pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ApplicationApiAccessArgs', 'ApplicationApiAccess']
|
|
@@ -14,16 +19,16 @@ __all__ = ['ApplicationApiAccessArgs', 'ApplicationApiAccess']
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ApplicationApiAccessArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
api_client_id: pulumi.Input[str],
|
|
18
|
-
application_id: pulumi.Input[str],
|
|
19
|
-
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
20
|
-
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
22
|
+
api_client_id: pulumi.Input[_builtins.str],
|
|
23
|
+
application_id: pulumi.Input[_builtins.str],
|
|
24
|
+
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
25
|
+
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
21
26
|
"""
|
|
22
27
|
The set of arguments for constructing a ApplicationApiAccess resource.
|
|
23
|
-
:param pulumi.Input[str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
24
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
25
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
26
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
28
|
+
:param pulumi.Input[_builtins.str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
29
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
30
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
31
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
27
32
|
|
|
28
33
|
> At least one of `role_ids` or `scope_ids` must be specified.
|
|
29
34
|
"""
|
|
@@ -34,45 +39,45 @@ class ApplicationApiAccessArgs:
|
|
|
34
39
|
if scope_ids is not None:
|
|
35
40
|
pulumi.set(__self__, "scope_ids", scope_ids)
|
|
36
41
|
|
|
37
|
-
@property
|
|
42
|
+
@_builtins.property
|
|
38
43
|
@pulumi.getter(name="apiClientId")
|
|
39
|
-
def api_client_id(self) -> pulumi.Input[str]:
|
|
44
|
+
def api_client_id(self) -> pulumi.Input[_builtins.str]:
|
|
40
45
|
"""
|
|
41
46
|
The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
42
47
|
"""
|
|
43
48
|
return pulumi.get(self, "api_client_id")
|
|
44
49
|
|
|
45
50
|
@api_client_id.setter
|
|
46
|
-
def api_client_id(self, value: pulumi.Input[str]):
|
|
51
|
+
def api_client_id(self, value: pulumi.Input[_builtins.str]):
|
|
47
52
|
pulumi.set(self, "api_client_id", value)
|
|
48
53
|
|
|
49
|
-
@property
|
|
54
|
+
@_builtins.property
|
|
50
55
|
@pulumi.getter(name="applicationId")
|
|
51
|
-
def application_id(self) -> pulumi.Input[str]:
|
|
56
|
+
def application_id(self) -> pulumi.Input[_builtins.str]:
|
|
52
57
|
"""
|
|
53
58
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
54
59
|
"""
|
|
55
60
|
return pulumi.get(self, "application_id")
|
|
56
61
|
|
|
57
62
|
@application_id.setter
|
|
58
|
-
def application_id(self, value: pulumi.Input[str]):
|
|
63
|
+
def application_id(self, value: pulumi.Input[_builtins.str]):
|
|
59
64
|
pulumi.set(self, "application_id", value)
|
|
60
65
|
|
|
61
|
-
@property
|
|
66
|
+
@_builtins.property
|
|
62
67
|
@pulumi.getter(name="roleIds")
|
|
63
|
-
def role_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
68
|
+
def role_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
64
69
|
"""
|
|
65
70
|
A set of role IDs to be granted to the application, as published by the API.
|
|
66
71
|
"""
|
|
67
72
|
return pulumi.get(self, "role_ids")
|
|
68
73
|
|
|
69
74
|
@role_ids.setter
|
|
70
|
-
def role_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
75
|
+
def role_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
71
76
|
pulumi.set(self, "role_ids", value)
|
|
72
77
|
|
|
73
|
-
@property
|
|
78
|
+
@_builtins.property
|
|
74
79
|
@pulumi.getter(name="scopeIds")
|
|
75
|
-
def scope_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
80
|
+
def scope_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
76
81
|
"""
|
|
77
82
|
A set of scope IDs to be granted to the application, as published by the API.
|
|
78
83
|
|
|
@@ -81,23 +86,23 @@ class ApplicationApiAccessArgs:
|
|
|
81
86
|
return pulumi.get(self, "scope_ids")
|
|
82
87
|
|
|
83
88
|
@scope_ids.setter
|
|
84
|
-
def scope_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
89
|
+
def scope_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
85
90
|
pulumi.set(self, "scope_ids", value)
|
|
86
91
|
|
|
87
92
|
|
|
88
93
|
@pulumi.input_type
|
|
89
94
|
class _ApplicationApiAccessState:
|
|
90
95
|
def __init__(__self__, *,
|
|
91
|
-
api_client_id: Optional[pulumi.Input[str]] = None,
|
|
92
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
93
|
-
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
94
|
-
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
96
|
+
api_client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
97
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
98
|
+
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
99
|
+
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
95
100
|
"""
|
|
96
101
|
Input properties used for looking up and filtering ApplicationApiAccess resources.
|
|
97
|
-
:param pulumi.Input[str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
98
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
99
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
100
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
102
|
+
:param pulumi.Input[_builtins.str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
103
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
104
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
105
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
101
106
|
|
|
102
107
|
> At least one of `role_ids` or `scope_ids` must be specified.
|
|
103
108
|
"""
|
|
@@ -110,45 +115,45 @@ class _ApplicationApiAccessState:
|
|
|
110
115
|
if scope_ids is not None:
|
|
111
116
|
pulumi.set(__self__, "scope_ids", scope_ids)
|
|
112
117
|
|
|
113
|
-
@property
|
|
118
|
+
@_builtins.property
|
|
114
119
|
@pulumi.getter(name="apiClientId")
|
|
115
|
-
def api_client_id(self) -> Optional[pulumi.Input[str]]:
|
|
120
|
+
def api_client_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
116
121
|
"""
|
|
117
122
|
The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
118
123
|
"""
|
|
119
124
|
return pulumi.get(self, "api_client_id")
|
|
120
125
|
|
|
121
126
|
@api_client_id.setter
|
|
122
|
-
def api_client_id(self, value: Optional[pulumi.Input[str]]):
|
|
127
|
+
def api_client_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
123
128
|
pulumi.set(self, "api_client_id", value)
|
|
124
129
|
|
|
125
|
-
@property
|
|
130
|
+
@_builtins.property
|
|
126
131
|
@pulumi.getter(name="applicationId")
|
|
127
|
-
def application_id(self) -> Optional[pulumi.Input[str]]:
|
|
132
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
128
133
|
"""
|
|
129
134
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
130
135
|
"""
|
|
131
136
|
return pulumi.get(self, "application_id")
|
|
132
137
|
|
|
133
138
|
@application_id.setter
|
|
134
|
-
def application_id(self, value: Optional[pulumi.Input[str]]):
|
|
139
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
135
140
|
pulumi.set(self, "application_id", value)
|
|
136
141
|
|
|
137
|
-
@property
|
|
142
|
+
@_builtins.property
|
|
138
143
|
@pulumi.getter(name="roleIds")
|
|
139
|
-
def role_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
144
|
+
def role_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
140
145
|
"""
|
|
141
146
|
A set of role IDs to be granted to the application, as published by the API.
|
|
142
147
|
"""
|
|
143
148
|
return pulumi.get(self, "role_ids")
|
|
144
149
|
|
|
145
150
|
@role_ids.setter
|
|
146
|
-
def role_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
151
|
+
def role_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
147
152
|
pulumi.set(self, "role_ids", value)
|
|
148
153
|
|
|
149
|
-
@property
|
|
154
|
+
@_builtins.property
|
|
150
155
|
@pulumi.getter(name="scopeIds")
|
|
151
|
-
def scope_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
156
|
+
def scope_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
152
157
|
"""
|
|
153
158
|
A set of scope IDs to be granted to the application, as published by the API.
|
|
154
159
|
|
|
@@ -157,19 +162,20 @@ class _ApplicationApiAccessState:
|
|
|
157
162
|
return pulumi.get(self, "scope_ids")
|
|
158
163
|
|
|
159
164
|
@scope_ids.setter
|
|
160
|
-
def scope_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
165
|
+
def scope_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
161
166
|
pulumi.set(self, "scope_ids", value)
|
|
162
167
|
|
|
163
168
|
|
|
169
|
+
@pulumi.type_token("azuread:index/applicationApiAccess:ApplicationApiAccess")
|
|
164
170
|
class ApplicationApiAccess(pulumi.CustomResource):
|
|
165
171
|
@overload
|
|
166
172
|
def __init__(__self__,
|
|
167
173
|
resource_name: str,
|
|
168
174
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
169
|
-
api_client_id: Optional[pulumi.Input[str]] = None,
|
|
170
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
171
|
-
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
172
|
-
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
175
|
+
api_client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
176
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
177
|
+
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
178
|
+
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
173
179
|
__props__=None):
|
|
174
180
|
"""
|
|
175
181
|
## Example Usage
|
|
@@ -181,7 +187,7 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
181
187
|
well_known = azuread.get_application_published_app_ids()
|
|
182
188
|
msgraph = azuread.get_service_principal(client_id=well_known.result["MicrosoftGraph"])
|
|
183
189
|
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
184
|
-
example_msgraph = azuread.ApplicationApiAccess("
|
|
190
|
+
example_msgraph = azuread.ApplicationApiAccess("example_msgraph",
|
|
185
191
|
application_id=example.id,
|
|
186
192
|
api_client_id=well_known.result["MicrosoftGraph"],
|
|
187
193
|
role_ids=[
|
|
@@ -199,9 +205,8 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
199
205
|
import pulumi
|
|
200
206
|
import pulumi_azuread as azuread
|
|
201
207
|
|
|
202
|
-
|
|
203
|
-
example_application_api_access = azuread.ApplicationApiAccess("
|
|
204
|
-
# ...
|
|
208
|
+
example = azuread.Application("example", display_name="example")
|
|
209
|
+
example_application_api_access = azuread.ApplicationApiAccess("example", application_id=example.id)
|
|
205
210
|
```
|
|
206
211
|
|
|
207
212
|
## Import
|
|
@@ -209,15 +214,15 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
209
214
|
Application API Access can be imported using the object ID of the application and the client ID of the API, in the following format.
|
|
210
215
|
|
|
211
216
|
```sh
|
|
212
|
-
|
|
217
|
+
$ pulumi import azuread:index/applicationApiAccess:ApplicationApiAccess example /applications/00000000-0000-0000-0000-000000000000/apiAccess/11111111-1111-1111-1111-111111111111
|
|
213
218
|
```
|
|
214
219
|
|
|
215
220
|
:param str resource_name: The name of the resource.
|
|
216
221
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
217
|
-
:param pulumi.Input[str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
218
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
219
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
220
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
222
|
+
:param pulumi.Input[_builtins.str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
223
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
224
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
225
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
221
226
|
|
|
222
227
|
> At least one of `role_ids` or `scope_ids` must be specified.
|
|
223
228
|
"""
|
|
@@ -237,7 +242,7 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
237
242
|
well_known = azuread.get_application_published_app_ids()
|
|
238
243
|
msgraph = azuread.get_service_principal(client_id=well_known.result["MicrosoftGraph"])
|
|
239
244
|
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
240
|
-
example_msgraph = azuread.ApplicationApiAccess("
|
|
245
|
+
example_msgraph = azuread.ApplicationApiAccess("example_msgraph",
|
|
241
246
|
application_id=example.id,
|
|
242
247
|
api_client_id=well_known.result["MicrosoftGraph"],
|
|
243
248
|
role_ids=[
|
|
@@ -255,9 +260,8 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
255
260
|
import pulumi
|
|
256
261
|
import pulumi_azuread as azuread
|
|
257
262
|
|
|
258
|
-
|
|
259
|
-
example_application_api_access = azuread.ApplicationApiAccess("
|
|
260
|
-
# ...
|
|
263
|
+
example = azuread.Application("example", display_name="example")
|
|
264
|
+
example_application_api_access = azuread.ApplicationApiAccess("example", application_id=example.id)
|
|
261
265
|
```
|
|
262
266
|
|
|
263
267
|
## Import
|
|
@@ -265,7 +269,7 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
265
269
|
Application API Access can be imported using the object ID of the application and the client ID of the API, in the following format.
|
|
266
270
|
|
|
267
271
|
```sh
|
|
268
|
-
|
|
272
|
+
$ pulumi import azuread:index/applicationApiAccess:ApplicationApiAccess example /applications/00000000-0000-0000-0000-000000000000/apiAccess/11111111-1111-1111-1111-111111111111
|
|
269
273
|
```
|
|
270
274
|
|
|
271
275
|
:param str resource_name: The name of the resource.
|
|
@@ -283,10 +287,10 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
283
287
|
def _internal_init(__self__,
|
|
284
288
|
resource_name: str,
|
|
285
289
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
286
|
-
api_client_id: Optional[pulumi.Input[str]] = None,
|
|
287
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
288
|
-
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
289
|
-
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
290
|
+
api_client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
291
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
292
|
+
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
293
|
+
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
290
294
|
__props__=None):
|
|
291
295
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
292
296
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -314,10 +318,10 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
314
318
|
def get(resource_name: str,
|
|
315
319
|
id: pulumi.Input[str],
|
|
316
320
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
317
|
-
api_client_id: Optional[pulumi.Input[str]] = None,
|
|
318
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
319
|
-
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
320
|
-
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'ApplicationApiAccess':
|
|
321
|
+
api_client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
322
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
323
|
+
role_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
324
|
+
scope_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None) -> 'ApplicationApiAccess':
|
|
321
325
|
"""
|
|
322
326
|
Get an existing ApplicationApiAccess resource's state with the given name, id, and optional extra
|
|
323
327
|
properties used to qualify the lookup.
|
|
@@ -325,10 +329,10 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
325
329
|
:param str resource_name: The unique name of the resulting resource.
|
|
326
330
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
327
331
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
328
|
-
:param pulumi.Input[str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
329
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
330
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
331
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
332
|
+
:param pulumi.Input[_builtins.str] api_client_id: The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
333
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
334
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] role_ids: A set of role IDs to be granted to the application, as published by the API.
|
|
335
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scope_ids: A set of scope IDs to be granted to the application, as published by the API.
|
|
332
336
|
|
|
333
337
|
> At least one of `role_ids` or `scope_ids` must be specified.
|
|
334
338
|
"""
|
|
@@ -342,33 +346,33 @@ class ApplicationApiAccess(pulumi.CustomResource):
|
|
|
342
346
|
__props__.__dict__["scope_ids"] = scope_ids
|
|
343
347
|
return ApplicationApiAccess(resource_name, opts=opts, __props__=__props__)
|
|
344
348
|
|
|
345
|
-
@property
|
|
349
|
+
@_builtins.property
|
|
346
350
|
@pulumi.getter(name="apiClientId")
|
|
347
|
-
def api_client_id(self) -> pulumi.Output[str]:
|
|
351
|
+
def api_client_id(self) -> pulumi.Output[_builtins.str]:
|
|
348
352
|
"""
|
|
349
353
|
The client ID of the API to which access is being granted. Changing this forces a new resource to be created.
|
|
350
354
|
"""
|
|
351
355
|
return pulumi.get(self, "api_client_id")
|
|
352
356
|
|
|
353
|
-
@property
|
|
357
|
+
@_builtins.property
|
|
354
358
|
@pulumi.getter(name="applicationId")
|
|
355
|
-
def application_id(self) -> pulumi.Output[str]:
|
|
359
|
+
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
356
360
|
"""
|
|
357
361
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
358
362
|
"""
|
|
359
363
|
return pulumi.get(self, "application_id")
|
|
360
364
|
|
|
361
|
-
@property
|
|
365
|
+
@_builtins.property
|
|
362
366
|
@pulumi.getter(name="roleIds")
|
|
363
|
-
def role_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
367
|
+
def role_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
364
368
|
"""
|
|
365
369
|
A set of role IDs to be granted to the application, as published by the API.
|
|
366
370
|
"""
|
|
367
371
|
return pulumi.get(self, "role_ids")
|
|
368
372
|
|
|
369
|
-
@property
|
|
373
|
+
@_builtins.property
|
|
370
374
|
@pulumi.getter(name="scopeIds")
|
|
371
|
-
def scope_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
375
|
+
def scope_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
372
376
|
"""
|
|
373
377
|
A set of scope IDs to be granted to the application, as published by the API.
|
|
374
378
|
|