@pulumi/azuread 5.49.1 → 5.50.0-alpha.1715693304
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -11,50 +11,6 @@ import * as outputs from "./types/output";
|
|
|
11
11
|
* When authenticated with a service principal, this resource requires the `RoleManagementPolicy.ReadWrite.AzureADGroup` Microsoft Graph API permissions.
|
|
12
12
|
*
|
|
13
13
|
* When authenticated with a user principal, this resource requires `Global Administrator` directory role, or the `Privileged Role Administrator` role in Identity Governance.
|
|
14
|
-
*
|
|
15
|
-
* ## Example Usage
|
|
16
|
-
*
|
|
17
|
-
* ```typescript
|
|
18
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
19
|
-
* import * as azuread from "@pulumi/azuread";
|
|
20
|
-
*
|
|
21
|
-
* const example = new azuread.Group("example", {
|
|
22
|
-
* displayName: "group-name",
|
|
23
|
-
* securityEnabled: true,
|
|
24
|
-
* });
|
|
25
|
-
* const member = new azuread.User("member", {
|
|
26
|
-
* userPrincipalName: "jdoe@example.com",
|
|
27
|
-
* displayName: "J. Doe",
|
|
28
|
-
* mailNickname: "jdoe",
|
|
29
|
-
* password: "SecretP@sswd99!",
|
|
30
|
-
* });
|
|
31
|
-
* const exampleGroupRoleManagementPolicy = new azuread.GroupRoleManagementPolicy("example", {
|
|
32
|
-
* groupId: example.id,
|
|
33
|
-
* roleId: "member",
|
|
34
|
-
* activeAssignmentRules: {
|
|
35
|
-
* expireAfter: "P365D",
|
|
36
|
-
* },
|
|
37
|
-
* eligibleAssignmentRules: {
|
|
38
|
-
* expirationRequired: false,
|
|
39
|
-
* },
|
|
40
|
-
* notificationRules: {
|
|
41
|
-
* eligibleAssignments: {
|
|
42
|
-
* approverNotifications: {
|
|
43
|
-
* notificationLevel: "Critical",
|
|
44
|
-
* defaultRecipients: false,
|
|
45
|
-
* additionalRecipients: [
|
|
46
|
-
* "someone@example.com",
|
|
47
|
-
* "someone.else@example.com",
|
|
48
|
-
* ],
|
|
49
|
-
* },
|
|
50
|
-
* },
|
|
51
|
-
* },
|
|
52
|
-
* });
|
|
53
|
-
* ```
|
|
54
|
-
*
|
|
55
|
-
* ## Import
|
|
56
|
-
*
|
|
57
|
-
* Because these policies are created automatically by Entra ID, they will auto-import on first use.
|
|
58
14
|
*/
|
|
59
15
|
export declare class GroupRoleManagementPolicy extends pulumi.CustomResource {
|
|
60
16
|
/**
|
|
@@ -15,50 +15,6 @@ const utilities = require("./utilities");
|
|
|
15
15
|
* When authenticated with a service principal, this resource requires the `RoleManagementPolicy.ReadWrite.AzureADGroup` Microsoft Graph API permissions.
|
|
16
16
|
*
|
|
17
17
|
* When authenticated with a user principal, this resource requires `Global Administrator` directory role, or the `Privileged Role Administrator` role in Identity Governance.
|
|
18
|
-
*
|
|
19
|
-
* ## Example Usage
|
|
20
|
-
*
|
|
21
|
-
* ```typescript
|
|
22
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
23
|
-
* import * as azuread from "@pulumi/azuread";
|
|
24
|
-
*
|
|
25
|
-
* const example = new azuread.Group("example", {
|
|
26
|
-
* displayName: "group-name",
|
|
27
|
-
* securityEnabled: true,
|
|
28
|
-
* });
|
|
29
|
-
* const member = new azuread.User("member", {
|
|
30
|
-
* userPrincipalName: "jdoe@example.com",
|
|
31
|
-
* displayName: "J. Doe",
|
|
32
|
-
* mailNickname: "jdoe",
|
|
33
|
-
* password: "SecretP@sswd99!",
|
|
34
|
-
* });
|
|
35
|
-
* const exampleGroupRoleManagementPolicy = new azuread.GroupRoleManagementPolicy("example", {
|
|
36
|
-
* groupId: example.id,
|
|
37
|
-
* roleId: "member",
|
|
38
|
-
* activeAssignmentRules: {
|
|
39
|
-
* expireAfter: "P365D",
|
|
40
|
-
* },
|
|
41
|
-
* eligibleAssignmentRules: {
|
|
42
|
-
* expirationRequired: false,
|
|
43
|
-
* },
|
|
44
|
-
* notificationRules: {
|
|
45
|
-
* eligibleAssignments: {
|
|
46
|
-
* approverNotifications: {
|
|
47
|
-
* notificationLevel: "Critical",
|
|
48
|
-
* defaultRecipients: false,
|
|
49
|
-
* additionalRecipients: [
|
|
50
|
-
* "someone@example.com",
|
|
51
|
-
* "someone.else@example.com",
|
|
52
|
-
* ],
|
|
53
|
-
* },
|
|
54
|
-
* },
|
|
55
|
-
* },
|
|
56
|
-
* });
|
|
57
|
-
* ```
|
|
58
|
-
*
|
|
59
|
-
* ## Import
|
|
60
|
-
*
|
|
61
|
-
* Because these policies are created automatically by Entra ID, they will auto-import on first use.
|
|
62
18
|
*/
|
|
63
19
|
class GroupRoleManagementPolicy extends pulumi.CustomResource {
|
|
64
20
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"groupRoleManagementPolicy.js","sourceRoot":"","sources":["../groupRoleManagementPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"groupRoleManagementPolicy.js","sourceRoot":"","sources":["../groupRoleManagementPolicy.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;GAUG;AACH,MAAa,yBAA0B,SAAQ,MAAM,CAAC,cAAc;IAChE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAsC,EAAE,IAAmC;QACpI,OAAO,IAAI,yBAAyB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAChF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,yBAAyB,CAAC,YAAY,CAAC;IAC1E,CAAC;IA2CD,YAAY,IAAY,EAAE,WAA4E,EAAE,IAAmC;QACvI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAyD,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAAwD,CAAC;YACtE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,yBAAyB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;;AArGL,8DAsGC;AAxFG,gBAAgB;AACO,sCAAY,GAAG,mEAAmE,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/azuread",
|
|
3
|
-
"version": "5.
|
|
3
|
+
"version": "5.50.0-alpha.1715693304+f9083f1",
|
|
4
4
|
"description": "A Pulumi package for creating and managing Azure Active Directory (Azure AD) cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -23,6 +23,6 @@
|
|
|
23
23
|
"pulumi": {
|
|
24
24
|
"resource": true,
|
|
25
25
|
"name": "azuread",
|
|
26
|
-
"version": "5.
|
|
26
|
+
"version": "5.50.0-alpha.1715693304+f9083f1"
|
|
27
27
|
}
|
|
28
28
|
}
|
package/package.json.bak
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/azuread",
|
|
3
|
-
"version": "5.
|
|
3
|
+
"version": "5.50.0-alpha.1715693304+f9083f1",
|
|
4
4
|
"description": "A Pulumi package for creating and managing Azure Active Directory (Azure AD) cloud resources.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -23,6 +23,6 @@
|
|
|
23
23
|
"pulumi": {
|
|
24
24
|
"resource": true,
|
|
25
25
|
"name": "azuread",
|
|
26
|
-
"version": "5.
|
|
26
|
+
"version": "5.50.0-alpha.1715693304+f9083f1"
|
|
27
27
|
}
|
|
28
28
|
}
|
package/types/input.d.ts
CHANGED
|
@@ -700,7 +700,7 @@ export interface GroupRoleManagementPolicyActivationRules {
|
|
|
700
700
|
*/
|
|
701
701
|
approvalStage?: pulumi.Input<inputs.GroupRoleManagementPolicyActivationRulesApprovalStage>;
|
|
702
702
|
/**
|
|
703
|
-
* The maximum length of time an activated role can be valid, in an
|
|
703
|
+
* The maximum length of time an activated role can be valid, in an IS)8601 Duration format (e.g. `PT8H`). Valid range is `PT30M` to `PT23H30M`, in 30 minute increments, or `PT1D`.
|
|
704
704
|
*/
|
|
705
705
|
maximumDuration?: pulumi.Input<string>;
|
|
706
706
|
/**
|
|
@@ -720,7 +720,7 @@ export interface GroupRoleManagementPolicyActivationRules {
|
|
|
720
720
|
*/
|
|
721
721
|
requireTicketInfo?: pulumi.Input<boolean>;
|
|
722
722
|
/**
|
|
723
|
-
* The Entra ID Conditional Access context that must be present for activation
|
|
723
|
+
* The Entra ID Conditional Access context that must be present for activation. Conflicts with `requireMultifactorAuthentication`.
|
|
724
724
|
*/
|
|
725
725
|
requiredConditionalAccessAuthenticationContext?: pulumi.Input<string>;
|
|
726
726
|
}
|
package/types/output.d.ts
CHANGED
|
@@ -1211,7 +1211,7 @@ export interface GroupRoleManagementPolicyActivationRules {
|
|
|
1211
1211
|
*/
|
|
1212
1212
|
approvalStage?: outputs.GroupRoleManagementPolicyActivationRulesApprovalStage;
|
|
1213
1213
|
/**
|
|
1214
|
-
* The maximum length of time an activated role can be valid, in an
|
|
1214
|
+
* The maximum length of time an activated role can be valid, in an IS)8601 Duration format (e.g. `PT8H`). Valid range is `PT30M` to `PT23H30M`, in 30 minute increments, or `PT1D`.
|
|
1215
1215
|
*/
|
|
1216
1216
|
maximumDuration: string;
|
|
1217
1217
|
/**
|
|
@@ -1231,7 +1231,7 @@ export interface GroupRoleManagementPolicyActivationRules {
|
|
|
1231
1231
|
*/
|
|
1232
1232
|
requireTicketInfo: boolean;
|
|
1233
1233
|
/**
|
|
1234
|
-
* The Entra ID Conditional Access context that must be present for activation
|
|
1234
|
+
* The Entra ID Conditional Access context that must be present for activation. Conflicts with `requireMultifactorAuthentication`.
|
|
1235
1235
|
*/
|
|
1236
1236
|
requiredConditionalAccessAuthenticationContext: string;
|
|
1237
1237
|
}
|