@pulumi/azure 5.78.0-alpha.1716388911 → 5.78.0-alpha.1716402178

package/pim/eligibleRoleAssignment.d.ts

@@ -2,7 +2,7 @@ import * as pulumi from "@pulumi/pulumi";
 import * as inputs from "../types/input";
 import * as outputs from "../types/output";
 /**
- * Manages a Pim Eligible Role Assignment.
+ * Manages a PIM Eligible Role Assignment.
  *
  * ## Example Usage
  *
@@ -70,7 +70,7 @@ import * as outputs from "../types/output";
  *
  * ## Import
  *
- * Pim Eligible Role Assignments can be imported using the `resource id`, e.g.
+ * PIM Eligible Role Assignments can be imported using the following composite resource ID, e.g.
  *
  * ```sh
  * $ pulumi import azure:pim/eligibleRoleAssignment:EligibleRoleAssignment example /subscriptions/00000000-0000-0000-0000-000000000000|/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/00000000-0000-0000-0000-000000000000|00000000-0000-0000-0000-000000000000
@@ -93,31 +93,31 @@ export declare class EligibleRoleAssignment extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is EligibleRoleAssignment;
     /**
-     * The justification of the role assignment. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The justification of the role assignment. Changing this forces a new resource to be created.
      */
-    readonly justification: pulumi.Output<string | undefined>;
+    readonly justification: pulumi.Output<string>;
     /**
-     * The principal id. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * Object ID of the principal for this eligible role assignment. Changing this forces a new resource to be created.
      */
     readonly principalId: pulumi.Output<string>;
     /**
-     * The type of principal.
+     * Type of principal to which the role will be assigned.
      */
     readonly principalType: pulumi.Output<string>;
     /**
-     * The role definition id. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The role definition ID for this eligible role assignment. Changing this forces a new resource to be created.
      */
     readonly roleDefinitionId: pulumi.Output<string>;
     /**
-     * A `schedule` block as defined below. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * A `schedule` block as defined below. Changing this forces a new resource to be created.
      */
-    readonly schedule: pulumi.Output<outputs.pim.EligibleRoleAssignmentSchedule | undefined>;
+    readonly schedule: pulumi.Output<outputs.pim.EligibleRoleAssignmentSchedule>;
     /**
-     * The scope. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The scope for this eligible role assignment, should be a valid resource ID. Changing this forces a new resource to be created.
      */
     readonly scope: pulumi.Output<string>;
     /**
-     * A `ticket` block as defined below. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * A `ticket` block as defined below. Changing this forces a new resource to be created.
      */
     readonly ticket: pulumi.Output<outputs.pim.EligibleRoleAssignmentTicket | undefined>;
     /**
@@ -134,31 +134,31 @@ export declare class EligibleRoleAssignment extends pulumi.CustomResource {
  */
 export interface EligibleRoleAssignmentState {
     /**
-     * The justification of the role assignment. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The justification of the role assignment. Changing this forces a new resource to be created.
      */
     justification?: pulumi.Input<string>;
     /**
-     * The principal id. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * Object ID of the principal for this eligible role assignment. Changing this forces a new resource to be created.
      */
     principalId?: pulumi.Input<string>;
     /**
-     * The type of principal.
+     * Type of principal to which the role will be assigned.
      */
     principalType?: pulumi.Input<string>;
     /**
-     * The role definition id. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The role definition ID for this eligible role assignment. Changing this forces a new resource to be created.
      */
     roleDefinitionId?: pulumi.Input<string>;
     /**
-     * A `schedule` block as defined below. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * A `schedule` block as defined below. Changing this forces a new resource to be created.
      */
     schedule?: pulumi.Input<inputs.pim.EligibleRoleAssignmentSchedule>;
     /**
-     * The scope. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The scope for this eligible role assignment, should be a valid resource ID. Changing this forces a new resource to be created.
      */
     scope?: pulumi.Input<string>;
     /**
-     * A `ticket` block as defined below. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * A `ticket` block as defined below. Changing this forces a new resource to be created.
      */
     ticket?: pulumi.Input<inputs.pim.EligibleRoleAssignmentTicket>;
 }
@@ -167,27 +167,27 @@ export interface EligibleRoleAssignmentState {
  */
 export interface EligibleRoleAssignmentArgs {
     /**
-     * The justification of the role assignment. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The justification of the role assignment. Changing this forces a new resource to be created.
      */
     justification?: pulumi.Input<string>;
     /**
-     * The principal id. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * Object ID of the principal for this eligible role assignment. Changing this forces a new resource to be created.
      */
     principalId: pulumi.Input<string>;
     /**
-     * The role definition id. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The role definition ID for this eligible role assignment. Changing this forces a new resource to be created.
      */
     roleDefinitionId: pulumi.Input<string>;
     /**
-     * A `schedule` block as defined below. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * A `schedule` block as defined below. Changing this forces a new resource to be created.
      */
     schedule?: pulumi.Input<inputs.pim.EligibleRoleAssignmentSchedule>;
     /**
-     * The scope. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * The scope for this eligible role assignment, should be a valid resource ID. Changing this forces a new resource to be created.
      */
     scope: pulumi.Input<string>;
     /**
-     * A `ticket` block as defined below. Changing this forces a new Pim Eligible Role Assignment to be created.
+     * A `ticket` block as defined below. Changing this forces a new resource to be created.
      */
     ticket?: pulumi.Input<inputs.pim.EligibleRoleAssignmentTicket>;
 }

package/pim/eligibleRoleAssignment.js

@@ -6,7 +6,7 @@ exports.EligibleRoleAssignment = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
 /**
- * Manages a Pim Eligible Role Assignment.
+ * Manages a PIM Eligible Role Assignment.
  *
  * ## Example Usage
  *
@@ -74,7 +74,7 @@ const utilities = require("../utilities");
  *
  * ## Import
  *
- * Pim Eligible Role Assignments can be imported using the `resource id`, e.g.
+ * PIM Eligible Role Assignments can be imported using the following composite resource ID, e.g.
  *
  * ```sh
  * $ pulumi import azure:pim/eligibleRoleAssignment:EligibleRoleAssignment example /subscriptions/00000000-0000-0000-0000-000000000000|/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/00000000-0000-0000-0000-000000000000|00000000-0000-0000-0000-000000000000

package/sentinel/alertRuleScheduled.d.ts

@@ -67,7 +67,7 @@ export declare class AlertRuleScheduled extends pulumi.CustomResource {
      */
     readonly alertRuleTemplateGuid: pulumi.Output<string | undefined>;
     /**
-     * The version of the alert rule template which is used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
+     * The version of the alert rule template which is used for this Sentinel Scheduled Alert Rule.
      */
     readonly alertRuleTemplateVersion: pulumi.Output<string | undefined>;
     /**
@@ -180,7 +180,7 @@ export interface AlertRuleScheduledState {
      */
     alertRuleTemplateGuid?: pulumi.Input<string>;
     /**
-     * The version of the alert rule template which is used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
+     * The version of the alert rule template which is used for this Sentinel Scheduled Alert Rule.
      */
     alertRuleTemplateVersion?: pulumi.Input<string>;
     /**
@@ -285,7 +285,7 @@ export interface AlertRuleScheduledArgs {
      */
     alertRuleTemplateGuid?: pulumi.Input<string>;
     /**
-     * The version of the alert rule template which is used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
+     * The version of the alert rule template which is used for this Sentinel Scheduled Alert Rule.
      */
     alertRuleTemplateVersion?: pulumi.Input<string>;
     /**

package/types/input.d.ts

@@ -41,6 +41,10 @@ export interface ProviderFeaturesKeyVault {
      * When enabled soft-deleted `azure.keyvault.Certificate` resources will be permanently deleted (e.g purged), when destroyed
      */
     purgeSoftDeletedCertificatesOnDestroy?: pulumi.Input<boolean>;
+    /**
+     * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModuleKey` resources will be permanently deleted (e.g purged), when destroyed
+     */
+    purgeSoftDeletedHardwareSecurityModuleKeysOnDestroy?: pulumi.Input<boolean>;
     /**
      * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModule` resources will be permanently deleted (e.g purged), when destroyed
      */
@@ -57,6 +61,10 @@ export interface ProviderFeaturesKeyVault {
      * When enabled soft-deleted `azure.keyvault.Certificate` resources will be restored, instead of creating new ones
      */
     recoverSoftDeletedCertificates?: pulumi.Input<boolean>;
+    /**
+     * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModuleKey` resources will be restored, instead of creating new ones
+     */
+    recoverSoftDeletedHardwareSecurityModuleKeys?: pulumi.Input<boolean>;
     /**
      * When enabled soft-deleted `azure.keyvault.KeyVault` resources will be restored, instead of creating new ones
      */
@@ -5203,7 +5211,7 @@ export declare namespace appservice {
          */
         nodeVersion?: pulumi.Input<string>;
         /**
-         * The version of PowerShell Core to run. Possible values are `7`, and `7.2`.
+         * The version of PowerShell Core to run. Possible values are `7`, `7.2`, and `7.4`.
          */
         powershellCoreVersion?: pulumi.Input<string>;
         /**
@@ -6179,7 +6187,7 @@ export declare namespace appservice {
          */
         nodeVersion?: pulumi.Input<string>;
         /**
-         * The version of PowerShell Core to use. Possibles values are `7` , and `7.2`.
+         * The version of PowerShell Core to use. Possibles values are `7` , `7.2`, and `7.4`.
          */
         powershellCoreVersion?: pulumi.Input<string>;
         /**
@@ -10197,7 +10205,7 @@ export declare namespace appservice {
          */
         nodeVersion?: pulumi.Input<string>;
         /**
-         * The version of PowerShell Core to run. Possible values are `7`, and `7.2`.
+         * The version of PowerShell Core to run. Possible values are `7`, `7.2`, and `7.4`.
          *
          * > **NOTE:** A value of `7` will provide the latest stable version. `7.2` is in preview at the time of writing.
          */
@@ -11133,7 +11141,7 @@ export declare namespace appservice {
          */
         nodeVersion?: pulumi.Input<string>;
         /**
-         * The PowerShell Core version to use. Possible values are `7`, and `7.2`.
+         * The PowerShell Core version to use. Possible values are `7`, `7.2`, and `7.4`.
          */
         powershellCoreVersion?: pulumi.Input<string>;
         /**
@@ -21619,7 +21627,7 @@ export declare namespace containerapp {
         principalId?: pulumi.Input<string>;
         tenantId?: pulumi.Input<string>;
         /**
-         * The type of identity used for the Container App Job. Possible values are `SystemAssigned` and `None`. Defaults to `None`.
+         * The type of identity used for the Container App Job. Possible values are `SystemAssigned`, `UserAssigned` and `None`. Defaults to `None`.
          */
         type: pulumi.Input<string>;
     }
@@ -34721,6 +34729,12 @@ export declare namespace loadtest {
 }
 export declare namespace loganalytics {
     interface ClusterIdentity {
+        /**
+         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Web App Slot.
+         *
+         * > **NOTE:** This is required when `type` is set to `UserAssigned`.
+         */
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
         /**
          * The Principal ID associated with this Managed Service Identity.
          */
@@ -34730,7 +34744,7 @@ export declare namespace loganalytics {
          */
         tenantId?: pulumi.Input<string>;
         /**
-         * Specifies the type of Managed Service Identity that should be configured on this Log Analytics Cluster. The only possible value is `SystemAssigned`. Changing this forces a new resource to be created.
+         * Specifies the type of Managed Service Identity that should be configured on this Log Analytics Cluster. Possible values are `SystemAssigned` and  `UserAssigned`. Changing this forces a new resource to be created.
          *
          * > **NOTE:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and the Log Analytics Cluster has been created. More details are available below.
          */
@@ -41606,7 +41620,9 @@ export declare namespace network {
         /**
          * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Application Gateway.
          */
-        identityIds: pulumi.Input<pulumi.Input<string>[]>;
+        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
+        principalId?: pulumi.Input<string>;
+        tenantId?: pulumi.Input<string>;
         /**
          * Specifies the type of Managed Service Identity that should be configured on this Application Gateway. Only possible value is `UserAssigned`.
          */
@@ -45170,69 +45186,73 @@ export declare namespace paloalto {
 export declare namespace pim {
     interface ActiveRoleAssignmentSchedule {
         /**
-         * A `expiration` block as defined above.
+         * An `expiration` block as defined above.
          */
         expiration?: pulumi.Input<inputs.pim.ActiveRoleAssignmentScheduleExpiration>;
         /**
-         * The start date time of the role assignment. Changing this forces a new Pim Active Role Assignment to be created.
+         * The start date/time of the role assignment. Changing this forces a new resource to be created.
          */
         startDateTime?: pulumi.Input<string>;
     }
     interface ActiveRoleAssignmentScheduleExpiration {
         /**
-         * The duration of the role assignment in days. Conflicts with `schedule[0].expiration[0].duration_hours`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Active Role Assignment to be created.
+         * The duration of the role assignment in days. Changing this forces a new resource to be created.
          */
         durationDays?: pulumi.Input<number>;
         /**
-         * The duration of the role assignment in hours. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Active Role Assignment to be created.
+         * The duration of the role assignment in hours. Changing this forces a new resource to be created.
          */
         durationHours?: pulumi.Input<number>;
         /**
-         * The end date time of the role assignment. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].duration_hours` Changing this forces a new Pim Active Role Assignment to be created.
+         * The end date/time of the role assignment. Changing this forces a new resource to be created.
+         *
+         * > Note: Only one of `durationDays`, `durationHours` or `endDateTime` should be specified.
          */
         endDateTime?: pulumi.Input<string>;
     }
     interface ActiveRoleAssignmentTicket {
         /**
-         * The ticket number.
+         * User-supplied ticket number to be included with the request. Changing this forces a new resource to be created.
          */
         number?: pulumi.Input<string>;
         /**
-         * The ticket system.
+         * User-supplied ticket system name to be included with the request. Changing this forces a new resource to be created.
          */
         system?: pulumi.Input<string>;
     }
     interface EligibleRoleAssignmentSchedule {
         /**
-         * A `expiration` block as defined above.
+         * An `expiration` block as defined above.
          */
         expiration?: pulumi.Input<inputs.pim.EligibleRoleAssignmentScheduleExpiration>;
         /**
-         * The start date time of the role assignment. Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The start date/time of the role assignment. Changing this forces a new resource to be created.
          */
         startDateTime?: pulumi.Input<string>;
     }
     interface EligibleRoleAssignmentScheduleExpiration {
         /**
-         * The duration of the role assignment in days. Conflicts with `schedule[0].expiration[0].duration_hours`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The duration of the role assignment in days. Changing this forces a new resource to be created.
          */
         durationDays?: pulumi.Input<number>;
         /**
-         * The duration of the role assignment in hours. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The duration of the role assignment in hours. Changing this forces a new resource to be created.
          */
         durationHours?: pulumi.Input<number>;
         /**
-         * The end date time of the role assignment. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].duration_hours` Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The end date/time of the role assignment. Changing this forces a new resource to be created.
+         *
+         * > Note: Only one of `durationDays`, `durationHours` or `endDateTime` should be specified.
          */
         endDateTime?: pulumi.Input<string>;
     }
     interface EligibleRoleAssignmentTicket {
         /**
-         * The ticket number.
+         * User-supplied ticket number to be included with the request. Changing this forces a new resource to be created.
          */
         number?: pulumi.Input<string>;
         /**
-         * The ticket system.
+         * User-supplied ticket system name to be included with the request. Changing this forces a new resource to be created.
          */
         system?: pulumi.Input<string>;
     }

package/types/output.d.ts

@@ -10217,7 +10217,7 @@ export declare namespace appservice {
          */
         nodeVersion?: string;
         /**
-         * The version of PowerShell Core to run. Possible values are `7`, and `7.2`.
+         * The version of PowerShell Core to run. Possible values are `7`, `7.2`, and `7.4`.
          */
         powershellCoreVersion?: string;
         /**
@@ -11193,7 +11193,7 @@ export declare namespace appservice {
          */
         nodeVersion?: string;
         /**
-         * The version of PowerShell Core to use. Possibles values are `7` , and `7.2`.
+         * The version of PowerShell Core to use. Possibles values are `7` , `7.2`, and `7.4`.
          */
         powershellCoreVersion?: string;
         /**
@@ -15211,7 +15211,7 @@ export declare namespace appservice {
          */
         nodeVersion?: string;
         /**
-         * The version of PowerShell Core to run. Possible values are `7`, and `7.2`.
+         * The version of PowerShell Core to run. Possible values are `7`, `7.2`, and `7.4`.
          *
          * > **NOTE:** A value of `7` will provide the latest stable version. `7.2` is in preview at the time of writing.
          */
@@ -16147,7 +16147,7 @@ export declare namespace appservice {
          */
         nodeVersion?: string;
         /**
-         * The PowerShell Core version to use. Possible values are `7`, and `7.2`.
+         * The PowerShell Core version to use. Possible values are `7`, `7.2`, and `7.4`.
          */
         powershellCoreVersion?: string;
         /**
@@ -27155,6 +27155,10 @@ export declare namespace config {
          * When enabled soft-deleted `azure.keyvault.Certificate` resources will be permanently deleted (e.g purged), when destroyed
          */
         purgeSoftDeletedCertificatesOnDestroy?: boolean;
+        /**
+         * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModuleKey` resources will be permanently deleted (e.g purged), when destroyed
+         */
+        purgeSoftDeletedHardwareSecurityModuleKeysOnDestroy?: boolean;
         /**
          * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModule` resources will be permanently deleted (e.g purged), when destroyed
          */
@@ -27171,6 +27175,10 @@ export declare namespace config {
          * When enabled soft-deleted `azure.keyvault.Certificate` resources will be restored, instead of creating new ones
          */
         recoverSoftDeletedCertificates?: boolean;
+        /**
+         * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModuleKey` resources will be restored, instead of creating new ones
+         */
+        recoverSoftDeletedHardwareSecurityModuleKeys?: boolean;
         /**
          * When enabled soft-deleted `azure.keyvault.KeyVault` resources will be restored, instead of creating new ones
          */
@@ -29121,7 +29129,7 @@ export declare namespace containerapp {
         principalId: string;
         tenantId: string;
         /**
-         * The type of identity used for the Container App Job. Possible values are `SystemAssigned` and `None`. Defaults to `None`.
+         * The type of identity used for the Container App Job. Possible values are `SystemAssigned`, `UserAssigned` and `None`. Defaults to `None`.
          */
         type: string;
     }
@@ -36943,6 +36951,16 @@ export declare namespace elasticsan {
          */
         tier?: string;
     }
+    interface GetSkus {
+        /**
+         * The name of this Elastic SAN.
+         */
+        name: string;
+        /**
+         * The SKU tier.
+         */
+        tier: string;
+    }
     interface VolumeCreateSource {
         /**
          * Specifies the ID of the source to create the Elastic SAN Volume from. Changing this forces a new resource to be created.
@@ -43993,6 +44011,12 @@ export declare namespace loadtest {
 }
 export declare namespace loganalytics {
     interface ClusterIdentity {
+        /**
+         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Web App Slot.
+         *
+         * > **NOTE:** This is required when `type` is set to `UserAssigned`.
+         */
+        identityIds?: string[];
         /**
          * The Principal ID associated with this Managed Service Identity.
          */
@@ -44002,7 +44026,7 @@ export declare namespace loganalytics {
          */
         tenantId: string;
         /**
-         * Specifies the type of Managed Service Identity that should be configured on this Log Analytics Cluster. The only possible value is `SystemAssigned`. Changing this forces a new resource to be created.
+         * Specifies the type of Managed Service Identity that should be configured on this Log Analytics Cluster. Possible values are `SystemAssigned` and  `UserAssigned`. Changing this forces a new resource to be created.
          *
          * > **NOTE:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and the Log Analytics Cluster has been created. More details are available below.
          */
@@ -52337,7 +52361,9 @@ export declare namespace network {
         /**
          * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Application Gateway.
          */
-        identityIds: string[];
+        identityIds?: string[];
+        principalId: string;
+        tenantId: string;
         /**
          * Specifies the type of Managed Service Identity that should be configured on this Application Gateway. Only possible value is `UserAssigned`.
          */
@@ -53890,6 +53916,8 @@ export declare namespace network {
          * The list of User Assigned Managed Identity IDs assigned to this Application Gateway.
          */
         identityIds: string[];
+        principalId: string;
+        tenantId: string;
         /**
          * The type of Managed Service Identity that is configured on this Application Gateway.
          */
@@ -57597,69 +57625,73 @@ export declare namespace paloalto {
 export declare namespace pim {
     interface ActiveRoleAssignmentSchedule {
         /**
-         * A `expiration` block as defined above.
+         * An `expiration` block as defined above.
          */
         expiration?: outputs.pim.ActiveRoleAssignmentScheduleExpiration;
         /**
-         * The start date time of the role assignment. Changing this forces a new Pim Active Role Assignment to be created.
+         * The start date/time of the role assignment. Changing this forces a new resource to be created.
          */
         startDateTime: string;
     }
     interface ActiveRoleAssignmentScheduleExpiration {
         /**
-         * The duration of the role assignment in days. Conflicts with `schedule[0].expiration[0].duration_hours`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Active Role Assignment to be created.
+         * The duration of the role assignment in days. Changing this forces a new resource to be created.
          */
         durationDays: number;
         /**
-         * The duration of the role assignment in hours. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Active Role Assignment to be created.
+         * The duration of the role assignment in hours. Changing this forces a new resource to be created.
          */
         durationHours: number;
         /**
-         * The end date time of the role assignment. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].duration_hours` Changing this forces a new Pim Active Role Assignment to be created.
+         * The end date/time of the role assignment. Changing this forces a new resource to be created.
+         *
+         * > Note: Only one of `durationDays`, `durationHours` or `endDateTime` should be specified.
          */
         endDateTime: string;
     }
     interface ActiveRoleAssignmentTicket {
         /**
-         * The ticket number.
+         * User-supplied ticket number to be included with the request. Changing this forces a new resource to be created.
          */
         number?: string;
         /**
-         * The ticket system.
+         * User-supplied ticket system name to be included with the request. Changing this forces a new resource to be created.
          */
         system?: string;
     }
     interface EligibleRoleAssignmentSchedule {
         /**
-         * A `expiration` block as defined above.
+         * An `expiration` block as defined above.
          */
         expiration?: outputs.pim.EligibleRoleAssignmentScheduleExpiration;
         /**
-         * The start date time of the role assignment. Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The start date/time of the role assignment. Changing this forces a new resource to be created.
          */
         startDateTime: string;
     }
     interface EligibleRoleAssignmentScheduleExpiration {
         /**
-         * The duration of the role assignment in days. Conflicts with `schedule[0].expiration[0].duration_hours`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The duration of the role assignment in days. Changing this forces a new resource to be created.
          */
         durationDays: number;
         /**
-         * The duration of the role assignment in hours. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].end_date_time` Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The duration of the role assignment in hours. Changing this forces a new resource to be created.
          */
         durationHours: number;
         /**
-         * The end date time of the role assignment. Conflicts with `schedule[0].expiration[0].duration_days`,`schedule[0].expiration[0].duration_hours` Changing this forces a new Pim Eligible Role Assignment to be created.
+         * The end date/time of the role assignment. Changing this forces a new resource to be created.
+         *
+         * > Note: Only one of `durationDays`, `durationHours` or `endDateTime` should be specified.
          */
         endDateTime: string;
     }
     interface EligibleRoleAssignmentTicket {
         /**
-         * The ticket number.
+         * User-supplied ticket number to be included with the request. Changing this forces a new resource to be created.
          */
         number?: string;
         /**
-         * The ticket system.
+         * User-supplied ticket system name to be included with the request. Changing this forces a new resource to be created.
          */
         system?: string;
     }