUserProvisioningRequest
|
|
7278
|
+
* @return CreateUserProvisioningResponse
|
|
7279
|
+
*/
|
|
7122
7280
|
async createUserProvisioning(request) {
|
|
7123
7281
|
let runtime = new $Util.RuntimeOptions({});
|
|
7124
7282
|
return await this.createUserProvisioningWithOptions(request, runtime);
|
|
7125
7283
|
}
|
|
7126
7284
|
/**
|
|
7127
|
-
|
|
7128
|
-
|
|
7129
|
-
|
|
7130
|
-
|
|
7131
|
-
|
|
7132
|
-
|
|
7285
|
+
* @summary Removes the access permissions on an account in a resource directory.
|
|
7286
|
+
*
|
|
7287
|
+
* @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
7288
|
+
* This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
7289
|
+
*
|
|
7290
|
+
* @param request DeleteAccessAssignmentRequest
|
|
7291
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7292
|
+
* @return DeleteAccessAssignmentResponse
|
|
7133
7293
|
*/
|
|
7134
7294
|
async deleteAccessAssignmentWithOptions(request, runtime) {
|
|
7135
7295
|
tea_util_1.default.validateModel(request);
|
|
@@ -7172,24 +7332,28 @@ class Client extends openapi_client_1.default {
|
|
|
7172
7332
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteAccessAssignmentResponse({}));
|
|
7173
7333
|
}
|
|
7174
7334
|
/**
|
|
7175
|
-
|
|
7176
|
-
|
|
7177
|
-
|
|
7178
|
-
|
|
7179
|
-
|
|
7335
|
+
* @summary Removes the access permissions on an account in a resource directory.
|
|
7336
|
+
*
|
|
7337
|
+
* @description When you call this operation, an asynchronous task is created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
7338
|
+
* This topic provides an example on how to remove the access permissions on the account `114240524784****` in the resource directory from the CloudSSO user `u-00q8wbq42wiltcrk****`. The access permissions are assigned by using the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
7339
|
+
*
|
|
7340
|
+
* @param request DeleteAccessAssignmentRequest
|
|
7341
|
+
* @return DeleteAccessAssignmentResponse
|
|
7180
7342
|
*/
|
|
7181
7343
|
async deleteAccessAssignment(request) {
|
|
7182
7344
|
let runtime = new $Util.RuntimeOptions({});
|
|
7183
7345
|
return await this.deleteAccessAssignmentWithOptions(request, runtime);
|
|
7184
7346
|
}
|
|
7185
7347
|
/**
|
|
7186
|
-
|
|
7187
|
-
|
|
7188
|
-
|
|
7189
|
-
|
|
7190
|
-
|
|
7191
|
-
|
|
7192
|
-
|
|
7348
|
+
* @summary Deletes an access configuration.
|
|
7349
|
+
*
|
|
7350
|
+
* @description This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
|
|
7351
|
+
* ## Prerequisites
|
|
7352
|
+
* The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](https://help.aliyun.com/document_detail/338352.html).
|
|
7353
|
+
*
|
|
7354
|
+
* @param request DeleteAccessConfigurationRequest
|
|
7355
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7356
|
+
* @return DeleteAccessConfigurationResponse
|
|
7193
7357
|
*/
|
|
7194
7358
|
async deleteAccessConfigurationWithOptions(request, runtime) {
|
|
7195
7359
|
tea_util_1.default.validateModel(request);
|
|
@@ -7220,31 +7384,35 @@ class Client extends openapi_client_1.default {
|
|
|
7220
7384
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteAccessConfigurationResponse({}));
|
|
7221
7385
|
}
|
|
7222
7386
|
/**
|
|
7223
|
-
|
|
7224
|
-
|
|
7225
|
-
|
|
7226
|
-
|
|
7227
|
-
|
|
7228
|
-
|
|
7387
|
+
* @summary Deletes an access configuration.
|
|
7388
|
+
*
|
|
7389
|
+
* @description This topic provides an example on how to delete the access configuration whose ID is `ac-001j9mcm3k7335bc****`.
|
|
7390
|
+
* ## Prerequisites
|
|
7391
|
+
* The access configuration that you want to delete is de-provisioned from the accounts in your resource directory. For more information, see [DeprovisionAccessConfiguration](https://help.aliyun.com/document_detail/338352.html).
|
|
7392
|
+
*
|
|
7393
|
+
* @param request DeleteAccessConfigurationRequest
|
|
7394
|
+
* @return DeleteAccessConfigurationResponse
|
|
7229
7395
|
*/
|
|
7230
7396
|
async deleteAccessConfiguration(request) {
|
|
7231
7397
|
let runtime = new $Util.RuntimeOptions({});
|
|
7232
7398
|
return await this.deleteAccessConfigurationWithOptions(request, runtime);
|
|
7233
7399
|
}
|
|
7234
7400
|
/**
|
|
7235
|
-
|
|
7236
|
-
|
|
7237
|
-
|
|
7238
|
-
|
|
7239
|
-
|
|
7240
|
-
|
|
7241
|
-
|
|
7242
|
-
|
|
7243
|
-
|
|
7244
|
-
|
|
7245
|
-
|
|
7246
|
-
|
|
7247
|
-
|
|
7401
|
+
* @summary Deletes a directory.
|
|
7402
|
+
*
|
|
7403
|
+
* @description This topic provides an example on how to delete a directory whose ID is `d-00fc2p61****`.
|
|
7404
|
+
* ## Prerequisites
|
|
7405
|
+
* No resources are contained in the directory that you want to delete.
|
|
7406
|
+
* * Access permissions on the accounts in your resource directory are removed from all users and groups. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
|
|
7407
|
+
* * Users are deleted. For more information, see [DeleteUser](https://help.aliyun.com/document_detail/341671.html).
|
|
7408
|
+
* * Groups are deleted. For more information, see [DeleteGroup](https://help.aliyun.com/document_detail/341821.html).
|
|
7409
|
+
* * Access configurations are deleted. For more information, see [DeleteAccessConfiguration](https://help.aliyun.com/document_detail/336907.html).
|
|
7410
|
+
* * System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](https://help.aliyun.com/document_detail/341842.html).
|
|
7411
|
+
* * SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](https://help.aliyun.com/document_detail/341573.html).
|
|
7412
|
+
*
|
|
7413
|
+
* @param request DeleteDirectoryRequest
|
|
7414
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7415
|
+
* @return DeleteDirectoryResponse
|
|
7248
7416
|
*/
|
|
7249
7417
|
async deleteDirectoryWithOptions(request, runtime) {
|
|
7250
7418
|
tea_util_1.default.validateModel(request);
|
|
@@ -7269,33 +7437,37 @@ class Client extends openapi_client_1.default {
|
|
|
7269
7437
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteDirectoryResponse({}));
|
|
7270
7438
|
}
|
|
7271
7439
|
/**
|
|
7272
|
-
|
|
7273
|
-
|
|
7274
|
-
|
|
7275
|
-
|
|
7276
|
-
|
|
7277
|
-
|
|
7278
|
-
|
|
7279
|
-
|
|
7280
|
-
|
|
7281
|
-
|
|
7282
|
-
|
|
7283
|
-
|
|
7440
|
+
* @summary Deletes a directory.
|
|
7441
|
+
*
|
|
7442
|
+
* @description This topic provides an example on how to delete a directory whose ID is `d-00fc2p61****`.
|
|
7443
|
+
* ## Prerequisites
|
|
7444
|
+
* No resources are contained in the directory that you want to delete.
|
|
7445
|
+
* * Access permissions on the accounts in your resource directory are removed from all users and groups. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
|
|
7446
|
+
* * Users are deleted. For more information, see [DeleteUser](https://help.aliyun.com/document_detail/341671.html).
|
|
7447
|
+
* * Groups are deleted. For more information, see [DeleteGroup](https://help.aliyun.com/document_detail/341821.html).
|
|
7448
|
+
* * Access configurations are deleted. For more information, see [DeleteAccessConfiguration](https://help.aliyun.com/document_detail/336907.html).
|
|
7449
|
+
* * System for Cross-domain Identity Management (SCIM) credentials are deleted. For more information, see [DeleteSCIMServerCredential](https://help.aliyun.com/document_detail/341842.html).
|
|
7450
|
+
* * SSO logon configurations are deleted. For more information, see [ClearExternalSAMLIdentityProvider](https://help.aliyun.com/document_detail/341573.html).
|
|
7451
|
+
*
|
|
7452
|
+
* @param request DeleteDirectoryRequest
|
|
7453
|
+
* @return DeleteDirectoryResponse
|
|
7284
7454
|
*/
|
|
7285
7455
|
async deleteDirectory(request) {
|
|
7286
7456
|
let runtime = new $Util.RuntimeOptions({});
|
|
7287
7457
|
return await this.deleteDirectoryWithOptions(request, runtime);
|
|
7288
7458
|
}
|
|
7289
7459
|
/**
|
|
7290
|
-
|
|
7291
|
-
|
|
7292
|
-
|
|
7293
|
-
|
|
7294
|
-
|
|
7295
|
-
|
|
7296
|
-
|
|
7297
|
-
|
|
7298
|
-
|
|
7460
|
+
* @summary Deletes a group.
|
|
7461
|
+
*
|
|
7462
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
|
|
7463
|
+
* ## Prerequisites
|
|
7464
|
+
* The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
|
|
7465
|
+
* * Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
|
|
7466
|
+
* * Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
|
|
7467
|
+
*
|
|
7468
|
+
* @param request DeleteGroupRequest
|
|
7469
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7470
|
+
* @return DeleteGroupResponse
|
|
7299
7471
|
*/
|
|
7300
7472
|
async deleteGroupWithOptions(request, runtime) {
|
|
7301
7473
|
tea_util_1.default.validateModel(request);
|
|
@@ -7323,25 +7495,29 @@ class Client extends openapi_client_1.default {
|
|
|
7323
7495
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteGroupResponse({}));
|
|
7324
7496
|
}
|
|
7325
7497
|
/**
|
|
7326
|
-
|
|
7327
|
-
|
|
7328
|
-
|
|
7329
|
-
|
|
7330
|
-
|
|
7331
|
-
|
|
7332
|
-
|
|
7333
|
-
|
|
7498
|
+
* @summary Deletes a group.
|
|
7499
|
+
*
|
|
7500
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a group that is synchronized by using SCIM.
|
|
7501
|
+
* ## Prerequisites
|
|
7502
|
+
* The group that you want to delete is not associated with the following resources. If the group is associated with the resources, the deletion fails.
|
|
7503
|
+
* * Users: You must remove users from the group. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
|
|
7504
|
+
* * Access permissions: You must remove the access permissions on the accounts in your resource directory from the group. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
|
|
7505
|
+
*
|
|
7506
|
+
* @param request DeleteGroupRequest
|
|
7507
|
+
* @return DeleteGroupResponse
|
|
7334
7508
|
*/
|
|
7335
7509
|
async deleteGroup(request) {
|
|
7336
7510
|
let runtime = new $Util.RuntimeOptions({});
|
|
7337
7511
|
return await this.deleteGroupWithOptions(request, runtime);
|
|
7338
7512
|
}
|
|
7339
7513
|
/**
|
|
7340
|
-
|
|
7341
|
-
|
|
7342
|
-
|
|
7343
|
-
|
|
7344
|
-
|
|
7514
|
+
* @summary Unbinds a multi-factor authentication (MFA) device from a user.
|
|
7515
|
+
*
|
|
7516
|
+
* @description This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
|
|
7517
|
+
*
|
|
7518
|
+
* @param request DeleteMFADeviceForUserRequest
|
|
7519
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7520
|
+
* @return DeleteMFADeviceForUserResponse
|
|
7345
7521
|
*/
|
|
7346
7522
|
async deleteMFADeviceForUserWithOptions(request, runtime) {
|
|
7347
7523
|
tea_util_1.default.validateModel(request);
|
|
@@ -7372,22 +7548,26 @@ class Client extends openapi_client_1.default {
|
|
|
7372
7548
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteMFADeviceForUserResponse({}));
|
|
7373
7549
|
}
|
|
7374
7550
|
/**
|
|
7375
|
-
|
|
7376
|
-
|
|
7377
|
-
|
|
7378
|
-
|
|
7551
|
+
* @summary Unbinds a multi-factor authentication (MFA) device from a user.
|
|
7552
|
+
*
|
|
7553
|
+
* @description This topic provides an example on how to unbind the MFA device `mfa-00ujhet8pycljj7j****` from the user `u-00q8wbq42wiltcrk****`.
|
|
7554
|
+
*
|
|
7555
|
+
* @param request DeleteMFADeviceForUserRequest
|
|
7556
|
+
* @return DeleteMFADeviceForUserResponse
|
|
7379
7557
|
*/
|
|
7380
7558
|
async deleteMFADeviceForUser(request) {
|
|
7381
7559
|
let runtime = new $Util.RuntimeOptions({});
|
|
7382
7560
|
return await this.deleteMFADeviceForUserWithOptions(request, runtime);
|
|
7383
7561
|
}
|
|
7384
7562
|
/**
|
|
7385
|
-
|
|
7386
|
-
|
|
7387
|
-
|
|
7388
|
-
|
|
7389
|
-
|
|
7390
|
-
|
|
7563
|
+
* @summary Deletes a Cross-domain Identity Management (SCIM) credential.
|
|
7564
|
+
*
|
|
7565
|
+
* @description After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
|
|
7566
|
+
* This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
|
|
7567
|
+
*
|
|
7568
|
+
* @param request DeleteSCIMServerCredentialRequest
|
|
7569
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7570
|
+
* @return DeleteSCIMServerCredentialResponse
|
|
7391
7571
|
*/
|
|
7392
7572
|
async deleteSCIMServerCredentialWithOptions(request, runtime) {
|
|
7393
7573
|
tea_util_1.default.validateModel(request);
|
|
@@ -7415,27 +7595,31 @@ class Client extends openapi_client_1.default {
|
|
|
7415
7595
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteSCIMServerCredentialResponse({}));
|
|
7416
7596
|
}
|
|
7417
7597
|
/**
|
|
7418
|
-
|
|
7419
|
-
|
|
7420
|
-
|
|
7421
|
-
|
|
7422
|
-
|
|
7598
|
+
* @summary Deletes a Cross-domain Identity Management (SCIM) credential.
|
|
7599
|
+
*
|
|
7600
|
+
* @description After a SCIM credential is deleted, the synchronization task that uses the SCIM credential fails.
|
|
7601
|
+
* This topic provides an example on how to delete the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`.
|
|
7602
|
+
*
|
|
7603
|
+
* @param request DeleteSCIMServerCredentialRequest
|
|
7604
|
+
* @return DeleteSCIMServerCredentialResponse
|
|
7423
7605
|
*/
|
|
7424
7606
|
async deleteSCIMServerCredential(request) {
|
|
7425
7607
|
let runtime = new $Util.RuntimeOptions({});
|
|
7426
7608
|
return await this.deleteSCIMServerCredentialWithOptions(request, runtime);
|
|
7427
7609
|
}
|
|
7428
7610
|
/**
|
|
7429
|
-
|
|
7430
|
-
|
|
7431
|
-
|
|
7432
|
-
|
|
7433
|
-
|
|
7434
|
-
|
|
7435
|
-
|
|
7436
|
-
|
|
7437
|
-
|
|
7438
|
-
|
|
7611
|
+
* @summary Deletes a user.
|
|
7612
|
+
*
|
|
7613
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
|
|
7614
|
+
* ## Prerequisites
|
|
7615
|
+
* The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
|
|
7616
|
+
* * Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](https://help.aliyun.com/document_detail/341675.html).
|
|
7617
|
+
* * Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
|
|
7618
|
+
* * Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
|
|
7619
|
+
*
|
|
7620
|
+
* @param request DeleteUserRequest
|
|
7621
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7622
|
+
* @return DeleteUserResponse
|
|
7439
7623
|
*/
|
|
7440
7624
|
async deleteUserWithOptions(request, runtime) {
|
|
7441
7625
|
tea_util_1.default.validateModel(request);
|
|
@@ -7463,20 +7647,29 @@ class Client extends openapi_client_1.default {
|
|
|
7463
7647
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteUserResponse({}));
|
|
7464
7648
|
}
|
|
7465
7649
|
/**
|
|
7466
|
-
|
|
7467
|
-
|
|
7468
|
-
|
|
7469
|
-
|
|
7470
|
-
|
|
7471
|
-
|
|
7472
|
-
|
|
7473
|
-
|
|
7474
|
-
|
|
7650
|
+
* @summary Deletes a user.
|
|
7651
|
+
*
|
|
7652
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot delete a user that is synchronized by using SCIM.
|
|
7653
|
+
* ## Prerequisites
|
|
7654
|
+
* The user that you want to delete is not associated with the following resources. If the user is associated with the resources, the deletion fails.
|
|
7655
|
+
* * Multi-factor authentication (MFA) devices: You must unbind the MFA devices from the user. For more information, see [DeleteMFADeviceForUser](https://help.aliyun.com/document_detail/341675.html).
|
|
7656
|
+
* * Access permissions: You must remove the access permissions on the accounts in your resource directory from the user. For more information, see [DeleteAccessAssignment](https://help.aliyun.com/document_detail/338350.html).
|
|
7657
|
+
* * Groups: You must remove the user from groups. For more information, see [RemoveUserFromGroup](https://help.aliyun.com/document_detail/335116.html).
|
|
7658
|
+
*
|
|
7659
|
+
* @param request DeleteUserRequest
|
|
7660
|
+
* @return DeleteUserResponse
|
|
7475
7661
|
*/
|
|
7476
7662
|
async deleteUser(request) {
|
|
7477
7663
|
let runtime = new $Util.RuntimeOptions({});
|
|
7478
7664
|
return await this.deleteUserWithOptions(request, runtime);
|
|
7479
7665
|
}
|
|
7666
|
+
/**
|
|
7667
|
+
* @summary Deletes a Resource Access Management (RAM) user provisioning.
|
|
7668
|
+
*
|
|
7669
|
+
* @param request DeleteUserProvisioningRequest
|
|
7670
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7671
|
+
* @return DeleteUserProvisioningResponse
|
|
7672
|
+
*/
|
|
7480
7673
|
async deleteUserProvisioningWithOptions(request, runtime) {
|
|
7481
7674
|
tea_util_1.default.validateModel(request);
|
|
7482
7675
|
let query = {};
|
|
@@ -7505,10 +7698,23 @@ class Client extends openapi_client_1.default {
|
|
|
7505
7698
|
});
|
|
7506
7699
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteUserProvisioningResponse({}));
|
|
7507
7700
|
}
|
|
7701
|
+
/**
|
|
7702
|
+
* @summary Deletes a Resource Access Management (RAM) user provisioning.
|
|
7703
|
+
*
|
|
7704
|
+
* @param request DeleteUserProvisioningRequest
|
|
7705
|
+
* @return DeleteUserProvisioningResponse
|
|
7706
|
+
*/
|
|
7508
7707
|
async deleteUserProvisioning(request) {
|
|
7509
7708
|
let runtime = new $Util.RuntimeOptions({});
|
|
7510
7709
|
return await this.deleteUserProvisioningWithOptions(request, runtime);
|
|
7511
7710
|
}
|
|
7711
|
+
/**
|
|
7712
|
+
* @summary Deletes a Resource Access Management (RAM) user provisioning event.
|
|
7713
|
+
*
|
|
7714
|
+
* @param request DeleteUserProvisioningEventRequest
|
|
7715
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7716
|
+
* @return DeleteUserProvisioningEventResponse
|
|
7717
|
+
*/
|
|
7512
7718
|
async deleteUserProvisioningEventWithOptions(request, runtime) {
|
|
7513
7719
|
tea_util_1.default.validateModel(request);
|
|
7514
7720
|
let query = {};
|
|
@@ -7537,17 +7743,25 @@ class Client extends openapi_client_1.default {
|
|
|
7537
7743
|
});
|
|
7538
7744
|
return $tea.cast(await this.callApi(params, req, runtime), new DeleteUserProvisioningEventResponse({}));
|
|
7539
7745
|
}
|
|
7746
|
+
/**
|
|
7747
|
+
* @summary Deletes a Resource Access Management (RAM) user provisioning event.
|
|
7748
|
+
*
|
|
7749
|
+
* @param request DeleteUserProvisioningEventRequest
|
|
7750
|
+
* @return DeleteUserProvisioningEventResponse
|
|
7751
|
+
*/
|
|
7540
7752
|
async deleteUserProvisioningEvent(request) {
|
|
7541
7753
|
let runtime = new $Util.RuntimeOptions({});
|
|
7542
7754
|
return await this.deleteUserProvisioningEventWithOptions(request, runtime);
|
|
7543
7755
|
}
|
|
7544
7756
|
/**
|
|
7545
|
-
|
|
7546
|
-
|
|
7547
|
-
|
|
7548
|
-
|
|
7549
|
-
|
|
7550
|
-
|
|
7757
|
+
* @summary De-provisions an access configuration from an account in your resource directory.
|
|
7758
|
+
*
|
|
7759
|
+
* @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
7760
|
+
* This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
|
|
7761
|
+
*
|
|
7762
|
+
* @param request DeprovisionAccessConfigurationRequest
|
|
7763
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7764
|
+
* @return DeprovisionAccessConfigurationResponse
|
|
7551
7765
|
*/
|
|
7552
7766
|
async deprovisionAccessConfigurationWithOptions(request, runtime) {
|
|
7553
7767
|
tea_util_1.default.validateModel(request);
|
|
@@ -7581,22 +7795,65 @@ class Client extends openapi_client_1.default {
|
|
|
7581
7795
|
return $tea.cast(await this.callApi(params, req, runtime), new DeprovisionAccessConfigurationResponse({}));
|
|
7582
7796
|
}
|
|
7583
7797
|
/**
|
|
7584
|
-
|
|
7585
|
-
|
|
7586
|
-
|
|
7587
|
-
|
|
7588
|
-
|
|
7798
|
+
* @summary De-provisions an access configuration from an account in your resource directory.
|
|
7799
|
+
*
|
|
7800
|
+
* @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
7801
|
+
* This topic provides an example on how to de-provision the access configuration `ac-00jhtfl8thteu6uj****` from the account `114240524784****` in your resource directory.
|
|
7802
|
+
*
|
|
7803
|
+
* @param request DeprovisionAccessConfigurationRequest
|
|
7804
|
+
* @return DeprovisionAccessConfigurationResponse
|
|
7589
7805
|
*/
|
|
7590
7806
|
async deprovisionAccessConfiguration(request) {
|
|
7591
7807
|
let runtime = new $Util.RuntimeOptions({});
|
|
7592
7808
|
return await this.deprovisionAccessConfigurationWithOptions(request, runtime);
|
|
7593
7809
|
}
|
|
7594
7810
|
/**
|
|
7595
|
-
|
|
7596
|
-
|
|
7597
|
-
|
|
7598
|
-
|
|
7599
|
-
|
|
7811
|
+
* @summary DisableDelegateAccount
|
|
7812
|
+
*
|
|
7813
|
+
* @param request DisableDelegateAccountRequest
|
|
7814
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7815
|
+
* @return DisableDelegateAccountResponse
|
|
7816
|
+
*/
|
|
7817
|
+
async disableDelegateAccountWithOptions(request, runtime) {
|
|
7818
|
+
tea_util_1.default.validateModel(request);
|
|
7819
|
+
let query = {};
|
|
7820
|
+
if (!tea_util_1.default.isUnset(request.accountId)) {
|
|
7821
|
+
query["AccountId"] = request.accountId;
|
|
7822
|
+
}
|
|
7823
|
+
let req = new $OpenApi.OpenApiRequest({
|
|
7824
|
+
query: openapi_util_1.default.query(query),
|
|
7825
|
+
});
|
|
7826
|
+
let params = new $OpenApi.Params({
|
|
7827
|
+
action: "DisableDelegateAccount",
|
|
7828
|
+
version: "2021-05-15",
|
|
7829
|
+
protocol: "HTTPS",
|
|
7830
|
+
pathname: "/",
|
|
7831
|
+
method: "POST",
|
|
7832
|
+
authType: "AK",
|
|
7833
|
+
style: "RPC",
|
|
7834
|
+
reqBodyType: "formData",
|
|
7835
|
+
bodyType: "json",
|
|
7836
|
+
});
|
|
7837
|
+
return $tea.cast(await this.callApi(params, req, runtime), new DisableDelegateAccountResponse({}));
|
|
7838
|
+
}
|
|
7839
|
+
/**
|
|
7840
|
+
* @summary DisableDelegateAccount
|
|
7841
|
+
*
|
|
7842
|
+
* @param request DisableDelegateAccountRequest
|
|
7843
|
+
* @return DisableDelegateAccountResponse
|
|
7844
|
+
*/
|
|
7845
|
+
async disableDelegateAccount(request) {
|
|
7846
|
+
let runtime = new $Util.RuntimeOptions({});
|
|
7847
|
+
return await this.disableDelegateAccountWithOptions(request, runtime);
|
|
7848
|
+
}
|
|
7849
|
+
/**
|
|
7850
|
+
* @summary Disables CloudSSO.
|
|
7851
|
+
*
|
|
7852
|
+
* @description If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
|
|
7853
|
+
*
|
|
7854
|
+
* @param request DisableServiceRequest
|
|
7855
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7856
|
+
* @return DisableServiceResponse
|
|
7600
7857
|
*/
|
|
7601
7858
|
async disableServiceWithOptions(runtime) {
|
|
7602
7859
|
let req = new $OpenApi.OpenApiRequest({});
|
|
@@ -7614,21 +7871,64 @@ class Client extends openapi_client_1.default {
|
|
|
7614
7871
|
return $tea.cast(await this.callApi(params, req, runtime), new DisableServiceResponse({}));
|
|
7615
7872
|
}
|
|
7616
7873
|
/**
|
|
7617
|
-
|
|
7618
|
-
|
|
7619
|
-
|
|
7874
|
+
* @summary Disables CloudSSO.
|
|
7875
|
+
*
|
|
7876
|
+
* @description If your CloudSSO has no directory, you can disable CloudSSO based on your business requirements. After you disable CloudSSO, you can enable it at any time.
|
|
7877
|
+
*
|
|
7878
|
+
* @return DisableServiceResponse
|
|
7620
7879
|
*/
|
|
7621
7880
|
async disableService() {
|
|
7622
7881
|
let runtime = new $Util.RuntimeOptions({});
|
|
7623
7882
|
return await this.disableServiceWithOptions(runtime);
|
|
7624
7883
|
}
|
|
7625
7884
|
/**
|
|
7626
|
-
|
|
7627
|
-
|
|
7628
|
-
|
|
7629
|
-
|
|
7630
|
-
|
|
7631
|
-
|
|
7885
|
+
* @summary EnableDelegateAccount
|
|
7886
|
+
*
|
|
7887
|
+
* @param request EnableDelegateAccountRequest
|
|
7888
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7889
|
+
* @return EnableDelegateAccountResponse
|
|
7890
|
+
*/
|
|
7891
|
+
async enableDelegateAccountWithOptions(request, runtime) {
|
|
7892
|
+
tea_util_1.default.validateModel(request);
|
|
7893
|
+
let query = {};
|
|
7894
|
+
if (!tea_util_1.default.isUnset(request.accountId)) {
|
|
7895
|
+
query["AccountId"] = request.accountId;
|
|
7896
|
+
}
|
|
7897
|
+
let req = new $OpenApi.OpenApiRequest({
|
|
7898
|
+
query: openapi_util_1.default.query(query),
|
|
7899
|
+
});
|
|
7900
|
+
let params = new $OpenApi.Params({
|
|
7901
|
+
action: "EnableDelegateAccount",
|
|
7902
|
+
version: "2021-05-15",
|
|
7903
|
+
protocol: "HTTPS",
|
|
7904
|
+
pathname: "/",
|
|
7905
|
+
method: "POST",
|
|
7906
|
+
authType: "AK",
|
|
7907
|
+
style: "RPC",
|
|
7908
|
+
reqBodyType: "formData",
|
|
7909
|
+
bodyType: "json",
|
|
7910
|
+
});
|
|
7911
|
+
return $tea.cast(await this.callApi(params, req, runtime), new EnableDelegateAccountResponse({}));
|
|
7912
|
+
}
|
|
7913
|
+
/**
|
|
7914
|
+
* @summary EnableDelegateAccount
|
|
7915
|
+
*
|
|
7916
|
+
* @param request EnableDelegateAccountRequest
|
|
7917
|
+
* @return EnableDelegateAccountResponse
|
|
7918
|
+
*/
|
|
7919
|
+
async enableDelegateAccount(request) {
|
|
7920
|
+
let runtime = new $Util.RuntimeOptions({});
|
|
7921
|
+
return await this.enableDelegateAccountWithOptions(request, runtime);
|
|
7922
|
+
}
|
|
7923
|
+
/**
|
|
7924
|
+
* @summary Enables CloudSSO.
|
|
7925
|
+
*
|
|
7926
|
+
* @description You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
|
|
7927
|
+
* If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
|
|
7928
|
+
*
|
|
7929
|
+
* @param request EnableServiceRequest
|
|
7930
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7931
|
+
* @return EnableServiceResponse
|
|
7632
7932
|
*/
|
|
7633
7933
|
async enableServiceWithOptions(runtime) {
|
|
7634
7934
|
let req = new $OpenApi.OpenApiRequest({});
|
|
@@ -7646,21 +7946,25 @@ class Client extends openapi_client_1.default {
|
|
|
7646
7946
|
return $tea.cast(await this.callApi(params, req, runtime), new EnableServiceResponse({}));
|
|
7647
7947
|
}
|
|
7648
7948
|
/**
|
|
7649
|
-
|
|
7650
|
-
|
|
7651
|
-
|
|
7652
|
-
|
|
7949
|
+
* @summary Enables CloudSSO.
|
|
7950
|
+
*
|
|
7951
|
+
* @description You can call this operation only if your account belongs to the management account that is used to enable a resource directory and has permissions to enable CloudSSO. For more information, see [Enable CloudSSO](https://help.aliyun.com/document_detail/262819.html).
|
|
7952
|
+
* If you call this operation, you agree to the [Alibaba Cloud International Website Product Terms of Service](https://www.alibabacloud.com/help/doc-detail/42416.htm).
|
|
7953
|
+
*
|
|
7954
|
+
* @return EnableServiceResponse
|
|
7653
7955
|
*/
|
|
7654
7956
|
async enableService() {
|
|
7655
7957
|
let runtime = new $Util.RuntimeOptions({});
|
|
7656
7958
|
return await this.enableServiceWithOptions(runtime);
|
|
7657
7959
|
}
|
|
7658
7960
|
/**
|
|
7659
|
-
|
|
7660
|
-
|
|
7661
|
-
|
|
7662
|
-
|
|
7663
|
-
|
|
7961
|
+
* @summary Queries information about an access configuration.
|
|
7962
|
+
*
|
|
7963
|
+
* @description This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
|
|
7964
|
+
*
|
|
7965
|
+
* @param request GetAccessConfigurationRequest
|
|
7966
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
7967
|
+
* @return GetAccessConfigurationResponse
|
|
7664
7968
|
*/
|
|
7665
7969
|
async getAccessConfigurationWithOptions(request, runtime) {
|
|
7666
7970
|
tea_util_1.default.validateModel(request);
|
|
@@ -7688,21 +7992,25 @@ class Client extends openapi_client_1.default {
|
|
|
7688
7992
|
return $tea.cast(await this.callApi(params, req, runtime), new GetAccessConfigurationResponse({}));
|
|
7689
7993
|
}
|
|
7690
7994
|
/**
|
|
7691
|
-
|
|
7692
|
-
|
|
7693
|
-
|
|
7694
|
-
|
|
7995
|
+
* @summary Queries information about an access configuration.
|
|
7996
|
+
*
|
|
7997
|
+
* @description This topic provides an example on how to query the information about the access configuration whose ID is `ac-00ccule7tadaijxc****`.
|
|
7998
|
+
*
|
|
7999
|
+
* @param request GetAccessConfigurationRequest
|
|
8000
|
+
* @return GetAccessConfigurationResponse
|
|
7695
8001
|
*/
|
|
7696
8002
|
async getAccessConfiguration(request) {
|
|
7697
8003
|
let runtime = new $Util.RuntimeOptions({});
|
|
7698
8004
|
return await this.getAccessConfigurationWithOptions(request, runtime);
|
|
7699
8005
|
}
|
|
7700
8006
|
/**
|
|
7701
|
-
|
|
7702
|
-
|
|
7703
|
-
|
|
7704
|
-
|
|
7705
|
-
|
|
8007
|
+
* @summary Queries information about a directory.
|
|
8008
|
+
*
|
|
8009
|
+
* @description This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
|
|
8010
|
+
*
|
|
8011
|
+
* @param request GetDirectoryRequest
|
|
8012
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8013
|
+
* @return GetDirectoryResponse
|
|
7706
8014
|
*/
|
|
7707
8015
|
async getDirectoryWithOptions(request, runtime) {
|
|
7708
8016
|
tea_util_1.default.validateModel(request);
|
|
@@ -7727,22 +8035,26 @@ class Client extends openapi_client_1.default {
|
|
|
7727
8035
|
return $tea.cast(await this.callApi(params, req, runtime), new GetDirectoryResponse({}));
|
|
7728
8036
|
}
|
|
7729
8037
|
/**
|
|
7730
|
-
|
|
7731
|
-
|
|
7732
|
-
|
|
7733
|
-
|
|
8038
|
+
* @summary Queries information about a directory.
|
|
8039
|
+
*
|
|
8040
|
+
* @description This topic provides an example on how to query information about the directory whose ID is `d-00fc2p61****`.
|
|
8041
|
+
*
|
|
8042
|
+
* @param request GetDirectoryRequest
|
|
8043
|
+
* @return GetDirectoryResponse
|
|
7734
8044
|
*/
|
|
7735
8045
|
async getDirectory(request) {
|
|
7736
8046
|
let runtime = new $Util.RuntimeOptions({});
|
|
7737
8047
|
return await this.getDirectoryWithOptions(request, runtime);
|
|
7738
8048
|
}
|
|
7739
8049
|
/**
|
|
7740
|
-
|
|
7741
|
-
|
|
7742
|
-
|
|
7743
|
-
|
|
7744
|
-
|
|
7745
|
-
|
|
8050
|
+
* @summary Queries information about a Security Assertion Markup Language (SAML) service provider (SP).
|
|
8051
|
+
*
|
|
8052
|
+
* @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
|
|
8053
|
+
* This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
|
|
8054
|
+
*
|
|
8055
|
+
* @param request GetDirectorySAMLServiceProviderInfoRequest
|
|
8056
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8057
|
+
* @return GetDirectorySAMLServiceProviderInfoResponse
|
|
7746
8058
|
*/
|
|
7747
8059
|
async getDirectorySAMLServiceProviderInfoWithOptions(request, runtime) {
|
|
7748
8060
|
tea_util_1.default.validateModel(request);
|
|
@@ -7767,25 +8079,29 @@ class Client extends openapi_client_1.default {
|
|
|
7767
8079
|
return $tea.cast(await this.callApi(params, req, runtime), new GetDirectorySAMLServiceProviderInfoResponse({}));
|
|
7768
8080
|
}
|
|
7769
8081
|
/**
|
|
7770
|
-
|
|
7771
|
-
|
|
7772
|
-
|
|
7773
|
-
|
|
7774
|
-
|
|
8082
|
+
* @summary Queries information about a Security Assertion Markup Language (SAML) service provider (SP).
|
|
8083
|
+
*
|
|
8084
|
+
* @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an identity provider (IdP).
|
|
8085
|
+
* This topic provides an example on how to query the information about the SP within the directory `d-00fc2p61****`.
|
|
8086
|
+
*
|
|
8087
|
+
* @param request GetDirectorySAMLServiceProviderInfoRequest
|
|
8088
|
+
* @return GetDirectorySAMLServiceProviderInfoResponse
|
|
7775
8089
|
*/
|
|
7776
8090
|
async getDirectorySAMLServiceProviderInfo(request) {
|
|
7777
8091
|
let runtime = new $Util.RuntimeOptions({});
|
|
7778
8092
|
return await this.getDirectorySAMLServiceProviderInfoWithOptions(request, runtime);
|
|
7779
8093
|
}
|
|
7780
8094
|
/**
|
|
7781
|
-
|
|
7782
|
-
|
|
7783
|
-
|
|
7784
|
-
|
|
7785
|
-
|
|
7786
|
-
|
|
7787
|
-
|
|
7788
|
-
|
|
8095
|
+
* @summary Queries the statistics of a directory.
|
|
8096
|
+
*
|
|
8097
|
+
* @description ### [](#)
|
|
8098
|
+
* This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
|
|
8099
|
+
* ### [](#qps)Limit
|
|
8100
|
+
* You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
|
|
8101
|
+
*
|
|
8102
|
+
* @param request GetDirectoryStatisticsRequest
|
|
8103
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8104
|
+
* @return GetDirectoryStatisticsResponse
|
|
7789
8105
|
*/
|
|
7790
8106
|
async getDirectoryStatisticsWithOptions(request, runtime) {
|
|
7791
8107
|
tea_util_1.default.validateModel(request);
|
|
@@ -7810,24 +8126,28 @@ class Client extends openapi_client_1.default {
|
|
|
7810
8126
|
return $tea.cast(await this.callApi(params, req, runtime), new GetDirectoryStatisticsResponse({}));
|
|
7811
8127
|
}
|
|
7812
8128
|
/**
|
|
7813
|
-
|
|
7814
|
-
|
|
7815
|
-
|
|
7816
|
-
|
|
7817
|
-
|
|
7818
|
-
|
|
7819
|
-
|
|
8129
|
+
* @summary Queries the statistics of a directory.
|
|
8130
|
+
*
|
|
8131
|
+
* @description ### [](#)
|
|
8132
|
+
* This topic provides an example on how to query the statistics of a directory whose ID is `d-00fc2p61****`. The statistics include the number of users, quota for users, number of groups, quota for groups, number of access configurations, quota for access configurations, quota for system policies that can be configured for an access configuration, number of access permissions that are assigned, number of System for Cross-domain Identity Management (SCIM) credentials, number of asynchronous tasks, status of single sign-on (SSO), and status of SCIM synchronization.
|
|
8133
|
+
* ### [](#qps)Limit
|
|
8134
|
+
* You can call this operation up to 100 times per second per account. This operation is globally limited to 100 times per second across all accounts. If the number of the calls per second exceeds a limit, throttling is triggered. As a result, your business may be affected. We recommend that you take note of the limits when you call this operation.
|
|
8135
|
+
*
|
|
8136
|
+
* @param request GetDirectoryStatisticsRequest
|
|
8137
|
+
* @return GetDirectoryStatisticsResponse
|
|
7820
8138
|
*/
|
|
7821
8139
|
async getDirectoryStatistics(request) {
|
|
7822
8140
|
let runtime = new $Util.RuntimeOptions({});
|
|
7823
8141
|
return await this.getDirectoryStatisticsWithOptions(request, runtime);
|
|
7824
8142
|
}
|
|
7825
8143
|
/**
|
|
7826
|
-
|
|
7827
|
-
|
|
7828
|
-
|
|
7829
|
-
|
|
7830
|
-
|
|
8144
|
+
* @summary Queries the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
|
|
8145
|
+
*
|
|
8146
|
+
* @description This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
|
|
8147
|
+
*
|
|
8148
|
+
* @param request GetExternalSAMLIdentityProviderRequest
|
|
8149
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8150
|
+
* @return GetExternalSAMLIdentityProviderResponse
|
|
7831
8151
|
*/
|
|
7832
8152
|
async getExternalSAMLIdentityProviderWithOptions(request, runtime) {
|
|
7833
8153
|
tea_util_1.default.validateModel(request);
|
|
@@ -7852,21 +8172,25 @@ class Client extends openapi_client_1.default {
|
|
|
7852
8172
|
return $tea.cast(await this.callApi(params, req, runtime), new GetExternalSAMLIdentityProviderResponse({}));
|
|
7853
8173
|
}
|
|
7854
8174
|
/**
|
|
7855
|
-
|
|
7856
|
-
|
|
7857
|
-
|
|
7858
|
-
|
|
8175
|
+
* @summary Queries the configurations of a Security Assertion Markup Language (SAML) identity provider (IdP).
|
|
8176
|
+
*
|
|
8177
|
+
* @description This topic provides an example on how to query the configurations of the SAML IdP within the directory `d-00fc2p61****`.
|
|
8178
|
+
*
|
|
8179
|
+
* @param request GetExternalSAMLIdentityProviderRequest
|
|
8180
|
+
* @return GetExternalSAMLIdentityProviderResponse
|
|
7859
8181
|
*/
|
|
7860
8182
|
async getExternalSAMLIdentityProvider(request) {
|
|
7861
8183
|
let runtime = new $Util.RuntimeOptions({});
|
|
7862
8184
|
return await this.getExternalSAMLIdentityProviderWithOptions(request, runtime);
|
|
7863
8185
|
}
|
|
7864
8186
|
/**
|
|
7865
|
-
|
|
7866
|
-
|
|
7867
|
-
|
|
7868
|
-
|
|
7869
|
-
|
|
8187
|
+
* @summary Queries information about a group.
|
|
8188
|
+
*
|
|
8189
|
+
* @description This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
|
|
8190
|
+
*
|
|
8191
|
+
* @param request GetGroupRequest
|
|
8192
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8193
|
+
* @return GetGroupResponse
|
|
7870
8194
|
*/
|
|
7871
8195
|
async getGroupWithOptions(request, runtime) {
|
|
7872
8196
|
tea_util_1.default.validateModel(request);
|
|
@@ -7894,15 +8218,24 @@ class Client extends openapi_client_1.default {
|
|
|
7894
8218
|
return $tea.cast(await this.callApi(params, req, runtime), new GetGroupResponse({}));
|
|
7895
8219
|
}
|
|
7896
8220
|
/**
|
|
7897
|
-
|
|
7898
|
-
|
|
7899
|
-
|
|
7900
|
-
|
|
8221
|
+
* @summary Queries information about a group.
|
|
8222
|
+
*
|
|
8223
|
+
* @description This topic provides an example on how to query the information about the group `g-00jqzghi2n3o5hkh****` in the directory `d-00fc2p61****`.
|
|
8224
|
+
*
|
|
8225
|
+
* @param request GetGroupRequest
|
|
8226
|
+
* @return GetGroupResponse
|
|
7901
8227
|
*/
|
|
7902
8228
|
async getGroup(request) {
|
|
7903
8229
|
let runtime = new $Util.RuntimeOptions({});
|
|
7904
8230
|
return await this.getGroupWithOptions(request, runtime);
|
|
7905
8231
|
}
|
|
8232
|
+
/**
|
|
8233
|
+
* @summary Queries the logon preference of CloudSSO users.
|
|
8234
|
+
*
|
|
8235
|
+
* @param request GetLoginPreferenceRequest
|
|
8236
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8237
|
+
* @return GetLoginPreferenceResponse
|
|
8238
|
+
*/
|
|
7906
8239
|
async getLoginPreferenceWithOptions(request, runtime) {
|
|
7907
8240
|
tea_util_1.default.validateModel(request);
|
|
7908
8241
|
let query = {};
|
|
@@ -7925,17 +8258,25 @@ class Client extends openapi_client_1.default {
|
|
|
7925
8258
|
});
|
|
7926
8259
|
return $tea.cast(await this.callApi(params, req, runtime), new GetLoginPreferenceResponse({}));
|
|
7927
8260
|
}
|
|
8261
|
+
/**
|
|
8262
|
+
* @summary Queries the logon preference of CloudSSO users.
|
|
8263
|
+
*
|
|
8264
|
+
* @param request GetLoginPreferenceRequest
|
|
8265
|
+
* @return GetLoginPreferenceResponse
|
|
8266
|
+
*/
|
|
7928
8267
|
async getLoginPreference(request) {
|
|
7929
8268
|
let runtime = new $Util.RuntimeOptions({});
|
|
7930
8269
|
return await this.getLoginPreferenceWithOptions(request, runtime);
|
|
7931
8270
|
}
|
|
7932
8271
|
/**
|
|
7933
|
-
|
|
7934
|
-
|
|
7935
|
-
|
|
7936
|
-
|
|
7937
|
-
|
|
7938
|
-
|
|
8272
|
+
* @summary Queries the multi-factor authentication (MFA) setting of all users.
|
|
8273
|
+
*
|
|
8274
|
+
* @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
|
|
8275
|
+
* This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
|
|
8276
|
+
*
|
|
8277
|
+
* @param request GetMFAAuthenticationSettingInfoRequest
|
|
8278
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8279
|
+
* @return GetMFAAuthenticationSettingInfoResponse
|
|
7939
8280
|
*/
|
|
7940
8281
|
async getMFAAuthenticationSettingInfoWithOptions(request, runtime) {
|
|
7941
8282
|
tea_util_1.default.validateModel(request);
|
|
@@ -7960,23 +8301,27 @@ class Client extends openapi_client_1.default {
|
|
|
7960
8301
|
return $tea.cast(await this.callApi(params, req, runtime), new GetMFAAuthenticationSettingInfoResponse({}));
|
|
7961
8302
|
}
|
|
7962
8303
|
/**
|
|
7963
|
-
|
|
7964
|
-
|
|
7965
|
-
|
|
7966
|
-
|
|
7967
|
-
|
|
8304
|
+
* @summary Queries the multi-factor authentication (MFA) setting of all users.
|
|
8305
|
+
*
|
|
8306
|
+
* @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
|
|
8307
|
+
* This topic provides an example on how to query the MFA setting of all CloudSSO users that belong to the directory named `00q8wbq42wiltcrk****`.
|
|
8308
|
+
*
|
|
8309
|
+
* @param request GetMFAAuthenticationSettingInfoRequest
|
|
8310
|
+
* @return GetMFAAuthenticationSettingInfoResponse
|
|
7968
8311
|
*/
|
|
7969
8312
|
async getMFAAuthenticationSettingInfo(request) {
|
|
7970
8313
|
let runtime = new $Util.RuntimeOptions({});
|
|
7971
8314
|
return await this.getMFAAuthenticationSettingInfoWithOptions(request, runtime);
|
|
7972
8315
|
}
|
|
7973
8316
|
/**
|
|
7974
|
-
|
|
7975
|
-
|
|
7976
|
-
|
|
7977
|
-
|
|
7978
|
-
|
|
7979
|
-
|
|
8317
|
+
* @summary Queries the multi-factor authentication (MFA) setting of all users.
|
|
8318
|
+
*
|
|
8319
|
+
* @description > This operation is no longer maintained and updated. You can call the [GetMFAAuthenticationSettingInfo](https://help.aliyun.com/document_detail/611286.html) operation to query more detailed information.
|
|
8320
|
+
* This topic provides an example on how to query the MFA setting of the users that belong to the directory named `d-00fc2p61****`. The returned result shows that MFA is enabled for all the users.
|
|
8321
|
+
*
|
|
8322
|
+
* @param request GetMFAAuthenticationSettingsRequest
|
|
8323
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8324
|
+
* @return GetMFAAuthenticationSettingsResponse
|
|
7980
8325
|
*/
|
|
7981
8326
|
async getMFAAuthenticationSettingsWithOptions(request, runtime) {
|
|
7982
8327
|
tea_util_1.default.validateModel(request);
|
|
@@ -8001,22 +8346,26 @@ class Client extends openapi_client_1.default {
|
|
|
8001
8346
|
return $tea.cast(await this.callApi(params, req, runtime), new GetMFAAuthenticationSettingsResponse({}));
|
|
8002
8347
|
}
|
|
8003
8348
|
/**
|
|
8004
|
-
|
|
8005
|
-
|
|
8006
|
-
|
|
8007
|
-
|
|
8008
|
-
|
|
8349
|
+
* @summary Queries the multi-factor authentication (MFA) setting of all users.
|
|
8350
|
+
*
|
|
8351
|
+
* @description > This operation is no longer maintained and updated. You can call the [GetMFAAuthenticationSettingInfo](https://help.aliyun.com/document_detail/611286.html) operation to query more detailed information.
|
|
8352
|
+
* This topic provides an example on how to query the MFA setting of the users that belong to the directory named `d-00fc2p61****`. The returned result shows that MFA is enabled for all the users.
|
|
8353
|
+
*
|
|
8354
|
+
* @param request GetMFAAuthenticationSettingsRequest
|
|
8355
|
+
* @return GetMFAAuthenticationSettingsResponse
|
|
8009
8356
|
*/
|
|
8010
8357
|
async getMFAAuthenticationSettings(request) {
|
|
8011
8358
|
let runtime = new $Util.RuntimeOptions({});
|
|
8012
8359
|
return await this.getMFAAuthenticationSettingsWithOptions(request, runtime);
|
|
8013
8360
|
}
|
|
8014
8361
|
/**
|
|
8015
|
-
|
|
8016
|
-
|
|
8017
|
-
|
|
8018
|
-
|
|
8019
|
-
|
|
8362
|
+
* @summary Checks whether multi-factor authentication (MFA) is enabled for users.
|
|
8363
|
+
*
|
|
8364
|
+
* @description This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
|
|
8365
|
+
*
|
|
8366
|
+
* @param request GetMFAAuthenticationStatusRequest
|
|
8367
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8368
|
+
* @return GetMFAAuthenticationStatusResponse
|
|
8020
8369
|
*/
|
|
8021
8370
|
async getMFAAuthenticationStatusWithOptions(request, runtime) {
|
|
8022
8371
|
tea_util_1.default.validateModel(request);
|
|
@@ -8041,15 +8390,24 @@ class Client extends openapi_client_1.default {
|
|
|
8041
8390
|
return $tea.cast(await this.callApi(params, req, runtime), new GetMFAAuthenticationStatusResponse({}));
|
|
8042
8391
|
}
|
|
8043
8392
|
/**
|
|
8044
|
-
|
|
8045
|
-
|
|
8046
|
-
|
|
8047
|
-
|
|
8393
|
+
* @summary Checks whether multi-factor authentication (MFA) is enabled for users.
|
|
8394
|
+
*
|
|
8395
|
+
* @description This topic provides an example on how to check whether MFA is enabled for users in the directory whose ID is `00fc2p61****`. The returned result shows that MFA is in the Enabled state.
|
|
8396
|
+
*
|
|
8397
|
+
* @param request GetMFAAuthenticationStatusRequest
|
|
8398
|
+
* @return GetMFAAuthenticationStatusResponse
|
|
8048
8399
|
*/
|
|
8049
8400
|
async getMFAAuthenticationStatus(request) {
|
|
8050
8401
|
let runtime = new $Util.RuntimeOptions({});
|
|
8051
8402
|
return await this.getMFAAuthenticationStatusWithOptions(request, runtime);
|
|
8052
8403
|
}
|
|
8404
|
+
/**
|
|
8405
|
+
* @summary Queries the password policy of CloudSSO users.
|
|
8406
|
+
*
|
|
8407
|
+
* @param request GetPasswordPolicyRequest
|
|
8408
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8409
|
+
* @return GetPasswordPolicyResponse
|
|
8410
|
+
*/
|
|
8053
8411
|
async getPasswordPolicyWithOptions(request, runtime) {
|
|
8054
8412
|
tea_util_1.default.validateModel(request);
|
|
8055
8413
|
let query = {};
|
|
@@ -8072,16 +8430,24 @@ class Client extends openapi_client_1.default {
|
|
|
8072
8430
|
});
|
|
8073
8431
|
return $tea.cast(await this.callApi(params, req, runtime), new GetPasswordPolicyResponse({}));
|
|
8074
8432
|
}
|
|
8433
|
+
/**
|
|
8434
|
+
* @summary Queries the password policy of CloudSSO users.
|
|
8435
|
+
*
|
|
8436
|
+
* @param request GetPasswordPolicyRequest
|
|
8437
|
+
* @return GetPasswordPolicyResponse
|
|
8438
|
+
*/
|
|
8075
8439
|
async getPasswordPolicy(request) {
|
|
8076
8440
|
let runtime = new $Util.RuntimeOptions({});
|
|
8077
8441
|
return await this.getPasswordPolicyWithOptions(request, runtime);
|
|
8078
8442
|
}
|
|
8079
8443
|
/**
|
|
8080
|
-
|
|
8081
|
-
|
|
8082
|
-
|
|
8083
|
-
|
|
8084
|
-
|
|
8444
|
+
* @summary Queries the status of System for Cross-domain Identity Management (SCIM) synchronization.
|
|
8445
|
+
*
|
|
8446
|
+
* @description This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
|
|
8447
|
+
*
|
|
8448
|
+
* @param request GetSCIMSynchronizationStatusRequest
|
|
8449
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8450
|
+
* @return GetSCIMSynchronizationStatusResponse
|
|
8085
8451
|
*/
|
|
8086
8452
|
async getSCIMSynchronizationStatusWithOptions(request, runtime) {
|
|
8087
8453
|
tea_util_1.default.validateModel(request);
|
|
@@ -8106,15 +8472,24 @@ class Client extends openapi_client_1.default {
|
|
|
8106
8472
|
return $tea.cast(await this.callApi(params, req, runtime), new GetSCIMSynchronizationStatusResponse({}));
|
|
8107
8473
|
}
|
|
8108
8474
|
/**
|
|
8109
|
-
|
|
8110
|
-
|
|
8111
|
-
|
|
8112
|
-
|
|
8475
|
+
* @summary Queries the status of System for Cross-domain Identity Management (SCIM) synchronization.
|
|
8476
|
+
*
|
|
8477
|
+
* @description This topic provides an example on how to query the status of SCIM synchronization within the directory `d-00fc2p61****`. The returned result shows that SCIM synchronization is in the Enabled state.
|
|
8478
|
+
*
|
|
8479
|
+
* @param request GetSCIMSynchronizationStatusRequest
|
|
8480
|
+
* @return GetSCIMSynchronizationStatusResponse
|
|
8113
8481
|
*/
|
|
8114
8482
|
async getSCIMSynchronizationStatus(request) {
|
|
8115
8483
|
let runtime = new $Util.RuntimeOptions({});
|
|
8116
8484
|
return await this.getSCIMSynchronizationStatusWithOptions(request, runtime);
|
|
8117
8485
|
}
|
|
8486
|
+
/**
|
|
8487
|
+
* @summary Queries the status of CloudSSO.
|
|
8488
|
+
*
|
|
8489
|
+
* @param request GetServiceStatusRequest
|
|
8490
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8491
|
+
* @return GetServiceStatusResponse
|
|
8492
|
+
*/
|
|
8118
8493
|
async getServiceStatusWithOptions(runtime) {
|
|
8119
8494
|
let req = new $OpenApi.OpenApiRequest({});
|
|
8120
8495
|
let params = new $OpenApi.Params({
|
|
@@ -8130,16 +8505,23 @@ class Client extends openapi_client_1.default {
|
|
|
8130
8505
|
});
|
|
8131
8506
|
return $tea.cast(await this.callApi(params, req, runtime), new GetServiceStatusResponse({}));
|
|
8132
8507
|
}
|
|
8508
|
+
/**
|
|
8509
|
+
* @summary Queries the status of CloudSSO.
|
|
8510
|
+
*
|
|
8511
|
+
* @return GetServiceStatusResponse
|
|
8512
|
+
*/
|
|
8133
8513
|
async getServiceStatus() {
|
|
8134
8514
|
let runtime = new $Util.RuntimeOptions({});
|
|
8135
8515
|
return await this.getServiceStatusWithOptions(runtime);
|
|
8136
8516
|
}
|
|
8137
8517
|
/**
|
|
8138
|
-
|
|
8139
|
-
|
|
8140
|
-
|
|
8141
|
-
|
|
8142
|
-
|
|
8518
|
+
* @summary Queries information about an asynchronous task.
|
|
8519
|
+
*
|
|
8520
|
+
* @description This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
|
|
8521
|
+
*
|
|
8522
|
+
* @param request GetTaskRequest
|
|
8523
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8524
|
+
* @return GetTaskResponse
|
|
8143
8525
|
*/
|
|
8144
8526
|
async getTaskWithOptions(request, runtime) {
|
|
8145
8527
|
tea_util_1.default.validateModel(request);
|
|
@@ -8167,22 +8549,26 @@ class Client extends openapi_client_1.default {
|
|
|
8167
8549
|
return $tea.cast(await this.callApi(params, req, runtime), new GetTaskResponse({}));
|
|
8168
8550
|
}
|
|
8169
8551
|
/**
|
|
8170
|
-
|
|
8171
|
-
|
|
8172
|
-
|
|
8173
|
-
|
|
8552
|
+
* @summary Queries information about an asynchronous task.
|
|
8553
|
+
*
|
|
8554
|
+
* @description This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
|
|
8555
|
+
*
|
|
8556
|
+
* @param request GetTaskRequest
|
|
8557
|
+
* @return GetTaskResponse
|
|
8174
8558
|
*/
|
|
8175
8559
|
async getTask(request) {
|
|
8176
8560
|
let runtime = new $Util.RuntimeOptions({});
|
|
8177
8561
|
return await this.getTaskWithOptions(request, runtime);
|
|
8178
8562
|
}
|
|
8179
8563
|
/**
|
|
8180
|
-
|
|
8181
|
-
|
|
8182
|
-
|
|
8183
|
-
|
|
8184
|
-
|
|
8185
|
-
|
|
8564
|
+
* @summary Queries the status of an asynchronous task.
|
|
8565
|
+
*
|
|
8566
|
+
* @description You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation.
|
|
8567
|
+
* This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
|
|
8568
|
+
*
|
|
8569
|
+
* @param request GetTaskStatusRequest
|
|
8570
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8571
|
+
* @return GetTaskStatusResponse
|
|
8186
8572
|
*/
|
|
8187
8573
|
async getTaskStatusWithOptions(request, runtime) {
|
|
8188
8574
|
tea_util_1.default.validateModel(request);
|
|
@@ -8210,22 +8596,26 @@ class Client extends openapi_client_1.default {
|
|
|
8210
8596
|
return $tea.cast(await this.callApi(params, req, runtime), new GetTaskStatusResponse({}));
|
|
8211
8597
|
}
|
|
8212
8598
|
/**
|
|
8213
|
-
|
|
8214
|
-
|
|
8215
|
-
|
|
8216
|
-
|
|
8217
|
-
|
|
8599
|
+
* @summary Queries the status of an asynchronous task.
|
|
8600
|
+
*
|
|
8601
|
+
* @description You can call the GetTaskStatus operation to query the status of an asynchronous task. If you want to query more information about an asynchronous task, call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation.
|
|
8602
|
+
* This topic provides an example on how to query the information about the task whose ID is `t-shfqw1u1edszvxw5****`.
|
|
8603
|
+
*
|
|
8604
|
+
* @param request GetTaskStatusRequest
|
|
8605
|
+
* @return GetTaskStatusResponse
|
|
8218
8606
|
*/
|
|
8219
8607
|
async getTaskStatus(request) {
|
|
8220
8608
|
let runtime = new $Util.RuntimeOptions({});
|
|
8221
8609
|
return await this.getTaskStatusWithOptions(request, runtime);
|
|
8222
8610
|
}
|
|
8223
8611
|
/**
|
|
8224
|
-
|
|
8225
|
-
|
|
8226
|
-
|
|
8227
|
-
|
|
8228
|
-
|
|
8612
|
+
* @summary Queries information about a user.
|
|
8613
|
+
*
|
|
8614
|
+
* @description This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
|
|
8615
|
+
*
|
|
8616
|
+
* @param request GetUserRequest
|
|
8617
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8618
|
+
* @return GetUserResponse
|
|
8229
8619
|
*/
|
|
8230
8620
|
async getUserWithOptions(request, runtime) {
|
|
8231
8621
|
tea_util_1.default.validateModel(request);
|
|
@@ -8253,15 +8643,24 @@ class Client extends openapi_client_1.default {
|
|
|
8253
8643
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserResponse({}));
|
|
8254
8644
|
}
|
|
8255
8645
|
/**
|
|
8256
|
-
|
|
8257
|
-
|
|
8258
|
-
|
|
8259
|
-
|
|
8646
|
+
* @summary Queries information about a user.
|
|
8647
|
+
*
|
|
8648
|
+
* @description This topic provides an example on how to query information about the user whose ID is `u-00q8wbq42wiltcrk****` in the `d-00fc2p61****` directory.
|
|
8649
|
+
*
|
|
8650
|
+
* @param request GetUserRequest
|
|
8651
|
+
* @return GetUserResponse
|
|
8260
8652
|
*/
|
|
8261
8653
|
async getUser(request) {
|
|
8262
8654
|
let runtime = new $Util.RuntimeOptions({});
|
|
8263
8655
|
return await this.getUserWithOptions(request, runtime);
|
|
8264
8656
|
}
|
|
8657
|
+
/**
|
|
8658
|
+
* @summary Queries the ID of a user in a resource directory by using the ExternalId parameter.
|
|
8659
|
+
*
|
|
8660
|
+
* @param tmpReq GetUserIdRequest
|
|
8661
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8662
|
+
* @return GetUserIdResponse
|
|
8663
|
+
*/
|
|
8265
8664
|
async getUserIdWithOptions(tmpReq, runtime) {
|
|
8266
8665
|
tea_util_1.default.validateModel(tmpReq);
|
|
8267
8666
|
let request = new GetUserIdShrinkRequest({});
|
|
@@ -8292,16 +8691,24 @@ class Client extends openapi_client_1.default {
|
|
|
8292
8691
|
});
|
|
8293
8692
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserIdResponse({}));
|
|
8294
8693
|
}
|
|
8694
|
+
/**
|
|
8695
|
+
* @summary Queries the ID of a user in a resource directory by using the ExternalId parameter.
|
|
8696
|
+
*
|
|
8697
|
+
* @param request GetUserIdRequest
|
|
8698
|
+
* @return GetUserIdResponse
|
|
8699
|
+
*/
|
|
8295
8700
|
async getUserId(request) {
|
|
8296
8701
|
let runtime = new $Util.RuntimeOptions({});
|
|
8297
8702
|
return await this.getUserIdWithOptions(request, runtime);
|
|
8298
8703
|
}
|
|
8299
8704
|
/**
|
|
8300
|
-
|
|
8301
|
-
|
|
8302
|
-
|
|
8303
|
-
|
|
8304
|
-
|
|
8705
|
+
* @summary Queries the multi-factor authentication (MFA) setting of a single user.
|
|
8706
|
+
*
|
|
8707
|
+
* @description This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
|
|
8708
|
+
*
|
|
8709
|
+
* @param request GetUserMFAAuthenticationSettingsRequest
|
|
8710
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8711
|
+
* @return GetUserMFAAuthenticationSettingsResponse
|
|
8305
8712
|
*/
|
|
8306
8713
|
async getUserMFAAuthenticationSettingsWithOptions(request, runtime) {
|
|
8307
8714
|
tea_util_1.default.validateModel(request);
|
|
@@ -8329,15 +8736,24 @@ class Client extends openapi_client_1.default {
|
|
|
8329
8736
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserMFAAuthenticationSettingsResponse({}));
|
|
8330
8737
|
}
|
|
8331
8738
|
/**
|
|
8332
|
-
|
|
8333
|
-
|
|
8334
|
-
|
|
8335
|
-
|
|
8739
|
+
* @summary Queries the multi-factor authentication (MFA) setting of a single user.
|
|
8740
|
+
*
|
|
8741
|
+
* @description This topic provides an example on how to query the MFA setting of the user named `u-00q8wbq42wiltcrk****`. The returned result shows that MFA is enabled for the user.
|
|
8742
|
+
*
|
|
8743
|
+
* @param request GetUserMFAAuthenticationSettingsRequest
|
|
8744
|
+
* @return GetUserMFAAuthenticationSettingsResponse
|
|
8336
8745
|
*/
|
|
8337
8746
|
async getUserMFAAuthenticationSettings(request) {
|
|
8338
8747
|
let runtime = new $Util.RuntimeOptions({});
|
|
8339
8748
|
return await this.getUserMFAAuthenticationSettingsWithOptions(request, runtime);
|
|
8340
8749
|
}
|
|
8750
|
+
/**
|
|
8751
|
+
* @summary Queries a Resource Access Management (RAM) user provisioning.
|
|
8752
|
+
*
|
|
8753
|
+
* @param request GetUserProvisioningRequest
|
|
8754
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8755
|
+
* @return GetUserProvisioningResponse
|
|
8756
|
+
*/
|
|
8341
8757
|
async getUserProvisioningWithOptions(request, runtime) {
|
|
8342
8758
|
tea_util_1.default.validateModel(request);
|
|
8343
8759
|
let query = {};
|
|
@@ -8363,10 +8779,23 @@ class Client extends openapi_client_1.default {
|
|
|
8363
8779
|
});
|
|
8364
8780
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserProvisioningResponse({}));
|
|
8365
8781
|
}
|
|
8782
|
+
/**
|
|
8783
|
+
* @summary Queries a Resource Access Management (RAM) user provisioning.
|
|
8784
|
+
*
|
|
8785
|
+
* @param request GetUserProvisioningRequest
|
|
8786
|
+
* @return GetUserProvisioningResponse
|
|
8787
|
+
*/
|
|
8366
8788
|
async getUserProvisioning(request) {
|
|
8367
8789
|
let runtime = new $Util.RuntimeOptions({});
|
|
8368
8790
|
return await this.getUserProvisioningWithOptions(request, runtime);
|
|
8369
8791
|
}
|
|
8792
|
+
/**
|
|
8793
|
+
* @summary Queries the global configurations of a Resource Access Management (RAM) user provisioning.
|
|
8794
|
+
*
|
|
8795
|
+
* @param request GetUserProvisioningConfigurationRequest
|
|
8796
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8797
|
+
* @return GetUserProvisioningConfigurationResponse
|
|
8798
|
+
*/
|
|
8370
8799
|
async getUserProvisioningConfigurationWithOptions(request, runtime) {
|
|
8371
8800
|
tea_util_1.default.validateModel(request);
|
|
8372
8801
|
let query = {};
|
|
@@ -8389,10 +8818,23 @@ class Client extends openapi_client_1.default {
|
|
|
8389
8818
|
});
|
|
8390
8819
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserProvisioningConfigurationResponse({}));
|
|
8391
8820
|
}
|
|
8821
|
+
/**
|
|
8822
|
+
* @summary Queries the global configurations of a Resource Access Management (RAM) user provisioning.
|
|
8823
|
+
*
|
|
8824
|
+
* @param request GetUserProvisioningConfigurationRequest
|
|
8825
|
+
* @return GetUserProvisioningConfigurationResponse
|
|
8826
|
+
*/
|
|
8392
8827
|
async getUserProvisioningConfiguration(request) {
|
|
8393
8828
|
let runtime = new $Util.RuntimeOptions({});
|
|
8394
8829
|
return await this.getUserProvisioningConfigurationWithOptions(request, runtime);
|
|
8395
8830
|
}
|
|
8831
|
+
/**
|
|
8832
|
+
* @summary Queries a Resource Access Management (RAM) user provisioning event.
|
|
8833
|
+
*
|
|
8834
|
+
* @param request GetUserProvisioningEventRequest
|
|
8835
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8836
|
+
* @return GetUserProvisioningEventResponse
|
|
8837
|
+
*/
|
|
8396
8838
|
async getUserProvisioningEventWithOptions(request, runtime) {
|
|
8397
8839
|
tea_util_1.default.validateModel(request);
|
|
8398
8840
|
let query = {};
|
|
@@ -8418,10 +8860,23 @@ class Client extends openapi_client_1.default {
|
|
|
8418
8860
|
});
|
|
8419
8861
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserProvisioningEventResponse({}));
|
|
8420
8862
|
}
|
|
8863
|
+
/**
|
|
8864
|
+
* @summary Queries a Resource Access Management (RAM) user provisioning event.
|
|
8865
|
+
*
|
|
8866
|
+
* @param request GetUserProvisioningEventRequest
|
|
8867
|
+
* @return GetUserProvisioningEventResponse
|
|
8868
|
+
*/
|
|
8421
8869
|
async getUserProvisioningEvent(request) {
|
|
8422
8870
|
let runtime = new $Util.RuntimeOptions({});
|
|
8423
8871
|
return await this.getUserProvisioningEventWithOptions(request, runtime);
|
|
8424
8872
|
}
|
|
8873
|
+
/**
|
|
8874
|
+
* @summary Queries statistics of Resource Access Management (RAM) user provisioning events that are created for the member in a resource directory.
|
|
8875
|
+
*
|
|
8876
|
+
* @param request GetUserProvisioningRdAccountStatisticsRequest
|
|
8877
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8878
|
+
* @return GetUserProvisioningRdAccountStatisticsResponse
|
|
8879
|
+
*/
|
|
8425
8880
|
async getUserProvisioningRdAccountStatisticsWithOptions(request, runtime) {
|
|
8426
8881
|
tea_util_1.default.validateModel(request);
|
|
8427
8882
|
let query = {};
|
|
@@ -8447,10 +8902,23 @@ class Client extends openapi_client_1.default {
|
|
|
8447
8902
|
});
|
|
8448
8903
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserProvisioningRdAccountStatisticsResponse({}));
|
|
8449
8904
|
}
|
|
8905
|
+
/**
|
|
8906
|
+
* @summary Queries statistics of Resource Access Management (RAM) user provisioning events that are created for the member in a resource directory.
|
|
8907
|
+
*
|
|
8908
|
+
* @param request GetUserProvisioningRdAccountStatisticsRequest
|
|
8909
|
+
* @return GetUserProvisioningRdAccountStatisticsResponse
|
|
8910
|
+
*/
|
|
8450
8911
|
async getUserProvisioningRdAccountStatistics(request) {
|
|
8451
8912
|
let runtime = new $Util.RuntimeOptions({});
|
|
8452
8913
|
return await this.getUserProvisioningRdAccountStatisticsWithOptions(request, runtime);
|
|
8453
8914
|
}
|
|
8915
|
+
/**
|
|
8916
|
+
* @summary Queries the statistics of a Resource Access Management (RAM) user provisioning.
|
|
8917
|
+
*
|
|
8918
|
+
* @param request GetUserProvisioningStatisticsRequest
|
|
8919
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8920
|
+
* @return GetUserProvisioningStatisticsResponse
|
|
8921
|
+
*/
|
|
8454
8922
|
async getUserProvisioningStatisticsWithOptions(request, runtime) {
|
|
8455
8923
|
tea_util_1.default.validateModel(request);
|
|
8456
8924
|
let query = {};
|
|
@@ -8476,16 +8944,24 @@ class Client extends openapi_client_1.default {
|
|
|
8476
8944
|
});
|
|
8477
8945
|
return $tea.cast(await this.callApi(params, req, runtime), new GetUserProvisioningStatisticsResponse({}));
|
|
8478
8946
|
}
|
|
8947
|
+
/**
|
|
8948
|
+
* @summary Queries the statistics of a Resource Access Management (RAM) user provisioning.
|
|
8949
|
+
*
|
|
8950
|
+
* @param request GetUserProvisioningStatisticsRequest
|
|
8951
|
+
* @return GetUserProvisioningStatisticsResponse
|
|
8952
|
+
*/
|
|
8479
8953
|
async getUserProvisioningStatistics(request) {
|
|
8480
8954
|
let runtime = new $Util.RuntimeOptions({});
|
|
8481
8955
|
return await this.getUserProvisioningStatisticsWithOptions(request, runtime);
|
|
8482
8956
|
}
|
|
8483
8957
|
/**
|
|
8484
|
-
|
|
8485
|
-
|
|
8486
|
-
|
|
8487
|
-
|
|
8488
|
-
|
|
8958
|
+
* @summary Queries the access permissions that are assigned.
|
|
8959
|
+
*
|
|
8960
|
+
* @description This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
|
|
8961
|
+
*
|
|
8962
|
+
* @param request ListAccessAssignmentsRequest
|
|
8963
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
8964
|
+
* @return ListAccessAssignmentsResponse
|
|
8489
8965
|
*/
|
|
8490
8966
|
async listAccessAssignmentsWithOptions(request, runtime) {
|
|
8491
8967
|
tea_util_1.default.validateModel(request);
|
|
@@ -8531,21 +9007,25 @@ class Client extends openapi_client_1.default {
|
|
|
8531
9007
|
return $tea.cast(await this.callApi(params, req, runtime), new ListAccessAssignmentsResponse({}));
|
|
8532
9008
|
}
|
|
8533
9009
|
/**
|
|
8534
|
-
|
|
8535
|
-
|
|
8536
|
-
|
|
8537
|
-
|
|
9010
|
+
* @summary Queries the access permissions that are assigned.
|
|
9011
|
+
*
|
|
9012
|
+
* @description This topic provides an example on how to query the assigned access permissions on the account `114240524784****` in your resource directory. The returned result shows that access permissions on the account in your resource directory is assigned to one user.
|
|
9013
|
+
*
|
|
9014
|
+
* @param request ListAccessAssignmentsRequest
|
|
9015
|
+
* @return ListAccessAssignmentsResponse
|
|
8538
9016
|
*/
|
|
8539
9017
|
async listAccessAssignments(request) {
|
|
8540
9018
|
let runtime = new $Util.RuntimeOptions({});
|
|
8541
9019
|
return await this.listAccessAssignmentsWithOptions(request, runtime);
|
|
8542
9020
|
}
|
|
8543
9021
|
/**
|
|
8544
|
-
|
|
8545
|
-
|
|
8546
|
-
|
|
8547
|
-
|
|
8548
|
-
|
|
9022
|
+
* @summary Queries the access configurations that are provisioned.
|
|
9023
|
+
*
|
|
9024
|
+
* @description This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
|
|
9025
|
+
*
|
|
9026
|
+
* @param request ListAccessConfigurationProvisioningsRequest
|
|
9027
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9028
|
+
* @return ListAccessConfigurationProvisioningsResponse
|
|
8549
9029
|
*/
|
|
8550
9030
|
async listAccessConfigurationProvisioningsWithOptions(request, runtime) {
|
|
8551
9031
|
tea_util_1.default.validateModel(request);
|
|
@@ -8588,21 +9068,25 @@ class Client extends openapi_client_1.default {
|
|
|
8588
9068
|
return $tea.cast(await this.callApi(params, req, runtime), new ListAccessConfigurationProvisioningsResponse({}));
|
|
8589
9069
|
}
|
|
8590
9070
|
/**
|
|
8591
|
-
|
|
8592
|
-
|
|
8593
|
-
|
|
8594
|
-
|
|
9071
|
+
* @summary Queries the access configurations that are provisioned.
|
|
9072
|
+
*
|
|
9073
|
+
* @description This topic provides an example on how to query the accounts for which the access permission `ac-00ccule7tadaijxc****` is provisioned. The returned result shows that the access configuration is provisioned for two accounts in your resource directory.
|
|
9074
|
+
*
|
|
9075
|
+
* @param request ListAccessConfigurationProvisioningsRequest
|
|
9076
|
+
* @return ListAccessConfigurationProvisioningsResponse
|
|
8595
9077
|
*/
|
|
8596
9078
|
async listAccessConfigurationProvisionings(request) {
|
|
8597
9079
|
let runtime = new $Util.RuntimeOptions({});
|
|
8598
9080
|
return await this.listAccessConfigurationProvisioningsWithOptions(request, runtime);
|
|
8599
9081
|
}
|
|
8600
9082
|
/**
|
|
8601
|
-
|
|
8602
|
-
|
|
8603
|
-
|
|
8604
|
-
|
|
8605
|
-
|
|
9083
|
+
* @summary Queries access configurations.
|
|
9084
|
+
*
|
|
9085
|
+
* @description This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
|
|
9086
|
+
*
|
|
9087
|
+
* @param request ListAccessConfigurationsRequest
|
|
9088
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9089
|
+
* @return ListAccessConfigurationsResponse
|
|
8606
9090
|
*/
|
|
8607
9091
|
async listAccessConfigurationsWithOptions(request, runtime) {
|
|
8608
9092
|
tea_util_1.default.validateModel(request);
|
|
@@ -8639,21 +9123,25 @@ class Client extends openapi_client_1.default {
|
|
|
8639
9123
|
return $tea.cast(await this.callApi(params, req, runtime), new ListAccessConfigurationsResponse({}));
|
|
8640
9124
|
}
|
|
8641
9125
|
/**
|
|
8642
|
-
|
|
8643
|
-
|
|
8644
|
-
|
|
8645
|
-
|
|
9126
|
+
* @summary Queries access configurations.
|
|
9127
|
+
*
|
|
9128
|
+
* @description This topic provides an example on how to query the access configurations within the directory `d-00fc2p61****`. The returned result shows that the directory contains the `VPC-Admin` and `ECS-Admin` access configurations.
|
|
9129
|
+
*
|
|
9130
|
+
* @param request ListAccessConfigurationsRequest
|
|
9131
|
+
* @return ListAccessConfigurationsResponse
|
|
8646
9132
|
*/
|
|
8647
9133
|
async listAccessConfigurations(request) {
|
|
8648
9134
|
let runtime = new $Util.RuntimeOptions({});
|
|
8649
9135
|
return await this.listAccessConfigurationsWithOptions(request, runtime);
|
|
8650
9136
|
}
|
|
8651
9137
|
/**
|
|
8652
|
-
|
|
8653
|
-
|
|
8654
|
-
|
|
8655
|
-
|
|
8656
|
-
|
|
9138
|
+
* @summary Queries directories.
|
|
9139
|
+
*
|
|
9140
|
+
* @description This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
|
|
9141
|
+
*
|
|
9142
|
+
* @param request ListDirectoriesRequest
|
|
9143
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9144
|
+
* @return ListDirectoriesResponse
|
|
8657
9145
|
*/
|
|
8658
9146
|
async listDirectoriesWithOptions(runtime) {
|
|
8659
9147
|
let req = new $OpenApi.OpenApiRequest({});
|
|
@@ -8671,20 +9159,24 @@ class Client extends openapi_client_1.default {
|
|
|
8671
9159
|
return $tea.cast(await this.callApi(params, req, runtime), new ListDirectoriesResponse({}));
|
|
8672
9160
|
}
|
|
8673
9161
|
/**
|
|
8674
|
-
|
|
8675
|
-
|
|
8676
|
-
|
|
9162
|
+
* @summary Queries directories.
|
|
9163
|
+
*
|
|
9164
|
+
* @description This topic provides an example on how to query the directories within your Alibaba Cloud account. The returned result shows that only one directory with the ID `d-00fc2p61****` is created within your Alibaba Cloud account.
|
|
9165
|
+
*
|
|
9166
|
+
* @return ListDirectoriesResponse
|
|
8677
9167
|
*/
|
|
8678
9168
|
async listDirectories() {
|
|
8679
9169
|
let runtime = new $Util.RuntimeOptions({});
|
|
8680
9170
|
return await this.listDirectoriesWithOptions(runtime);
|
|
8681
9171
|
}
|
|
8682
9172
|
/**
|
|
8683
|
-
|
|
8684
|
-
|
|
8685
|
-
|
|
8686
|
-
|
|
8687
|
-
|
|
9173
|
+
* @summary Queries Security Assertion Markup Language (SAML) signing certificates.
|
|
9174
|
+
*
|
|
9175
|
+
* @description This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
|
|
9176
|
+
*
|
|
9177
|
+
* @param request ListExternalSAMLIdPCertificatesRequest
|
|
9178
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9179
|
+
* @return ListExternalSAMLIdPCertificatesResponse
|
|
8688
9180
|
*/
|
|
8689
9181
|
async listExternalSAMLIdPCertificatesWithOptions(request, runtime) {
|
|
8690
9182
|
tea_util_1.default.validateModel(request);
|
|
@@ -8709,21 +9201,25 @@ class Client extends openapi_client_1.default {
|
|
|
8709
9201
|
return $tea.cast(await this.callApi(params, req, runtime), new ListExternalSAMLIdPCertificatesResponse({}));
|
|
8710
9202
|
}
|
|
8711
9203
|
/**
|
|
8712
|
-
|
|
8713
|
-
|
|
8714
|
-
|
|
8715
|
-
|
|
9204
|
+
* @summary Queries Security Assertion Markup Language (SAML) signing certificates.
|
|
9205
|
+
*
|
|
9206
|
+
* @description This topic provides an example on how to query the SAML signing certificates within the directory `d-00fc2p61****`. The returned result shows that the directory contains one SAML signing certificate.
|
|
9207
|
+
*
|
|
9208
|
+
* @param request ListExternalSAMLIdPCertificatesRequest
|
|
9209
|
+
* @return ListExternalSAMLIdPCertificatesResponse
|
|
8716
9210
|
*/
|
|
8717
9211
|
async listExternalSAMLIdPCertificates(request) {
|
|
8718
9212
|
let runtime = new $Util.RuntimeOptions({});
|
|
8719
9213
|
return await this.listExternalSAMLIdPCertificatesWithOptions(request, runtime);
|
|
8720
9214
|
}
|
|
8721
9215
|
/**
|
|
8722
|
-
|
|
8723
|
-
|
|
8724
|
-
|
|
8725
|
-
|
|
8726
|
-
|
|
9216
|
+
* @summary Queries the users in a group.
|
|
9217
|
+
*
|
|
9218
|
+
* @description This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
|
|
9219
|
+
*
|
|
9220
|
+
* @param request ListGroupMembersRequest
|
|
9221
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9222
|
+
* @return ListGroupMembersResponse
|
|
8727
9223
|
*/
|
|
8728
9224
|
async listGroupMembersWithOptions(request, runtime) {
|
|
8729
9225
|
tea_util_1.default.validateModel(request);
|
|
@@ -8757,21 +9253,25 @@ class Client extends openapi_client_1.default {
|
|
|
8757
9253
|
return $tea.cast(await this.callApi(params, req, runtime), new ListGroupMembersResponse({}));
|
|
8758
9254
|
}
|
|
8759
9255
|
/**
|
|
8760
|
-
|
|
8761
|
-
|
|
8762
|
-
|
|
8763
|
-
|
|
9256
|
+
* @summary Queries the users in a group.
|
|
9257
|
+
*
|
|
9258
|
+
* @description This topic provides an example on how to query the users in the group `g-00jqzghi2n3o5hkh****`. The returned result shows that the group contains the user `Alice` and the user `user1`.
|
|
9259
|
+
*
|
|
9260
|
+
* @param request ListGroupMembersRequest
|
|
9261
|
+
* @return ListGroupMembersResponse
|
|
8764
9262
|
*/
|
|
8765
9263
|
async listGroupMembers(request) {
|
|
8766
9264
|
let runtime = new $Util.RuntimeOptions({});
|
|
8767
9265
|
return await this.listGroupMembersWithOptions(request, runtime);
|
|
8768
9266
|
}
|
|
8769
9267
|
/**
|
|
8770
|
-
|
|
8771
|
-
|
|
8772
|
-
|
|
8773
|
-
|
|
8774
|
-
|
|
9268
|
+
* @summary Queries groups.
|
|
9269
|
+
*
|
|
9270
|
+
* @description This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
|
|
9271
|
+
*
|
|
9272
|
+
* @param request ListGroupsRequest
|
|
9273
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9274
|
+
* @return ListGroupsResponse
|
|
8775
9275
|
*/
|
|
8776
9276
|
async listGroupsWithOptions(request, runtime) {
|
|
8777
9277
|
tea_util_1.default.validateModel(request);
|
|
@@ -8808,21 +9308,25 @@ class Client extends openapi_client_1.default {
|
|
|
8808
9308
|
return $tea.cast(await this.callApi(params, req, runtime), new ListGroupsResponse({}));
|
|
8809
9309
|
}
|
|
8810
9310
|
/**
|
|
8811
|
-
|
|
8812
|
-
|
|
8813
|
-
|
|
8814
|
-
|
|
9311
|
+
* @summary Queries groups.
|
|
9312
|
+
*
|
|
9313
|
+
* @description This topic provides an example on how to query the groups in the directory `d-00fc2p61****`. The returned result shows that the directory contains three groups. The groups `group1` and `group2` are synchronized from an external identity provider (IdP). The group `TestGroup` is manually created in CloudSSO.
|
|
9314
|
+
*
|
|
9315
|
+
* @param request ListGroupsRequest
|
|
9316
|
+
* @return ListGroupsResponse
|
|
8815
9317
|
*/
|
|
8816
9318
|
async listGroups(request) {
|
|
8817
9319
|
let runtime = new $Util.RuntimeOptions({});
|
|
8818
9320
|
return await this.listGroupsWithOptions(request, runtime);
|
|
8819
9321
|
}
|
|
8820
9322
|
/**
|
|
8821
|
-
|
|
8822
|
-
|
|
8823
|
-
|
|
8824
|
-
|
|
8825
|
-
|
|
9323
|
+
* @summary Queries the groups to which a user is added.
|
|
9324
|
+
*
|
|
9325
|
+
* @description This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
|
|
9326
|
+
*
|
|
9327
|
+
* @param request ListJoinedGroupsForUserRequest
|
|
9328
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9329
|
+
* @return ListJoinedGroupsForUserResponse
|
|
8826
9330
|
*/
|
|
8827
9331
|
async listJoinedGroupsForUserWithOptions(request, runtime) {
|
|
8828
9332
|
tea_util_1.default.validateModel(request);
|
|
@@ -8856,21 +9360,25 @@ class Client extends openapi_client_1.default {
|
|
|
8856
9360
|
return $tea.cast(await this.callApi(params, req, runtime), new ListJoinedGroupsForUserResponse({}));
|
|
8857
9361
|
}
|
|
8858
9362
|
/**
|
|
8859
|
-
|
|
8860
|
-
|
|
8861
|
-
|
|
8862
|
-
|
|
9363
|
+
* @summary Queries the groups to which a user is added.
|
|
9364
|
+
*
|
|
9365
|
+
* @description This topic provides an example on how to query the groups to which the user `u-00q8wbq42wiltcrk****` is added. The returned result shows that the user is added to both the `TestGroup` and the `group1` groups.
|
|
9366
|
+
*
|
|
9367
|
+
* @param request ListJoinedGroupsForUserRequest
|
|
9368
|
+
* @return ListJoinedGroupsForUserResponse
|
|
8863
9369
|
*/
|
|
8864
9370
|
async listJoinedGroupsForUser(request) {
|
|
8865
9371
|
let runtime = new $Util.RuntimeOptions({});
|
|
8866
9372
|
return await this.listJoinedGroupsForUserWithOptions(request, runtime);
|
|
8867
9373
|
}
|
|
8868
9374
|
/**
|
|
8869
|
-
|
|
8870
|
-
|
|
8871
|
-
|
|
8872
|
-
|
|
8873
|
-
|
|
9375
|
+
* @summary Queries the multi-factor authentication (MFA) devices that are bound to a user. Up to two MFA devices can be bound to a user.
|
|
9376
|
+
*
|
|
9377
|
+
* @description This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
|
|
9378
|
+
*
|
|
9379
|
+
* @param request ListMFADevicesForUserRequest
|
|
9380
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9381
|
+
* @return ListMFADevicesForUserResponse
|
|
8874
9382
|
*/
|
|
8875
9383
|
async listMFADevicesForUserWithOptions(request, runtime) {
|
|
8876
9384
|
tea_util_1.default.validateModel(request);
|
|
@@ -8898,21 +9406,25 @@ class Client extends openapi_client_1.default {
|
|
|
8898
9406
|
return $tea.cast(await this.callApi(params, req, runtime), new ListMFADevicesForUserResponse({}));
|
|
8899
9407
|
}
|
|
8900
9408
|
/**
|
|
8901
|
-
|
|
8902
|
-
|
|
8903
|
-
|
|
8904
|
-
|
|
9409
|
+
* @summary Queries the multi-factor authentication (MFA) devices that are bound to a user. Up to two MFA devices can be bound to a user.
|
|
9410
|
+
*
|
|
9411
|
+
* @description This topic provides an example on how to query the MFA devices that are bound to the user `u-00q8wbq42wiltcrk****`. The returned result shows that the MFA device named `Alice-MFA1` is bound to the user.
|
|
9412
|
+
*
|
|
9413
|
+
* @param request ListMFADevicesForUserRequest
|
|
9414
|
+
* @return ListMFADevicesForUserResponse
|
|
8905
9415
|
*/
|
|
8906
9416
|
async listMFADevicesForUser(request) {
|
|
8907
9417
|
let runtime = new $Util.RuntimeOptions({});
|
|
8908
9418
|
return await this.listMFADevicesForUserWithOptions(request, runtime);
|
|
8909
9419
|
}
|
|
8910
9420
|
/**
|
|
8911
|
-
|
|
8912
|
-
|
|
8913
|
-
|
|
8914
|
-
|
|
8915
|
-
|
|
9421
|
+
* @summary Queries the policies that are created for an access configuration.
|
|
9422
|
+
*
|
|
9423
|
+
* @description This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
|
|
9424
|
+
*
|
|
9425
|
+
* @param request ListPermissionPoliciesInAccessConfigurationRequest
|
|
9426
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9427
|
+
* @return ListPermissionPoliciesInAccessConfigurationResponse
|
|
8916
9428
|
*/
|
|
8917
9429
|
async listPermissionPoliciesInAccessConfigurationWithOptions(request, runtime) {
|
|
8918
9430
|
tea_util_1.default.validateModel(request);
|
|
@@ -8943,21 +9455,25 @@ class Client extends openapi_client_1.default {
|
|
|
8943
9455
|
return $tea.cast(await this.callApi(params, req, runtime), new ListPermissionPoliciesInAccessConfigurationResponse({}));
|
|
8944
9456
|
}
|
|
8945
9457
|
/**
|
|
8946
|
-
|
|
8947
|
-
|
|
8948
|
-
|
|
8949
|
-
|
|
9458
|
+
* @summary Queries the policies that are created for an access configuration.
|
|
9459
|
+
*
|
|
9460
|
+
* @description This topic provides an example on how to query the policies that are created for the access configuration `ac-00jhtfl8thteu6uj****`. The returned result shows that the access configuration contains one system policy and one inline policy.
|
|
9461
|
+
*
|
|
9462
|
+
* @param request ListPermissionPoliciesInAccessConfigurationRequest
|
|
9463
|
+
* @return ListPermissionPoliciesInAccessConfigurationResponse
|
|
8950
9464
|
*/
|
|
8951
9465
|
async listPermissionPoliciesInAccessConfiguration(request) {
|
|
8952
9466
|
let runtime = new $Util.RuntimeOptions({});
|
|
8953
9467
|
return await this.listPermissionPoliciesInAccessConfigurationWithOptions(request, runtime);
|
|
8954
9468
|
}
|
|
8955
9469
|
/**
|
|
8956
|
-
|
|
8957
|
-
|
|
8958
|
-
|
|
8959
|
-
|
|
8960
|
-
|
|
9470
|
+
* @summary Queries Cross-domain Identity Management (SCIM) credentials.
|
|
9471
|
+
*
|
|
9472
|
+
* @description This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
|
|
9473
|
+
*
|
|
9474
|
+
* @param request ListSCIMServerCredentialsRequest
|
|
9475
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9476
|
+
* @return ListSCIMServerCredentialsResponse
|
|
8961
9477
|
*/
|
|
8962
9478
|
async listSCIMServerCredentialsWithOptions(request, runtime) {
|
|
8963
9479
|
tea_util_1.default.validateModel(request);
|
|
@@ -8982,22 +9498,26 @@ class Client extends openapi_client_1.default {
|
|
|
8982
9498
|
return $tea.cast(await this.callApi(params, req, runtime), new ListSCIMServerCredentialsResponse({}));
|
|
8983
9499
|
}
|
|
8984
9500
|
/**
|
|
8985
|
-
|
|
8986
|
-
|
|
8987
|
-
|
|
8988
|
-
|
|
9501
|
+
* @summary Queries Cross-domain Identity Management (SCIM) credentials.
|
|
9502
|
+
*
|
|
9503
|
+
* @description This topic provides an example on how to query the SCIM credentials within the `d-00fc2p61****` directory.
|
|
9504
|
+
*
|
|
9505
|
+
* @param request ListSCIMServerCredentialsRequest
|
|
9506
|
+
* @return ListSCIMServerCredentialsResponse
|
|
8989
9507
|
*/
|
|
8990
9508
|
async listSCIMServerCredentials(request) {
|
|
8991
9509
|
let runtime = new $Util.RuntimeOptions({});
|
|
8992
9510
|
return await this.listSCIMServerCredentialsWithOptions(request, runtime);
|
|
8993
9511
|
}
|
|
8994
9512
|
/**
|
|
8995
|
-
|
|
8996
|
-
|
|
8997
|
-
|
|
8998
|
-
|
|
8999
|
-
|
|
9000
|
-
|
|
9513
|
+
* @summary Queries asynchronous tasks.
|
|
9514
|
+
*
|
|
9515
|
+
* @description By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
|
|
9516
|
+
* This topic provides an example on how to query the tasks within the previous 24 hours.
|
|
9517
|
+
*
|
|
9518
|
+
* @param request ListTasksRequest
|
|
9519
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9520
|
+
* @return ListTasksResponse
|
|
9001
9521
|
*/
|
|
9002
9522
|
async listTasksWithOptions(request, runtime) {
|
|
9003
9523
|
tea_util_1.default.validateModel(request);
|
|
@@ -9052,16 +9572,25 @@ class Client extends openapi_client_1.default {
|
|
|
9052
9572
|
return $tea.cast(await this.callApi(params, req, runtime), new ListTasksResponse({}));
|
|
9053
9573
|
}
|
|
9054
9574
|
/**
|
|
9055
|
-
|
|
9056
|
-
|
|
9057
|
-
|
|
9058
|
-
|
|
9059
|
-
|
|
9575
|
+
* @summary Queries asynchronous tasks.
|
|
9576
|
+
*
|
|
9577
|
+
* @description By default, this operation queries the tasks within the previous 24 hours. This operation allows you to query the tasks within a maximum of 7 days. You can specify the start time of the query by using `Filter`.
|
|
9578
|
+
* This topic provides an example on how to query the tasks within the previous 24 hours.
|
|
9579
|
+
*
|
|
9580
|
+
* @param request ListTasksRequest
|
|
9581
|
+
* @return ListTasksResponse
|
|
9060
9582
|
*/
|
|
9061
9583
|
async listTasks(request) {
|
|
9062
9584
|
let runtime = new $Util.RuntimeOptions({});
|
|
9063
9585
|
return await this.listTasksWithOptions(request, runtime);
|
|
9064
9586
|
}
|
|
9587
|
+
/**
|
|
9588
|
+
* @summary Queries Resource Access Management (RAM) user provisioning events.
|
|
9589
|
+
*
|
|
9590
|
+
* @param request ListUserProvisioningEventsRequest
|
|
9591
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9592
|
+
* @return ListUserProvisioningEventsResponse
|
|
9593
|
+
*/
|
|
9065
9594
|
async listUserProvisioningEventsWithOptions(request, runtime) {
|
|
9066
9595
|
tea_util_1.default.validateModel(request);
|
|
9067
9596
|
let query = {};
|
|
@@ -9093,10 +9622,23 @@ class Client extends openapi_client_1.default {
|
|
|
9093
9622
|
});
|
|
9094
9623
|
return $tea.cast(await this.callApi(params, req, runtime), new ListUserProvisioningEventsResponse({}));
|
|
9095
9624
|
}
|
|
9625
|
+
/**
|
|
9626
|
+
* @summary Queries Resource Access Management (RAM) user provisioning events.
|
|
9627
|
+
*
|
|
9628
|
+
* @param request ListUserProvisioningEventsRequest
|
|
9629
|
+
* @return ListUserProvisioningEventsResponse
|
|
9630
|
+
*/
|
|
9096
9631
|
async listUserProvisioningEvents(request) {
|
|
9097
9632
|
let runtime = new $Util.RuntimeOptions({});
|
|
9098
9633
|
return await this.listUserProvisioningEventsWithOptions(request, runtime);
|
|
9099
9634
|
}
|
|
9635
|
+
/**
|
|
9636
|
+
* @summary Queries Resource Access Management (RAM) user provisionings.
|
|
9637
|
+
*
|
|
9638
|
+
* @param request ListUserProvisioningsRequest
|
|
9639
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9640
|
+
* @return ListUserProvisioningsResponse
|
|
9641
|
+
*/
|
|
9100
9642
|
async listUserProvisioningsWithOptions(request, runtime) {
|
|
9101
9643
|
tea_util_1.default.validateModel(request);
|
|
9102
9644
|
let query = {};
|
|
@@ -9137,16 +9679,24 @@ class Client extends openapi_client_1.default {
|
|
|
9137
9679
|
});
|
|
9138
9680
|
return $tea.cast(await this.callApi(params, req, runtime), new ListUserProvisioningsResponse({}));
|
|
9139
9681
|
}
|
|
9682
|
+
/**
|
|
9683
|
+
* @summary Queries Resource Access Management (RAM) user provisionings.
|
|
9684
|
+
*
|
|
9685
|
+
* @param request ListUserProvisioningsRequest
|
|
9686
|
+
* @return ListUserProvisioningsResponse
|
|
9687
|
+
*/
|
|
9140
9688
|
async listUserProvisionings(request) {
|
|
9141
9689
|
let runtime = new $Util.RuntimeOptions({});
|
|
9142
9690
|
return await this.listUserProvisioningsWithOptions(request, runtime);
|
|
9143
9691
|
}
|
|
9144
9692
|
/**
|
|
9145
|
-
|
|
9146
|
-
|
|
9147
|
-
|
|
9148
|
-
|
|
9149
|
-
|
|
9693
|
+
* @summary Queries users.
|
|
9694
|
+
*
|
|
9695
|
+
* @description This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
|
|
9696
|
+
*
|
|
9697
|
+
* @param request ListUsersRequest
|
|
9698
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9699
|
+
* @return ListUsersResponse
|
|
9150
9700
|
*/
|
|
9151
9701
|
async listUsersWithOptions(request, runtime) {
|
|
9152
9702
|
tea_util_1.default.validateModel(request);
|
|
@@ -9186,22 +9736,26 @@ class Client extends openapi_client_1.default {
|
|
|
9186
9736
|
return $tea.cast(await this.callApi(params, req, runtime), new ListUsersResponse({}));
|
|
9187
9737
|
}
|
|
9188
9738
|
/**
|
|
9189
|
-
|
|
9190
|
-
|
|
9191
|
-
|
|
9192
|
-
|
|
9739
|
+
* @summary Queries users.
|
|
9740
|
+
*
|
|
9741
|
+
* @description This topic provides an example on how to query users in the `d-00fc2p61****` directory. The returned result shows that the directory contains two users. The user `AliceLee` is synchronized from an external identity provider (IdP). The user `user1` is manually created within CloudSSO.
|
|
9742
|
+
*
|
|
9743
|
+
* @param request ListUsersRequest
|
|
9744
|
+
* @return ListUsersResponse
|
|
9193
9745
|
*/
|
|
9194
9746
|
async listUsers(request) {
|
|
9195
9747
|
let runtime = new $Util.RuntimeOptions({});
|
|
9196
9748
|
return await this.listUsersWithOptions(request, runtime);
|
|
9197
9749
|
}
|
|
9198
9750
|
/**
|
|
9199
|
-
|
|
9200
|
-
|
|
9201
|
-
|
|
9202
|
-
|
|
9203
|
-
|
|
9204
|
-
|
|
9751
|
+
* @summary Provisions an access configuration for an account in your resource directory.
|
|
9752
|
+
*
|
|
9753
|
+
* @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
9754
|
+
* This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
|
|
9755
|
+
*
|
|
9756
|
+
* @param request ProvisionAccessConfigurationRequest
|
|
9757
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9758
|
+
* @return ProvisionAccessConfigurationResponse
|
|
9205
9759
|
*/
|
|
9206
9760
|
async provisionAccessConfigurationWithOptions(request, runtime) {
|
|
9207
9761
|
tea_util_1.default.validateModel(request);
|
|
@@ -9235,22 +9789,26 @@ class Client extends openapi_client_1.default {
|
|
|
9235
9789
|
return $tea.cast(await this.callApi(params, req, runtime), new ProvisionAccessConfigurationResponse({}));
|
|
9236
9790
|
}
|
|
9237
9791
|
/**
|
|
9238
|
-
|
|
9239
|
-
|
|
9240
|
-
|
|
9241
|
-
|
|
9242
|
-
|
|
9792
|
+
* @summary Provisions an access configuration for an account in your resource directory.
|
|
9793
|
+
*
|
|
9794
|
+
* @description When you call this operation, an asynchronous task is automatically created. You can call the [GetTask](https://help.aliyun.com/document_detail/340670.html) operation to query the progress of the task based on the value of the `TaskId` response parameter.
|
|
9795
|
+
* This topic provides an example on how to provision the access configuration `ac-00jhtfl8thteu6uj****` for the account `114240524784****` in your resource directory.
|
|
9796
|
+
*
|
|
9797
|
+
* @param request ProvisionAccessConfigurationRequest
|
|
9798
|
+
* @return ProvisionAccessConfigurationResponse
|
|
9243
9799
|
*/
|
|
9244
9800
|
async provisionAccessConfiguration(request) {
|
|
9245
9801
|
let runtime = new $Util.RuntimeOptions({});
|
|
9246
9802
|
return await this.provisionAccessConfigurationWithOptions(request, runtime);
|
|
9247
9803
|
}
|
|
9248
9804
|
/**
|
|
9249
|
-
|
|
9250
|
-
|
|
9251
|
-
|
|
9252
|
-
|
|
9253
|
-
|
|
9805
|
+
* @summary Removes a Security Assertion Markup Language (SAML) signing certificate.
|
|
9806
|
+
*
|
|
9807
|
+
* @description This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
|
|
9808
|
+
*
|
|
9809
|
+
* @param request RemoveExternalSAMLIdPCertificateRequest
|
|
9810
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9811
|
+
* @return RemoveExternalSAMLIdPCertificateResponse
|
|
9254
9812
|
*/
|
|
9255
9813
|
async removeExternalSAMLIdPCertificateWithOptions(request, runtime) {
|
|
9256
9814
|
tea_util_1.default.validateModel(request);
|
|
@@ -9278,22 +9836,26 @@ class Client extends openapi_client_1.default {
|
|
|
9278
9836
|
return $tea.cast(await this.callApi(params, req, runtime), new RemoveExternalSAMLIdPCertificateResponse({}));
|
|
9279
9837
|
}
|
|
9280
9838
|
/**
|
|
9281
|
-
|
|
9282
|
-
|
|
9283
|
-
|
|
9284
|
-
|
|
9839
|
+
* @summary Removes a Security Assertion Markup Language (SAML) signing certificate.
|
|
9840
|
+
*
|
|
9841
|
+
* @description This topic provides an example on how to remove the SAML signing certificate whose ID is `idp-c-00dt9gnl7fmjaw9c****`.
|
|
9842
|
+
*
|
|
9843
|
+
* @param request RemoveExternalSAMLIdPCertificateRequest
|
|
9844
|
+
* @return RemoveExternalSAMLIdPCertificateResponse
|
|
9285
9845
|
*/
|
|
9286
9846
|
async removeExternalSAMLIdPCertificate(request) {
|
|
9287
9847
|
let runtime = new $Util.RuntimeOptions({});
|
|
9288
9848
|
return await this.removeExternalSAMLIdPCertificateWithOptions(request, runtime);
|
|
9289
9849
|
}
|
|
9290
9850
|
/**
|
|
9291
|
-
|
|
9292
|
-
|
|
9293
|
-
|
|
9294
|
-
|
|
9295
|
-
|
|
9296
|
-
|
|
9851
|
+
* @summary Removes a policy from an access configuration.
|
|
9852
|
+
*
|
|
9853
|
+
* @description After you remove an inline policy from an access configuration, the policy cannot be restored.
|
|
9854
|
+
* This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
9855
|
+
*
|
|
9856
|
+
* @param request RemovePermissionPolicyFromAccessConfigurationRequest
|
|
9857
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9858
|
+
* @return RemovePermissionPolicyFromAccessConfigurationResponse
|
|
9297
9859
|
*/
|
|
9298
9860
|
async removePermissionPolicyFromAccessConfigurationWithOptions(request, runtime) {
|
|
9299
9861
|
tea_util_1.default.validateModel(request);
|
|
@@ -9327,23 +9889,27 @@ class Client extends openapi_client_1.default {
|
|
|
9327
9889
|
return $tea.cast(await this.callApi(params, req, runtime), new RemovePermissionPolicyFromAccessConfigurationResponse({}));
|
|
9328
9890
|
}
|
|
9329
9891
|
/**
|
|
9330
|
-
|
|
9331
|
-
|
|
9332
|
-
|
|
9333
|
-
|
|
9334
|
-
|
|
9892
|
+
* @summary Removes a policy from an access configuration.
|
|
9893
|
+
*
|
|
9894
|
+
* @description After you remove an inline policy from an access configuration, the policy cannot be restored.
|
|
9895
|
+
* This topic provides an example on how to remove the system policy `AliyunECSFullAccess` from the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
9896
|
+
*
|
|
9897
|
+
* @param request RemovePermissionPolicyFromAccessConfigurationRequest
|
|
9898
|
+
* @return RemovePermissionPolicyFromAccessConfigurationResponse
|
|
9335
9899
|
*/
|
|
9336
9900
|
async removePermissionPolicyFromAccessConfiguration(request) {
|
|
9337
9901
|
let runtime = new $Util.RuntimeOptions({});
|
|
9338
9902
|
return await this.removePermissionPolicyFromAccessConfigurationWithOptions(request, runtime);
|
|
9339
9903
|
}
|
|
9340
9904
|
/**
|
|
9341
|
-
|
|
9342
|
-
|
|
9343
|
-
|
|
9344
|
-
|
|
9345
|
-
|
|
9346
|
-
|
|
9905
|
+
* @summary Removes a user from a group.
|
|
9906
|
+
*
|
|
9907
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.
|
|
9908
|
+
* This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
|
|
9909
|
+
*
|
|
9910
|
+
* @param request RemoveUserFromGroupRequest
|
|
9911
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9912
|
+
* @return RemoveUserFromGroupResponse
|
|
9347
9913
|
*/
|
|
9348
9914
|
async removeUserFromGroupWithOptions(request, runtime) {
|
|
9349
9915
|
tea_util_1.default.validateModel(request);
|
|
@@ -9374,24 +9940,28 @@ class Client extends openapi_client_1.default {
|
|
|
9374
9940
|
return $tea.cast(await this.callApi(params, req, runtime), new RemoveUserFromGroupResponse({}));
|
|
9375
9941
|
}
|
|
9376
9942
|
/**
|
|
9377
|
-
|
|
9378
|
-
|
|
9379
|
-
|
|
9380
|
-
|
|
9381
|
-
|
|
9943
|
+
* @summary Removes a user from a group.
|
|
9944
|
+
*
|
|
9945
|
+
* @description If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot remove a user from a group that is synchronized by using SCIM.
|
|
9946
|
+
* This topic provides an example on how to remove the user `u-00q8wbq42wiltcrk****` from the group `g-00jqzghi2n3o5hkh****`.
|
|
9947
|
+
*
|
|
9948
|
+
* @param request RemoveUserFromGroupRequest
|
|
9949
|
+
* @return RemoveUserFromGroupResponse
|
|
9382
9950
|
*/
|
|
9383
9951
|
async removeUserFromGroup(request) {
|
|
9384
9952
|
let runtime = new $Util.RuntimeOptions({});
|
|
9385
9953
|
return await this.removeUserFromGroupWithOptions(request, runtime);
|
|
9386
9954
|
}
|
|
9387
9955
|
/**
|
|
9388
|
-
|
|
9389
|
-
|
|
9390
|
-
|
|
9391
|
-
|
|
9392
|
-
|
|
9393
|
-
|
|
9394
|
-
|
|
9956
|
+
* @summary Resets the password of a user.
|
|
9957
|
+
*
|
|
9958
|
+
* @description If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
|
|
9959
|
+
* > After you enable SSO logon, your password cannot be reset.
|
|
9960
|
+
* This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
|
|
9961
|
+
*
|
|
9962
|
+
* @param request ResetUserPasswordRequest
|
|
9963
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
9964
|
+
* @return ResetUserPasswordResponse
|
|
9395
9965
|
*/
|
|
9396
9966
|
async resetUserPasswordWithOptions(request, runtime) {
|
|
9397
9967
|
tea_util_1.default.validateModel(request);
|
|
@@ -9428,17 +9998,26 @@ class Client extends openapi_client_1.default {
|
|
|
9428
9998
|
return $tea.cast(await this.callApi(params, req, runtime), new ResetUserPasswordResponse({}));
|
|
9429
9999
|
}
|
|
9430
10000
|
/**
|
|
9431
|
-
|
|
9432
|
-
|
|
9433
|
-
|
|
9434
|
-
|
|
9435
|
-
|
|
9436
|
-
|
|
10001
|
+
* @summary Resets the password of a user.
|
|
10002
|
+
*
|
|
10003
|
+
* @description If you forget your password or your password expires or is at risk, you must contact a CloudSSO administrator to reset your password.
|
|
10004
|
+
* > After you enable SSO logon, your password cannot be reset.
|
|
10005
|
+
* This topic provides an example on how to reset the password of the user `u-00q8wbq42wiltcrk****`. The new password is automatically generated by the system.
|
|
10006
|
+
*
|
|
10007
|
+
* @param request ResetUserPasswordRequest
|
|
10008
|
+
* @return ResetUserPasswordResponse
|
|
9437
10009
|
*/
|
|
9438
10010
|
async resetUserPassword(request) {
|
|
9439
10011
|
let runtime = new $Util.RuntimeOptions({});
|
|
9440
10012
|
return await this.resetUserPasswordWithOptions(request, runtime);
|
|
9441
10013
|
}
|
|
10014
|
+
/**
|
|
10015
|
+
* @summary Retries a Resource Access Management (RAM) user provisioning event.
|
|
10016
|
+
*
|
|
10017
|
+
* @param request RetryUserProvisioningEventRequest
|
|
10018
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10019
|
+
* @return RetryUserProvisioningEventResponse
|
|
10020
|
+
*/
|
|
9442
10021
|
async retryUserProvisioningEventWithOptions(request, runtime) {
|
|
9443
10022
|
tea_util_1.default.validateModel(request);
|
|
9444
10023
|
let query = {};
|
|
@@ -9467,24 +10046,32 @@ class Client extends openapi_client_1.default {
|
|
|
9467
10046
|
});
|
|
9468
10047
|
return $tea.cast(await this.callApi(params, req, runtime), new RetryUserProvisioningEventResponse({}));
|
|
9469
10048
|
}
|
|
10049
|
+
/**
|
|
10050
|
+
* @summary Retries a Resource Access Management (RAM) user provisioning event.
|
|
10051
|
+
*
|
|
10052
|
+
* @param request RetryUserProvisioningEventRequest
|
|
10053
|
+
* @return RetryUserProvisioningEventResponse
|
|
10054
|
+
*/
|
|
9470
10055
|
async retryUserProvisioningEvent(request) {
|
|
9471
10056
|
let runtime = new $Util.RuntimeOptions({});
|
|
9472
10057
|
return await this.retryUserProvisioningEventWithOptions(request, runtime);
|
|
9473
10058
|
}
|
|
9474
10059
|
/**
|
|
9475
|
-
|
|
9476
|
-
|
|
9477
|
-
|
|
9478
|
-
|
|
9479
|
-
|
|
9480
|
-
|
|
9481
|
-
|
|
9482
|
-
|
|
9483
|
-
|
|
9484
|
-
|
|
9485
|
-
|
|
9486
|
-
|
|
9487
|
-
|
|
10060
|
+
* @summary Configures a Security Assertion Markup Language (SAML) identity provider (IdP).
|
|
10061
|
+
*
|
|
10062
|
+
* @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
|
|
10063
|
+
* You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
|
|
10064
|
+
* * Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
|
|
10065
|
+
* * Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
|
|
10066
|
+
* If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
|
|
10067
|
+
* * If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
|
|
10068
|
+
* * If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
|
|
10069
|
+
* > If SSO logon is enabled, new configurations immediately take effect. Take note of the impacts on the production environment.
|
|
10070
|
+
* This topic provides an example on how to configure an IdP by using the metadata file within the directory `d-00fc2p61****`.
|
|
10071
|
+
*
|
|
10072
|
+
* @param request SetExternalSAMLIdentityProviderRequest
|
|
10073
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10074
|
+
* @return SetExternalSAMLIdentityProviderResponse
|
|
9488
10075
|
*/
|
|
9489
10076
|
async setExternalSAMLIdentityProviderWithOptions(request, runtime) {
|
|
9490
10077
|
tea_util_1.default.validateModel(request);
|
|
@@ -9527,23 +10114,32 @@ class Client extends openapi_client_1.default {
|
|
|
9527
10114
|
return $tea.cast(await this.callApi(params, req, runtime), new SetExternalSAMLIdentityProviderResponse({}));
|
|
9528
10115
|
}
|
|
9529
10116
|
/**
|
|
9530
|
-
|
|
9531
|
-
|
|
9532
|
-
|
|
9533
|
-
|
|
9534
|
-
|
|
9535
|
-
|
|
9536
|
-
|
|
9537
|
-
|
|
9538
|
-
|
|
9539
|
-
|
|
9540
|
-
|
|
9541
|
-
|
|
10117
|
+
* @summary Configures a Security Assertion Markup Language (SAML) identity provider (IdP).
|
|
10118
|
+
*
|
|
10119
|
+
* @description During SAML 2.0-based single sign-on (SSO) logon, CloudSSO is an SP, and the identity management system of an enterprise is an IdP.
|
|
10120
|
+
* You can use one of the following methods to configure a SAML IdP. You can obtain the required metadata file or parameter values from your IdP.
|
|
10121
|
+
* * Use the metadata file. You can specify the `EncodedMetadataDocument` parameter to upload the metadata file.
|
|
10122
|
+
* * Manually configure the IdP. You can manually specify the following parameters for your IdP: `EntityId`, `LoginUrl`, `WantRequestSigned`, and `X509Certificate`.
|
|
10123
|
+
* If you have configured a SAML IdP, the existing configurations are replaced after you call this operation.
|
|
10124
|
+
* * If the IdP is configured by using the metadata file, all existing configurations are replaced with new configurations.
|
|
10125
|
+
* * If the IdP is manually configured, the original parameter values that are different from the new parameter values are replaced.
|
|
10126
|
+
* > If SSO logon is enabled, new configurations immediately take effect. Take note of the impacts on the production environment.
|
|
10127
|
+
* This topic provides an example on how to configure an IdP by using the metadata file within the directory `d-00fc2p61****`.
|
|
10128
|
+
*
|
|
10129
|
+
* @param request SetExternalSAMLIdentityProviderRequest
|
|
10130
|
+
* @return SetExternalSAMLIdentityProviderResponse
|
|
9542
10131
|
*/
|
|
9543
10132
|
async setExternalSAMLIdentityProvider(request) {
|
|
9544
10133
|
let runtime = new $Util.RuntimeOptions({});
|
|
9545
10134
|
return await this.setExternalSAMLIdentityProviderWithOptions(request, runtime);
|
|
9546
10135
|
}
|
|
10136
|
+
/**
|
|
10137
|
+
* @summary Configures the logon preference of CloudSSO users.
|
|
10138
|
+
*
|
|
10139
|
+
* @param request SetLoginPreferenceRequest
|
|
10140
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10141
|
+
* @return SetLoginPreferenceResponse
|
|
10142
|
+
*/
|
|
9547
10143
|
async setLoginPreferenceWithOptions(request, runtime) {
|
|
9548
10144
|
tea_util_1.default.validateModel(request);
|
|
9549
10145
|
let query = {};
|
|
@@ -9569,17 +10165,25 @@ class Client extends openapi_client_1.default {
|
|
|
9569
10165
|
});
|
|
9570
10166
|
return $tea.cast(await this.callApi(params, req, runtime), new SetLoginPreferenceResponse({}));
|
|
9571
10167
|
}
|
|
10168
|
+
/**
|
|
10169
|
+
* @summary Configures the logon preference of CloudSSO users.
|
|
10170
|
+
*
|
|
10171
|
+
* @param request SetLoginPreferenceRequest
|
|
10172
|
+
* @return SetLoginPreferenceResponse
|
|
10173
|
+
*/
|
|
9572
10174
|
async setLoginPreference(request) {
|
|
9573
10175
|
let runtime = new $Util.RuntimeOptions({});
|
|
9574
10176
|
return await this.setLoginPreferenceWithOptions(request, runtime);
|
|
9575
10177
|
}
|
|
9576
10178
|
/**
|
|
9577
|
-
|
|
9578
|
-
|
|
9579
|
-
|
|
9580
|
-
|
|
9581
|
-
|
|
9582
|
-
|
|
10179
|
+
* @summary Enables or disables multi-factor authentication (MFA) for users in a directory.
|
|
10180
|
+
*
|
|
10181
|
+
* @description If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
|
|
10182
|
+
* This topic provides an example on how to enable MFA for users.
|
|
10183
|
+
*
|
|
10184
|
+
* @param request SetMFAAuthenticationStatusRequest
|
|
10185
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10186
|
+
* @return SetMFAAuthenticationStatusResponse
|
|
9583
10187
|
*/
|
|
9584
10188
|
async setMFAAuthenticationStatusWithOptions(request, runtime) {
|
|
9585
10189
|
tea_util_1.default.validateModel(request);
|
|
@@ -9607,16 +10211,25 @@ class Client extends openapi_client_1.default {
|
|
|
9607
10211
|
return $tea.cast(await this.callApi(params, req, runtime), new SetMFAAuthenticationStatusResponse({}));
|
|
9608
10212
|
}
|
|
9609
10213
|
/**
|
|
9610
|
-
|
|
9611
|
-
|
|
9612
|
-
|
|
9613
|
-
|
|
9614
|
-
|
|
10214
|
+
* @summary Enables or disables multi-factor authentication (MFA) for users in a directory.
|
|
10215
|
+
*
|
|
10216
|
+
* @description If a CloudSSO administrator enables username-password logon for users, CloudSSO automatically enables MFA to improve security. The administrator can call this operation to enable or disable MFA based on the business requirements.
|
|
10217
|
+
* This topic provides an example on how to enable MFA for users.
|
|
10218
|
+
*
|
|
10219
|
+
* @param request SetMFAAuthenticationStatusRequest
|
|
10220
|
+
* @return SetMFAAuthenticationStatusResponse
|
|
9615
10221
|
*/
|
|
9616
10222
|
async setMFAAuthenticationStatus(request) {
|
|
9617
10223
|
let runtime = new $Util.RuntimeOptions({});
|
|
9618
10224
|
return await this.setMFAAuthenticationStatusWithOptions(request, runtime);
|
|
9619
10225
|
}
|
|
10226
|
+
/**
|
|
10227
|
+
* @summary Configures a password policy for CloudSSO users.
|
|
10228
|
+
*
|
|
10229
|
+
* @param request SetPasswordPolicyRequest
|
|
10230
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10231
|
+
* @return SetPasswordPolicyResponse
|
|
10232
|
+
*/
|
|
9620
10233
|
async setPasswordPolicyWithOptions(request, runtime) {
|
|
9621
10234
|
tea_util_1.default.validateModel(request);
|
|
9622
10235
|
let query = {};
|
|
@@ -9657,19 +10270,27 @@ class Client extends openapi_client_1.default {
|
|
|
9657
10270
|
});
|
|
9658
10271
|
return $tea.cast(await this.callApi(params, req, runtime), new SetPasswordPolicyResponse({}));
|
|
9659
10272
|
}
|
|
10273
|
+
/**
|
|
10274
|
+
* @summary Configures a password policy for CloudSSO users.
|
|
10275
|
+
*
|
|
10276
|
+
* @param request SetPasswordPolicyRequest
|
|
10277
|
+
* @return SetPasswordPolicyResponse
|
|
10278
|
+
*/
|
|
9660
10279
|
async setPasswordPolicy(request) {
|
|
9661
10280
|
let runtime = new $Util.RuntimeOptions({});
|
|
9662
10281
|
return await this.setPasswordPolicyWithOptions(request, runtime);
|
|
9663
10282
|
}
|
|
9664
10283
|
/**
|
|
9665
|
-
|
|
9666
|
-
|
|
9667
|
-
|
|
9668
|
-
|
|
9669
|
-
|
|
9670
|
-
|
|
9671
|
-
|
|
9672
|
-
|
|
10284
|
+
* @summary Enables or disables Cross-domain Identity Management (SCIM) synchronization.
|
|
10285
|
+
*
|
|
10286
|
+
* @description You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
|
|
10287
|
+
* * After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
|
|
10288
|
+
* * After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
|
|
10289
|
+
* This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
|
|
10290
|
+
*
|
|
10291
|
+
* @param request SetSCIMSynchronizationStatusRequest
|
|
10292
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10293
|
+
* @return SetSCIMSynchronizationStatusResponse
|
|
9673
10294
|
*/
|
|
9674
10295
|
async setSCIMSynchronizationStatusWithOptions(request, runtime) {
|
|
9675
10296
|
tea_util_1.default.validateModel(request);
|
|
@@ -9697,25 +10318,29 @@ class Client extends openapi_client_1.default {
|
|
|
9697
10318
|
return $tea.cast(await this.callApi(params, req, runtime), new SetSCIMSynchronizationStatusResponse({}));
|
|
9698
10319
|
}
|
|
9699
10320
|
/**
|
|
9700
|
-
|
|
9701
|
-
|
|
9702
|
-
|
|
9703
|
-
|
|
9704
|
-
|
|
9705
|
-
|
|
9706
|
-
|
|
10321
|
+
* @summary Enables or disables Cross-domain Identity Management (SCIM) synchronization.
|
|
10322
|
+
*
|
|
10323
|
+
* @description You can synchronize users or groups from an external identity provider (IdP) that supports SCIM 2.0 to CloudSSO only after SCIM synchronization is enabled. If you disable SCIM synchronization, you can no longer synchronize users or groups to CloudSSO. The following list describes the impacts after SCIM synchronization is enabled or disabled:
|
|
10324
|
+
* * After you enable SCIM synchronization, you cannot modify or delete the users or groups that are synchronized to CloudSSO by using SCIM. In addition, you cannot add users to or remove users from the groups. However, you can change the passwords of the users and enable or disable the logon of the users.
|
|
10325
|
+
* * After you disable SCIM synchronization, you can modify and delete the users and groups that are synchronized to CloudSSO by using SCIM. You can also add users to or remove users from the groups.
|
|
10326
|
+
* This topic provides an example on how to enable SCIM synchronization within the directory `d-00fc2p61****`.
|
|
10327
|
+
*
|
|
10328
|
+
* @param request SetSCIMSynchronizationStatusRequest
|
|
10329
|
+
* @return SetSCIMSynchronizationStatusResponse
|
|
9707
10330
|
*/
|
|
9708
10331
|
async setSCIMSynchronizationStatus(request) {
|
|
9709
10332
|
let runtime = new $Util.RuntimeOptions({});
|
|
9710
10333
|
return await this.setSCIMSynchronizationStatusWithOptions(request, runtime);
|
|
9711
10334
|
}
|
|
9712
10335
|
/**
|
|
9713
|
-
|
|
9714
|
-
|
|
9715
|
-
|
|
9716
|
-
|
|
9717
|
-
|
|
9718
|
-
|
|
10336
|
+
* @summary Modifies information about an access configuration.
|
|
10337
|
+
*
|
|
10338
|
+
* @description You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
|
|
10339
|
+
* This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
|
|
10340
|
+
*
|
|
10341
|
+
* @param request UpdateAccessConfigurationRequest
|
|
10342
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10343
|
+
* @return UpdateAccessConfigurationResponse
|
|
9719
10344
|
*/
|
|
9720
10345
|
async updateAccessConfigurationWithOptions(request, runtime) {
|
|
9721
10346
|
tea_util_1.default.validateModel(request);
|
|
@@ -9752,23 +10377,27 @@ class Client extends openapi_client_1.default {
|
|
|
9752
10377
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateAccessConfigurationResponse({}));
|
|
9753
10378
|
}
|
|
9754
10379
|
/**
|
|
9755
|
-
|
|
9756
|
-
|
|
9757
|
-
|
|
9758
|
-
|
|
9759
|
-
|
|
10380
|
+
* @summary Modifies information about an access configuration.
|
|
10381
|
+
*
|
|
10382
|
+
* @description You can modify the `Description`, `SessionDuration`, and `RelayState` parameters for an access configuration.
|
|
10383
|
+
* This topic provides an example on how to change the initial web page in the access configuration `ac-00jhtfl8thteu6uj****` to `https://cloudsso.console.aliyun.com`.
|
|
10384
|
+
*
|
|
10385
|
+
* @param request UpdateAccessConfigurationRequest
|
|
10386
|
+
* @return UpdateAccessConfigurationResponse
|
|
9760
10387
|
*/
|
|
9761
10388
|
async updateAccessConfiguration(request) {
|
|
9762
10389
|
let runtime = new $Util.RuntimeOptions({});
|
|
9763
10390
|
return await this.updateAccessConfigurationWithOptions(request, runtime);
|
|
9764
10391
|
}
|
|
9765
10392
|
/**
|
|
9766
|
-
|
|
9767
|
-
|
|
9768
|
-
|
|
9769
|
-
|
|
9770
|
-
|
|
9771
|
-
|
|
10393
|
+
* @summary Changes the name of a directory.
|
|
10394
|
+
*
|
|
10395
|
+
* @description After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL.
|
|
10396
|
+
* This topic provides an example on how to change the name of a directory to `new-example`.
|
|
10397
|
+
*
|
|
10398
|
+
* @param request UpdateDirectoryRequest
|
|
10399
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10400
|
+
* @return UpdateDirectoryResponse
|
|
9772
10401
|
*/
|
|
9773
10402
|
async updateDirectoryWithOptions(request, runtime) {
|
|
9774
10403
|
tea_util_1.default.validateModel(request);
|
|
@@ -9796,24 +10425,28 @@ class Client extends openapi_client_1.default {
|
|
|
9796
10425
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateDirectoryResponse({}));
|
|
9797
10426
|
}
|
|
9798
10427
|
/**
|
|
9799
|
-
|
|
9800
|
-
|
|
9801
|
-
|
|
9802
|
-
|
|
9803
|
-
|
|
10428
|
+
* @summary Changes the name of a directory.
|
|
10429
|
+
*
|
|
10430
|
+
* @description After you change the name of a directory, the URL that is used to log on to the Cloud SSO user portal is changed. You must notify the Cloud SSO users of the correct URL.
|
|
10431
|
+
* This topic provides an example on how to change the name of a directory to `new-example`.
|
|
10432
|
+
*
|
|
10433
|
+
* @param request UpdateDirectoryRequest
|
|
10434
|
+
* @return UpdateDirectoryResponse
|
|
9804
10435
|
*/
|
|
9805
10436
|
async updateDirectory(request) {
|
|
9806
10437
|
let runtime = new $Util.RuntimeOptions({});
|
|
9807
10438
|
return await this.updateDirectoryWithOptions(request, runtime);
|
|
9808
10439
|
}
|
|
9809
10440
|
/**
|
|
9810
|
-
|
|
9811
|
-
|
|
9812
|
-
|
|
9813
|
-
|
|
9814
|
-
|
|
9815
|
-
|
|
9816
|
-
|
|
10441
|
+
* @summary Modifies information about a group.
|
|
10442
|
+
*
|
|
10443
|
+
* @description You can modify `GroupName` and `Description` for a group.
|
|
10444
|
+
* > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
|
|
10445
|
+
* This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
|
|
10446
|
+
*
|
|
10447
|
+
* @param request UpdateGroupRequest
|
|
10448
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10449
|
+
* @return UpdateGroupResponse
|
|
9817
10450
|
*/
|
|
9818
10451
|
async updateGroupWithOptions(request, runtime) {
|
|
9819
10452
|
tea_util_1.default.validateModel(request);
|
|
@@ -9847,23 +10480,27 @@ class Client extends openapi_client_1.default {
|
|
|
9847
10480
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateGroupResponse({}));
|
|
9848
10481
|
}
|
|
9849
10482
|
/**
|
|
9850
|
-
|
|
9851
|
-
|
|
9852
|
-
|
|
9853
|
-
|
|
9854
|
-
|
|
9855
|
-
|
|
10483
|
+
* @summary Modifies information about a group.
|
|
10484
|
+
*
|
|
10485
|
+
* @description You can modify `GroupName` and `Description` for a group.
|
|
10486
|
+
* > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a group that is synchronized by using SCIM.
|
|
10487
|
+
* This topic provides an example on how to change the name of the group `g-00jqzghi2n3o5hkh****` to `NewTestGroup`.
|
|
10488
|
+
*
|
|
10489
|
+
* @param request UpdateGroupRequest
|
|
10490
|
+
* @return UpdateGroupResponse
|
|
9856
10491
|
*/
|
|
9857
10492
|
async updateGroup(request) {
|
|
9858
10493
|
let runtime = new $Util.RuntimeOptions({});
|
|
9859
10494
|
return await this.updateGroupWithOptions(request, runtime);
|
|
9860
10495
|
}
|
|
9861
10496
|
/**
|
|
9862
|
-
|
|
9863
|
-
|
|
9864
|
-
|
|
9865
|
-
|
|
9866
|
-
|
|
10497
|
+
* @summary Modifies an inline policy that is created for an access configuration.
|
|
10498
|
+
*
|
|
10499
|
+
* @description This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
10500
|
+
*
|
|
10501
|
+
* @param request UpdateInlinePolicyForAccessConfigurationRequest
|
|
10502
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10503
|
+
* @return UpdateInlinePolicyForAccessConfigurationResponse
|
|
9867
10504
|
*/
|
|
9868
10505
|
async updateInlinePolicyForAccessConfigurationWithOptions(request, runtime) {
|
|
9869
10506
|
tea_util_1.default.validateModel(request);
|
|
@@ -9897,22 +10534,26 @@ class Client extends openapi_client_1.default {
|
|
|
9897
10534
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateInlinePolicyForAccessConfigurationResponse({}));
|
|
9898
10535
|
}
|
|
9899
10536
|
/**
|
|
9900
|
-
|
|
9901
|
-
|
|
9902
|
-
|
|
9903
|
-
|
|
10537
|
+
* @summary Modifies an inline policy that is created for an access configuration.
|
|
10538
|
+
*
|
|
10539
|
+
* @description This topic provides an example on how to modify an inline policy that is created for the access configuration `ac-00jhtfl8thteu6uj****`.
|
|
10540
|
+
*
|
|
10541
|
+
* @param request UpdateInlinePolicyForAccessConfigurationRequest
|
|
10542
|
+
* @return UpdateInlinePolicyForAccessConfigurationResponse
|
|
9904
10543
|
*/
|
|
9905
10544
|
async updateInlinePolicyForAccessConfiguration(request) {
|
|
9906
10545
|
let runtime = new $Util.RuntimeOptions({});
|
|
9907
10546
|
return await this.updateInlinePolicyForAccessConfigurationWithOptions(request, runtime);
|
|
9908
10547
|
}
|
|
9909
10548
|
/**
|
|
9910
|
-
|
|
9911
|
-
|
|
9912
|
-
|
|
9913
|
-
|
|
9914
|
-
|
|
9915
|
-
|
|
10549
|
+
* @summary Modifies the multi-factor authentication (MFA) setting of all users.
|
|
10550
|
+
*
|
|
10551
|
+
* @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
|
|
10552
|
+
* This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
|
|
10553
|
+
*
|
|
10554
|
+
* @param request UpdateMFAAuthenticationSettingsRequest
|
|
10555
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10556
|
+
* @return UpdateMFAAuthenticationSettingsResponse
|
|
9916
10557
|
*/
|
|
9917
10558
|
async updateMFAAuthenticationSettingsWithOptions(request, runtime) {
|
|
9918
10559
|
tea_util_1.default.validateModel(request);
|
|
@@ -9943,22 +10584,26 @@ class Client extends openapi_client_1.default {
|
|
|
9943
10584
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateMFAAuthenticationSettingsResponse({}));
|
|
9944
10585
|
}
|
|
9945
10586
|
/**
|
|
9946
|
-
|
|
9947
|
-
|
|
9948
|
-
|
|
9949
|
-
|
|
9950
|
-
|
|
10587
|
+
* @summary Modifies the multi-factor authentication (MFA) setting of all users.
|
|
10588
|
+
*
|
|
10589
|
+
* @description If you enable username-password logon for CloudSSO users, you can also configure MFA for the users.
|
|
10590
|
+
* This topic provides an example on how to enable MFA for all CloudSSO users that belong to the directory named `d-00fc2p61****`.
|
|
10591
|
+
*
|
|
10592
|
+
* @param request UpdateMFAAuthenticationSettingsRequest
|
|
10593
|
+
* @return UpdateMFAAuthenticationSettingsResponse
|
|
9951
10594
|
*/
|
|
9952
10595
|
async updateMFAAuthenticationSettings(request) {
|
|
9953
10596
|
let runtime = new $Util.RuntimeOptions({});
|
|
9954
10597
|
return await this.updateMFAAuthenticationSettingsWithOptions(request, runtime);
|
|
9955
10598
|
}
|
|
9956
10599
|
/**
|
|
9957
|
-
|
|
9958
|
-
|
|
9959
|
-
|
|
9960
|
-
|
|
9961
|
-
|
|
10600
|
+
* @summary Enables or disables a Cross-domain Identity Management (SCIM) credential.
|
|
10601
|
+
*
|
|
10602
|
+
* @description This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
|
|
10603
|
+
*
|
|
10604
|
+
* @param request UpdateSCIMServerCredentialStatusRequest
|
|
10605
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10606
|
+
* @return UpdateSCIMServerCredentialStatusResponse
|
|
9962
10607
|
*/
|
|
9963
10608
|
async updateSCIMServerCredentialStatusWithOptions(request, runtime) {
|
|
9964
10609
|
tea_util_1.default.validateModel(request);
|
|
@@ -9989,23 +10634,27 @@ class Client extends openapi_client_1.default {
|
|
|
9989
10634
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateSCIMServerCredentialStatusResponse({}));
|
|
9990
10635
|
}
|
|
9991
10636
|
/**
|
|
9992
|
-
|
|
9993
|
-
|
|
9994
|
-
|
|
9995
|
-
|
|
10637
|
+
* @summary Enables or disables a Cross-domain Identity Management (SCIM) credential.
|
|
10638
|
+
*
|
|
10639
|
+
* @description This topic provides an example on how to disable the SCIM credential whose ID is `scimcred-004whl0kvfwcypbi****`. After the SCIM credential is disabled, the synchronization task that uses the SCIM credential fails. You can call this operation again to enable the SCIM credential.
|
|
10640
|
+
*
|
|
10641
|
+
* @param request UpdateSCIMServerCredentialStatusRequest
|
|
10642
|
+
* @return UpdateSCIMServerCredentialStatusResponse
|
|
9996
10643
|
*/
|
|
9997
10644
|
async updateSCIMServerCredentialStatus(request) {
|
|
9998
10645
|
let runtime = new $Util.RuntimeOptions({});
|
|
9999
10646
|
return await this.updateSCIMServerCredentialStatusWithOptions(request, runtime);
|
|
10000
10647
|
}
|
|
10001
10648
|
/**
|
|
10002
|
-
|
|
10003
|
-
|
|
10004
|
-
|
|
10005
|
-
|
|
10006
|
-
|
|
10007
|
-
|
|
10008
|
-
|
|
10649
|
+
* @summary Modifies information about a user.
|
|
10650
|
+
*
|
|
10651
|
+
* @description You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
|
|
10652
|
+
* > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
|
|
10653
|
+
* This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
|
|
10654
|
+
*
|
|
10655
|
+
* @param request UpdateUserRequest
|
|
10656
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10657
|
+
* @return UpdateUserResponse
|
|
10009
10658
|
*/
|
|
10010
10659
|
async updateUserWithOptions(request, runtime) {
|
|
10011
10660
|
tea_util_1.default.validateModel(request);
|
|
@@ -10048,25 +10697,29 @@ class Client extends openapi_client_1.default {
|
|
|
10048
10697
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateUserResponse({}));
|
|
10049
10698
|
}
|
|
10050
10699
|
/**
|
|
10051
|
-
|
|
10052
|
-
|
|
10053
|
-
|
|
10054
|
-
|
|
10055
|
-
|
|
10056
|
-
|
|
10700
|
+
* @summary Modifies information about a user.
|
|
10701
|
+
*
|
|
10702
|
+
* @description You can modify `FirstName`, `LastName`, `DisplayName`, `Email`, and `Description` for a user. You cannot modify `UserName` for a user.
|
|
10703
|
+
* > If System for Cross-domain Identity Management (SCIM) synchronization is enabled, you cannot modify the information about a user that is synchronized by using SCIM.
|
|
10704
|
+
* This topic provides an example on how to change the email address of the user whose ID is `u-00q8wbq42wiltcrk****` to `AliceLee@example.com`.
|
|
10705
|
+
*
|
|
10706
|
+
* @param request UpdateUserRequest
|
|
10707
|
+
* @return UpdateUserResponse
|
|
10057
10708
|
*/
|
|
10058
10709
|
async updateUser(request) {
|
|
10059
10710
|
let runtime = new $Util.RuntimeOptions({});
|
|
10060
10711
|
return await this.updateUserWithOptions(request, runtime);
|
|
10061
10712
|
}
|
|
10062
10713
|
/**
|
|
10063
|
-
|
|
10064
|
-
|
|
10065
|
-
|
|
10066
|
-
|
|
10067
|
-
|
|
10068
|
-
|
|
10069
|
-
|
|
10714
|
+
* @summary Modifies the multi-factor authentication (MFA) setting of a single user.
|
|
10715
|
+
*
|
|
10716
|
+
* @description If you call the [UpdateMFAAuthenticationSettings](https://help.aliyun.com/document_detail/450134.html) operation to set the MFAAuthenticationSettings parameter to `Byuser`, user-specific settings are applied. Then, you must call the UpdateUserMFAAuthenticationSettings operation to configure MFA for each user.
|
|
10717
|
+
* By default, the MFAAuthenticationSettings parameter is set to `Enabled` for a new user.
|
|
10718
|
+
* This topic provides an example on how to enable MFA for the user named `u-00q8wbq42wiltcrk****`.
|
|
10719
|
+
*
|
|
10720
|
+
* @param request UpdateUserMFAAuthenticationSettingsRequest
|
|
10721
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10722
|
+
* @return UpdateUserMFAAuthenticationSettingsResponse
|
|
10070
10723
|
*/
|
|
10071
10724
|
async updateUserMFAAuthenticationSettingsWithOptions(request, runtime) {
|
|
10072
10725
|
tea_util_1.default.validateModel(request);
|
|
@@ -10097,17 +10750,26 @@ class Client extends openapi_client_1.default {
|
|
|
10097
10750
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateUserMFAAuthenticationSettingsResponse({}));
|
|
10098
10751
|
}
|
|
10099
10752
|
/**
|
|
10100
|
-
|
|
10101
|
-
|
|
10102
|
-
|
|
10103
|
-
|
|
10104
|
-
|
|
10105
|
-
|
|
10753
|
+
* @summary Modifies the multi-factor authentication (MFA) setting of a single user.
|
|
10754
|
+
*
|
|
10755
|
+
* @description If you call the [UpdateMFAAuthenticationSettings](https://help.aliyun.com/document_detail/450134.html) operation to set the MFAAuthenticationSettings parameter to `Byuser`, user-specific settings are applied. Then, you must call the UpdateUserMFAAuthenticationSettings operation to configure MFA for each user.
|
|
10756
|
+
* By default, the MFAAuthenticationSettings parameter is set to `Enabled` for a new user.
|
|
10757
|
+
* This topic provides an example on how to enable MFA for the user named `u-00q8wbq42wiltcrk****`.
|
|
10758
|
+
*
|
|
10759
|
+
* @param request UpdateUserMFAAuthenticationSettingsRequest
|
|
10760
|
+
* @return UpdateUserMFAAuthenticationSettingsResponse
|
|
10106
10761
|
*/
|
|
10107
10762
|
async updateUserMFAAuthenticationSettings(request) {
|
|
10108
10763
|
let runtime = new $Util.RuntimeOptions({});
|
|
10109
10764
|
return await this.updateUserMFAAuthenticationSettingsWithOptions(request, runtime);
|
|
10110
10765
|
}
|
|
10766
|
+
/**
|
|
10767
|
+
* @summary Modifies a Resource Access Management (RAM) user provisioning.
|
|
10768
|
+
*
|
|
10769
|
+
* @param request UpdateUserProvisioningRequest
|
|
10770
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10771
|
+
* @return UpdateUserProvisioningResponse
|
|
10772
|
+
*/
|
|
10111
10773
|
async updateUserProvisioningWithOptions(request, runtime) {
|
|
10112
10774
|
tea_util_1.default.validateModel(request);
|
|
10113
10775
|
let query = {};
|
|
@@ -10142,10 +10804,23 @@ class Client extends openapi_client_1.default {
|
|
|
10142
10804
|
});
|
|
10143
10805
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateUserProvisioningResponse({}));
|
|
10144
10806
|
}
|
|
10807
|
+
/**
|
|
10808
|
+
* @summary Modifies a Resource Access Management (RAM) user provisioning.
|
|
10809
|
+
*
|
|
10810
|
+
* @param request UpdateUserProvisioningRequest
|
|
10811
|
+
* @return UpdateUserProvisioningResponse
|
|
10812
|
+
*/
|
|
10145
10813
|
async updateUserProvisioning(request) {
|
|
10146
10814
|
let runtime = new $Util.RuntimeOptions({});
|
|
10147
10815
|
return await this.updateUserProvisioningWithOptions(request, runtime);
|
|
10148
10816
|
}
|
|
10817
|
+
/**
|
|
10818
|
+
* @summary Modifies the global configurations of a Resource Access Management (RAM) user provisioning.
|
|
10819
|
+
*
|
|
10820
|
+
* @param request UpdateUserProvisioningConfigurationRequest
|
|
10821
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10822
|
+
* @return UpdateUserProvisioningConfigurationResponse
|
|
10823
|
+
*/
|
|
10149
10824
|
async updateUserProvisioningConfigurationWithOptions(request, runtime) {
|
|
10150
10825
|
tea_util_1.default.validateModel(request);
|
|
10151
10826
|
let query = {};
|
|
@@ -10174,16 +10849,24 @@ class Client extends openapi_client_1.default {
|
|
|
10174
10849
|
});
|
|
10175
10850
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateUserProvisioningConfigurationResponse({}));
|
|
10176
10851
|
}
|
|
10852
|
+
/**
|
|
10853
|
+
* @summary Modifies the global configurations of a Resource Access Management (RAM) user provisioning.
|
|
10854
|
+
*
|
|
10855
|
+
* @param request UpdateUserProvisioningConfigurationRequest
|
|
10856
|
+
* @return UpdateUserProvisioningConfigurationResponse
|
|
10857
|
+
*/
|
|
10177
10858
|
async updateUserProvisioningConfiguration(request) {
|
|
10178
10859
|
let runtime = new $Util.RuntimeOptions({});
|
|
10179
10860
|
return await this.updateUserProvisioningConfigurationWithOptions(request, runtime);
|
|
10180
10861
|
}
|
|
10181
10862
|
/**
|
|
10182
|
-
|
|
10183
|
-
|
|
10184
|
-
|
|
10185
|
-
|
|
10186
|
-
|
|
10863
|
+
* @summary Changes the status of a user.
|
|
10864
|
+
*
|
|
10865
|
+
* @description This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
|
|
10866
|
+
*
|
|
10867
|
+
* @param request UpdateUserStatusRequest
|
|
10868
|
+
* @param runtime runtime options for this request RuntimeOptions
|
|
10869
|
+
* @return UpdateUserStatusResponse
|
|
10187
10870
|
*/
|
|
10188
10871
|
async updateUserStatusWithOptions(request, runtime) {
|
|
10189
10872
|
tea_util_1.default.validateModel(request);
|
|
@@ -10214,10 +10897,12 @@ class Client extends openapi_client_1.default {
|
|
|
10214
10897
|
return $tea.cast(await this.callApi(params, req, runtime), new UpdateUserStatusResponse({}));
|
|
10215
10898
|
}
|
|
10216
10899
|
/**
|
|
10217
|
-
|
|
10218
|
-
|
|
10219
|
-
|
|
10220
|
-
|
|
10900
|
+
* @summary Changes the status of a user.
|
|
10901
|
+
*
|
|
10902
|
+
* @description This topic provides an example on how to change the status of the user whose ID is `u-00q8wbq42wiltcrk****` to Disabled. Users in the Disabled state cannot log on to the CloudSSO user portal.
|
|
10903
|
+
*
|
|
10904
|
+
* @param request UpdateUserStatusRequest
|
|
10905
|
+
* @return UpdateUserStatusResponse
|
|
10221
10906
|
*/
|
|
10222
10907
|
async updateUserStatus(request) {
|
|
10223
10908
|
let runtime = new $Util.RuntimeOptions({});
|