pulumi-azure-native 2.88.0a1739514756__py3-none-any.whl → 2.89.0__py3-none-any.whl

pulumi_azure_native/authorization/get_pim_role_eligibility_schedule.py

@@ -0,0 +1,355 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetPimRoleEligibilityScheduleResult',
+    'AwaitableGetPimRoleEligibilityScheduleResult',
+    'get_pim_role_eligibility_schedule',
+    'get_pim_role_eligibility_schedule_output',
+]
+
+@pulumi.output_type
+class GetPimRoleEligibilityScheduleResult:
+    """
+    Role Eligibility schedule request
+    """
+    def __init__(__self__, approval_id=None, condition=None, condition_version=None, created_on=None, expanded_properties=None, id=None, justification=None, name=None, principal_id=None, principal_type=None, request_type=None, requestor_id=None, role_definition_id=None, schedule_info=None, scope=None, status=None, target_role_eligibility_schedule_id=None, target_role_eligibility_schedule_instance_id=None, ticket_info=None, type=None):
+        if approval_id and not isinstance(approval_id, str):
+            raise TypeError("Expected argument 'approval_id' to be a str")
+        pulumi.set(__self__, "approval_id", approval_id)
+        if condition and not isinstance(condition, str):
+            raise TypeError("Expected argument 'condition' to be a str")
+        pulumi.set(__self__, "condition", condition)
+        if condition_version and not isinstance(condition_version, str):
+            raise TypeError("Expected argument 'condition_version' to be a str")
+        pulumi.set(__self__, "condition_version", condition_version)
+        if created_on and not isinstance(created_on, str):
+            raise TypeError("Expected argument 'created_on' to be a str")
+        pulumi.set(__self__, "created_on", created_on)
+        if expanded_properties and not isinstance(expanded_properties, dict):
+            raise TypeError("Expected argument 'expanded_properties' to be a dict")
+        pulumi.set(__self__, "expanded_properties", expanded_properties)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if justification and not isinstance(justification, str):
+            raise TypeError("Expected argument 'justification' to be a str")
+        pulumi.set(__self__, "justification", justification)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if principal_id and not isinstance(principal_id, str):
+            raise TypeError("Expected argument 'principal_id' to be a str")
+        pulumi.set(__self__, "principal_id", principal_id)
+        if principal_type and not isinstance(principal_type, str):
+            raise TypeError("Expected argument 'principal_type' to be a str")
+        pulumi.set(__self__, "principal_type", principal_type)
+        if request_type and not isinstance(request_type, str):
+            raise TypeError("Expected argument 'request_type' to be a str")
+        pulumi.set(__self__, "request_type", request_type)
+        if requestor_id and not isinstance(requestor_id, str):
+            raise TypeError("Expected argument 'requestor_id' to be a str")
+        pulumi.set(__self__, "requestor_id", requestor_id)
+        if role_definition_id and not isinstance(role_definition_id, str):
+            raise TypeError("Expected argument 'role_definition_id' to be a str")
+        pulumi.set(__self__, "role_definition_id", role_definition_id)
+        if schedule_info and not isinstance(schedule_info, dict):
+            raise TypeError("Expected argument 'schedule_info' to be a dict")
+        pulumi.set(__self__, "schedule_info", schedule_info)
+        if scope and not isinstance(scope, str):
+            raise TypeError("Expected argument 'scope' to be a str")
+        pulumi.set(__self__, "scope", scope)
+        if status and not isinstance(status, str):
+            raise TypeError("Expected argument 'status' to be a str")
+        pulumi.set(__self__, "status", status)
+        if target_role_eligibility_schedule_id and not isinstance(target_role_eligibility_schedule_id, str):
+            raise TypeError("Expected argument 'target_role_eligibility_schedule_id' to be a str")
+        pulumi.set(__self__, "target_role_eligibility_schedule_id", target_role_eligibility_schedule_id)
+        if target_role_eligibility_schedule_instance_id and not isinstance(target_role_eligibility_schedule_instance_id, str):
+            raise TypeError("Expected argument 'target_role_eligibility_schedule_instance_id' to be a str")
+        pulumi.set(__self__, "target_role_eligibility_schedule_instance_id", target_role_eligibility_schedule_instance_id)
+        if ticket_info and not isinstance(ticket_info, dict):
+            raise TypeError("Expected argument 'ticket_info' to be a dict")
+        pulumi.set(__self__, "ticket_info", ticket_info)
+        if type and not isinstance(type, str):
+            raise TypeError("Expected argument 'type' to be a str")
+        pulumi.set(__self__, "type", type)
+
+    @property
+    @pulumi.getter(name="approvalId")
+    def approval_id(self) -> str:
+        """
+        The approvalId of the role eligibility schedule request.
+        """
+        return pulumi.get(self, "approval_id")
+
+    @property
+    @pulumi.getter
+    def condition(self) -> Optional[str]:
+        """
+        The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'
+        """
+        return pulumi.get(self, "condition")
+
+    @property
+    @pulumi.getter(name="conditionVersion")
+    def condition_version(self) -> Optional[str]:
+        """
+        Version of the condition. Currently accepted value is '2.0'
+        """
+        return pulumi.get(self, "condition_version")
+
+    @property
+    @pulumi.getter(name="createdOn")
+    def created_on(self) -> str:
+        """
+        DateTime when role eligibility schedule request was created
+        """
+        return pulumi.get(self, "created_on")
+
+    @property
+    @pulumi.getter(name="expandedProperties")
+    def expanded_properties(self) -> 'outputs.ExpandedPropertiesResponse':
+        """
+        Additional properties of principal, scope and role definition
+        """
+        return pulumi.get(self, "expanded_properties")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The role eligibility schedule request ID.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def justification(self) -> Optional[str]:
+        """
+        Justification for the role eligibility
+        """
+        return pulumi.get(self, "justification")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The role eligibility schedule request name.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="principalId")
+    def principal_id(self) -> str:
+        """
+        The principal ID.
+        """
+        return pulumi.get(self, "principal_id")
+
+    @property
+    @pulumi.getter(name="principalType")
+    def principal_type(self) -> str:
+        """
+        The principal type of the assigned principal ID.
+        """
+        return pulumi.get(self, "principal_type")
+
+    @property
+    @pulumi.getter(name="requestType")
+    def request_type(self) -> str:
+        """
+        The type of the role assignment schedule request. Eg: SelfActivate, AdminAssign etc
+        """
+        return pulumi.get(self, "request_type")
+
+    @property
+    @pulumi.getter(name="requestorId")
+    def requestor_id(self) -> str:
+        """
+        Id of the user who created this request
+        """
+        return pulumi.get(self, "requestor_id")
+
+    @property
+    @pulumi.getter(name="roleDefinitionId")
+    def role_definition_id(self) -> str:
+        """
+        The role definition ID.
+        """
+        return pulumi.get(self, "role_definition_id")
+
+    @property
+    @pulumi.getter(name="scheduleInfo")
+    def schedule_info(self) -> Optional['outputs.RoleEligibilityScheduleRequestPropertiesResponseScheduleInfo']:
+        """
+        Schedule info of the role eligibility schedule
+        """
+        return pulumi.get(self, "schedule_info")
+
+    @property
+    @pulumi.getter
+    def scope(self) -> str:
+        """
+        The role eligibility schedule request scope.
+        """
+        return pulumi.get(self, "scope")
+
+    @property
+    @pulumi.getter
+    def status(self) -> str:
+        """
+        The status of the role eligibility schedule request.
+        """
+        return pulumi.get(self, "status")
+
+    @property
+    @pulumi.getter(name="targetRoleEligibilityScheduleId")
+    def target_role_eligibility_schedule_id(self) -> Optional[str]:
+        """
+        The resultant role eligibility schedule id or the role eligibility schedule id being updated
+        """
+        return pulumi.get(self, "target_role_eligibility_schedule_id")
+
+    @property
+    @pulumi.getter(name="targetRoleEligibilityScheduleInstanceId")
+    def target_role_eligibility_schedule_instance_id(self) -> Optional[str]:
+        """
+        The role eligibility schedule instance id being updated
+        """
+        return pulumi.get(self, "target_role_eligibility_schedule_instance_id")
+
+    @property
+    @pulumi.getter(name="ticketInfo")
+    def ticket_info(self) -> Optional['outputs.RoleEligibilityScheduleRequestPropertiesResponseTicketInfo']:
+        """
+        Ticket Info of the role eligibility
+        """
+        return pulumi.get(self, "ticket_info")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        The role eligibility schedule request type.
+        """
+        return pulumi.get(self, "type")
+
+
+class AwaitableGetPimRoleEligibilityScheduleResult(GetPimRoleEligibilityScheduleResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetPimRoleEligibilityScheduleResult(
+            approval_id=self.approval_id,
+            condition=self.condition,
+            condition_version=self.condition_version,
+            created_on=self.created_on,
+            expanded_properties=self.expanded_properties,
+            id=self.id,
+            justification=self.justification,
+            name=self.name,
+            principal_id=self.principal_id,
+            principal_type=self.principal_type,
+            request_type=self.request_type,
+            requestor_id=self.requestor_id,
+            role_definition_id=self.role_definition_id,
+            schedule_info=self.schedule_info,
+            scope=self.scope,
+            status=self.status,
+            target_role_eligibility_schedule_id=self.target_role_eligibility_schedule_id,
+            target_role_eligibility_schedule_instance_id=self.target_role_eligibility_schedule_instance_id,
+            ticket_info=self.ticket_info,
+            type=self.type)
+
+
+def get_pim_role_eligibility_schedule(role_eligibility_schedule_request_name: Optional[str] = None,
+                                      scope: Optional[str] = None,
+                                      opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetPimRoleEligibilityScheduleResult:
+    """
+    Get the specified role eligibility schedule request.
+    Azure REST API version: 2020-10-01.
+
+
+    :param str role_eligibility_schedule_request_name: The name (guid) of the role eligibility schedule request to get.
+    :param str scope: The scope of the role eligibility schedule request.
+    """
+    __args__ = dict()
+    __args__['roleEligibilityScheduleRequestName'] = role_eligibility_schedule_request_name
+    __args__['scope'] = scope
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('azure-native:authorization:getPimRoleEligibilitySchedule', __args__, opts=opts, typ=GetPimRoleEligibilityScheduleResult).value
+
+    return AwaitableGetPimRoleEligibilityScheduleResult(
+        approval_id=pulumi.get(__ret__, 'approval_id'),
+        condition=pulumi.get(__ret__, 'condition'),
+        condition_version=pulumi.get(__ret__, 'condition_version'),
+        created_on=pulumi.get(__ret__, 'created_on'),
+        expanded_properties=pulumi.get(__ret__, 'expanded_properties'),
+        id=pulumi.get(__ret__, 'id'),
+        justification=pulumi.get(__ret__, 'justification'),
+        name=pulumi.get(__ret__, 'name'),
+        principal_id=pulumi.get(__ret__, 'principal_id'),
+        principal_type=pulumi.get(__ret__, 'principal_type'),
+        request_type=pulumi.get(__ret__, 'request_type'),
+        requestor_id=pulumi.get(__ret__, 'requestor_id'),
+        role_definition_id=pulumi.get(__ret__, 'role_definition_id'),
+        schedule_info=pulumi.get(__ret__, 'schedule_info'),
+        scope=pulumi.get(__ret__, 'scope'),
+        status=pulumi.get(__ret__, 'status'),
+        target_role_eligibility_schedule_id=pulumi.get(__ret__, 'target_role_eligibility_schedule_id'),
+        target_role_eligibility_schedule_instance_id=pulumi.get(__ret__, 'target_role_eligibility_schedule_instance_id'),
+        ticket_info=pulumi.get(__ret__, 'ticket_info'),
+        type=pulumi.get(__ret__, 'type'))
+def get_pim_role_eligibility_schedule_output(role_eligibility_schedule_request_name: Optional[pulumi.Input[str]] = None,
+                                             scope: Optional[pulumi.Input[str]] = None,
+                                             opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetPimRoleEligibilityScheduleResult]:
+    """
+    Get the specified role eligibility schedule request.
+    Azure REST API version: 2020-10-01.
+
+
+    :param str role_eligibility_schedule_request_name: The name (guid) of the role eligibility schedule request to get.
+    :param str scope: The scope of the role eligibility schedule request.
+    """
+    __args__ = dict()
+    __args__['roleEligibilityScheduleRequestName'] = role_eligibility_schedule_request_name
+    __args__['scope'] = scope
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('azure-native:authorization:getPimRoleEligibilitySchedule', __args__, opts=opts, typ=GetPimRoleEligibilityScheduleResult)
+    return __ret__.apply(lambda __response__: GetPimRoleEligibilityScheduleResult(
+        approval_id=pulumi.get(__response__, 'approval_id'),
+        condition=pulumi.get(__response__, 'condition'),
+        condition_version=pulumi.get(__response__, 'condition_version'),
+        created_on=pulumi.get(__response__, 'created_on'),
+        expanded_properties=pulumi.get(__response__, 'expanded_properties'),
+        id=pulumi.get(__response__, 'id'),
+        justification=pulumi.get(__response__, 'justification'),
+        name=pulumi.get(__response__, 'name'),
+        principal_id=pulumi.get(__response__, 'principal_id'),
+        principal_type=pulumi.get(__response__, 'principal_type'),
+        request_type=pulumi.get(__response__, 'request_type'),
+        requestor_id=pulumi.get(__response__, 'requestor_id'),
+        role_definition_id=pulumi.get(__response__, 'role_definition_id'),
+        schedule_info=pulumi.get(__response__, 'schedule_info'),
+        scope=pulumi.get(__response__, 'scope'),
+        status=pulumi.get(__response__, 'status'),
+        target_role_eligibility_schedule_id=pulumi.get(__response__, 'target_role_eligibility_schedule_id'),
+        target_role_eligibility_schedule_instance_id=pulumi.get(__response__, 'target_role_eligibility_schedule_instance_id'),
+        ticket_info=pulumi.get(__response__, 'ticket_info'),
+        type=pulumi.get(__response__, 'type')))

pulumi_azure_native/authorization/management_lock_at_resource_level.py

@@ -22,6 +22,7 @@ __all__ = ['ManagementLockAtResourceLevelArgs', 'ManagementLockAtResourceLevel']
 @pulumi.input_type
 class ManagementLockAtResourceLevelArgs:
     def __init__(__self__, *,
+                 api_version: pulumi.Input[str],
                  level: pulumi.Input[Union[str, 'LockLevel']],
                  parent_resource_path: pulumi.Input[str],
                  resource_group_name: pulumi.Input[str],
@@ -33,6 +34,7 @@ class ManagementLockAtResourceLevelArgs:
                  owners: Optional[pulumi.Input[Sequence[pulumi.Input['ManagementLockOwnerArgs']]]] = None):
         """
         The set of arguments for constructing a ManagementLockAtResourceLevel resource.
+        :param pulumi.Input[str] api_version: The API version to use for this operation.
         :param pulumi.Input[Union[str, 'LockLevel']] level: The level of the lock. Possible values are: NotSpecified, CanNotDelete, ReadOnly. CanNotDelete means authorized users are able to read and modify the resources, but not delete. ReadOnly means authorized users can only read from a resource, but they can't modify or delete it.
         :param pulumi.Input[str] parent_resource_path: The parent resource identity.
         :param pulumi.Input[str] resource_group_name: The name of the resource group containing the resource to lock. 
@@ -43,6 +45,7 @@ class ManagementLockAtResourceLevelArgs:
         :param pulumi.Input[str] notes: Notes about the lock. Maximum of 512 characters.
         :param pulumi.Input[Sequence[pulumi.Input['ManagementLockOwnerArgs']]] owners: The owners of the lock.
         """
+        pulumi.set(__self__, "api_version", api_version)
         pulumi.set(__self__, "level", level)
         pulumi.set(__self__, "parent_resource_path", parent_resource_path)
         pulumi.set(__self__, "resource_group_name", resource_group_name)
@@ -56,6 +59,18 @@ class ManagementLockAtResourceLevelArgs:
         if owners is not None:
             pulumi.set(__self__, "owners", owners)
 
+    @property
+    @pulumi.getter(name="apiVersion")
+    def api_version(self) -> pulumi.Input[str]:
+        """
+        The API version to use for this operation.
+        """
+        return pulumi.get(self, "api_version")
+
+    @api_version.setter
+    def api_version(self, value: pulumi.Input[str]):
+        pulumi.set(self, "api_version", value)
+
     @property
     @pulumi.getter
     def level(self) -> pulumi.Input[Union[str, 'LockLevel']]:
@@ -170,6 +185,7 @@ class ManagementLockAtResourceLevel(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 api_version: Optional[pulumi.Input[str]] = None,
                  level: Optional[pulumi.Input[Union[str, 'LockLevel']]] = None,
                  lock_name: Optional[pulumi.Input[str]] = None,
                  notes: Optional[pulumi.Input[str]] = None,
@@ -186,6 +202,7 @@ class ManagementLockAtResourceLevel(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] api_version: The API version to use for this operation.
         :param pulumi.Input[Union[str, 'LockLevel']] level: The level of the lock. Possible values are: NotSpecified, CanNotDelete, ReadOnly. CanNotDelete means authorized users are able to read and modify the resources, but not delete. ReadOnly means authorized users can only read from a resource, but they can't modify or delete it.
         :param pulumi.Input[str] lock_name: The name of lock. The lock name can be a maximum of 260 characters. It cannot contain <, > %, &, :, \\, ?, /, or any control characters.
         :param pulumi.Input[str] notes: Notes about the lock. Maximum of 512 characters.
@@ -221,6 +238,7 @@ class ManagementLockAtResourceLevel(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 api_version: Optional[pulumi.Input[str]] = None,
                  level: Optional[pulumi.Input[Union[str, 'LockLevel']]] = None,
                  lock_name: Optional[pulumi.Input[str]] = None,
                  notes: Optional[pulumi.Input[str]] = None,
@@ -239,6 +257,9 @@ class ManagementLockAtResourceLevel(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = ManagementLockAtResourceLevelArgs.__new__(ManagementLockAtResourceLevelArgs)
 
+            if api_version is None and not opts.urn:
+                raise TypeError("Missing required property 'api_version'")
+            __props__.__dict__["api_version"] = api_version
             if level is None and not opts.urn:
                 raise TypeError("Missing required property 'level'")
             __props__.__dict__["level"] = level