pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ApplicationOwnerArgs', 'ApplicationOwner']
|
|
@@ -14,90 +19,105 @@ __all__ = ['ApplicationOwnerArgs', 'ApplicationOwner']
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ApplicationOwnerArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
application_id: pulumi.Input[str],
|
|
18
|
-
owner_object_id: pulumi.Input[str]):
|
|
22
|
+
application_id: pulumi.Input[_builtins.str],
|
|
23
|
+
owner_object_id: pulumi.Input[_builtins.str]):
|
|
19
24
|
"""
|
|
20
25
|
The set of arguments for constructing a ApplicationOwner resource.
|
|
21
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
22
|
-
:param pulumi.Input[str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
26
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
27
|
+
:param pulumi.Input[_builtins.str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
23
28
|
"""
|
|
24
29
|
pulumi.set(__self__, "application_id", application_id)
|
|
25
30
|
pulumi.set(__self__, "owner_object_id", owner_object_id)
|
|
26
31
|
|
|
27
|
-
@property
|
|
32
|
+
@_builtins.property
|
|
28
33
|
@pulumi.getter(name="applicationId")
|
|
29
|
-
def application_id(self) -> pulumi.Input[str]:
|
|
34
|
+
def application_id(self) -> pulumi.Input[_builtins.str]:
|
|
30
35
|
"""
|
|
31
36
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
32
37
|
"""
|
|
33
38
|
return pulumi.get(self, "application_id")
|
|
34
39
|
|
|
35
40
|
@application_id.setter
|
|
36
|
-
def application_id(self, value: pulumi.Input[str]):
|
|
41
|
+
def application_id(self, value: pulumi.Input[_builtins.str]):
|
|
37
42
|
pulumi.set(self, "application_id", value)
|
|
38
43
|
|
|
39
|
-
@property
|
|
44
|
+
@_builtins.property
|
|
40
45
|
@pulumi.getter(name="ownerObjectId")
|
|
41
|
-
def owner_object_id(self) -> pulumi.Input[str]:
|
|
46
|
+
def owner_object_id(self) -> pulumi.Input[_builtins.str]:
|
|
42
47
|
"""
|
|
43
48
|
The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
44
49
|
"""
|
|
45
50
|
return pulumi.get(self, "owner_object_id")
|
|
46
51
|
|
|
47
52
|
@owner_object_id.setter
|
|
48
|
-
def owner_object_id(self, value: pulumi.Input[str]):
|
|
53
|
+
def owner_object_id(self, value: pulumi.Input[_builtins.str]):
|
|
49
54
|
pulumi.set(self, "owner_object_id", value)
|
|
50
55
|
|
|
51
56
|
|
|
52
57
|
@pulumi.input_type
|
|
53
58
|
class _ApplicationOwnerState:
|
|
54
59
|
def __init__(__self__, *,
|
|
55
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
56
|
-
owner_object_id: Optional[pulumi.Input[str]] = None):
|
|
60
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
61
|
+
owner_object_id: Optional[pulumi.Input[_builtins.str]] = None):
|
|
57
62
|
"""
|
|
58
63
|
Input properties used for looking up and filtering ApplicationOwner resources.
|
|
59
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
60
|
-
:param pulumi.Input[str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
64
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
65
|
+
:param pulumi.Input[_builtins.str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
61
66
|
"""
|
|
62
67
|
if application_id is not None:
|
|
63
68
|
pulumi.set(__self__, "application_id", application_id)
|
|
64
69
|
if owner_object_id is not None:
|
|
65
70
|
pulumi.set(__self__, "owner_object_id", owner_object_id)
|
|
66
71
|
|
|
67
|
-
@property
|
|
72
|
+
@_builtins.property
|
|
68
73
|
@pulumi.getter(name="applicationId")
|
|
69
|
-
def application_id(self) -> Optional[pulumi.Input[str]]:
|
|
74
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
70
75
|
"""
|
|
71
76
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
72
77
|
"""
|
|
73
78
|
return pulumi.get(self, "application_id")
|
|
74
79
|
|
|
75
80
|
@application_id.setter
|
|
76
|
-
def application_id(self, value: Optional[pulumi.Input[str]]):
|
|
81
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
77
82
|
pulumi.set(self, "application_id", value)
|
|
78
83
|
|
|
79
|
-
@property
|
|
84
|
+
@_builtins.property
|
|
80
85
|
@pulumi.getter(name="ownerObjectId")
|
|
81
|
-
def owner_object_id(self) -> Optional[pulumi.Input[str]]:
|
|
86
|
+
def owner_object_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
82
87
|
"""
|
|
83
88
|
The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
84
89
|
"""
|
|
85
90
|
return pulumi.get(self, "owner_object_id")
|
|
86
91
|
|
|
87
92
|
@owner_object_id.setter
|
|
88
|
-
def owner_object_id(self, value: Optional[pulumi.Input[str]]):
|
|
93
|
+
def owner_object_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
89
94
|
pulumi.set(self, "owner_object_id", value)
|
|
90
95
|
|
|
91
96
|
|
|
97
|
+
@pulumi.type_token("azuread:index/applicationOwner:ApplicationOwner")
|
|
92
98
|
class ApplicationOwner(pulumi.CustomResource):
|
|
93
99
|
@overload
|
|
94
100
|
def __init__(__self__,
|
|
95
101
|
resource_name: str,
|
|
96
102
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
97
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
98
|
-
owner_object_id: Optional[pulumi.Input[str]] = None,
|
|
103
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
104
|
+
owner_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
99
105
|
__props__=None):
|
|
100
106
|
"""
|
|
107
|
+
Manages a single owner of an application registration.
|
|
108
|
+
|
|
109
|
+
> This resource is incompatible with the `Application` resource, instead use this with the `ApplicationRegistration` resource.
|
|
110
|
+
|
|
111
|
+
## API Permissions
|
|
112
|
+
|
|
113
|
+
The following API permissions are required in order to use this resource.
|
|
114
|
+
|
|
115
|
+
When authenticated with a service principal, this resource requires one of the following application roles: `Application.ReadWrite.OwnedBy` or `Application.ReadWrite.All`
|
|
116
|
+
|
|
117
|
+
> When using the `Application.ReadWrite.OwnedBy` application role, the principal being used to run Pulumi must be an owner of the application.
|
|
118
|
+
|
|
119
|
+
When authenticated with a user principal, this resource may require one of the following directory roles: `Application Administrator` or `Global Administrator`
|
|
120
|
+
|
|
101
121
|
## Example Usage
|
|
102
122
|
|
|
103
123
|
```python
|
|
@@ -106,10 +126,10 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
106
126
|
|
|
107
127
|
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
108
128
|
jane = azuread.User("jane",
|
|
109
|
-
user_principal_name="jane.fischer@
|
|
129
|
+
user_principal_name="jane.fischer@example.com",
|
|
110
130
|
display_name="Jane Fischer",
|
|
111
131
|
password="Ch@ngeMe")
|
|
112
|
-
example_jane = azuread.ApplicationOwner("
|
|
132
|
+
example_jane = azuread.ApplicationOwner("example_jane",
|
|
113
133
|
application_id=example.id,
|
|
114
134
|
owner_object_id=jane.object_id)
|
|
115
135
|
```
|
|
@@ -121,13 +141,13 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
121
141
|
Application Owners can be imported using the object ID of the application and the object ID of the owner, in the following format.
|
|
122
142
|
|
|
123
143
|
```sh
|
|
124
|
-
|
|
144
|
+
$ pulumi import azuread:index/applicationOwner:ApplicationOwner example /applications/00000000-0000-0000-0000-000000000000/owners/11111111-1111-1111-1111-111111111111
|
|
125
145
|
```
|
|
126
146
|
|
|
127
147
|
:param str resource_name: The name of the resource.
|
|
128
148
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
129
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
130
|
-
:param pulumi.Input[str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
149
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
150
|
+
:param pulumi.Input[_builtins.str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
131
151
|
"""
|
|
132
152
|
...
|
|
133
153
|
@overload
|
|
@@ -136,6 +156,20 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
136
156
|
args: ApplicationOwnerArgs,
|
|
137
157
|
opts: Optional[pulumi.ResourceOptions] = None):
|
|
138
158
|
"""
|
|
159
|
+
Manages a single owner of an application registration.
|
|
160
|
+
|
|
161
|
+
> This resource is incompatible with the `Application` resource, instead use this with the `ApplicationRegistration` resource.
|
|
162
|
+
|
|
163
|
+
## API Permissions
|
|
164
|
+
|
|
165
|
+
The following API permissions are required in order to use this resource.
|
|
166
|
+
|
|
167
|
+
When authenticated with a service principal, this resource requires one of the following application roles: `Application.ReadWrite.OwnedBy` or `Application.ReadWrite.All`
|
|
168
|
+
|
|
169
|
+
> When using the `Application.ReadWrite.OwnedBy` application role, the principal being used to run Pulumi must be an owner of the application.
|
|
170
|
+
|
|
171
|
+
When authenticated with a user principal, this resource may require one of the following directory roles: `Application Administrator` or `Global Administrator`
|
|
172
|
+
|
|
139
173
|
## Example Usage
|
|
140
174
|
|
|
141
175
|
```python
|
|
@@ -144,10 +178,10 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
144
178
|
|
|
145
179
|
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
146
180
|
jane = azuread.User("jane",
|
|
147
|
-
user_principal_name="jane.fischer@
|
|
181
|
+
user_principal_name="jane.fischer@example.com",
|
|
148
182
|
display_name="Jane Fischer",
|
|
149
183
|
password="Ch@ngeMe")
|
|
150
|
-
example_jane = azuread.ApplicationOwner("
|
|
184
|
+
example_jane = azuread.ApplicationOwner("example_jane",
|
|
151
185
|
application_id=example.id,
|
|
152
186
|
owner_object_id=jane.object_id)
|
|
153
187
|
```
|
|
@@ -159,7 +193,7 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
159
193
|
Application Owners can be imported using the object ID of the application and the object ID of the owner, in the following format.
|
|
160
194
|
|
|
161
195
|
```sh
|
|
162
|
-
|
|
196
|
+
$ pulumi import azuread:index/applicationOwner:ApplicationOwner example /applications/00000000-0000-0000-0000-000000000000/owners/11111111-1111-1111-1111-111111111111
|
|
163
197
|
```
|
|
164
198
|
|
|
165
199
|
:param str resource_name: The name of the resource.
|
|
@@ -177,8 +211,8 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
177
211
|
def _internal_init(__self__,
|
|
178
212
|
resource_name: str,
|
|
179
213
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
180
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
181
|
-
owner_object_id: Optional[pulumi.Input[str]] = None,
|
|
214
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
215
|
+
owner_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
182
216
|
__props__=None):
|
|
183
217
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
184
218
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -204,8 +238,8 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
204
238
|
def get(resource_name: str,
|
|
205
239
|
id: pulumi.Input[str],
|
|
206
240
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
207
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
208
|
-
owner_object_id: Optional[pulumi.Input[str]] = None) -> 'ApplicationOwner':
|
|
241
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
242
|
+
owner_object_id: Optional[pulumi.Input[_builtins.str]] = None) -> 'ApplicationOwner':
|
|
209
243
|
"""
|
|
210
244
|
Get an existing ApplicationOwner resource's state with the given name, id, and optional extra
|
|
211
245
|
properties used to qualify the lookup.
|
|
@@ -213,8 +247,8 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
213
247
|
:param str resource_name: The unique name of the resulting resource.
|
|
214
248
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
215
249
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
216
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
217
|
-
:param pulumi.Input[str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
250
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
251
|
+
:param pulumi.Input[_builtins.str] owner_object_id: The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
218
252
|
"""
|
|
219
253
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
220
254
|
|
|
@@ -224,17 +258,17 @@ class ApplicationOwner(pulumi.CustomResource):
|
|
|
224
258
|
__props__.__dict__["owner_object_id"] = owner_object_id
|
|
225
259
|
return ApplicationOwner(resource_name, opts=opts, __props__=__props__)
|
|
226
260
|
|
|
227
|
-
@property
|
|
261
|
+
@_builtins.property
|
|
228
262
|
@pulumi.getter(name="applicationId")
|
|
229
|
-
def application_id(self) -> pulumi.Output[str]:
|
|
263
|
+
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
230
264
|
"""
|
|
231
265
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
232
266
|
"""
|
|
233
267
|
return pulumi.get(self, "application_id")
|
|
234
268
|
|
|
235
|
-
@property
|
|
269
|
+
@_builtins.property
|
|
236
270
|
@pulumi.getter(name="ownerObjectId")
|
|
237
|
-
def owner_object_id(self) -> pulumi.Output[str]:
|
|
271
|
+
def owner_object_id(self) -> pulumi.Output[_builtins.str]:
|
|
238
272
|
"""
|
|
239
273
|
The object ID of the owner to assign to the application, typically a user or service principal. Changing this forces a new resource to be created.
|
|
240
274
|
"""
|