pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ApplicationPermissionScopeArgs', 'ApplicationPermissionScope']
|
|
@@ -14,26 +19,26 @@ __all__ = ['ApplicationPermissionScopeArgs', 'ApplicationPermissionScope']
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ApplicationPermissionScopeArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
admin_consent_description: pulumi.Input[str],
|
|
18
|
-
admin_consent_display_name: pulumi.Input[str],
|
|
19
|
-
application_id: pulumi.Input[str],
|
|
20
|
-
scope_id: pulumi.Input[str],
|
|
21
|
-
value: pulumi.Input[str],
|
|
22
|
-
type: Optional[pulumi.Input[str]] = None,
|
|
23
|
-
user_consent_description: Optional[pulumi.Input[str]] = None,
|
|
24
|
-
user_consent_display_name: Optional[pulumi.Input[str]] = None):
|
|
22
|
+
admin_consent_description: pulumi.Input[_builtins.str],
|
|
23
|
+
admin_consent_display_name: pulumi.Input[_builtins.str],
|
|
24
|
+
application_id: pulumi.Input[_builtins.str],
|
|
25
|
+
scope_id: pulumi.Input[_builtins.str],
|
|
26
|
+
value: pulumi.Input[_builtins.str],
|
|
27
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
user_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
user_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None):
|
|
25
30
|
"""
|
|
26
31
|
The set of arguments for constructing a ApplicationPermissionScope resource.
|
|
27
|
-
:param pulumi.Input[str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
28
|
-
:param pulumi.Input[str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
29
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
30
|
-
:param pulumi.Input[str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
31
|
-
:param pulumi.Input[str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
32
|
+
:param pulumi.Input[_builtins.str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
33
|
+
:param pulumi.Input[_builtins.str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
34
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
35
|
+
:param pulumi.Input[_builtins.str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
36
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
32
37
|
|
|
33
38
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
34
|
-
:param pulumi.Input[str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
35
|
-
:param pulumi.Input[str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
36
|
-
:param pulumi.Input[str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
39
|
+
:param pulumi.Input[_builtins.str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
40
|
+
:param pulumi.Input[_builtins.str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
41
|
+
:param pulumi.Input[_builtins.str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
37
42
|
"""
|
|
38
43
|
pulumi.set(__self__, "admin_consent_description", admin_consent_description)
|
|
39
44
|
pulumi.set(__self__, "admin_consent_display_name", admin_consent_display_name)
|
|
@@ -47,57 +52,57 @@ class ApplicationPermissionScopeArgs:
|
|
|
47
52
|
if user_consent_display_name is not None:
|
|
48
53
|
pulumi.set(__self__, "user_consent_display_name", user_consent_display_name)
|
|
49
54
|
|
|
50
|
-
@property
|
|
55
|
+
@_builtins.property
|
|
51
56
|
@pulumi.getter(name="adminConsentDescription")
|
|
52
|
-
def admin_consent_description(self) -> pulumi.Input[str]:
|
|
57
|
+
def admin_consent_description(self) -> pulumi.Input[_builtins.str]:
|
|
53
58
|
"""
|
|
54
59
|
Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
55
60
|
"""
|
|
56
61
|
return pulumi.get(self, "admin_consent_description")
|
|
57
62
|
|
|
58
63
|
@admin_consent_description.setter
|
|
59
|
-
def admin_consent_description(self, value: pulumi.Input[str]):
|
|
64
|
+
def admin_consent_description(self, value: pulumi.Input[_builtins.str]):
|
|
60
65
|
pulumi.set(self, "admin_consent_description", value)
|
|
61
66
|
|
|
62
|
-
@property
|
|
67
|
+
@_builtins.property
|
|
63
68
|
@pulumi.getter(name="adminConsentDisplayName")
|
|
64
|
-
def admin_consent_display_name(self) -> pulumi.Input[str]:
|
|
69
|
+
def admin_consent_display_name(self) -> pulumi.Input[_builtins.str]:
|
|
65
70
|
"""
|
|
66
71
|
Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
67
72
|
"""
|
|
68
73
|
return pulumi.get(self, "admin_consent_display_name")
|
|
69
74
|
|
|
70
75
|
@admin_consent_display_name.setter
|
|
71
|
-
def admin_consent_display_name(self, value: pulumi.Input[str]):
|
|
76
|
+
def admin_consent_display_name(self, value: pulumi.Input[_builtins.str]):
|
|
72
77
|
pulumi.set(self, "admin_consent_display_name", value)
|
|
73
78
|
|
|
74
|
-
@property
|
|
79
|
+
@_builtins.property
|
|
75
80
|
@pulumi.getter(name="applicationId")
|
|
76
|
-
def application_id(self) -> pulumi.Input[str]:
|
|
81
|
+
def application_id(self) -> pulumi.Input[_builtins.str]:
|
|
77
82
|
"""
|
|
78
83
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
79
84
|
"""
|
|
80
85
|
return pulumi.get(self, "application_id")
|
|
81
86
|
|
|
82
87
|
@application_id.setter
|
|
83
|
-
def application_id(self, value: pulumi.Input[str]):
|
|
88
|
+
def application_id(self, value: pulumi.Input[_builtins.str]):
|
|
84
89
|
pulumi.set(self, "application_id", value)
|
|
85
90
|
|
|
86
|
-
@property
|
|
91
|
+
@_builtins.property
|
|
87
92
|
@pulumi.getter(name="scopeId")
|
|
88
|
-
def scope_id(self) -> pulumi.Input[str]:
|
|
93
|
+
def scope_id(self) -> pulumi.Input[_builtins.str]:
|
|
89
94
|
"""
|
|
90
95
|
The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
91
96
|
"""
|
|
92
97
|
return pulumi.get(self, "scope_id")
|
|
93
98
|
|
|
94
99
|
@scope_id.setter
|
|
95
|
-
def scope_id(self, value: pulumi.Input[str]):
|
|
100
|
+
def scope_id(self, value: pulumi.Input[_builtins.str]):
|
|
96
101
|
pulumi.set(self, "scope_id", value)
|
|
97
102
|
|
|
98
|
-
@property
|
|
103
|
+
@_builtins.property
|
|
99
104
|
@pulumi.getter
|
|
100
|
-
def value(self) -> pulumi.Input[str]:
|
|
105
|
+
def value(self) -> pulumi.Input[_builtins.str]:
|
|
101
106
|
"""
|
|
102
107
|
The value that is used for the `scp` claim in OAuth access tokens.
|
|
103
108
|
|
|
@@ -106,67 +111,67 @@ class ApplicationPermissionScopeArgs:
|
|
|
106
111
|
return pulumi.get(self, "value")
|
|
107
112
|
|
|
108
113
|
@value.setter
|
|
109
|
-
def value(self, value: pulumi.Input[str]):
|
|
114
|
+
def value(self, value: pulumi.Input[_builtins.str]):
|
|
110
115
|
pulumi.set(self, "value", value)
|
|
111
116
|
|
|
112
|
-
@property
|
|
117
|
+
@_builtins.property
|
|
113
118
|
@pulumi.getter
|
|
114
|
-
def type(self) -> Optional[pulumi.Input[str]]:
|
|
119
|
+
def type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
115
120
|
"""
|
|
116
121
|
Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
117
122
|
"""
|
|
118
123
|
return pulumi.get(self, "type")
|
|
119
124
|
|
|
120
125
|
@type.setter
|
|
121
|
-
def type(self, value: Optional[pulumi.Input[str]]):
|
|
126
|
+
def type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
122
127
|
pulumi.set(self, "type", value)
|
|
123
128
|
|
|
124
|
-
@property
|
|
129
|
+
@_builtins.property
|
|
125
130
|
@pulumi.getter(name="userConsentDescription")
|
|
126
|
-
def user_consent_description(self) -> Optional[pulumi.Input[str]]:
|
|
131
|
+
def user_consent_description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
127
132
|
"""
|
|
128
133
|
Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
129
134
|
"""
|
|
130
135
|
return pulumi.get(self, "user_consent_description")
|
|
131
136
|
|
|
132
137
|
@user_consent_description.setter
|
|
133
|
-
def user_consent_description(self, value: Optional[pulumi.Input[str]]):
|
|
138
|
+
def user_consent_description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
134
139
|
pulumi.set(self, "user_consent_description", value)
|
|
135
140
|
|
|
136
|
-
@property
|
|
141
|
+
@_builtins.property
|
|
137
142
|
@pulumi.getter(name="userConsentDisplayName")
|
|
138
|
-
def user_consent_display_name(self) -> Optional[pulumi.Input[str]]:
|
|
143
|
+
def user_consent_display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
139
144
|
"""
|
|
140
145
|
Display name for the delegated permission that appears in the end user consent experience
|
|
141
146
|
"""
|
|
142
147
|
return pulumi.get(self, "user_consent_display_name")
|
|
143
148
|
|
|
144
149
|
@user_consent_display_name.setter
|
|
145
|
-
def user_consent_display_name(self, value: Optional[pulumi.Input[str]]):
|
|
150
|
+
def user_consent_display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
146
151
|
pulumi.set(self, "user_consent_display_name", value)
|
|
147
152
|
|
|
148
153
|
|
|
149
154
|
@pulumi.input_type
|
|
150
155
|
class _ApplicationPermissionScopeState:
|
|
151
156
|
def __init__(__self__, *,
|
|
152
|
-
admin_consent_description: Optional[pulumi.Input[str]] = None,
|
|
153
|
-
admin_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
154
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
155
|
-
scope_id: Optional[pulumi.Input[str]] = None,
|
|
156
|
-
type: Optional[pulumi.Input[str]] = None,
|
|
157
|
-
user_consent_description: Optional[pulumi.Input[str]] = None,
|
|
158
|
-
user_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
159
|
-
value: Optional[pulumi.Input[str]] = None):
|
|
157
|
+
admin_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
158
|
+
admin_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
159
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
160
|
+
scope_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
161
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
162
|
+
user_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
163
|
+
user_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
164
|
+
value: Optional[pulumi.Input[_builtins.str]] = None):
|
|
160
165
|
"""
|
|
161
166
|
Input properties used for looking up and filtering ApplicationPermissionScope resources.
|
|
162
|
-
:param pulumi.Input[str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
163
|
-
:param pulumi.Input[str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
164
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
165
|
-
:param pulumi.Input[str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
166
|
-
:param pulumi.Input[str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
167
|
-
:param pulumi.Input[str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
168
|
-
:param pulumi.Input[str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
169
|
-
:param pulumi.Input[str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
167
|
+
:param pulumi.Input[_builtins.str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
168
|
+
:param pulumi.Input[_builtins.str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
169
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
170
|
+
:param pulumi.Input[_builtins.str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
171
|
+
:param pulumi.Input[_builtins.str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
172
|
+
:param pulumi.Input[_builtins.str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
173
|
+
:param pulumi.Input[_builtins.str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
174
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
170
175
|
|
|
171
176
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
172
177
|
"""
|
|
@@ -187,93 +192,93 @@ class _ApplicationPermissionScopeState:
|
|
|
187
192
|
if value is not None:
|
|
188
193
|
pulumi.set(__self__, "value", value)
|
|
189
194
|
|
|
190
|
-
@property
|
|
195
|
+
@_builtins.property
|
|
191
196
|
@pulumi.getter(name="adminConsentDescription")
|
|
192
|
-
def admin_consent_description(self) -> Optional[pulumi.Input[str]]:
|
|
197
|
+
def admin_consent_description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
193
198
|
"""
|
|
194
199
|
Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
195
200
|
"""
|
|
196
201
|
return pulumi.get(self, "admin_consent_description")
|
|
197
202
|
|
|
198
203
|
@admin_consent_description.setter
|
|
199
|
-
def admin_consent_description(self, value: Optional[pulumi.Input[str]]):
|
|
204
|
+
def admin_consent_description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
200
205
|
pulumi.set(self, "admin_consent_description", value)
|
|
201
206
|
|
|
202
|
-
@property
|
|
207
|
+
@_builtins.property
|
|
203
208
|
@pulumi.getter(name="adminConsentDisplayName")
|
|
204
|
-
def admin_consent_display_name(self) -> Optional[pulumi.Input[str]]:
|
|
209
|
+
def admin_consent_display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
205
210
|
"""
|
|
206
211
|
Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
207
212
|
"""
|
|
208
213
|
return pulumi.get(self, "admin_consent_display_name")
|
|
209
214
|
|
|
210
215
|
@admin_consent_display_name.setter
|
|
211
|
-
def admin_consent_display_name(self, value: Optional[pulumi.Input[str]]):
|
|
216
|
+
def admin_consent_display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
212
217
|
pulumi.set(self, "admin_consent_display_name", value)
|
|
213
218
|
|
|
214
|
-
@property
|
|
219
|
+
@_builtins.property
|
|
215
220
|
@pulumi.getter(name="applicationId")
|
|
216
|
-
def application_id(self) -> Optional[pulumi.Input[str]]:
|
|
221
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
217
222
|
"""
|
|
218
223
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
219
224
|
"""
|
|
220
225
|
return pulumi.get(self, "application_id")
|
|
221
226
|
|
|
222
227
|
@application_id.setter
|
|
223
|
-
def application_id(self, value: Optional[pulumi.Input[str]]):
|
|
228
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
224
229
|
pulumi.set(self, "application_id", value)
|
|
225
230
|
|
|
226
|
-
@property
|
|
231
|
+
@_builtins.property
|
|
227
232
|
@pulumi.getter(name="scopeId")
|
|
228
|
-
def scope_id(self) -> Optional[pulumi.Input[str]]:
|
|
233
|
+
def scope_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
229
234
|
"""
|
|
230
235
|
The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
231
236
|
"""
|
|
232
237
|
return pulumi.get(self, "scope_id")
|
|
233
238
|
|
|
234
239
|
@scope_id.setter
|
|
235
|
-
def scope_id(self, value: Optional[pulumi.Input[str]]):
|
|
240
|
+
def scope_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
236
241
|
pulumi.set(self, "scope_id", value)
|
|
237
242
|
|
|
238
|
-
@property
|
|
243
|
+
@_builtins.property
|
|
239
244
|
@pulumi.getter
|
|
240
|
-
def type(self) -> Optional[pulumi.Input[str]]:
|
|
245
|
+
def type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
241
246
|
"""
|
|
242
247
|
Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
243
248
|
"""
|
|
244
249
|
return pulumi.get(self, "type")
|
|
245
250
|
|
|
246
251
|
@type.setter
|
|
247
|
-
def type(self, value: Optional[pulumi.Input[str]]):
|
|
252
|
+
def type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
248
253
|
pulumi.set(self, "type", value)
|
|
249
254
|
|
|
250
|
-
@property
|
|
255
|
+
@_builtins.property
|
|
251
256
|
@pulumi.getter(name="userConsentDescription")
|
|
252
|
-
def user_consent_description(self) -> Optional[pulumi.Input[str]]:
|
|
257
|
+
def user_consent_description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
253
258
|
"""
|
|
254
259
|
Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
255
260
|
"""
|
|
256
261
|
return pulumi.get(self, "user_consent_description")
|
|
257
262
|
|
|
258
263
|
@user_consent_description.setter
|
|
259
|
-
def user_consent_description(self, value: Optional[pulumi.Input[str]]):
|
|
264
|
+
def user_consent_description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
260
265
|
pulumi.set(self, "user_consent_description", value)
|
|
261
266
|
|
|
262
|
-
@property
|
|
267
|
+
@_builtins.property
|
|
263
268
|
@pulumi.getter(name="userConsentDisplayName")
|
|
264
|
-
def user_consent_display_name(self) -> Optional[pulumi.Input[str]]:
|
|
269
|
+
def user_consent_display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
265
270
|
"""
|
|
266
271
|
Display name for the delegated permission that appears in the end user consent experience
|
|
267
272
|
"""
|
|
268
273
|
return pulumi.get(self, "user_consent_display_name")
|
|
269
274
|
|
|
270
275
|
@user_consent_display_name.setter
|
|
271
|
-
def user_consent_display_name(self, value: Optional[pulumi.Input[str]]):
|
|
276
|
+
def user_consent_display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
272
277
|
pulumi.set(self, "user_consent_display_name", value)
|
|
273
278
|
|
|
274
|
-
@property
|
|
279
|
+
@_builtins.property
|
|
275
280
|
@pulumi.getter
|
|
276
|
-
def value(self) -> Optional[pulumi.Input[str]]:
|
|
281
|
+
def value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
277
282
|
"""
|
|
278
283
|
The value that is used for the `scp` claim in OAuth access tokens.
|
|
279
284
|
|
|
@@ -282,23 +287,24 @@ class _ApplicationPermissionScopeState:
|
|
|
282
287
|
return pulumi.get(self, "value")
|
|
283
288
|
|
|
284
289
|
@value.setter
|
|
285
|
-
def value(self, value: Optional[pulumi.Input[str]]):
|
|
290
|
+
def value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
286
291
|
pulumi.set(self, "value", value)
|
|
287
292
|
|
|
288
293
|
|
|
294
|
+
@pulumi.type_token("azuread:index/applicationPermissionScope:ApplicationPermissionScope")
|
|
289
295
|
class ApplicationPermissionScope(pulumi.CustomResource):
|
|
290
296
|
@overload
|
|
291
297
|
def __init__(__self__,
|
|
292
298
|
resource_name: str,
|
|
293
299
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
294
|
-
admin_consent_description: Optional[pulumi.Input[str]] = None,
|
|
295
|
-
admin_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
296
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
297
|
-
scope_id: Optional[pulumi.Input[str]] = None,
|
|
298
|
-
type: Optional[pulumi.Input[str]] = None,
|
|
299
|
-
user_consent_description: Optional[pulumi.Input[str]] = None,
|
|
300
|
-
user_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
301
|
-
value: Optional[pulumi.Input[str]] = None,
|
|
300
|
+
admin_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
301
|
+
admin_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
302
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
303
|
+
scope_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
304
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
305
|
+
user_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
306
|
+
user_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
307
|
+
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
302
308
|
__props__=None):
|
|
303
309
|
"""
|
|
304
310
|
## Example Usage
|
|
@@ -308,11 +314,11 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
308
314
|
import pulumi_azuread as azuread
|
|
309
315
|
import pulumi_random as random
|
|
310
316
|
|
|
311
|
-
|
|
312
|
-
example_administer = random.
|
|
313
|
-
example_application_permission_scope = azuread.ApplicationPermissionScope("
|
|
314
|
-
application_id=
|
|
315
|
-
scope_id=example_administer
|
|
317
|
+
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
318
|
+
example_administer = random.index.Uuid("example_administer")
|
|
319
|
+
example_application_permission_scope = azuread.ApplicationPermissionScope("example",
|
|
320
|
+
application_id=test["id"],
|
|
321
|
+
scope_id=example_administer["id"],
|
|
316
322
|
value="administer",
|
|
317
323
|
admin_consent_description="Administer the application",
|
|
318
324
|
admin_consent_display_name="Administer")
|
|
@@ -326,9 +332,8 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
326
332
|
import pulumi
|
|
327
333
|
import pulumi_azuread as azuread
|
|
328
334
|
|
|
329
|
-
|
|
330
|
-
example_application_permission_scope = azuread.ApplicationPermissionScope("
|
|
331
|
-
# ...
|
|
335
|
+
example = azuread.Application("example", display_name="example")
|
|
336
|
+
example_application_permission_scope = azuread.ApplicationPermissionScope("example", application_id=example.id)
|
|
332
337
|
```
|
|
333
338
|
|
|
334
339
|
## Import
|
|
@@ -336,19 +341,19 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
336
341
|
Application App Roles can be imported using the object ID of the application and the ID of the permission scope, in the following format.
|
|
337
342
|
|
|
338
343
|
```sh
|
|
339
|
-
|
|
344
|
+
$ pulumi import azuread:index/applicationPermissionScope:ApplicationPermissionScope example /applications/00000000-0000-0000-0000-000000000000/permissionScopes/11111111-1111-1111-1111-111111111111
|
|
340
345
|
```
|
|
341
346
|
|
|
342
347
|
:param str resource_name: The name of the resource.
|
|
343
348
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
344
|
-
:param pulumi.Input[str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
345
|
-
:param pulumi.Input[str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
346
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
347
|
-
:param pulumi.Input[str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
348
|
-
:param pulumi.Input[str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
349
|
-
:param pulumi.Input[str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
350
|
-
:param pulumi.Input[str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
351
|
-
:param pulumi.Input[str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
349
|
+
:param pulumi.Input[_builtins.str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
350
|
+
:param pulumi.Input[_builtins.str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
351
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
352
|
+
:param pulumi.Input[_builtins.str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
353
|
+
:param pulumi.Input[_builtins.str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
354
|
+
:param pulumi.Input[_builtins.str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
355
|
+
:param pulumi.Input[_builtins.str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
356
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
352
357
|
|
|
353
358
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
354
359
|
"""
|
|
@@ -366,11 +371,11 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
366
371
|
import pulumi_azuread as azuread
|
|
367
372
|
import pulumi_random as random
|
|
368
373
|
|
|
369
|
-
|
|
370
|
-
example_administer = random.
|
|
371
|
-
example_application_permission_scope = azuread.ApplicationPermissionScope("
|
|
372
|
-
application_id=
|
|
373
|
-
scope_id=example_administer
|
|
374
|
+
example = azuread.ApplicationRegistration("example", display_name="example")
|
|
375
|
+
example_administer = random.index.Uuid("example_administer")
|
|
376
|
+
example_application_permission_scope = azuread.ApplicationPermissionScope("example",
|
|
377
|
+
application_id=test["id"],
|
|
378
|
+
scope_id=example_administer["id"],
|
|
374
379
|
value="administer",
|
|
375
380
|
admin_consent_description="Administer the application",
|
|
376
381
|
admin_consent_display_name="Administer")
|
|
@@ -384,9 +389,8 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
384
389
|
import pulumi
|
|
385
390
|
import pulumi_azuread as azuread
|
|
386
391
|
|
|
387
|
-
|
|
388
|
-
example_application_permission_scope = azuread.ApplicationPermissionScope("
|
|
389
|
-
# ...
|
|
392
|
+
example = azuread.Application("example", display_name="example")
|
|
393
|
+
example_application_permission_scope = azuread.ApplicationPermissionScope("example", application_id=example.id)
|
|
390
394
|
```
|
|
391
395
|
|
|
392
396
|
## Import
|
|
@@ -394,7 +398,7 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
394
398
|
Application App Roles can be imported using the object ID of the application and the ID of the permission scope, in the following format.
|
|
395
399
|
|
|
396
400
|
```sh
|
|
397
|
-
|
|
401
|
+
$ pulumi import azuread:index/applicationPermissionScope:ApplicationPermissionScope example /applications/00000000-0000-0000-0000-000000000000/permissionScopes/11111111-1111-1111-1111-111111111111
|
|
398
402
|
```
|
|
399
403
|
|
|
400
404
|
:param str resource_name: The name of the resource.
|
|
@@ -412,14 +416,14 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
412
416
|
def _internal_init(__self__,
|
|
413
417
|
resource_name: str,
|
|
414
418
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
415
|
-
admin_consent_description: Optional[pulumi.Input[str]] = None,
|
|
416
|
-
admin_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
417
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
418
|
-
scope_id: Optional[pulumi.Input[str]] = None,
|
|
419
|
-
type: Optional[pulumi.Input[str]] = None,
|
|
420
|
-
user_consent_description: Optional[pulumi.Input[str]] = None,
|
|
421
|
-
user_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
422
|
-
value: Optional[pulumi.Input[str]] = None,
|
|
419
|
+
admin_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
420
|
+
admin_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
421
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
422
|
+
scope_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
423
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
424
|
+
user_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
425
|
+
user_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
426
|
+
value: Optional[pulumi.Input[_builtins.str]] = None,
|
|
423
427
|
__props__=None):
|
|
424
428
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
425
429
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -457,14 +461,14 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
457
461
|
def get(resource_name: str,
|
|
458
462
|
id: pulumi.Input[str],
|
|
459
463
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
460
|
-
admin_consent_description: Optional[pulumi.Input[str]] = None,
|
|
461
|
-
admin_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
462
|
-
application_id: Optional[pulumi.Input[str]] = None,
|
|
463
|
-
scope_id: Optional[pulumi.Input[str]] = None,
|
|
464
|
-
type: Optional[pulumi.Input[str]] = None,
|
|
465
|
-
user_consent_description: Optional[pulumi.Input[str]] = None,
|
|
466
|
-
user_consent_display_name: Optional[pulumi.Input[str]] = None,
|
|
467
|
-
value: Optional[pulumi.Input[str]] = None) -> 'ApplicationPermissionScope':
|
|
464
|
+
admin_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
465
|
+
admin_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
466
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
467
|
+
scope_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
468
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
469
|
+
user_consent_description: Optional[pulumi.Input[_builtins.str]] = None,
|
|
470
|
+
user_consent_display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
471
|
+
value: Optional[pulumi.Input[_builtins.str]] = None) -> 'ApplicationPermissionScope':
|
|
468
472
|
"""
|
|
469
473
|
Get an existing ApplicationPermissionScope resource's state with the given name, id, and optional extra
|
|
470
474
|
properties used to qualify the lookup.
|
|
@@ -472,14 +476,14 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
472
476
|
:param str resource_name: The unique name of the resulting resource.
|
|
473
477
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
474
478
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
475
|
-
:param pulumi.Input[str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
476
|
-
:param pulumi.Input[str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
477
|
-
:param pulumi.Input[str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
478
|
-
:param pulumi.Input[str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
479
|
-
:param pulumi.Input[str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
480
|
-
:param pulumi.Input[str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
481
|
-
:param pulumi.Input[str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
482
|
-
:param pulumi.Input[str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
479
|
+
:param pulumi.Input[_builtins.str] admin_consent_description: Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
480
|
+
:param pulumi.Input[_builtins.str] admin_consent_display_name: Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
481
|
+
:param pulumi.Input[_builtins.str] application_id: The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
482
|
+
:param pulumi.Input[_builtins.str] scope_id: The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
483
|
+
:param pulumi.Input[_builtins.str] type: Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
484
|
+
:param pulumi.Input[_builtins.str] user_consent_description: Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
485
|
+
:param pulumi.Input[_builtins.str] user_consent_display_name: Display name for the delegated permission that appears in the end user consent experience
|
|
486
|
+
:param pulumi.Input[_builtins.str] value: The value that is used for the `scp` claim in OAuth access tokens.
|
|
483
487
|
|
|
484
488
|
> **Roles and Permission Scopes** In Azure Active Directory, application roles and permission scopes exported by an application share the same namespace and cannot contain duplicate values.
|
|
485
489
|
"""
|
|
@@ -497,65 +501,65 @@ class ApplicationPermissionScope(pulumi.CustomResource):
|
|
|
497
501
|
__props__.__dict__["value"] = value
|
|
498
502
|
return ApplicationPermissionScope(resource_name, opts=opts, __props__=__props__)
|
|
499
503
|
|
|
500
|
-
@property
|
|
504
|
+
@_builtins.property
|
|
501
505
|
@pulumi.getter(name="adminConsentDescription")
|
|
502
|
-
def admin_consent_description(self) -> pulumi.Output[str]:
|
|
506
|
+
def admin_consent_description(self) -> pulumi.Output[_builtins.str]:
|
|
503
507
|
"""
|
|
504
508
|
Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
|
|
505
509
|
"""
|
|
506
510
|
return pulumi.get(self, "admin_consent_description")
|
|
507
511
|
|
|
508
|
-
@property
|
|
512
|
+
@_builtins.property
|
|
509
513
|
@pulumi.getter(name="adminConsentDisplayName")
|
|
510
|
-
def admin_consent_display_name(self) -> pulumi.Output[str]:
|
|
514
|
+
def admin_consent_display_name(self) -> pulumi.Output[_builtins.str]:
|
|
511
515
|
"""
|
|
512
516
|
Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
|
|
513
517
|
"""
|
|
514
518
|
return pulumi.get(self, "admin_consent_display_name")
|
|
515
519
|
|
|
516
|
-
@property
|
|
520
|
+
@_builtins.property
|
|
517
521
|
@pulumi.getter(name="applicationId")
|
|
518
|
-
def application_id(self) -> pulumi.Output[str]:
|
|
522
|
+
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
519
523
|
"""
|
|
520
524
|
The resource ID of the application registration. Changing this forces a new resource to be created.
|
|
521
525
|
"""
|
|
522
526
|
return pulumi.get(self, "application_id")
|
|
523
527
|
|
|
524
|
-
@property
|
|
528
|
+
@_builtins.property
|
|
525
529
|
@pulumi.getter(name="scopeId")
|
|
526
|
-
def scope_id(self) -> pulumi.Output[str]:
|
|
530
|
+
def scope_id(self) -> pulumi.Output[_builtins.str]:
|
|
527
531
|
"""
|
|
528
532
|
The unique identifier of the permission scope. Must be a valid UUID. Changing this forces a new resource to be created.
|
|
529
533
|
"""
|
|
530
534
|
return pulumi.get(self, "scope_id")
|
|
531
535
|
|
|
532
|
-
@property
|
|
536
|
+
@_builtins.property
|
|
533
537
|
@pulumi.getter
|
|
534
|
-
def type(self) -> pulumi.Output[Optional[str]]:
|
|
538
|
+
def type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
535
539
|
"""
|
|
536
540
|
Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions.
|
|
537
541
|
"""
|
|
538
542
|
return pulumi.get(self, "type")
|
|
539
543
|
|
|
540
|
-
@property
|
|
544
|
+
@_builtins.property
|
|
541
545
|
@pulumi.getter(name="userConsentDescription")
|
|
542
|
-
def user_consent_description(self) -> pulumi.Output[Optional[str]]:
|
|
546
|
+
def user_consent_description(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
543
547
|
"""
|
|
544
548
|
Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
|
|
545
549
|
"""
|
|
546
550
|
return pulumi.get(self, "user_consent_description")
|
|
547
551
|
|
|
548
|
-
@property
|
|
552
|
+
@_builtins.property
|
|
549
553
|
@pulumi.getter(name="userConsentDisplayName")
|
|
550
|
-
def user_consent_display_name(self) -> pulumi.Output[Optional[str]]:
|
|
554
|
+
def user_consent_display_name(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
551
555
|
"""
|
|
552
556
|
Display name for the delegated permission that appears in the end user consent experience
|
|
553
557
|
"""
|
|
554
558
|
return pulumi.get(self, "user_consent_display_name")
|
|
555
559
|
|
|
556
|
-
@property
|
|
560
|
+
@_builtins.property
|
|
557
561
|
@pulumi.getter
|
|
558
|
-
def value(self) -> pulumi.Output[str]:
|
|
562
|
+
def value(self) -> pulumi.Output[_builtins.str]:
|
|
559
563
|
"""
|
|
560
564
|
The value that is used for the `scp` claim in OAuth access tokens.
|
|
561
565
|
|