Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Ibm Provider
  3. API Docs
  4. IamAccessGroupTemplateVersion
ibm 1.77.1 published on Monday, Apr 14, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

ibm.IamAccessGroupTemplateVersion

Explore with Pulumi AI

ibm 1.77.1 published on Monday, Apr 14, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

Create, update, and delete iam_access_group_template_versions with this resource.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const iamAccessGroupTemplateVersionInstance = new ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance", {
    description: "This access group template allows admin access to all IAM platform services in the account.",
    group: {
        actionControls: {
            access: {
                add: true,
            },
        },
        assertions: {
            actionControls: {
                add: true,
                remove: true,
            },
            rules: [{
                actionControls: {
                    remove: true,
                },
                conditions: [{
                    claim: "claim",
                    operator: "operator",
                    value: "value",
                }],
                expiration: 1,
                name: "name",
                realmName: "realm_name",
            }],
        },
        description: "description",
        members: {
            actionControls: {
                add: true,
                remove: true,
            },
            services: ["services"],
            users: ["users"],
        },
        name: "name",
    },
    policyTemplateReferences: [{
        id: "id",
        version: "version",
    }],
    templateId: "template_id",
});
Copy
import pulumi
import pulumi_ibm as ibm

iam_access_group_template_version_instance = ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance",
    description="This access group template allows admin access to all IAM platform services in the account.",
    group={
        "action_controls": {
            "access": {
                "add": True,
            },
        },
        "assertions": {
            "action_controls": {
                "add": True,
                "remove": True,
            },
            "rules": [{
                "action_controls": {
                    "remove": True,
                },
                "conditions": [{
                    "claim": "claim",
                    "operator": "operator",
                    "value": "value",
                }],
                "expiration": 1,
                "name": "name",
                "realm_name": "realm_name",
            }],
        },
        "description": "description",
        "members": {
            "action_controls": {
                "add": True,
                "remove": True,
            },
            "services": ["services"],
            "users": ["users"],
        },
        "name": "name",
    },
    policy_template_references=[{
        "id": "id",
        "version": "version",
    }],
    template_id="template_id")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.NewIamAccessGroupTemplateVersion(ctx, "iamAccessGroupTemplateVersionInstance", &ibm.IamAccessGroupTemplateVersionArgs{
			Description: pulumi.String("This access group template allows admin access to all IAM platform services in the account."),
			Group: &ibm.IamAccessGroupTemplateVersionGroupArgs{
				ActionControls: &ibm.IamAccessGroupTemplateVersionGroupActionControlsArgs{
					Access: &ibm.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs{
						Add: pulumi.Bool(true),
					},
				},
				Assertions: &ibm.IamAccessGroupTemplateVersionGroupAssertionsArgs{
					ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs{
						Add:    pulumi.Bool(true),
						Remove: pulumi.Bool(true),
					},
					Rules: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArray{
						&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs{
							ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs{
								Remove: pulumi.Bool(true),
							},
							Conditions: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArray{
								&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs{
									Claim:    pulumi.String("claim"),
									Operator: pulumi.String("operator"),
									Value:    pulumi.String("value"),
								},
							},
							Expiration: pulumi.Float64(1),
							Name:       pulumi.String("name"),
							RealmName:  pulumi.String("realm_name"),
						},
					},
				},
				Description: pulumi.String("description"),
				Members: &ibm.IamAccessGroupTemplateVersionGroupMembersArgs{
					ActionControls: &ibm.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs{
						Add:    pulumi.Bool(true),
						Remove: pulumi.Bool(true),
					},
					Services: pulumi.StringArray{
						pulumi.String("services"),
					},
					Users: pulumi.StringArray{
						pulumi.String("users"),
					},
				},
				Name: pulumi.String("name"),
			},
			PolicyTemplateReferences: ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArray{
				&ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs{
					Id:      pulumi.String("id"),
					Version: pulumi.String("version"),
				},
			},
			TemplateId: pulumi.String("template_id"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var iamAccessGroupTemplateVersionInstance = new Ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance", new()
    {
        Description = "This access group template allows admin access to all IAM platform services in the account.",
        Group = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupArgs
        {
            ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsArgs
            {
                Access = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs
                {
                    Add = true,
                },
            },
            Assertions = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsArgs
            {
                ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs
                {
                    Add = true,
                    Remove = true,
                },
                Rules = new[]
                {
                    new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs
                    {
                        ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs
                        {
                            Remove = true,
                        },
                        Conditions = new[]
                        {
                            new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs
                            {
                                Claim = "claim",
                                Operator = "operator",
                                Value = "value",
                            },
                        },
                        Expiration = 1,
                        Name = "name",
                        RealmName = "realm_name",
                    },
                },
            },
            Description = "description",
            Members = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersArgs
            {
                ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs
                {
                    Add = true,
                    Remove = true,
                },
                Services = new[]
                {
                    "services",
                },
                Users = new[]
                {
                    "users",
                },
            },
            Name = "name",
        },
        PolicyTemplateReferences = new[]
        {
            new Ibm.Inputs.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
            {
                Id = "id",
                Version = "version",
            },
        },
        TemplateId = "template_id",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IamAccessGroupTemplateVersion;
import com.pulumi.ibm.IamAccessGroupTemplateVersionArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupActionControlsArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupAssertionsArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupMembersArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs;
import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var iamAccessGroupTemplateVersionInstance = new IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance", IamAccessGroupTemplateVersionArgs.builder()
            .description("This access group template allows admin access to all IAM platform services in the account.")
            .group(IamAccessGroupTemplateVersionGroupArgs.builder()
                .actionControls(IamAccessGroupTemplateVersionGroupActionControlsArgs.builder()
                    .access(IamAccessGroupTemplateVersionGroupActionControlsAccessArgs.builder()
                        .add(true)
                        .build())
                    .build())
                .assertions(IamAccessGroupTemplateVersionGroupAssertionsArgs.builder()
                    .actionControls(IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs.builder()
                        .add(true)
                        .remove(true)
                        .build())
                    .rules(IamAccessGroupTemplateVersionGroupAssertionsRuleArgs.builder()
                        .actionControls(IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs.builder()
                            .remove(true)
                            .build())
                        .conditions(IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs.builder()
                            .claim("claim")
                            .operator("operator")
                            .value("value")
                            .build())
                        .expiration(1)
                        .name("name")
                        .realmName("realm_name")
                        .build())
                    .build())
                .description("description")
                .members(IamAccessGroupTemplateVersionGroupMembersArgs.builder()
                    .actionControls(IamAccessGroupTemplateVersionGroupMembersActionControlsArgs.builder()
                        .add(true)
                        .remove(true)
                        .build())
                    .services("services")
                    .users("users")
                    .build())
                .name("name")
                .build())
            .policyTemplateReferences(IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs.builder()
                .id("id")
                .version("version")
                .build())
            .templateId("template_id")
            .build());

    }
}
Copy
resources:
  iamAccessGroupTemplateVersionInstance:
    type: ibm:IamAccessGroupTemplateVersion
    properties:
      description: This access group template allows admin access to all IAM platform services in the account.
      group:
        actionControls:
          access:
            add: true
        assertions:
          actionControls:
            add: true
            remove: true
          rules:
            - actionControls:
                remove: true
              conditions:
                - claim: claim
                  operator: operator
                  value: value
              expiration: 1
              name: name
              realmName: realm_name
        description: description
        members:
          actionControls:
            add: true
            remove: true
          services:
            - services
          users:
            - users
        name: name
      policyTemplateReferences:
        - id: id
          version: version
      templateId: template_id
Copy

Create IamAccessGroupTemplateVersion Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new IamAccessGroupTemplateVersion(name: string, args: IamAccessGroupTemplateVersionArgs, opts?: CustomResourceOptions);
@overload
def IamAccessGroupTemplateVersion(resource_name: str,
                                  args: IamAccessGroupTemplateVersionArgs,
                                  opts: Optional[ResourceOptions] = None)

@overload
def IamAccessGroupTemplateVersion(resource_name: str,
                                  opts: Optional[ResourceOptions] = None,
                                  template_id: Optional[str] = None,
                                  committed: Optional[bool] = None,
                                  description: Optional[str] = None,
                                  group: Optional[IamAccessGroupTemplateVersionGroupArgs] = None,
                                  iam_access_group_template_version_id: Optional[str] = None,
                                  name: Optional[str] = None,
                                  policy_template_references: Optional[Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]] = None,
                                  transaction_id: Optional[str] = None)
func NewIamAccessGroupTemplateVersion(ctx *Context, name string, args IamAccessGroupTemplateVersionArgs, opts ...ResourceOption) (*IamAccessGroupTemplateVersion, error)
public IamAccessGroupTemplateVersion(string name, IamAccessGroupTemplateVersionArgs args, CustomResourceOptions? opts = null)
public IamAccessGroupTemplateVersion(String name, IamAccessGroupTemplateVersionArgs args)
public IamAccessGroupTemplateVersion(String name, IamAccessGroupTemplateVersionArgs args, CustomResourceOptions options)

type: ibm:IamAccessGroupTemplateVersion
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. IamAccessGroupTemplateVersionArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. IamAccessGroupTemplateVersionArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. IamAccessGroupTemplateVersionArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. IamAccessGroupTemplateVersionArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. IamAccessGroupTemplateVersionArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var iamAccessGroupTemplateVersionResource = new Ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource", new()
{
    TemplateId = "string",
    Committed = false,
    Description = "string",
    Group = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupArgs
    {
        Name = "string",
        ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsArgs
        {
            Access = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs
            {
                Add = false,
            },
        },
        Assertions = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsArgs
        {
            ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs
            {
                Add = false,
                Remove = false,
            },
            Rules = new[]
            {
                new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs
                {
                    ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs
                    {
                        Remove = false,
                    },
                    Conditions = new[]
                    {
                        new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs
                        {
                            Claim = "string",
                            Operator = "string",
                            Value = "string",
                        },
                    },
                    Expiration = 0,
                    Name = "string",
                    RealmName = "string",
                },
            },
        },
        Description = "string",
        Members = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersArgs
        {
            ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs
            {
                Add = false,
                Remove = false,
            },
            Services = new[]
            {
                "string",
            },
            Users = new[]
            {
                "string",
            },
        },
    },
    IamAccessGroupTemplateVersionId = "string",
    Name = "string",
    PolicyTemplateReferences = new[]
    {
        new Ibm.Inputs.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
        {
            Id = "string",
            Version = "string",
        },
    },
    TransactionId = "string",
});
Copy
example, err := ibm.NewIamAccessGroupTemplateVersion(ctx, "iamAccessGroupTemplateVersionResource", &ibm.IamAccessGroupTemplateVersionArgs{
	TemplateId:  pulumi.String("string"),
	Committed:   pulumi.Bool(false),
	Description: pulumi.String("string"),
	Group: &ibm.IamAccessGroupTemplateVersionGroupArgs{
		Name: pulumi.String("string"),
		ActionControls: &ibm.IamAccessGroupTemplateVersionGroupActionControlsArgs{
			Access: &ibm.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs{
				Add: pulumi.Bool(false),
			},
		},
		Assertions: &ibm.IamAccessGroupTemplateVersionGroupAssertionsArgs{
			ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs{
				Add:    pulumi.Bool(false),
				Remove: pulumi.Bool(false),
			},
			Rules: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArray{
				&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs{
					ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs{
						Remove: pulumi.Bool(false),
					},
					Conditions: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArray{
						&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs{
							Claim:    pulumi.String("string"),
							Operator: pulumi.String("string"),
							Value:    pulumi.String("string"),
						},
					},
					Expiration: pulumi.Float64(0),
					Name:       pulumi.String("string"),
					RealmName:  pulumi.String("string"),
				},
			},
		},
		Description: pulumi.String("string"),
		Members: &ibm.IamAccessGroupTemplateVersionGroupMembersArgs{
			ActionControls: &ibm.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs{
				Add:    pulumi.Bool(false),
				Remove: pulumi.Bool(false),
			},
			Services: pulumi.StringArray{
				pulumi.String("string"),
			},
			Users: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	IamAccessGroupTemplateVersionId: pulumi.String("string"),
	Name:                            pulumi.String("string"),
	PolicyTemplateReferences: ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArray{
		&ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs{
			Id:      pulumi.String("string"),
			Version: pulumi.String("string"),
		},
	},
	TransactionId: pulumi.String("string"),
})
Copy
var iamAccessGroupTemplateVersionResource = new IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource", IamAccessGroupTemplateVersionArgs.builder()
    .templateId("string")
    .committed(false)
    .description("string")
    .group(IamAccessGroupTemplateVersionGroupArgs.builder()
        .name("string")
        .actionControls(IamAccessGroupTemplateVersionGroupActionControlsArgs.builder()
            .access(IamAccessGroupTemplateVersionGroupActionControlsAccessArgs.builder()
                .add(false)
                .build())
            .build())
        .assertions(IamAccessGroupTemplateVersionGroupAssertionsArgs.builder()
            .actionControls(IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs.builder()
                .add(false)
                .remove(false)
                .build())
            .rules(IamAccessGroupTemplateVersionGroupAssertionsRuleArgs.builder()
                .actionControls(IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs.builder()
                    .remove(false)
                    .build())
                .conditions(IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs.builder()
                    .claim("string")
                    .operator("string")
                    .value("string")
                    .build())
                .expiration(0)
                .name("string")
                .realmName("string")
                .build())
            .build())
        .description("string")
        .members(IamAccessGroupTemplateVersionGroupMembersArgs.builder()
            .actionControls(IamAccessGroupTemplateVersionGroupMembersActionControlsArgs.builder()
                .add(false)
                .remove(false)
                .build())
            .services("string")
            .users("string")
            .build())
        .build())
    .iamAccessGroupTemplateVersionId("string")
    .name("string")
    .policyTemplateReferences(IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs.builder()
        .id("string")
        .version("string")
        .build())
    .transactionId("string")
    .build());
Copy
iam_access_group_template_version_resource = ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource",
    template_id="string",
    committed=False,
    description="string",
    group={
        "name": "string",
        "action_controls": {
            "access": {
                "add": False,
            },
        },
        "assertions": {
            "action_controls": {
                "add": False,
                "remove": False,
            },
            "rules": [{
                "action_controls": {
                    "remove": False,
                },
                "conditions": [{
                    "claim": "string",
                    "operator": "string",
                    "value": "string",
                }],
                "expiration": 0,
                "name": "string",
                "realm_name": "string",
            }],
        },
        "description": "string",
        "members": {
            "action_controls": {
                "add": False,
                "remove": False,
            },
            "services": ["string"],
            "users": ["string"],
        },
    },
    iam_access_group_template_version_id="string",
    name="string",
    policy_template_references=[{
        "id": "string",
        "version": "string",
    }],
    transaction_id="string")
Copy
const iamAccessGroupTemplateVersionResource = new ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource", {
    templateId: "string",
    committed: false,
    description: "string",
    group: {
        name: "string",
        actionControls: {
            access: {
                add: false,
            },
        },
        assertions: {
            actionControls: {
                add: false,
                remove: false,
            },
            rules: [{
                actionControls: {
                    remove: false,
                },
                conditions: [{
                    claim: "string",
                    operator: "string",
                    value: "string",
                }],
                expiration: 0,
                name: "string",
                realmName: "string",
            }],
        },
        description: "string",
        members: {
            actionControls: {
                add: false,
                remove: false,
            },
            services: ["string"],
            users: ["string"],
        },
    },
    iamAccessGroupTemplateVersionId: "string",
    name: "string",
    policyTemplateReferences: [{
        id: "string",
        version: "string",
    }],
    transactionId: "string",
});
Copy
type: ibm:IamAccessGroupTemplateVersion
properties:
    committed: false
    description: string
    group:
        actionControls:
            access:
                add: false
        assertions:
            actionControls:
                add: false
                remove: false
            rules:
                - actionControls:
                    remove: false
                  conditions:
                    - claim: string
                      operator: string
                      value: string
                  expiration: 0
                  name: string
                  realmName: string
        description: string
        members:
            actionControls:
                add: false
                remove: false
            services:
                - string
            users:
                - string
        name: string
    iamAccessGroupTemplateVersionId: string
    name: string
    policyTemplateReferences:
        - id: string
          version: string
    templateId: string
    transactionId: string
Copy

IamAccessGroupTemplateVersion Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The IamAccessGroupTemplateVersion resource accepts the following input properties:

TemplateId This property is required. string
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Committed bool
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
Description string
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
Group IamAccessGroupTemplateVersionGroup
Access Group Component. Nested schema for group:
IamAccessGroupTemplateVersionId string
(String) Policy template ID.
Name string
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
PolicyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
TransactionId string
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
TemplateId This property is required. string
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Committed bool
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
Description string
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
Group IamAccessGroupTemplateVersionGroupArgs
Access Group Component. Nested schema for group:
IamAccessGroupTemplateVersionId string
(String) Policy template ID.
Name string
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
PolicyTemplateReferences []IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
TransactionId string
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
templateId This property is required. String
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
committed Boolean
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
description String
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group IamAccessGroupTemplateVersionGroup
Access Group Component. Nested schema for group:
iamAccessGroupTemplateVersionId String
(String) Policy template ID.
name String
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
transactionId String
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
templateId This property is required. string
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
committed boolean
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
description string
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group IamAccessGroupTemplateVersionGroup
Access Group Component. Nested schema for group:
iamAccessGroupTemplateVersionId string
(String) Policy template ID.
name string
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policyTemplateReferences IamAccessGroupTemplateVersionPolicyTemplateReference[]
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
transactionId string
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
template_id This property is required. str
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
committed bool
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
description str
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group IamAccessGroupTemplateVersionGroupArgs
Access Group Component. Nested schema for group:
iam_access_group_template_version_id str
(String) Policy template ID.
name str
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policy_template_references Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
transaction_id str
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
templateId This property is required. String
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
committed Boolean
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
description String
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group Property Map
Access Group Component. Nested schema for group:
iamAccessGroupTemplateVersionId String
(String) Policy template ID.
name String
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policyTemplateReferences List<Property Map>
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
transactionId String
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.

Outputs

All input properties are implicitly available as output properties. Additionally, the IamAccessGroupTemplateVersion resource produces the following output properties:

AccountId string
(String) Enterprise account id.
CreatedAt string
(String) The date and time when the access group template was created.
CreatedById string
(String) The ID of the user who created the access group template.
Href string
(String) The URL of the access group template resource.
Id string
The provider-assigned unique ID for this managed resource.
LastModifiedAt string
(String) The date and time when the access group template was last modified.
LastModifiedById string
(String) The ID of the user who last modified the access group template.
Version string
(String) Policy template version.
AccountId string
(String) Enterprise account id.
CreatedAt string
(String) The date and time when the access group template was created.
CreatedById string
(String) The ID of the user who created the access group template.
Href string
(String) The URL of the access group template resource.
Id string
The provider-assigned unique ID for this managed resource.
LastModifiedAt string
(String) The date and time when the access group template was last modified.
LastModifiedById string
(String) The ID of the user who last modified the access group template.
Version string
(String) Policy template version.
accountId String
(String) Enterprise account id.
createdAt String
(String) The date and time when the access group template was created.
createdById String
(String) The ID of the user who created the access group template.
href String
(String) The URL of the access group template resource.
id String
The provider-assigned unique ID for this managed resource.
lastModifiedAt String
(String) The date and time when the access group template was last modified.
lastModifiedById String
(String) The ID of the user who last modified the access group template.
version String
(String) Policy template version.
accountId string
(String) Enterprise account id.
createdAt string
(String) The date and time when the access group template was created.
createdById string
(String) The ID of the user who created the access group template.
href string
(String) The URL of the access group template resource.
id string
The provider-assigned unique ID for this managed resource.
lastModifiedAt string
(String) The date and time when the access group template was last modified.
lastModifiedById string
(String) The ID of the user who last modified the access group template.
version string
(String) Policy template version.
account_id str
(String) Enterprise account id.
created_at str
(String) The date and time when the access group template was created.
created_by_id str
(String) The ID of the user who created the access group template.
href str
(String) The URL of the access group template resource.
id str
The provider-assigned unique ID for this managed resource.
last_modified_at str
(String) The date and time when the access group template was last modified.
last_modified_by_id str
(String) The ID of the user who last modified the access group template.
version str
(String) Policy template version.
accountId String
(String) Enterprise account id.
createdAt String
(String) The date and time when the access group template was created.
createdById String
(String) The ID of the user who created the access group template.
href String
(String) The URL of the access group template resource.
id String
The provider-assigned unique ID for this managed resource.
lastModifiedAt String
(String) The date and time when the access group template was last modified.
lastModifiedById String
(String) The ID of the user who last modified the access group template.
version String
(String) Policy template version.

Look up Existing IamAccessGroupTemplateVersion Resource

Get an existing IamAccessGroupTemplateVersion resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IamAccessGroupTemplateVersionState, opts?: CustomResourceOptions): IamAccessGroupTemplateVersion
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        committed: Optional[bool] = None,
        created_at: Optional[str] = None,
        created_by_id: Optional[str] = None,
        description: Optional[str] = None,
        group: Optional[IamAccessGroupTemplateVersionGroupArgs] = None,
        href: Optional[str] = None,
        iam_access_group_template_version_id: Optional[str] = None,
        last_modified_at: Optional[str] = None,
        last_modified_by_id: Optional[str] = None,
        name: Optional[str] = None,
        policy_template_references: Optional[Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]] = None,
        template_id: Optional[str] = None,
        transaction_id: Optional[str] = None,
        version: Optional[str] = None) -> IamAccessGroupTemplateVersion
func GetIamAccessGroupTemplateVersion(ctx *Context, name string, id IDInput, state *IamAccessGroupTemplateVersionState, opts ...ResourceOption) (*IamAccessGroupTemplateVersion, error)
public static IamAccessGroupTemplateVersion Get(string name, Input<string> id, IamAccessGroupTemplateVersionState? state, CustomResourceOptions? opts = null)
public static IamAccessGroupTemplateVersion get(String name, Output<String> id, IamAccessGroupTemplateVersionState state, CustomResourceOptions options)
resources:  _:    type: ibm:IamAccessGroupTemplateVersion    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AccountId string
(String) Enterprise account id.
Committed bool
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
CreatedAt string
(String) The date and time when the access group template was created.
CreatedById string
(String) The ID of the user who created the access group template.
Description string
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
Group IamAccessGroupTemplateVersionGroup
Access Group Component. Nested schema for group:
Href string
(String) The URL of the access group template resource.
IamAccessGroupTemplateVersionId string
(String) Policy template ID.
LastModifiedAt string
(String) The date and time when the access group template was last modified.
LastModifiedById string
(String) The ID of the user who last modified the access group template.
Name string
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
PolicyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
TemplateId string
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
TransactionId string
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Version string
(String) Policy template version.
AccountId string
(String) Enterprise account id.
Committed bool
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
CreatedAt string
(String) The date and time when the access group template was created.
CreatedById string
(String) The ID of the user who created the access group template.
Description string
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
Group IamAccessGroupTemplateVersionGroupArgs
Access Group Component. Nested schema for group:
Href string
(String) The URL of the access group template resource.
IamAccessGroupTemplateVersionId string
(String) Policy template ID.
LastModifiedAt string
(String) The date and time when the access group template was last modified.
LastModifiedById string
(String) The ID of the user who last modified the access group template.
Name string
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
PolicyTemplateReferences []IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
TemplateId string
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
TransactionId string
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Version string
(String) Policy template version.
accountId String
(String) Enterprise account id.
committed Boolean
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
createdAt String
(String) The date and time when the access group template was created.
createdById String
(String) The ID of the user who created the access group template.
description String
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group IamAccessGroupTemplateVersionGroup
Access Group Component. Nested schema for group:
href String
(String) The URL of the access group template resource.
iamAccessGroupTemplateVersionId String
(String) Policy template ID.
lastModifiedAt String
(String) The date and time when the access group template was last modified.
lastModifiedById String
(String) The ID of the user who last modified the access group template.
name String
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
templateId String
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
transactionId String
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version String
(String) Policy template version.
accountId string
(String) Enterprise account id.
committed boolean
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
createdAt string
(String) The date and time when the access group template was created.
createdById string
(String) The ID of the user who created the access group template.
description string
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group IamAccessGroupTemplateVersionGroup
Access Group Component. Nested schema for group:
href string
(String) The URL of the access group template resource.
iamAccessGroupTemplateVersionId string
(String) Policy template ID.
lastModifiedAt string
(String) The date and time when the access group template was last modified.
lastModifiedById string
(String) The ID of the user who last modified the access group template.
name string
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policyTemplateReferences IamAccessGroupTemplateVersionPolicyTemplateReference[]
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
templateId string
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
transactionId string
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version string
(String) Policy template version.
account_id str
(String) Enterprise account id.
committed bool
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
created_at str
(String) The date and time when the access group template was created.
created_by_id str
(String) The ID of the user who created the access group template.
description str
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group IamAccessGroupTemplateVersionGroupArgs
Access Group Component. Nested schema for group:
href str
(String) The URL of the access group template resource.
iam_access_group_template_version_id str
(String) Policy template ID.
last_modified_at str
(String) The date and time when the access group template was last modified.
last_modified_by_id str
(String) The ID of the user who last modified the access group template.
name str
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policy_template_references Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
template_id str
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
transaction_id str
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version str
(String) Policy template version.
accountId String
(String) Enterprise account id.
committed Boolean
(Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
createdAt String
(String) The date and time when the access group template was created.
createdById String
(String) The ID of the user who created the access group template.
description String
The description of the access group template.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
group Property Map
Access Group Component. Nested schema for group:
href String
(String) The URL of the access group template resource.
iamAccessGroupTemplateVersionId String
(String) Policy template ID.
lastModifiedAt String
(String) The date and time when the access group template was last modified.
lastModifiedById String
(String) The ID of the user who last modified the access group template.
name String
The name of the access group template.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
policyTemplateReferences List<Property Map>
References to policy templates assigned to the access group template.

  • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
templateId String
ID of the template that you want to create a new version of.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
transactionId String
An optional transaction id for the request.

  • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version String
(String) Policy template version.

Supporting Types

IamAccessGroupTemplateVersionGroup
, IamAccessGroupTemplateVersionGroupArgs

Name This property is required. string
Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
ActionControls IamAccessGroupTemplateVersionGroupActionControls
Access group action controls component. Nested schema for action_controls:
Assertions IamAccessGroupTemplateVersionGroupAssertions
Assertions Input Component. Nested schema for assertions:
Description string
Access group description. This is shown in child accounts.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
Members IamAccessGroupTemplateVersionGroupMembers
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
Name This property is required. string
Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
ActionControls IamAccessGroupTemplateVersionGroupActionControls
Access group action controls component. Nested schema for action_controls:
Assertions IamAccessGroupTemplateVersionGroupAssertions
Assertions Input Component. Nested schema for assertions:
Description string
Access group description. This is shown in child accounts.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
Members IamAccessGroupTemplateVersionGroupMembers
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
name This property is required. String
Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
actionControls IamAccessGroupTemplateVersionGroupActionControls
Access group action controls component. Nested schema for action_controls:
assertions IamAccessGroupTemplateVersionGroupAssertions
Assertions Input Component. Nested schema for assertions:
description String
Access group description. This is shown in child accounts.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
members IamAccessGroupTemplateVersionGroupMembers
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
name This property is required. string
Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
actionControls IamAccessGroupTemplateVersionGroupActionControls
Access group action controls component. Nested schema for action_controls:
assertions IamAccessGroupTemplateVersionGroupAssertions
Assertions Input Component. Nested schema for assertions:
description string
Access group description. This is shown in child accounts.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
members IamAccessGroupTemplateVersionGroupMembers
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
name This property is required. str
Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
action_controls IamAccessGroupTemplateVersionGroupActionControls
Access group action controls component. Nested schema for action_controls:
assertions IamAccessGroupTemplateVersionGroupAssertions
Assertions Input Component. Nested schema for assertions:
description str
Access group description. This is shown in child accounts.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
members IamAccessGroupTemplateVersionGroupMembers
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
name This property is required. String
Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
actionControls Property Map
Access group action controls component. Nested schema for action_controls:
assertions Property Map
Assertions Input Component. Nested schema for assertions:
description String
Access group description. This is shown in child accounts.

  • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
members Property Map
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:

IamAccessGroupTemplateVersionGroupActionControls
, IamAccessGroupTemplateVersionGroupActionControlsArgs

Access IamAccessGroupTemplateVersionGroupActionControlsAccess
Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
Access IamAccessGroupTemplateVersionGroupActionControlsAccess
Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
access IamAccessGroupTemplateVersionGroupActionControlsAccess
Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
access IamAccessGroupTemplateVersionGroupActionControlsAccess
Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
access IamAccessGroupTemplateVersionGroupActionControlsAccess
Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
access Property Map
Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:

IamAccessGroupTemplateVersionGroupActionControlsAccess
, IamAccessGroupTemplateVersionGroupActionControlsAccessArgs

Add bool
Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
Add bool
Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
add Boolean
Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
add boolean
Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
add bool
Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
add Boolean
Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.

IamAccessGroupTemplateVersionGroupAssertions
, IamAccessGroupTemplateVersionGroupAssertionsArgs

ActionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
Rules List<IamAccessGroupTemplateVersionGroupAssertionsRule>
Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
ActionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
Rules []IamAccessGroupTemplateVersionGroupAssertionsRule
Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
actionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
rules List<IamAccessGroupTemplateVersionGroupAssertionsRule>
Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
actionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
rules IamAccessGroupTemplateVersionGroupAssertionsRule[]
Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
action_controls IamAccessGroupTemplateVersionGroupAssertionsActionControls
Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
rules Sequence[IamAccessGroupTemplateVersionGroupAssertionsRule]
Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
actionControls Property Map
Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
rules List<Property Map>
Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:

IamAccessGroupTemplateVersionGroupAssertionsActionControls
, IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs

Add bool
Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
Remove bool
Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
Add bool
Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
Remove bool
Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
add Boolean
Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
remove Boolean
Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
add boolean
Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
remove boolean
Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
add bool
Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
remove bool
Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
add Boolean
Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
remove Boolean
Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.

IamAccessGroupTemplateVersionGroupAssertionsRule
, IamAccessGroupTemplateVersionGroupAssertionsRuleArgs

ActionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
Conditions List<IamAccessGroupTemplateVersionGroupAssertionsRuleCondition>
Conditions of membership. You can think of this as a key:value pair.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
Expiration double
Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
Name string
Dynamic rule name.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
RealmName string
The identity provider (IdP) URL.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
ActionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
Conditions []IamAccessGroupTemplateVersionGroupAssertionsRuleCondition
Conditions of membership. You can think of this as a key:value pair.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
Expiration float64
Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
Name string
Dynamic rule name.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
RealmName string
The identity provider (IdP) URL.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
actionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
conditions List<IamAccessGroupTemplateVersionGroupAssertionsRuleCondition>
Conditions of membership. You can think of this as a key:value pair.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
expiration Double
Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
name String
Dynamic rule name.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
realmName String
The identity provider (IdP) URL.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
actionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
conditions IamAccessGroupTemplateVersionGroupAssertionsRuleCondition[]
Conditions of membership. You can think of this as a key:value pair.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
expiration number
Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
name string
Dynamic rule name.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
realmName string
The identity provider (IdP) URL.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
action_controls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
conditions Sequence[IamAccessGroupTemplateVersionGroupAssertionsRuleCondition]
Conditions of membership. You can think of this as a key:value pair.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
expiration float
Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
name str
Dynamic rule name.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
realm_name str
The identity provider (IdP) URL.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
actionControls Property Map
Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
conditions List<Property Map>
Conditions of membership. You can think of this as a key:value pair.

  • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
expiration Number
Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
name String
Dynamic rule name.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
realmName String
The identity provider (IdP) URL.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.

IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
, IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs

Remove bool
Action control for removing this enterprise-managed dynamic rule.
Remove bool
Action control for removing this enterprise-managed dynamic rule.
remove Boolean
Action control for removing this enterprise-managed dynamic rule.
remove boolean
Action control for removing this enterprise-managed dynamic rule.
remove bool
Action control for removing this enterprise-managed dynamic rule.
remove Boolean
Action control for removing this enterprise-managed dynamic rule.

IamAccessGroupTemplateVersionGroupAssertionsRuleCondition
, IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs

Claim string
The key in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Operator string
Compares the claim and the value.

  • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
Value string
The value in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Claim string
The key in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Operator string
Compares the claim and the value.

  • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
Value string
The value in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
claim String
The key in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
operator String
Compares the claim and the value.

  • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
value String
The value in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
claim string
The key in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
operator string
Compares the claim and the value.

  • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
value string
The value in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
claim str
The key in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
operator str
Compares the claim and the value.

  • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
value str
The value in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
claim String
The key in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
operator String
Compares the claim and the value.

  • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
value String
The value in the key:value pair.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.

IamAccessGroupTemplateVersionGroupMembers
, IamAccessGroupTemplateVersionGroupMembersArgs

ActionControls IamAccessGroupTemplateVersionGroupMembersActionControls
Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
Services List<string>
Array of service IDs to add to the template.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
Users List<string>
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
ActionControls IamAccessGroupTemplateVersionGroupMembersActionControls
Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
Services []string
Array of service IDs to add to the template.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
Users []string
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
actionControls IamAccessGroupTemplateVersionGroupMembersActionControls
Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
services List<String>
Array of service IDs to add to the template.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
users List<String>
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
actionControls IamAccessGroupTemplateVersionGroupMembersActionControls
Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
services string[]
Array of service IDs to add to the template.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
users string[]
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
action_controls IamAccessGroupTemplateVersionGroupMembersActionControls
Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
services Sequence[str]
Array of service IDs to add to the template.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
users Sequence[str]
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
actionControls Property Map
Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
services List<String>
Array of service IDs to add to the template.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
users List<String>
Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

  • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.

IamAccessGroupTemplateVersionGroupMembersActionControls
, IamAccessGroupTemplateVersionGroupMembersActionControlsArgs

Add bool
Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
Remove bool
Action control for removing enterprise-managed members from an enterprise-managed access group.
Add bool
Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
Remove bool
Action control for removing enterprise-managed members from an enterprise-managed access group.
add Boolean
Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
remove Boolean
Action control for removing enterprise-managed members from an enterprise-managed access group.
add boolean
Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
remove boolean
Action control for removing enterprise-managed members from an enterprise-managed access group.
add bool
Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
remove bool
Action control for removing enterprise-managed members from an enterprise-managed access group.
add Boolean
Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
remove Boolean
Action control for removing enterprise-managed members from an enterprise-managed access group.

IamAccessGroupTemplateVersionPolicyTemplateReference
, IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs

Id string
Policy template ID.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Version string
Policy template version.

  • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
Id string
Policy template ID.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
Version string
Policy template version.

  • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
id String
Policy template ID.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version String
Policy template version.

  • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
id string
Policy template ID.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version string
Policy template version.

  • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
id str
Policy template ID.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version str
Policy template version.

  • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
id String
Policy template ID.

  • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
version String
Policy template version.

  • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.

Import

You can import the ibm_iam_access_group_template_version resource by using id.

The id property can be formed from template_id, and version_num in the following format:

<template_id>/<version_num>

  • template_id: A string. ID of the template that you want to create a new version of.

  • version_num: A string. version number in path.

Syntax

$ pulumi import ibm:index/iamAccessGroupTemplateVersion:IamAccessGroupTemplateVersion iam_access_group_template_version <template_id>/<version_num>
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
ibm ibm-cloud/terraform-provider-ibm
License
Notes
This Pulumi package is based on the ibm Terraform Provider.
ibm 1.77.1 published on Monday, Apr 14, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm