@pulumi/okta 4.6.2 → 4.6.3

package/group/group.d.ts

@@ -1,4 +1,41 @@
 import * as pulumi from "@pulumi/pulumi";
+/**
+ * Creates an Okta Group.
+ *
+ * This resource allows you to create and configure an Okta Group.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Group("example", {description: "My Example Group"});
+ * ```
+ *
+ * Custom profile attributes
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Group("example", {
+ *     description: "My Example Group",
+ *     customProfileAttributes: JSON.stringify({
+ *         example1: "testing1234",
+ *         example2: true,
+ *         example3: 54321,
+ *     }),
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An Okta Group can be imported via the Okta ID.
+ *
+ * ```sh
+ *  $ pulumi import okta:group/group:Group example <group id>
+ * ```
+ */
 export declare class Group extends pulumi.CustomResource {
     /**
      * Get an existing Group resource's state with the given name, ID, and optional extra
@@ -16,15 +53,15 @@ export declare class Group extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is Group;
     /**
-     * JSON formatted custom attributes for a group. It must be JSON due to various types Okta allows.
+     * raw JSON containing all custom profile attributes.
      */
     readonly customProfileAttributes: pulumi.Output<string | undefined>;
     /**
-     * Group description
+     * The description of the Okta Group.
      */
     readonly description: pulumi.Output<string | undefined>;
     /**
-     * Group name
+     * The name of the Okta Group.
      */
     readonly name: pulumi.Output<string>;
     /**
@@ -47,15 +84,15 @@ export declare class Group extends pulumi.CustomResource {
  */
 export interface GroupState {
     /**
-     * JSON formatted custom attributes for a group. It must be JSON due to various types Okta allows.
+     * raw JSON containing all custom profile attributes.
      */
     customProfileAttributes?: pulumi.Input<string>;
     /**
-     * Group description
+     * The description of the Okta Group.
      */
     description?: pulumi.Input<string>;
     /**
-     * Group name
+     * The name of the Okta Group.
      */
     name?: pulumi.Input<string>;
     /**
@@ -70,15 +107,15 @@ export interface GroupState {
  */
 export interface GroupArgs {
     /**
-     * JSON formatted custom attributes for a group. It must be JSON due to various types Okta allows.
+     * raw JSON containing all custom profile attributes.
      */
     customProfileAttributes?: pulumi.Input<string>;
     /**
-     * Group description
+     * The description of the Okta Group.
      */
     description?: pulumi.Input<string>;
     /**
-     * Group name
+     * The name of the Okta Group.
      */
     name?: pulumi.Input<string>;
     /**

package/group/group.js

@@ -5,6 +5,43 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Group = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
+/**
+ * Creates an Okta Group.
+ *
+ * This resource allows you to create and configure an Okta Group.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Group("example", {description: "My Example Group"});
+ * ```
+ *
+ * Custom profile attributes
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Group("example", {
+ *     description: "My Example Group",
+ *     customProfileAttributes: JSON.stringify({
+ *         example1: "testing1234",
+ *         example2: true,
+ *         example3: 54321,
+ *     }),
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An Okta Group can be imported via the Okta ID.
+ *
+ * ```sh
+ *  $ pulumi import okta:group/group:Group example <group id>
+ * ```
+ */
 class Group extends pulumi.CustomResource {
     /**
      * Get an existing Group resource's state with the given name, ID, and optional extra

package/group/group.js.map

@@ -1 +1 @@
-{"version":3,"file":"group.js","sourceRoot":"","sources":["../../group/group.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAC5C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;IA6BD,YAAY,IAAY,EAAE,WAAoC,EAAE,IAAmC;QAC/F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqC,CAAC;YACpD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAAoC,CAAC;YAClD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;;AAzEL,sBA0EC;AA5DG,gBAAgB;AACO,kBAAY,GAAG,wBAAwB,CAAC"}
+{"version":3,"file":"group.js","sourceRoot":"","sources":["../../group/group.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAC5C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;IA6BD,YAAY,IAAY,EAAE,WAAoC,EAAE,IAAmC;QAC/F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqC,CAAC;YACpD,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAAoC,CAAC;YAClD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;;AAzEL,sBA0EC;AA5DG,gBAAgB;AACO,kBAAY,GAAG,wBAAwB,CAAC"}

package/group/role.d.ts

@@ -1,4 +1,30 @@
 import * as pulumi from "@pulumi/pulumi";
+/**
+ * Assigns Admin roles to Okta Groups.
+ *
+ * This resource allows you to assign Okta administrator roles to Okta Groups. This resource provides a one-to-one
+ * interface between the Okta group and the admin role.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Role("example", {
+ *     groupId: "<group id>",
+ *     roleType: "READ_ONLY_ADMIN",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Individual admin role assignment can be imported by passing the group and role assignment IDs as follows
+ *
+ * ```sh
+ *  $ pulumi import okta:group/role:Role example &#60;group id&#62;/&#60;role id&#62;
+ * ```
+ */
 export declare class Role extends pulumi.CustomResource {
     /**
      * Get an existing Role resource's state with the given name, ID, and optional extra
@@ -16,23 +42,43 @@ export declare class Role extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is Role;
     /**
-     * When this setting is enabled, the admins won't receive any of the default Okta administrator emails
+     * When this setting is enabled, the admins won't receive any of the default Okta
+     * administrator emails. These admins also won't have access to contact Okta Support and open support cases on behalf of your org.
      */
     readonly disableNotifications: pulumi.Output<boolean | undefined>;
     /**
-     * ID of group to attach admin roles to
+     * The ID of group to attach admin roles to.
      */
     readonly groupId: pulumi.Output<string>;
     /**
-     * Type of Role to assign
+     * Admin role assigned to the group. It can be any one of the following values:
+     * `"API_ADMIN"`,
+     * `"APP_ADMIN"`,
+     * `"CUSTOM"`,
+     * `"GROUP_MEMBERSHIP_ADMIN"`,
+     * `"HELP_DESK_ADMIN"`,
+     * `"MOBILE_ADMIN"`,
+     * `"ORG_ADMIN"`,
+     * `"READ_ONLY_ADMIN"`,
+     * `"REPORT_ADMIN"`,
+     * `"SUPER_ADMIN"`,
+     * `"USER_ADMIN"`
+     * . See [API Docs](https://developer.okta.com/docs/reference/api/roles/#role-types).
+     *
+     *
+     * - `"USER_ADMIN"` is the Group Administrator.
      */
     readonly roleType: pulumi.Output<string>;
     /**
-     * List of apps ids for the targets of the admin role.
+     * A list of app names (name represents set of app instances, like 'salesforce' or '
+     * facebook'), or a combination of app name and app instance ID (like 'facebook.0oapsqQ6dv19pqyEo0g3') you would like as
+     * the targets of the admin role.
+     * - Only supported when used with the role type `"APP_ADMIN"`.
      */
     readonly targetAppLists: pulumi.Output<string[] | undefined>;
     /**
-     * List of groups ids for the targets of the admin role.
+     * A list of group IDs you would like as the targets of the admin role.
+     * - Only supported when used with the role types: `GROUP_MEMBERSHIP_ADMIN`, `HELP_DESK_ADMIN`, or `USER_ADMIN`.
      */
     readonly targetGroupLists: pulumi.Output<string[] | undefined>;
     /**
@@ -49,23 +95,43 @@ export declare class Role extends pulumi.CustomResource {
  */
 export interface RoleState {
     /**
-     * When this setting is enabled, the admins won't receive any of the default Okta administrator emails
+     * When this setting is enabled, the admins won't receive any of the default Okta
+     * administrator emails. These admins also won't have access to contact Okta Support and open support cases on behalf of your org.
      */
     disableNotifications?: pulumi.Input<boolean>;
     /**
-     * ID of group to attach admin roles to
+     * The ID of group to attach admin roles to.
      */
     groupId?: pulumi.Input<string>;
     /**
-     * Type of Role to assign
+     * Admin role assigned to the group. It can be any one of the following values:
+     * `"API_ADMIN"`,
+     * `"APP_ADMIN"`,
+     * `"CUSTOM"`,
+     * `"GROUP_MEMBERSHIP_ADMIN"`,
+     * `"HELP_DESK_ADMIN"`,
+     * `"MOBILE_ADMIN"`,
+     * `"ORG_ADMIN"`,
+     * `"READ_ONLY_ADMIN"`,
+     * `"REPORT_ADMIN"`,
+     * `"SUPER_ADMIN"`,
+     * `"USER_ADMIN"`
+     * . See [API Docs](https://developer.okta.com/docs/reference/api/roles/#role-types).
+     *
+     *
+     * - `"USER_ADMIN"` is the Group Administrator.
      */
     roleType?: pulumi.Input<string>;
     /**
-     * List of apps ids for the targets of the admin role.
+     * A list of app names (name represents set of app instances, like 'salesforce' or '
+     * facebook'), or a combination of app name and app instance ID (like 'facebook.0oapsqQ6dv19pqyEo0g3') you would like as
+     * the targets of the admin role.
+     * - Only supported when used with the role type `"APP_ADMIN"`.
      */
     targetAppLists?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * List of groups ids for the targets of the admin role.
+     * A list of group IDs you would like as the targets of the admin role.
+     * - Only supported when used with the role types: `GROUP_MEMBERSHIP_ADMIN`, `HELP_DESK_ADMIN`, or `USER_ADMIN`.
      */
     targetGroupLists?: pulumi.Input<pulumi.Input<string>[]>;
 }
@@ -74,23 +140,43 @@ export interface RoleState {
  */
 export interface RoleArgs {
     /**
-     * When this setting is enabled, the admins won't receive any of the default Okta administrator emails
+     * When this setting is enabled, the admins won't receive any of the default Okta
+     * administrator emails. These admins also won't have access to contact Okta Support and open support cases on behalf of your org.
      */
     disableNotifications?: pulumi.Input<boolean>;
     /**
-     * ID of group to attach admin roles to
+     * The ID of group to attach admin roles to.
      */
     groupId: pulumi.Input<string>;
     /**
-     * Type of Role to assign
+     * Admin role assigned to the group. It can be any one of the following values:
+     * `"API_ADMIN"`,
+     * `"APP_ADMIN"`,
+     * `"CUSTOM"`,
+     * `"GROUP_MEMBERSHIP_ADMIN"`,
+     * `"HELP_DESK_ADMIN"`,
+     * `"MOBILE_ADMIN"`,
+     * `"ORG_ADMIN"`,
+     * `"READ_ONLY_ADMIN"`,
+     * `"REPORT_ADMIN"`,
+     * `"SUPER_ADMIN"`,
+     * `"USER_ADMIN"`
+     * . See [API Docs](https://developer.okta.com/docs/reference/api/roles/#role-types).
+     *
+     *
+     * - `"USER_ADMIN"` is the Group Administrator.
      */
     roleType: pulumi.Input<string>;
     /**
-     * List of apps ids for the targets of the admin role.
+     * A list of app names (name represents set of app instances, like 'salesforce' or '
+     * facebook'), or a combination of app name and app instance ID (like 'facebook.0oapsqQ6dv19pqyEo0g3') you would like as
+     * the targets of the admin role.
+     * - Only supported when used with the role type `"APP_ADMIN"`.
      */
     targetAppLists?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * List of groups ids for the targets of the admin role.
+     * A list of group IDs you would like as the targets of the admin role.
+     * - Only supported when used with the role types: `GROUP_MEMBERSHIP_ADMIN`, `HELP_DESK_ADMIN`, or `USER_ADMIN`.
      */
     targetGroupLists?: pulumi.Input<pulumi.Input<string>[]>;
 }

package/group/role.js

@@ -5,6 +5,32 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Role = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
+/**
+ * Assigns Admin roles to Okta Groups.
+ *
+ * This resource allows you to assign Okta administrator roles to Okta Groups. This resource provides a one-to-one
+ * interface between the Okta group and the admin role.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Role("example", {
+ *     groupId: "<group id>",
+ *     roleType: "READ_ONLY_ADMIN",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Individual admin role assignment can be imported by passing the group and role assignment IDs as follows
+ *
+ * ```sh
+ *  $ pulumi import okta:group/role:Role example &#60;group id&#62;/&#60;role id&#62;
+ * ```
+ */
 class Role extends pulumi.CustomResource {
     /**
      * Get an existing Role resource's state with the given name, ID, and optional extra

package/group/role.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.js","sourceRoot":"","sources":["../../group/role.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACjF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAnFL,oBAoFC;AAtEG,gBAAgB;AACO,iBAAY,GAAG,sBAAsB,CAAC"}
+{"version":3,"file":"role.js","sourceRoot":"","sources":["../../group/role.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAmDD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACnF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;SACjF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAvGL,oBAwGC;AA1FG,gBAAgB;AACO,iBAAY,GAAG,sBAAsB,CAAC"}

package/group/rule.d.ts

@@ -1,4 +1,27 @@
 import * as pulumi from "@pulumi/pulumi";
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Rule("example", {
+ *     expressionType: "urn:okta:expression:1.0",
+ *     expressionValue: "String.startsWith(user.firstName,\"andy\")",
+ *     groupAssignments: ["<group id>"],
+ *     status: "ACTIVE",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An Okta Group Rule can be imported via the Okta ID.
+ *
+ * ```sh
+ *  $ pulumi import okta:group/rule:Rule example &#60;group rule id&#62;
+ * ```
+ */
 export declare class Rule extends pulumi.CustomResource {
     /**
      * Get an existing Rule resource's state with the given name, ID, and optional extra
@@ -15,17 +38,34 @@ export declare class Rule extends pulumi.CustomResource {
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is Rule;
+    /**
+     * The expression type to use to invoke the rule. The default
+     * is `"urn:okta:expression:1.0"`.
+     */
     readonly expressionType: pulumi.Output<string | undefined>;
+    /**
+     * The expression value.
+     */
     readonly expressionValue: pulumi.Output<string>;
+    /**
+     * The list of group ids to assign the users to.
+     */
     readonly groupAssignments: pulumi.Output<string[]>;
+    /**
+     * The name of the Group Rule (min character 1; max characters 50).
+     */
     readonly name: pulumi.Output<string>;
     /**
-     * Remove users added by this rule from the assigned group after deleting this resource
+     * This tells the provider to remove users added by this rule from the assigned
+     * group after destroying this resource. Default is `false`.
      */
     readonly removeAssignedUsers: pulumi.Output<boolean | undefined>;
+    /**
+     * The status of the group rule.
+     */
     readonly status: pulumi.Output<string | undefined>;
     /**
-     * The list of user IDs that would be excluded when rules are processed
+     * The list of user IDs that would be excluded when rules are processed.
      */
     readonly usersExcludeds: pulumi.Output<string[] | undefined>;
     /**
@@ -41,17 +81,34 @@ export declare class Rule extends pulumi.CustomResource {
  * Input properties used for looking up and filtering Rule resources.
  */
 export interface RuleState {
+    /**
+     * The expression type to use to invoke the rule. The default
+     * is `"urn:okta:expression:1.0"`.
+     */
     expressionType?: pulumi.Input<string>;
+    /**
+     * The expression value.
+     */
     expressionValue?: pulumi.Input<string>;
+    /**
+     * The list of group ids to assign the users to.
+     */
     groupAssignments?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The name of the Group Rule (min character 1; max characters 50).
+     */
     name?: pulumi.Input<string>;
     /**
-     * Remove users added by this rule from the assigned group after deleting this resource
+     * This tells the provider to remove users added by this rule from the assigned
+     * group after destroying this resource. Default is `false`.
      */
     removeAssignedUsers?: pulumi.Input<boolean>;
+    /**
+     * The status of the group rule.
+     */
     status?: pulumi.Input<string>;
     /**
-     * The list of user IDs that would be excluded when rules are processed
+     * The list of user IDs that would be excluded when rules are processed.
      */
     usersExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
 }
@@ -59,17 +116,34 @@ export interface RuleState {
  * The set of arguments for constructing a Rule resource.
  */
 export interface RuleArgs {
+    /**
+     * The expression type to use to invoke the rule. The default
+     * is `"urn:okta:expression:1.0"`.
+     */
     expressionType?: pulumi.Input<string>;
+    /**
+     * The expression value.
+     */
     expressionValue: pulumi.Input<string>;
+    /**
+     * The list of group ids to assign the users to.
+     */
     groupAssignments: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The name of the Group Rule (min character 1; max characters 50).
+     */
     name?: pulumi.Input<string>;
     /**
-     * Remove users added by this rule from the assigned group after deleting this resource
+     * This tells the provider to remove users added by this rule from the assigned
+     * group after destroying this resource. Default is `false`.
      */
     removeAssignedUsers?: pulumi.Input<boolean>;
+    /**
+     * The status of the group rule.
+     */
     status?: pulumi.Input<string>;
     /**
-     * The list of user IDs that would be excluded when rules are processed
+     * The list of user IDs that would be excluded when rules are processed.
      */
     usersExcludeds?: pulumi.Input<pulumi.Input<string>[]>;
 }

package/group/rule.js

@@ -5,6 +5,29 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Rule = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("../utilities");
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const example = new okta.group.Rule("example", {
+ *     expressionType: "urn:okta:expression:1.0",
+ *     expressionValue: "String.startsWith(user.firstName,\"andy\")",
+ *     groupAssignments: ["<group id>"],
+ *     status: "ACTIVE",
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * An Okta Group Rule can be imported via the Okta ID.
+ *
+ * ```sh
+ *  $ pulumi import okta:group/rule:Rule example &#60;group rule id&#62;
+ * ```
+ */
 class Rule extends pulumi.CustomResource {
     /**
      * Get an existing Rule resource's state with the given name, ID, and optional extra

package/group/rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../group/rule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAwBD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAhFL,oBAiFC;AAnEG,gBAAgB;AACO,iBAAY,GAAG,sBAAsB,CAAC"}
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../group/rule.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiB,EAAE,IAAmC;QAC/G,OAAO,IAAI,IAAI,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAyCD,YAAY,IAAY,EAAE,WAAkC,EAAE,IAAmC;QAC7F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoC,CAAC;YACnD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/E;aAAM;YACH,MAAM,IAAI,GAAG,WAAmC,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7E;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AAjGL,oBAkGC;AApFG,gBAAgB;AACO,iBAAY,GAAG,sBAAsB,CAAC"}

package/groupMemberships.d.ts

@@ -1,6 +1,47 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * Resource to manage a set of group memberships for a specific group.
+ * Resource to manage a set of memberships for a specific group.
+ *
+ * This resource will allow you to bulk manage group membership in Okta for a given
+ * group. This offers an interface to pass multiple users into a single resource
+ * call, for better API resource usage. If you need a relationship of a single
+ * user to many groups, please use the `okta.UserGroupMemberships` resource.
+ *
+ * **Important**: The default behavior of the resource is to only maintain the
+ * state of user ids that are assigned it. This behavior will signal drift only if
+ * those users stop being part of the group. If the desired behavior is track all
+ * users that are added/removed from the group make use of the `trackAllUsers`
+ * argument with this resource.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as okta from "@pulumi/okta";
+ *
+ * const testGroup = new okta.group.Group("testGroup", {description: "testing, testing"});
+ * const testGroupMemberships = new okta.GroupMemberships("testGroupMemberships", {
+ *     groupId: testGroup.id,
+ *     users: [
+ *         okta_user.test1.id,
+ *         okta_user.test2.id,
+ *     ],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * an Okta Group's memberships can be imported via the Okta group ID.
+ *
+ * ```sh
+ *  $ pulumi import okta:index/groupMemberships:GroupMemberships test <group id>
+ * ```
+ *
+ *  optional parameter track all users will also import all user id currently assigned to the group
+ *
+ * ```sh
+ *  $ pulumi import okta:index/groupMemberships:GroupMemberships test <group id>/<true>
+ * ```
  */
 export declare class GroupMemberships extends pulumi.CustomResource {
     /**
@@ -19,11 +60,11 @@ export declare class GroupMemberships extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is GroupMemberships;
     /**
-     * ID of a Okta group.
+     * Okta group ID.
      */
     readonly groupId: pulumi.Output<string>;
     /**
-     * The resource concerns itself with all users added/deleted to the group; even those managed outside of the resource.
+     * The resource will concern itself with all users added/deleted to the group; even those managed outside of the resource.
      */
     readonly trackAllUsers: pulumi.Output<boolean | undefined>;
     /**
@@ -44,11 +85,11 @@ export declare class GroupMemberships extends pulumi.CustomResource {
  */
 export interface GroupMembershipsState {
     /**
-     * ID of a Okta group.
+     * Okta group ID.
      */
     groupId?: pulumi.Input<string>;
     /**
-     * The resource concerns itself with all users added/deleted to the group; even those managed outside of the resource.
+     * The resource will concern itself with all users added/deleted to the group; even those managed outside of the resource.
      */
     trackAllUsers?: pulumi.Input<boolean>;
     /**
@@ -61,11 +102,11 @@ export interface GroupMembershipsState {
  */
 export interface GroupMembershipsArgs {
     /**
-     * ID of a Okta group.
+     * Okta group ID.
      */
     groupId: pulumi.Input<string>;
     /**
-     * The resource concerns itself with all users added/deleted to the group; even those managed outside of the resource.
+     * The resource will concern itself with all users added/deleted to the group; even those managed outside of the resource.
      */
     trackAllUsers?: pulumi.Input<boolean>;
     /**