pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ApplicationAppRoleInitArgs', 'ApplicationAppRole']
|
|
@@ -14,20 +19,20 @@ __all__ = ['ApplicationAppRoleInitArgs', 'ApplicationAppRole']
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ApplicationAppRoleInitArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
allowed_member_types: pulumi.Input[Sequence[pulumi.Input[str]]],
|
|
18
|
-
application_id: pulumi.Input[str],
|
|
19
|
-
description: pulumi.Input[str],
|
|
20
|
-
display_name: pulumi.Input[str],
|
|
21
|
-
role_id: pulumi.Input[str],
|
|
22
|
-
value: Optional[pulumi.Input[str]] = None):
|
|
22
|
+
allowed_member_types: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
|
|
23
|
+
application_id: pulumi.Input[_builtins.str],
|
|
24
|
+
description: pulumi.Input[_builtins.str],
|
|
25
|
+
display_name: pulumi.Input[_builtins.str],
|
|
26
|
+
role_id: pulumi.Input[_builtins.str],
|
|
27
|
+
value: Optional[pulumi.Input[_builtins.str]] = None):
|
|
23
28
|
"""
|
|
24
29
|
The set of arguments for constructing a ApplicationAppRole resource.
|
|
25
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
26
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
27
|
-
:param pulumi.Input[str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
28
|
-
:param pulumi.Input[str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
29
|
-
:param pulumi.Input[str] role_id: The unique identifier of the app role
|
|
30
|
-
:param pulumi.Input[str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
30
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
31
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
32
|
+
:param pulumi.Input[_builtins.str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
33
|
+
:param pulumi.Input[_builtins.str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
34
|
+
:param pulumi.Input[_builtins.str] role_id: The unique identifier of the app role
|
|
35
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
31
36
|
|
|
32
37
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
33
38
|
"""
|
|
@@ -39,69 +44,69 @@ class ApplicationAppRoleInitArgs:
|
|
|
39
44
|
if value is not None:
|
|
40
45
|
pulumi.set(__self__, "value", value)
|
|
41
46
|
|
|
42
|
-
@property
|
|
47
|
+
@_builtins.property
|
|
43
48
|
@pulumi.getter(name="allowedMemberTypes")
|
|
44
|
-
def allowed_member_types(self) -> pulumi.Input[Sequence[pulumi.Input[str]]]:
|
|
49
|
+
def allowed_member_types(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
|
|
45
50
|
"""
|
|
46
51
|
A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
47
52
|
"""
|
|
48
53
|
return pulumi.get(self, "allowed_member_types")
|
|
49
54
|
|
|
50
55
|
@allowed_member_types.setter
|
|
51
|
-
def allowed_member_types(self, value: pulumi.Input[Sequence[pulumi.Input[str]]]):
|
|
56
|
+
def allowed_member_types(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
|
|
52
57
|
pulumi.set(self, "allowed_member_types", value)
|
|
53
58
|
|
|
54
|
-
@property
|
|
59
|
+
@_builtins.property
|
|
55
60
|
@pulumi.getter(name="applicationId")
|
|
56
|
-
def application_id(self) -> pulumi.Input[str]:
|
|
61
|
+
def application_id(self) -> pulumi.Input[_builtins.str]:
|
|
57
62
|
"""
|
|
58
63
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
59
64
|
"""
|
|
60
65
|
return pulumi.get(self, "application_id")
|
|
61
66
|
|
|
62
67
|
@application_id.setter
|
|
63
|
-
def application_id(self, value: pulumi.Input[str]):
|
|
68
|
+
def application_id(self, value: pulumi.Input[_builtins.str]):
|
|
64
69
|
pulumi.set(self, "application_id", value)
|
|
65
70
|
|
|
66
|
-
@property
|
|
71
|
+
@_builtins.property
|
|
67
72
|
@pulumi.getter
|
|
68
|
-
def description(self) -> pulumi.Input[str]:
|
|
73
|
+
def description(self) -> pulumi.Input[_builtins.str]:
|
|
69
74
|
"""
|
|
70
75
|
Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
71
76
|
"""
|
|
72
77
|
return pulumi.get(self, "description")
|
|
73
78
|
|
|
74
79
|
@description.setter
|
|
75
|
-
def description(self, value: pulumi.Input[str]):
|
|
80
|
+
def description(self, value: pulumi.Input[_builtins.str]):
|
|
76
81
|
pulumi.set(self, "description", value)
|
|
77
82
|
|
|
78
|
-
@property
|
|
83
|
+
@_builtins.property
|
|
79
84
|
@pulumi.getter(name="displayName")
|
|
80
|
-
def display_name(self) -> pulumi.Input[str]:
|
|
85
|
+
def display_name(self) -> pulumi.Input[_builtins.str]:
|
|
81
86
|
"""
|
|
82
87
|
Display name for the app role that appears during app role assignment and in consent experiences.
|
|
83
88
|
"""
|
|
84
89
|
return pulumi.get(self, "display_name")
|
|
85
90
|
|
|
86
91
|
@display_name.setter
|
|
87
|
-
def display_name(self, value: pulumi.Input[str]):
|
|
92
|
+
def display_name(self, value: pulumi.Input[_builtins.str]):
|
|
88
93
|
pulumi.set(self, "display_name", value)
|
|
89
94
|
|
|
90
|
-
@property
|
|
95
|
+
@_builtins.property
|
|
91
96
|
@pulumi.getter(name="roleId")
|
|
92
|
-
def role_id(self) -> pulumi.Input[str]:
|
|
97
|
+
def role_id(self) -> pulumi.Input[_builtins.str]:
|
|
93
98
|
"""
|
|
94
99
|
The unique identifier of the app role
|
|
95
100
|
"""
|
|
96
101
|
return pulumi.get(self, "role_id")
|
|
97
102
|
|
|
98
103
|
@role_id.setter
|
|
99
|
-
def role_id(self, value: pulumi.Input[str]):
|
|
104
|
+
def role_id(self, value: pulumi.Input[_builtins.str]):
|
|
100
105
|
pulumi.set(self, "role_id", value)
|
|
101
106
|
|
|
102
|
-
@property
|
|
107
|
+
@_builtins.property
|
|
103
108
|
@pulumi.getter
|
|
104
|
-
def value(self) -> Optional[pulumi.Input[str]]:
|
|
109
|
+
def value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
105
110
|
"""
|
|
106
111
|
The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
107
112
|
|
|
@@ -110,27 +115,27 @@ class ApplicationAppRoleInitArgs:
|
|
|
110
115
|
return pulumi.get(self, "value")
|
|
111
116
|
|
|
112
117
|
@value.setter
|
|
113
|
-
def value(self, value: Optional[pulumi.Input[str]]):
|
|
118
|
+
def value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
114
119
|
pulumi.set(self, "value", value)
|
|
115
120
|
|
|
116
121
|
|
|
117
122
|
@pulumi.input_type
|
|
118
123
|
class _ApplicationAppRoleState:
|
|
119
124
|
def __init__(__self__, *,
|
|
120
|
-
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
121
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
122
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
123
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
124
|
-
role_id: Optional[pulumi.Input[str]] = None,
|
|
125
|
-
value: Optional[pulumi.Input[str]] = None):
|
|
125
|
+
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
126
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
127
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
128
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
129
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
130
|
+
value: Optional[pulumi.Input[_builtins.str]] = None):
|
|
126
131
|
"""
|
|
127
132
|
Input properties used for looking up and filtering ApplicationAppRole resources.
|
|
128
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
129
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
130
|
-
:param pulumi.Input[str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
131
|
-
:param pulumi.Input[str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
132
|
-
:param pulumi.Input[str] role_id: The unique identifier of the app role
|
|
133
|
-
:param pulumi.Input[str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
133
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
134
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
135
|
+
:param pulumi.Input[_builtins.str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
136
|
+
:param pulumi.Input[_builtins.str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
137
|
+
:param pulumi.Input[_builtins.str] role_id: The unique identifier of the app role
|
|
138
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
134
139
|
|
|
135
140
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
136
141
|
"""
|
|
@@ -147,69 +152,69 @@ class _ApplicationAppRoleState:
|
|
|
147
152
|
if value is not None:
|
|
148
153
|
pulumi.set(__self__, "value", value)
|
|
149
154
|
|
|
150
|
-
@property
|
|
155
|
+
@_builtins.property
|
|
151
156
|
@pulumi.getter(name="allowedMemberTypes")
|
|
152
|
-
def allowed_member_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
157
|
+
def allowed_member_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
153
158
|
"""
|
|
154
159
|
A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
155
160
|
"""
|
|
156
161
|
return pulumi.get(self, "allowed_member_types")
|
|
157
162
|
|
|
158
163
|
@allowed_member_types.setter
|
|
159
|
-
def allowed_member_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
164
|
+
def allowed_member_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
160
165
|
pulumi.set(self, "allowed_member_types", value)
|
|
161
166
|
|
|
162
|
-
@property
|
|
167
|
+
@_builtins.property
|
|
163
168
|
@pulumi.getter(name="applicationId")
|
|
164
|
-
def application_id(self) -> Optional[pulumi.Input[str]]:
|
|
169
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
165
170
|
"""
|
|
166
171
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
167
172
|
"""
|
|
168
173
|
return pulumi.get(self, "application_id")
|
|
169
174
|
|
|
170
175
|
@application_id.setter
|
|
171
|
-
def application_id(self, value: Optional[pulumi.Input[str]]):
|
|
176
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
172
177
|
pulumi.set(self, "application_id", value)
|
|
173
178
|
|
|
174
|
-
@property
|
|
179
|
+
@_builtins.property
|
|
175
180
|
@pulumi.getter
|
|
176
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
181
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
177
182
|
"""
|
|
178
183
|
Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
179
184
|
"""
|
|
180
185
|
return pulumi.get(self, "description")
|
|
181
186
|
|
|
182
187
|
@description.setter
|
|
183
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
188
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
184
189
|
pulumi.set(self, "description", value)
|
|
185
190
|
|
|
186
|
-
@property
|
|
191
|
+
@_builtins.property
|
|
187
192
|
@pulumi.getter(name="displayName")
|
|
188
|
-
def display_name(self) -> Optional[pulumi.Input[str]]:
|
|
193
|
+
def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
189
194
|
"""
|
|
190
195
|
Display name for the app role that appears during app role assignment and in consent experiences.
|
|
191
196
|
"""
|
|
192
197
|
return pulumi.get(self, "display_name")
|
|
193
198
|
|
|
194
199
|
@display_name.setter
|
|
195
|
-
def display_name(self, value: Optional[pulumi.Input[str]]):
|
|
200
|
+
def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
196
201
|
pulumi.set(self, "display_name", value)
|
|
197
202
|
|
|
198
|
-
@property
|
|
203
|
+
@_builtins.property
|
|
199
204
|
@pulumi.getter(name="roleId")
|
|
200
|
-
def role_id(self) -> Optional[pulumi.Input[str]]:
|
|
205
|
+
def role_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
201
206
|
"""
|
|
202
207
|
The unique identifier of the app role
|
|
203
208
|
"""
|
|
204
209
|
return pulumi.get(self, "role_id")
|
|
205
210
|
|
|
206
211
|
@role_id.setter
|
|
207
|
-
def role_id(self, value: Optional[pulumi.Input[str]]):
|
|
212
|
+
def role_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
208
213
|
pulumi.set(self, "role_id", value)
|
|
209
214
|
|
|
210
|
-
@property
|
|
215
|
+
@_builtins.property
|
|
211
216
|
@pulumi.getter
|
|
212
|
-
def value(self) -> Optional[pulumi.Input[str]]:
|
|
217
|
+
def value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
213
218
|
"""
|
|
214
219
|
The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
215
220
|
|
|
@@ -218,21 +223,22 @@ class _ApplicationAppRoleState:
|
|
|
218
223
|
return pulumi.get(self, "value")
|
|
219
224
|
|
|
220
225
|
@value.setter
|
|
221
|
-
def value(self, value: Optional[pulumi.Input[str]]):
|
|
226
|
+
def value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
222
227
|
pulumi.set(self, "value", value)
|
|
223
228
|
|
|
224
229
|
|
|
230
|
+
@pulumi.type_token("azuread:index/applicationAppRole:ApplicationAppRole")
|
|
225
231
|
class ApplicationAppRole(pulumi.CustomResource):
|
|
226
232
|
@overload
|
|
227
233
|
def __init__(__self__,
|
|
228
234
|
resource_name: str,
|
|
229
235
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
230
|
-
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
231
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
232
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
233
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
234
|
-
role_id: Optional[pulumi.Input[str]] = None,
|
|
235
|
-
value: Optional[pulumi.Input[str]] = None,
|
|
236
|
+
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
237
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
238
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
239
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
240
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
241
|
+
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
236
242
|
__props__=None):
|
|
237
243
|
"""
|
|
238
244
|
## Example Usage
|
|
@@ -243,10 +249,10 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
243
249
|
import pulumi_random as random
|
|
244
250
|
|
|
245
251
|
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
246
|
-
example_administrator = random.
|
|
247
|
-
example_administer = azuread.ApplicationAppRole("
|
|
252
|
+
example_administrator = random.index.Uuid("example_administrator")
|
|
253
|
+
example_administer = azuread.ApplicationAppRole("example_administer",
|
|
248
254
|
application_id=example.id,
|
|
249
|
-
role_id=example_administrator
|
|
255
|
+
role_id=example_administrator["id"],
|
|
250
256
|
allowed_member_types=["User"],
|
|
251
257
|
description="My role description",
|
|
252
258
|
display_name="Administer",
|
|
@@ -262,8 +268,7 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
262
268
|
import pulumi_azuread as azuread
|
|
263
269
|
|
|
264
270
|
example = azuread.Application("example", display_name="example")
|
|
265
|
-
example_administer = azuread.ApplicationAppRole("
|
|
266
|
-
# ...
|
|
271
|
+
example_administer = azuread.ApplicationAppRole("example_administer", application_id=example.id)
|
|
267
272
|
```
|
|
268
273
|
|
|
269
274
|
## Import
|
|
@@ -271,17 +276,17 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
271
276
|
Application App Roles can be imported using the object ID of the application and the ID of the app role, in the following format.
|
|
272
277
|
|
|
273
278
|
```sh
|
|
274
|
-
|
|
279
|
+
$ pulumi import azuread:index/applicationAppRole:ApplicationAppRole example /applications/00000000-0000-0000-0000-000000000000/appRoles/11111111-1111-1111-1111-111111111111
|
|
275
280
|
```
|
|
276
281
|
|
|
277
282
|
:param str resource_name: The name of the resource.
|
|
278
283
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
279
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
280
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
281
|
-
:param pulumi.Input[str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
282
|
-
:param pulumi.Input[str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
283
|
-
:param pulumi.Input[str] role_id: The unique identifier of the app role
|
|
284
|
-
:param pulumi.Input[str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
284
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
285
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
286
|
+
:param pulumi.Input[_builtins.str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
287
|
+
:param pulumi.Input[_builtins.str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
288
|
+
:param pulumi.Input[_builtins.str] role_id: The unique identifier of the app role
|
|
289
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
285
290
|
|
|
286
291
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
287
292
|
"""
|
|
@@ -300,10 +305,10 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
300
305
|
import pulumi_random as random
|
|
301
306
|
|
|
302
307
|
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
303
|
-
example_administrator = random.
|
|
304
|
-
example_administer = azuread.ApplicationAppRole("
|
|
308
|
+
example_administrator = random.index.Uuid("example_administrator")
|
|
309
|
+
example_administer = azuread.ApplicationAppRole("example_administer",
|
|
305
310
|
application_id=example.id,
|
|
306
|
-
role_id=example_administrator
|
|
311
|
+
role_id=example_administrator["id"],
|
|
307
312
|
allowed_member_types=["User"],
|
|
308
313
|
description="My role description",
|
|
309
314
|
display_name="Administer",
|
|
@@ -319,8 +324,7 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
319
324
|
import pulumi_azuread as azuread
|
|
320
325
|
|
|
321
326
|
example = azuread.Application("example", display_name="example")
|
|
322
|
-
example_administer = azuread.ApplicationAppRole("
|
|
323
|
-
# ...
|
|
327
|
+
example_administer = azuread.ApplicationAppRole("example_administer", application_id=example.id)
|
|
324
328
|
```
|
|
325
329
|
|
|
326
330
|
## Import
|
|
@@ -328,7 +332,7 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
328
332
|
Application App Roles can be imported using the object ID of the application and the ID of the app role, in the following format.
|
|
329
333
|
|
|
330
334
|
```sh
|
|
331
|
-
|
|
335
|
+
$ pulumi import azuread:index/applicationAppRole:ApplicationAppRole example /applications/00000000-0000-0000-0000-000000000000/appRoles/11111111-1111-1111-1111-111111111111
|
|
332
336
|
```
|
|
333
337
|
|
|
334
338
|
:param str resource_name: The name of the resource.
|
|
@@ -346,12 +350,12 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
346
350
|
def _internal_init(__self__,
|
|
347
351
|
resource_name: str,
|
|
348
352
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
349
|
-
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
350
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
351
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
352
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
353
|
-
role_id: Optional[pulumi.Input[str]] = None,
|
|
354
|
-
value: Optional[pulumi.Input[str]] = None,
|
|
353
|
+
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
354
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
355
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
356
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
357
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
358
|
+
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
355
359
|
__props__=None):
|
|
356
360
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
357
361
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -387,12 +391,12 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
387
391
|
def get(resource_name: str,
|
|
388
392
|
id: pulumi.Input[str],
|
|
389
393
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
390
|
-
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
391
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
392
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
393
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
394
|
-
role_id: Optional[pulumi.Input[str]] = None,
|
|
395
|
-
value: Optional[pulumi.Input[str]] = None) -> 'ApplicationAppRole':
|
|
394
|
+
allowed_member_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
395
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
396
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
397
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
398
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
399
|
+
value: Optional[pulumi.Input[_builtins.str]] = None) -> 'ApplicationAppRole':
|
|
396
400
|
"""
|
|
397
401
|
Get an existing ApplicationAppRole resource's state with the given name, id, and optional extra
|
|
398
402
|
properties used to qualify the lookup.
|
|
@@ -400,12 +404,12 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
400
404
|
:param str resource_name: The unique name of the resulting resource.
|
|
401
405
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
402
406
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
403
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
404
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
405
|
-
:param pulumi.Input[str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
406
|
-
:param pulumi.Input[str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
407
|
-
:param pulumi.Input[str] role_id: The unique identifier of the app role
|
|
408
|
-
:param pulumi.Input[str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
407
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_member_types: A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
408
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
409
|
+
:param pulumi.Input[_builtins.str] description: Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
410
|
+
:param pulumi.Input[_builtins.str] display_name: Display name for the app role that appears during app role assignment and in consent experiences.
|
|
411
|
+
:param pulumi.Input[_builtins.str] role_id: The unique identifier of the app role
|
|
412
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
409
413
|
|
|
410
414
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
411
415
|
"""
|
|
@@ -421,49 +425,49 @@ class ApplicationAppRole(pulumi.CustomResource):
|
|
|
421
425
|
__props__.__dict__["value"] = value
|
|
422
426
|
return ApplicationAppRole(resource_name, opts=opts, __props__=__props__)
|
|
423
427
|
|
|
424
|
-
@property
|
|
428
|
+
@_builtins.property
|
|
425
429
|
@pulumi.getter(name="allowedMemberTypes")
|
|
426
|
-
def allowed_member_types(self) -> pulumi.Output[Sequence[str]]:
|
|
430
|
+
def allowed_member_types(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
427
431
|
"""
|
|
428
432
|
A set of values to specify whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications by setting to `Application`, or to both.
|
|
429
433
|
"""
|
|
430
434
|
return pulumi.get(self, "allowed_member_types")
|
|
431
435
|
|
|
432
|
-
@property
|
|
436
|
+
@_builtins.property
|
|
433
437
|
@pulumi.getter(name="applicationId")
|
|
434
|
-
def application_id(self) -> pulumi.Output[str]:
|
|
438
|
+
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
435
439
|
"""
|
|
436
440
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
437
441
|
"""
|
|
438
442
|
return pulumi.get(self, "application_id")
|
|
439
443
|
|
|
440
|
-
@property
|
|
444
|
+
@_builtins.property
|
|
441
445
|
@pulumi.getter
|
|
442
|
-
def description(self) -> pulumi.Output[str]:
|
|
446
|
+
def description(self) -> pulumi.Output[_builtins.str]:
|
|
443
447
|
"""
|
|
444
448
|
Description of the app role that appears when the role is being assigned, and if the role functions as an application permissions, during the consent experiences.
|
|
445
449
|
"""
|
|
446
450
|
return pulumi.get(self, "description")
|
|
447
451
|
|
|
448
|
-
@property
|
|
452
|
+
@_builtins.property
|
|
449
453
|
@pulumi.getter(name="displayName")
|
|
450
|
-
def display_name(self) -> pulumi.Output[str]:
|
|
454
|
+
def display_name(self) -> pulumi.Output[_builtins.str]:
|
|
451
455
|
"""
|
|
452
456
|
Display name for the app role that appears during app role assignment and in consent experiences.
|
|
453
457
|
"""
|
|
454
458
|
return pulumi.get(self, "display_name")
|
|
455
459
|
|
|
456
|
-
@property
|
|
460
|
+
@_builtins.property
|
|
457
461
|
@pulumi.getter(name="roleId")
|
|
458
|
-
def role_id(self) -> pulumi.Output[str]:
|
|
462
|
+
def role_id(self) -> pulumi.Output[_builtins.str]:
|
|
459
463
|
"""
|
|
460
464
|
The unique identifier of the app role
|
|
461
465
|
"""
|
|
462
466
|
return pulumi.get(self, "role_id")
|
|
463
467
|
|
|
464
|
-
@property
|
|
468
|
+
@_builtins.property
|
|
465
469
|
@pulumi.getter
|
|
466
|
-
def value(self) -> pulumi.Output[Optional[str]]:
|
|
470
|
+
def value(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
467
471
|
"""
|
|
468
472
|
The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
|
|
469
473
|
|