azuread

package
v5.28.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 26, 2022 License: Apache-2.0 Imports: 10 Imported by: 3

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func PkgVersion 

func PkgVersion() (semver.Version, error)

PkgVersion uses reflection to determine the version of the current package. If a version cannot be determined, v1 will be assumed. The second return value is always nil.

Types

type AdministrativeUnit added in v5.10.0 

type AdministrativeUnit struct {
	pulumi.CustomResourceState

	// The description of the administrative unit.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The display name of the administrative unit.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Whether the administrative unit and its members are hidden or publicly viewable in the directory
	HiddenMembershipEnabled pulumi.BoolPtrOutput `pulumi:"hiddenMembershipEnabled"`
	// A set of object IDs of members who should be present in this administrative unit. Supported object types are Users or Groups.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The object ID of the administrative unit.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// If `true`, will return an error if an existing administrative unit is found with the same name
	PreventDuplicateNames pulumi.BoolPtrOutput `pulumi:"preventDuplicateNames"`
}

Manages an Administrative Unit within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `AdministrativeUnit.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Privileged Role Administrator` or `Global Administrator`

## Import

Administrative units can be imported using their object ID, e.g.

```sh 

$ pulumi import azuread:index/administrativeUnit:AdministrativeUnit example 00000000-0000-0000-0000-000000000000

```

func GetAdministrativeUnit added in v5.10.0 

func GetAdministrativeUnit(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AdministrativeUnitState, opts ...pulumi.ResourceOption) (*AdministrativeUnit, error)

GetAdministrativeUnit gets an existing AdministrativeUnit resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAdministrativeUnit added in v5.10.0 

func NewAdministrativeUnit(ctx *pulumi.Context,
	name string, args *AdministrativeUnitArgs, opts ...pulumi.ResourceOption) (*AdministrativeUnit, error)

NewAdministrativeUnit registers a new resource with the given unique name, arguments, and options.

func (*AdministrativeUnit) ElementType added in v5.10.0 

func (*AdministrativeUnit) ElementType() reflect.Type

func (*AdministrativeUnit) ToAdministrativeUnitOutput added in v5.10.0 

func (i *AdministrativeUnit) ToAdministrativeUnitOutput() AdministrativeUnitOutput

func (*AdministrativeUnit) ToAdministrativeUnitOutputWithContext added in v5.10.0 

func (i *AdministrativeUnit) ToAdministrativeUnitOutputWithContext(ctx context.Context) AdministrativeUnitOutput

type AdministrativeUnitArgs added in v5.10.0 

type AdministrativeUnitArgs struct {
	// The description of the administrative unit.
	Description pulumi.StringPtrInput
	// The display name of the administrative unit.
	DisplayName pulumi.StringInput
	// Whether the administrative unit and its members are hidden or publicly viewable in the directory
	HiddenMembershipEnabled pulumi.BoolPtrInput
	// A set of object IDs of members who should be present in this administrative unit. Supported object types are Users or Groups.
	Members pulumi.StringArrayInput
	// If `true`, will return an error if an existing administrative unit is found with the same name
	PreventDuplicateNames pulumi.BoolPtrInput
}

The set of arguments for constructing a AdministrativeUnit resource.

func (AdministrativeUnitArgs) ElementType added in v5.10.0 

func (AdministrativeUnitArgs) ElementType() reflect.Type

type AdministrativeUnitArray added in v5.10.0 

type AdministrativeUnitArray []AdministrativeUnitInput

func (AdministrativeUnitArray) ElementType added in v5.10.0 

func (AdministrativeUnitArray) ElementType() reflect.Type

func (AdministrativeUnitArray) ToAdministrativeUnitArrayOutput added in v5.10.0 

func (i AdministrativeUnitArray) ToAdministrativeUnitArrayOutput() AdministrativeUnitArrayOutput

func (AdministrativeUnitArray) ToAdministrativeUnitArrayOutputWithContext added in v5.10.0 

func (i AdministrativeUnitArray) ToAdministrativeUnitArrayOutputWithContext(ctx context.Context) AdministrativeUnitArrayOutput

type AdministrativeUnitArrayInput added in v5.10.0 

type AdministrativeUnitArrayInput interface {
	pulumi.Input

	ToAdministrativeUnitArrayOutput() AdministrativeUnitArrayOutput
	ToAdministrativeUnitArrayOutputWithContext(context.Context) AdministrativeUnitArrayOutput
}

AdministrativeUnitArrayInput is an input type that accepts AdministrativeUnitArray and AdministrativeUnitArrayOutput values. You can construct a concrete instance of `AdministrativeUnitArrayInput` via: 

AdministrativeUnitArray{ AdministrativeUnitArgs{...} }

type AdministrativeUnitArrayOutput added in v5.10.0 

type AdministrativeUnitArrayOutput struct{ *pulumi.OutputState }

func (AdministrativeUnitArrayOutput) ElementType added in v5.10.0 

func (AdministrativeUnitArrayOutput) ElementType() reflect.Type

func (AdministrativeUnitArrayOutput) Index added in v5.10.0 

func (o AdministrativeUnitArrayOutput) Index(i pulumi.IntInput) AdministrativeUnitOutput

func (AdministrativeUnitArrayOutput) ToAdministrativeUnitArrayOutput added in v5.10.0 

func (o AdministrativeUnitArrayOutput) ToAdministrativeUnitArrayOutput() AdministrativeUnitArrayOutput

func (AdministrativeUnitArrayOutput) ToAdministrativeUnitArrayOutputWithContext added in v5.10.0 

func (o AdministrativeUnitArrayOutput) ToAdministrativeUnitArrayOutputWithContext(ctx context.Context) AdministrativeUnitArrayOutput

type AdministrativeUnitInput added in v5.10.0 

type AdministrativeUnitInput interface {
	pulumi.Input

	ToAdministrativeUnitOutput() AdministrativeUnitOutput
	ToAdministrativeUnitOutputWithContext(ctx context.Context) AdministrativeUnitOutput
}

type AdministrativeUnitMap added in v5.10.0 

type AdministrativeUnitMap map[string]AdministrativeUnitInput

func (AdministrativeUnitMap) ElementType added in v5.10.0 

func (AdministrativeUnitMap) ElementType() reflect.Type

func (AdministrativeUnitMap) ToAdministrativeUnitMapOutput added in v5.10.0 

func (i AdministrativeUnitMap) ToAdministrativeUnitMapOutput() AdministrativeUnitMapOutput

func (AdministrativeUnitMap) ToAdministrativeUnitMapOutputWithContext added in v5.10.0 

func (i AdministrativeUnitMap) ToAdministrativeUnitMapOutputWithContext(ctx context.Context) AdministrativeUnitMapOutput

type AdministrativeUnitMapInput added in v5.10.0 

type AdministrativeUnitMapInput interface {
	pulumi.Input

	ToAdministrativeUnitMapOutput() AdministrativeUnitMapOutput
	ToAdministrativeUnitMapOutputWithContext(context.Context) AdministrativeUnitMapOutput
}

AdministrativeUnitMapInput is an input type that accepts AdministrativeUnitMap and AdministrativeUnitMapOutput values. You can construct a concrete instance of `AdministrativeUnitMapInput` via: 

AdministrativeUnitMap{ "key": AdministrativeUnitArgs{...} }

type AdministrativeUnitMapOutput added in v5.10.0 

type AdministrativeUnitMapOutput struct{ *pulumi.OutputState }

func (AdministrativeUnitMapOutput) ElementType added in v5.10.0 

func (AdministrativeUnitMapOutput) ElementType() reflect.Type

func (AdministrativeUnitMapOutput) MapIndex added in v5.10.0 

func (o AdministrativeUnitMapOutput) MapIndex(k pulumi.StringInput) AdministrativeUnitOutput

func (AdministrativeUnitMapOutput) ToAdministrativeUnitMapOutput added in v5.10.0 

func (o AdministrativeUnitMapOutput) ToAdministrativeUnitMapOutput() AdministrativeUnitMapOutput

func (AdministrativeUnitMapOutput) ToAdministrativeUnitMapOutputWithContext added in v5.10.0 

func (o AdministrativeUnitMapOutput) ToAdministrativeUnitMapOutputWithContext(ctx context.Context) AdministrativeUnitMapOutput

type AdministrativeUnitMember added in v5.10.0 

type AdministrativeUnitMember struct {
	pulumi.CustomResourceState

	// The object ID of the administrative unit you want to add the member to. Changing this forces a new resource to be created.
	AdministrativeUnitObjectId pulumi.StringPtrOutput `pulumi:"administrativeUnitObjectId"`
	// The object ID of the user or group you want to add as a member of the administrative unit. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrOutput `pulumi:"memberObjectId"`
}

Manages a single administrative unit membership within Azure Active Directory.

> **Warning** Do not use this resource at the same time as the `members` property of the `AdministrativeUnit` resource for the same administrative unit. Doing so will cause a conflict and administrative unit members will be removed.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `AdministrativeUnit.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Privileged Role Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleUser, err := azuread.LookupUser(ctx, &GetUserArgs{
			UserPrincipalName: pulumi.StringRef("jdoe@hashicorp.com"),
		}, nil)
		if err != nil {
			return err
		}
		exampleAdministrativeUnit, err := azuread.NewAdministrativeUnit(ctx, "exampleAdministrativeUnit", &azuread.AdministrativeUnitArgs{
			DisplayName: pulumi.String("Example-AU"),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewAdministrativeUnitMember(ctx, "exampleAdministrativeUnitMember", &azuread.AdministrativeUnitMemberArgs{
			AdministrativeUnitObjectId: exampleAdministrativeUnit.ID(),
			MemberObjectId:             pulumi.String(exampleUser.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Administrative unit members can be imported using the object ID of the administrative unit and the object ID of the member, e.g.

```sh 

$ pulumi import azuread:index/administrativeUnitMember:AdministrativeUnitMember test 00000000-0000-0000-0000-000000000000/member/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the Administrative Unit Object ID and the target Member Object ID in the format `{AdministrativeUnitObjectID}/member/{MemberObjectID}`.

func GetAdministrativeUnitMember added in v5.10.0 

func GetAdministrativeUnitMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AdministrativeUnitMemberState, opts ...pulumi.ResourceOption) (*AdministrativeUnitMember, error)

GetAdministrativeUnitMember gets an existing AdministrativeUnitMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAdministrativeUnitMember added in v5.10.0 

func NewAdministrativeUnitMember(ctx *pulumi.Context,
	name string, args *AdministrativeUnitMemberArgs, opts ...pulumi.ResourceOption) (*AdministrativeUnitMember, error)

NewAdministrativeUnitMember registers a new resource with the given unique name, arguments, and options.

func (*AdministrativeUnitMember) ElementType added in v5.10.0 

func (*AdministrativeUnitMember) ElementType() reflect.Type

func (*AdministrativeUnitMember) ToAdministrativeUnitMemberOutput added in v5.10.0 

func (i *AdministrativeUnitMember) ToAdministrativeUnitMemberOutput() AdministrativeUnitMemberOutput

func (*AdministrativeUnitMember) ToAdministrativeUnitMemberOutputWithContext added in v5.10.0 

func (i *AdministrativeUnitMember) ToAdministrativeUnitMemberOutputWithContext(ctx context.Context) AdministrativeUnitMemberOutput

type AdministrativeUnitMemberArgs added in v5.10.0 

type AdministrativeUnitMemberArgs struct {
	// The object ID of the administrative unit you want to add the member to. Changing this forces a new resource to be created.
	AdministrativeUnitObjectId pulumi.StringPtrInput
	// The object ID of the user or group you want to add as a member of the administrative unit. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrInput
}

The set of arguments for constructing a AdministrativeUnitMember resource.

func (AdministrativeUnitMemberArgs) ElementType added in v5.10.0 

func (AdministrativeUnitMemberArgs) ElementType() reflect.Type

type AdministrativeUnitMemberArray added in v5.10.0 

type AdministrativeUnitMemberArray []AdministrativeUnitMemberInput

func (AdministrativeUnitMemberArray) ElementType added in v5.10.0 

func (AdministrativeUnitMemberArray) ElementType() reflect.Type

func (AdministrativeUnitMemberArray) ToAdministrativeUnitMemberArrayOutput added in v5.10.0 

func (i AdministrativeUnitMemberArray) ToAdministrativeUnitMemberArrayOutput() AdministrativeUnitMemberArrayOutput

func (AdministrativeUnitMemberArray) ToAdministrativeUnitMemberArrayOutputWithContext added in v5.10.0 

func (i AdministrativeUnitMemberArray) ToAdministrativeUnitMemberArrayOutputWithContext(ctx context.Context) AdministrativeUnitMemberArrayOutput

type AdministrativeUnitMemberArrayInput added in v5.10.0 

type AdministrativeUnitMemberArrayInput interface {
	pulumi.Input

	ToAdministrativeUnitMemberArrayOutput() AdministrativeUnitMemberArrayOutput
	ToAdministrativeUnitMemberArrayOutputWithContext(context.Context) AdministrativeUnitMemberArrayOutput
}

AdministrativeUnitMemberArrayInput is an input type that accepts AdministrativeUnitMemberArray and AdministrativeUnitMemberArrayOutput values. You can construct a concrete instance of `AdministrativeUnitMemberArrayInput` via: 

AdministrativeUnitMemberArray{ AdministrativeUnitMemberArgs{...} }

type AdministrativeUnitMemberArrayOutput added in v5.10.0 

type AdministrativeUnitMemberArrayOutput struct{ *pulumi.OutputState }

func (AdministrativeUnitMemberArrayOutput) ElementType added in v5.10.0 

func (AdministrativeUnitMemberArrayOutput) ElementType() reflect.Type

func (AdministrativeUnitMemberArrayOutput) Index added in v5.10.0 

func (o AdministrativeUnitMemberArrayOutput) Index(i pulumi.IntInput) AdministrativeUnitMemberOutput

func (AdministrativeUnitMemberArrayOutput) ToAdministrativeUnitMemberArrayOutput added in v5.10.0 

func (o AdministrativeUnitMemberArrayOutput) ToAdministrativeUnitMemberArrayOutput() AdministrativeUnitMemberArrayOutput

func (AdministrativeUnitMemberArrayOutput) ToAdministrativeUnitMemberArrayOutputWithContext added in v5.10.0 

func (o AdministrativeUnitMemberArrayOutput) ToAdministrativeUnitMemberArrayOutputWithContext(ctx context.Context) AdministrativeUnitMemberArrayOutput

type AdministrativeUnitMemberInput added in v5.10.0 

type AdministrativeUnitMemberInput interface {
	pulumi.Input

	ToAdministrativeUnitMemberOutput() AdministrativeUnitMemberOutput
	ToAdministrativeUnitMemberOutputWithContext(ctx context.Context) AdministrativeUnitMemberOutput
}

type AdministrativeUnitMemberMap added in v5.10.0 

type AdministrativeUnitMemberMap map[string]AdministrativeUnitMemberInput

func (AdministrativeUnitMemberMap) ElementType added in v5.10.0 

func (AdministrativeUnitMemberMap) ElementType() reflect.Type

func (AdministrativeUnitMemberMap) ToAdministrativeUnitMemberMapOutput added in v5.10.0 

func (i AdministrativeUnitMemberMap) ToAdministrativeUnitMemberMapOutput() AdministrativeUnitMemberMapOutput

func (AdministrativeUnitMemberMap) ToAdministrativeUnitMemberMapOutputWithContext added in v5.10.0 

func (i AdministrativeUnitMemberMap) ToAdministrativeUnitMemberMapOutputWithContext(ctx context.Context) AdministrativeUnitMemberMapOutput

type AdministrativeUnitMemberMapInput added in v5.10.0 

type AdministrativeUnitMemberMapInput interface {
	pulumi.Input

	ToAdministrativeUnitMemberMapOutput() AdministrativeUnitMemberMapOutput
	ToAdministrativeUnitMemberMapOutputWithContext(context.Context) AdministrativeUnitMemberMapOutput
}

AdministrativeUnitMemberMapInput is an input type that accepts AdministrativeUnitMemberMap and AdministrativeUnitMemberMapOutput values. You can construct a concrete instance of `AdministrativeUnitMemberMapInput` via: 

AdministrativeUnitMemberMap{ "key": AdministrativeUnitMemberArgs{...} }

type AdministrativeUnitMemberMapOutput added in v5.10.0 

type AdministrativeUnitMemberMapOutput struct{ *pulumi.OutputState }

func (AdministrativeUnitMemberMapOutput) ElementType added in v5.10.0 

func (AdministrativeUnitMemberMapOutput) ElementType() reflect.Type

func (AdministrativeUnitMemberMapOutput) MapIndex added in v5.10.0 

func (o AdministrativeUnitMemberMapOutput) MapIndex(k pulumi.StringInput) AdministrativeUnitMemberOutput

func (AdministrativeUnitMemberMapOutput) ToAdministrativeUnitMemberMapOutput added in v5.10.0 

func (o AdministrativeUnitMemberMapOutput) ToAdministrativeUnitMemberMapOutput() AdministrativeUnitMemberMapOutput

func (AdministrativeUnitMemberMapOutput) ToAdministrativeUnitMemberMapOutputWithContext added in v5.10.0 

func (o AdministrativeUnitMemberMapOutput) ToAdministrativeUnitMemberMapOutputWithContext(ctx context.Context) AdministrativeUnitMemberMapOutput

type AdministrativeUnitMemberOutput added in v5.10.0 

type AdministrativeUnitMemberOutput struct{ *pulumi.OutputState }

func (AdministrativeUnitMemberOutput) AdministrativeUnitObjectId added in v5.22.0 

func (o AdministrativeUnitMemberOutput) AdministrativeUnitObjectId() pulumi.StringPtrOutput

The object ID of the administrative unit you want to add the member to. Changing this forces a new resource to be created.

func (AdministrativeUnitMemberOutput) ElementType added in v5.10.0 

func (AdministrativeUnitMemberOutput) ElementType() reflect.Type

func (AdministrativeUnitMemberOutput) MemberObjectId added in v5.22.0 

func (o AdministrativeUnitMemberOutput) MemberObjectId() pulumi.StringPtrOutput

The object ID of the user or group you want to add as a member of the administrative unit. Changing this forces a new resource to be created.

func (AdministrativeUnitMemberOutput) ToAdministrativeUnitMemberOutput added in v5.10.0 

func (o AdministrativeUnitMemberOutput) ToAdministrativeUnitMemberOutput() AdministrativeUnitMemberOutput

func (AdministrativeUnitMemberOutput) ToAdministrativeUnitMemberOutputWithContext added in v5.10.0 

func (o AdministrativeUnitMemberOutput) ToAdministrativeUnitMemberOutputWithContext(ctx context.Context) AdministrativeUnitMemberOutput

type AdministrativeUnitMemberState added in v5.10.0 

type AdministrativeUnitMemberState struct {
	// The object ID of the administrative unit you want to add the member to. Changing this forces a new resource to be created.
	AdministrativeUnitObjectId pulumi.StringPtrInput
	// The object ID of the user or group you want to add as a member of the administrative unit. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrInput
}

func (AdministrativeUnitMemberState) ElementType added in v5.10.0 

func (AdministrativeUnitMemberState) ElementType() reflect.Type

type AdministrativeUnitOutput added in v5.10.0 

type AdministrativeUnitOutput struct{ *pulumi.OutputState }

func (AdministrativeUnitOutput) Description added in v5.22.0 

func (o AdministrativeUnitOutput) Description() pulumi.StringPtrOutput

The description of the administrative unit.

func (AdministrativeUnitOutput) DisplayName added in v5.22.0 

func (o AdministrativeUnitOutput) DisplayName() pulumi.StringOutput

The display name of the administrative unit.

func (AdministrativeUnitOutput) ElementType added in v5.10.0 

func (AdministrativeUnitOutput) ElementType() reflect.Type

func (AdministrativeUnitOutput) HiddenMembershipEnabled added in v5.22.0 

func (o AdministrativeUnitOutput) HiddenMembershipEnabled() pulumi.BoolPtrOutput

Whether the administrative unit and its members are hidden or publicly viewable in the directory

func (AdministrativeUnitOutput) Members added in v5.22.0 

func (o AdministrativeUnitOutput) Members() pulumi.StringArrayOutput

A set of object IDs of members who should be present in this administrative unit. Supported object types are Users or Groups.

func (AdministrativeUnitOutput) ObjectId added in v5.22.0 

func (o AdministrativeUnitOutput) ObjectId() pulumi.StringOutput

The object ID of the administrative unit.

func (AdministrativeUnitOutput) PreventDuplicateNames added in v5.22.0 

func (o AdministrativeUnitOutput) PreventDuplicateNames() pulumi.BoolPtrOutput

If `true`, will return an error if an existing administrative unit is found with the same name

func (AdministrativeUnitOutput) ToAdministrativeUnitOutput added in v5.10.0 

func (o AdministrativeUnitOutput) ToAdministrativeUnitOutput() AdministrativeUnitOutput

func (AdministrativeUnitOutput) ToAdministrativeUnitOutputWithContext added in v5.10.0 

func (o AdministrativeUnitOutput) ToAdministrativeUnitOutputWithContext(ctx context.Context) AdministrativeUnitOutput

type AdministrativeUnitState added in v5.10.0 

type AdministrativeUnitState struct {
	// The description of the administrative unit.
	Description pulumi.StringPtrInput
	// The display name of the administrative unit.
	DisplayName pulumi.StringPtrInput
	// Whether the administrative unit and its members are hidden or publicly viewable in the directory
	HiddenMembershipEnabled pulumi.BoolPtrInput
	// A set of object IDs of members who should be present in this administrative unit. Supported object types are Users or Groups.
	Members pulumi.StringArrayInput
	// The object ID of the administrative unit.
	ObjectId pulumi.StringPtrInput
	// If `true`, will return an error if an existing administrative unit is found with the same name
	PreventDuplicateNames pulumi.BoolPtrInput
}

func (AdministrativeUnitState) ElementType added in v5.10.0 

func (AdministrativeUnitState) ElementType() reflect.Type

type AppRoleAssignment added in v5.3.0 

type AppRoleAssignment struct {
	pulumi.CustomResourceState

	// The ID of the app role to be assigned. Changing this forces a new resource to be created.
	AppRoleId pulumi.StringOutput `pulumi:"appRoleId"`
	// The display name of the principal to which the app role is assigned.
	PrincipalDisplayName pulumi.StringOutput `pulumi:"principalDisplayName"`
	// The object ID of the user, group or service principal to be assigned this app role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	PrincipalObjectId pulumi.StringOutput `pulumi:"principalObjectId"`
	// The object type of the principal to which the app role is assigned.
	PrincipalType pulumi.StringOutput `pulumi:"principalType"`
	// The display name of the application representing the resource.
	ResourceDisplayName pulumi.StringOutput `pulumi:"resourceDisplayName"`
	// The object ID of the service principal representing the resource. Changing this forces a new resource to be created.
	ResourceObjectId pulumi.StringOutput `pulumi:"resourceObjectId"`
}

Manages an app role assignment for a group, user or service principal. Can be used to grant admin consent for application permissions.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `AppRoleAssignment.ReadWrite.All` and `Application.Read.All`, or `AppRoleAssignment.ReadWrite.All` and `Directory.Read.All`, or `Application.ReadWrite.All`, or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`

## Example Usage

*App role assignment for accessing Microsoft Graph*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		wellKnown, err := azuread.GetApplicationPublishedAppIds(ctx, nil, nil)
		if err != nil {
			return err
		}
		msgraph, err := azuread.NewServicePrincipal(ctx, "msgraph", &azuread.ServicePrincipalArgs{
			ApplicationId: pulumi.String(wellKnown.Result.MicrosoftGraph),
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			RequiredResourceAccesses: ApplicationRequiredResourceAccessArray{
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String(wellKnown.Result.MicrosoftGraph),
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
								return appRoleIds.User.Read.All, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Role"),
						},
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.Oauth2PermissionScopeIds.ApplyT(func(oauth2PermissionScopeIds map[string]string) (string, error) {
								return oauth2PermissionScopeIds.User.ReadWrite, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Scope"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		exampleServicePrincipal, err := azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewAppRoleAssignment(ctx, "exampleAppRoleAssignment", &azuread.AppRoleAssignmentArgs{
			AppRoleId: msgraph.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
				return appRoleIds.User.Read.All, nil
			}).(pulumi.StringOutput),
			PrincipalObjectId: exampleServicePrincipal.ObjectId,
			ResourceObjectId:  msgraph.ObjectId,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*App role assignment for internal application*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		internalApplication, err := azuread.NewApplication(ctx, "internalApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("internal"),
			AppRoles: ApplicationAppRoleArray{
				&ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("Application"),
					},
					Description: pulumi.String("Apps can query the database"),
					DisplayName: pulumi.String("Query"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("00000000-0000-0000-0000-111111111111"),
					Value:       pulumi.String("Query.All"),
				},
			},
		})
		if err != nil {
			return err
		}
		internalServicePrincipal, err := azuread.NewServicePrincipal(ctx, "internalServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: internalApplication.ApplicationId,
		})
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			RequiredResourceAccesses: ApplicationRequiredResourceAccessArray{
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: internalApplication.ApplicationId,
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: internalServicePrincipal.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
								return appRoleIds.Query.All, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Role"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		exampleServicePrincipal, err := azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewAppRoleAssignment(ctx, "exampleAppRoleAssignment", &azuread.AppRoleAssignmentArgs{
			AppRoleId: internalServicePrincipal.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
				return appRoleIds.Query.All, nil
			}).(pulumi.StringOutput),
			PrincipalObjectId: exampleServicePrincipal.ObjectId,
			ResourceObjectId:  internalServicePrincipal.ObjectId,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Assign a user and group to an internal application*

```go package main

import ( 

"fmt"

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleDomains, err := azuread.GetDomains(ctx, &GetDomainsArgs{
			OnlyInitial: pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		internalApplication, err := azuread.NewApplication(ctx, "internalApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("internal"),
			AppRoles: ApplicationAppRoleArray{
				&ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("Application"),
						pulumi.String("User"),
					},
					Description: pulumi.String("Admins can perform all task actions"),
					DisplayName: pulumi.String("Admin"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("00000000-0000-0000-0000-222222222222"),
					Value:       pulumi.String("Admin.All"),
				},
			},
		})
		if err != nil {
			return err
		}
		internalServicePrincipal, err := azuread.NewServicePrincipal(ctx, "internalServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: internalApplication.ApplicationId,
		})
		if err != nil {
			return err
		}
		exampleGroup, err := azuread.NewGroup(ctx, "exampleGroup", &azuread.GroupArgs{
			DisplayName:     pulumi.String("example"),
			SecurityEnabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewAppRoleAssignment(ctx, "exampleAppRoleAssignment", &azuread.AppRoleAssignmentArgs{
			AppRoleId: internalServicePrincipal.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
				return appRoleIds.Admin.All, nil
			}).(pulumi.StringOutput),
			PrincipalObjectId: exampleGroup.ObjectId,
			ResourceObjectId:  internalServicePrincipal.ObjectId,
		})
		if err != nil {
			return err
		}
		exampleUser, err := azuread.NewUser(ctx, "exampleUser", &azuread.UserArgs{
			DisplayName:       pulumi.String("D. Duck"),
			Password:          pulumi.String("SecretP@sswd99!"),
			UserPrincipalName: pulumi.String(fmt.Sprintf("d.duck@%v", exampleDomains.Domains[0].DomainName)),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewAppRoleAssignment(ctx, "exampleIndex/appRoleAssignmentAppRoleAssignment", &azuread.AppRoleAssignmentArgs{
			AppRoleId: internalServicePrincipal.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
				return appRoleIds.Admin.All, nil
			}).(pulumi.StringOutput),
			PrincipalObjectId: exampleUser.ObjectId,
			ResourceObjectId:  internalServicePrincipal.ObjectId,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

App role assignments can be imported using the object ID of the service principal representing the resource and the ID of the app role assignment (note_not_ the ID of the app role), e.g.

```sh 

$ pulumi import azuread:index/appRoleAssignment:AppRoleAssignment example 00000000-0000-0000-0000-000000000000/appRoleAssignment/aaBBcDDeFG6h5JKLMN2PQrrssTTUUvWWxxxxxyyyzzz

``` 

-> This ID format is unique to Terraform and is composed of the Resource Service Principal Object ID and the ID of the App Role Assignment in the format `{ResourcePrincipalID}/appRoleAssignment/{AppRoleAssignmentID}`.

func GetAppRoleAssignment added in v5.3.0 

func GetAppRoleAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AppRoleAssignmentState, opts ...pulumi.ResourceOption) (*AppRoleAssignment, error)

GetAppRoleAssignment gets an existing AppRoleAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAppRoleAssignment added in v5.3.0 

func NewAppRoleAssignment(ctx *pulumi.Context,
	name string, args *AppRoleAssignmentArgs, opts ...pulumi.ResourceOption) (*AppRoleAssignment, error)

NewAppRoleAssignment registers a new resource with the given unique name, arguments, and options.

func (*AppRoleAssignment) ElementType added in v5.3.0 

func (*AppRoleAssignment) ElementType() reflect.Type

func (*AppRoleAssignment) ToAppRoleAssignmentOutput added in v5.3.0 

func (i *AppRoleAssignment) ToAppRoleAssignmentOutput() AppRoleAssignmentOutput

func (*AppRoleAssignment) ToAppRoleAssignmentOutputWithContext added in v5.3.0 

func (i *AppRoleAssignment) ToAppRoleAssignmentOutputWithContext(ctx context.Context) AppRoleAssignmentOutput

type AppRoleAssignmentArgs added in v5.3.0 

type AppRoleAssignmentArgs struct {
	// The ID of the app role to be assigned. Changing this forces a new resource to be created.
	AppRoleId pulumi.StringInput
	// The object ID of the user, group or service principal to be assigned this app role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	PrincipalObjectId pulumi.StringInput
	// The object ID of the service principal representing the resource. Changing this forces a new resource to be created.
	ResourceObjectId pulumi.StringInput
}

The set of arguments for constructing a AppRoleAssignment resource.

func (AppRoleAssignmentArgs) ElementType added in v5.3.0 

func (AppRoleAssignmentArgs) ElementType() reflect.Type

type AppRoleAssignmentArray added in v5.3.0 

type AppRoleAssignmentArray []AppRoleAssignmentInput

func (AppRoleAssignmentArray) ElementType added in v5.3.0 

func (AppRoleAssignmentArray) ElementType() reflect.Type

func (AppRoleAssignmentArray) ToAppRoleAssignmentArrayOutput added in v5.3.0 

func (i AppRoleAssignmentArray) ToAppRoleAssignmentArrayOutput() AppRoleAssignmentArrayOutput

func (AppRoleAssignmentArray) ToAppRoleAssignmentArrayOutputWithContext added in v5.3.0 

func (i AppRoleAssignmentArray) ToAppRoleAssignmentArrayOutputWithContext(ctx context.Context) AppRoleAssignmentArrayOutput

type AppRoleAssignmentArrayInput added in v5.3.0 

type AppRoleAssignmentArrayInput interface {
	pulumi.Input

	ToAppRoleAssignmentArrayOutput() AppRoleAssignmentArrayOutput
	ToAppRoleAssignmentArrayOutputWithContext(context.Context) AppRoleAssignmentArrayOutput
}

AppRoleAssignmentArrayInput is an input type that accepts AppRoleAssignmentArray and AppRoleAssignmentArrayOutput values. You can construct a concrete instance of `AppRoleAssignmentArrayInput` via: 

AppRoleAssignmentArray{ AppRoleAssignmentArgs{...} }

type AppRoleAssignmentArrayOutput added in v5.3.0 

type AppRoleAssignmentArrayOutput struct{ *pulumi.OutputState }

func (AppRoleAssignmentArrayOutput) ElementType added in v5.3.0 

func (AppRoleAssignmentArrayOutput) ElementType() reflect.Type

func (AppRoleAssignmentArrayOutput) Index added in v5.3.0 

func (o AppRoleAssignmentArrayOutput) Index(i pulumi.IntInput) AppRoleAssignmentOutput

func (AppRoleAssignmentArrayOutput) ToAppRoleAssignmentArrayOutput added in v5.3.0 

func (o AppRoleAssignmentArrayOutput) ToAppRoleAssignmentArrayOutput() AppRoleAssignmentArrayOutput

func (AppRoleAssignmentArrayOutput) ToAppRoleAssignmentArrayOutputWithContext added in v5.3.0 

func (o AppRoleAssignmentArrayOutput) ToAppRoleAssignmentArrayOutputWithContext(ctx context.Context) AppRoleAssignmentArrayOutput

type AppRoleAssignmentInput added in v5.3.0 

type AppRoleAssignmentInput interface {
	pulumi.Input

	ToAppRoleAssignmentOutput() AppRoleAssignmentOutput
	ToAppRoleAssignmentOutputWithContext(ctx context.Context) AppRoleAssignmentOutput
}

type AppRoleAssignmentMap added in v5.3.0 

type AppRoleAssignmentMap map[string]AppRoleAssignmentInput

func (AppRoleAssignmentMap) ElementType added in v5.3.0 

func (AppRoleAssignmentMap) ElementType() reflect.Type

func (AppRoleAssignmentMap) ToAppRoleAssignmentMapOutput added in v5.3.0 

func (i AppRoleAssignmentMap) ToAppRoleAssignmentMapOutput() AppRoleAssignmentMapOutput

func (AppRoleAssignmentMap) ToAppRoleAssignmentMapOutputWithContext added in v5.3.0 

func (i AppRoleAssignmentMap) ToAppRoleAssignmentMapOutputWithContext(ctx context.Context) AppRoleAssignmentMapOutput

type AppRoleAssignmentMapInput added in v5.3.0 

type AppRoleAssignmentMapInput interface {
	pulumi.Input

	ToAppRoleAssignmentMapOutput() AppRoleAssignmentMapOutput
	ToAppRoleAssignmentMapOutputWithContext(context.Context) AppRoleAssignmentMapOutput
}

AppRoleAssignmentMapInput is an input type that accepts AppRoleAssignmentMap and AppRoleAssignmentMapOutput values. You can construct a concrete instance of `AppRoleAssignmentMapInput` via: 

AppRoleAssignmentMap{ "key": AppRoleAssignmentArgs{...} }

type AppRoleAssignmentMapOutput added in v5.3.0 

type AppRoleAssignmentMapOutput struct{ *pulumi.OutputState }

func (AppRoleAssignmentMapOutput) ElementType added in v5.3.0 

func (AppRoleAssignmentMapOutput) ElementType() reflect.Type

func (AppRoleAssignmentMapOutput) MapIndex added in v5.3.0 

func (o AppRoleAssignmentMapOutput) MapIndex(k pulumi.StringInput) AppRoleAssignmentOutput

func (AppRoleAssignmentMapOutput) ToAppRoleAssignmentMapOutput added in v5.3.0 

func (o AppRoleAssignmentMapOutput) ToAppRoleAssignmentMapOutput() AppRoleAssignmentMapOutput

func (AppRoleAssignmentMapOutput) ToAppRoleAssignmentMapOutputWithContext added in v5.3.0 

func (o AppRoleAssignmentMapOutput) ToAppRoleAssignmentMapOutputWithContext(ctx context.Context) AppRoleAssignmentMapOutput

type AppRoleAssignmentOutput added in v5.3.0 

type AppRoleAssignmentOutput struct{ *pulumi.OutputState }

func (AppRoleAssignmentOutput) AppRoleId added in v5.22.0 

func (o AppRoleAssignmentOutput) AppRoleId() pulumi.StringOutput

The ID of the app role to be assigned. Changing this forces a new resource to be created.

func (AppRoleAssignmentOutput) ElementType added in v5.3.0 

func (AppRoleAssignmentOutput) ElementType() reflect.Type

func (AppRoleAssignmentOutput) PrincipalDisplayName added in v5.22.0 

func (o AppRoleAssignmentOutput) PrincipalDisplayName() pulumi.StringOutput

The display name of the principal to which the app role is assigned.

func (AppRoleAssignmentOutput) PrincipalObjectId added in v5.22.0 

func (o AppRoleAssignmentOutput) PrincipalObjectId() pulumi.StringOutput

The object ID of the user, group or service principal to be assigned this app role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.

func (AppRoleAssignmentOutput) PrincipalType added in v5.22.0 

func (o AppRoleAssignmentOutput) PrincipalType() pulumi.StringOutput

The object type of the principal to which the app role is assigned.

func (AppRoleAssignmentOutput) ResourceDisplayName added in v5.22.0 

func (o AppRoleAssignmentOutput) ResourceDisplayName() pulumi.StringOutput

The display name of the application representing the resource.

func (AppRoleAssignmentOutput) ResourceObjectId added in v5.22.0 

func (o AppRoleAssignmentOutput) ResourceObjectId() pulumi.StringOutput

The object ID of the service principal representing the resource. Changing this forces a new resource to be created.

func (AppRoleAssignmentOutput) ToAppRoleAssignmentOutput added in v5.3.0 

func (o AppRoleAssignmentOutput) ToAppRoleAssignmentOutput() AppRoleAssignmentOutput

func (AppRoleAssignmentOutput) ToAppRoleAssignmentOutputWithContext added in v5.3.0 

func (o AppRoleAssignmentOutput) ToAppRoleAssignmentOutputWithContext(ctx context.Context) AppRoleAssignmentOutput

type AppRoleAssignmentState added in v5.3.0 

type AppRoleAssignmentState struct {
	// The ID of the app role to be assigned. Changing this forces a new resource to be created.
	AppRoleId pulumi.StringPtrInput
	// The display name of the principal to which the app role is assigned.
	PrincipalDisplayName pulumi.StringPtrInput
	// The object ID of the user, group or service principal to be assigned this app role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	PrincipalObjectId pulumi.StringPtrInput
	// The object type of the principal to which the app role is assigned.
	PrincipalType pulumi.StringPtrInput
	// The display name of the application representing the resource.
	ResourceDisplayName pulumi.StringPtrInput
	// The object ID of the service principal representing the resource. Changing this forces a new resource to be created.
	ResourceObjectId pulumi.StringPtrInput
}

func (AppRoleAssignmentState) ElementType added in v5.3.0 

func (AppRoleAssignmentState) ElementType() reflect.Type

type Application 

type Application struct {
	pulumi.CustomResourceState

	// An `api` block as documented below, which configures API related settings for this application.
	Api ApplicationApiPtrOutput `pulumi:"api"`
	// A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
	AppRoleIds pulumi.StringMapOutput `pulumi:"appRoleIds"`
	// A collection of `appRole` blocks as documented below. For more information see [official documentation on Application Roles](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles ApplicationAppRoleArrayOutput `pulumi:"appRoles"`
	// The Application ID (also called Client ID).
	ApplicationId pulumi.StringOutput `pulumi:"applicationId"`
	// Specifies whether this application supports device authentication without a user. Defaults to `false`.
	DeviceOnlyAuthEnabled pulumi.BoolPtrOutput `pulumi:"deviceOnlyAuthEnabled"`
	// Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. `DisabledDueToViolationOfServicesAgreement`
	DisabledByMicrosoft pulumi.StringOutput `pulumi:"disabledByMicrosoft"`
	// The display name for the application.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to `false`.
	FallbackPublicClientEnabled pulumi.BoolPtrOutput `pulumi:"fallbackPublicClientEnabled"`
	// A `featureTags` block as described below. Cannot be used together with the `tags` property.
	FeatureTags ApplicationFeatureTagArrayOutput `pulumi:"featureTags"`
	// Configures the `groups` claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are `None`, `SecurityGroup`, `DirectoryRole`, `ApplicationGroup` or `All`.
	GroupMembershipClaims pulumi.StringArrayOutput `pulumi:"groupMembershipClaims"`
	// A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
	IdentifierUris pulumi.StringArrayOutput `pulumi:"identifierUris"`
	// A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
	LogoImage pulumi.StringPtrOutput `pulumi:"logoImage"`
	// CDN URL to the application's logo, as uploaded with the `logoImage` property.
	LogoUrl pulumi.StringOutput `pulumi:"logoUrl"`
	// URL of the application's marketing page.
	MarketingUrl pulumi.StringPtrOutput `pulumi:"marketingUrl"`
	// A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
	Oauth2PermissionScopeIds pulumi.StringMapOutput `pulumi:"oauth2PermissionScopeIds"`
	// Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to `false`, which specifies that only GET requests are allowed.
	Oauth2PostResponseRequired pulumi.BoolPtrOutput `pulumi:"oauth2PostResponseRequired"`
	// The application's object ID.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// An `optionalClaims` block as documented below.
	OptionalClaims ApplicationOptionalClaimsPtrOutput `pulumi:"optionalClaims"`
	// A set of object IDs of principals that will be granted ownership of the application. Supported object types are users or service principals. By default, no owners are assigned.
	Owners pulumi.StringArrayOutput `pulumi:"owners"`
	// If `true`, will return an error if an existing application is found with the same name. Defaults to `false`.
	PreventDuplicateNames pulumi.BoolPtrOutput `pulumi:"preventDuplicateNames"`
	// URL of the application's privacy statement.
	PrivacyStatementUrl pulumi.StringPtrOutput `pulumi:"privacyStatementUrl"`
	// A `publicClient` block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
	PublicClient ApplicationPublicClientPtrOutput `pulumi:"publicClient"`
	// The verified publisher domain for the application.
	PublisherDomain pulumi.StringOutput `pulumi:"publisherDomain"`
	// A collection of `requiredResourceAccess` blocks as documented below.
	RequiredResourceAccesses ApplicationRequiredResourceAccessArrayOutput `pulumi:"requiredResourceAccesses"`
	// The Microsoft account types that are supported for the current application. Must be one of `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`. Defaults to `AzureADMyOrg`.
	SignInAudience pulumi.StringPtrOutput `pulumi:"signInAudience"`
	// A `singlePageApplication` block as documented below, which configures single-page application (SPA) related settings for this application.
	SinglePageApplication ApplicationSinglePageApplicationPtrOutput `pulumi:"singlePageApplication"`
	// URL of the application's support page.
	SupportUrl pulumi.StringPtrOutput `pulumi:"supportUrl"`
	// A set of tags to apply to the application. Cannot be used together with the `featureTags` block.
	Tags pulumi.StringArrayOutput `pulumi:"tags"`
	// Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
	TemplateId pulumi.StringOutput `pulumi:"templateId"`
	// URL of the application's terms of service statement.
	TermsOfServiceUrl pulumi.StringPtrOutput `pulumi:"termsOfServiceUrl"`
	// A `web` block as documented below, which configures web related settings for this application.
	Web ApplicationWebPtrOutput `pulumi:"web"`
}

## Example Usage

*Create an application*

```go package main

import ( 

"encoding/base64"
"io/ioutil"

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func filebase64OrPanic(path string) pulumi.StringPtrInput {
	if fileData, err := ioutil.ReadFile(path); err == nil {
		return pulumi.String(base64.StdEncoding.EncodeToString(fileData[:]))
	} else {
		panic(err.Error())
	}
}

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := azuread.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = azuread.NewApplication(ctx, "example", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			IdentifierUris: pulumi.StringArray{
				pulumi.String("api://example-app"),
			},
			LogoImage: filebase64OrPanic("/path/to/logo.png"),
			Owners: pulumi.StringArray{
				pulumi.String(current.ObjectId),
			},
			SignInAudience: pulumi.String("AzureADMultipleOrgs"),
			Api: &ApplicationApiArgs{
				MappedClaimsEnabled:         pulumi.Bool(true),
				RequestedAccessTokenVersion: pulumi.Int(2),
				KnownClientApplications: pulumi.StringArray{
					pulumi.Any(azuread_application.Known1.Application_id),
					pulumi.Any(azuread_application.Known2.Application_id),
				},
				Oauth2PermissionScopes: ApplicationApiOauth2PermissionScopeArray{
					&ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Allow the application to access example on behalf of the signed-in user."),
						AdminConsentDisplayName: pulumi.String("Access example"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("96183846-204b-4b43-82e1-5d2222eb4b9b"),
						Type:                    pulumi.String("User"),
						UserConsentDescription:  pulumi.String("Allow the application to access example on your behalf."),
						UserConsentDisplayName:  pulumi.String("Access example"),
						Value:                   pulumi.String("user_impersonation"),
					},
					&ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Administer the example application"),
						AdminConsentDisplayName: pulumi.String("Administer"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("be98fa3e-ab5b-4b11-83d9-04ba2b7946bc"),
						Type:                    pulumi.String("Admin"),
						Value:                   pulumi.String("administer"),
					},
				},
			},
			AppRoles: ApplicationAppRoleArray{
				&ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("User"),
						pulumi.String("Application"),
					},
					Description: pulumi.String("Admins can manage roles and perform all task actions"),
					DisplayName: pulumi.String("Admin"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("1b19509b-32b1-4e9f-b71d-4992aa991967"),
					Value:       pulumi.String("admin"),
				},
				&ApplicationAppRoleArgs{
					AllowedMemberTypes: pulumi.StringArray{
						pulumi.String("User"),
					},
					Description: pulumi.String("ReadOnly roles have limited query access"),
					DisplayName: pulumi.String("ReadOnly"),
					Enabled:     pulumi.Bool(true),
					Id:          pulumi.String("497406e4-012a-4267-bf18-45a1cb148a01"),
					Value:       pulumi.String("User"),
				},
			},
			FeatureTags: ApplicationFeatureTagArray{
				&ApplicationFeatureTagArgs{
					Enterprise: pulumi.Bool(true),
					Gallery:    pulumi.Bool(true),
				},
			},
			OptionalClaims: &ApplicationOptionalClaimsArgs{
				AccessTokens: ApplicationOptionalClaimsAccessTokenArray{
					&ApplicationOptionalClaimsAccessTokenArgs{
						Name: pulumi.String("myclaim"),
					},
					&ApplicationOptionalClaimsAccessTokenArgs{
						Name: pulumi.String("otherclaim"),
					},
				},
				IdTokens: ApplicationOptionalClaimsIdTokenArray{
					&ApplicationOptionalClaimsIdTokenArgs{
						Name:      pulumi.String("userclaim"),
						Source:    pulumi.String("user"),
						Essential: pulumi.Bool(true),
						AdditionalProperties: pulumi.StringArray{
							pulumi.String("emit_as_roles"),
						},
					},
				},
				Saml2Tokens: ApplicationOptionalClaimsSaml2TokenArray{
					&ApplicationOptionalClaimsSaml2TokenArgs{
						Name: pulumi.String("samlexample"),
					},
				},
			},
			RequiredResourceAccesses: ApplicationRequiredResourceAccessArray{
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String("00000003-0000-0000-c000-000000000000"),
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("df021288-bdef-4463-88db-98f22de89214"),
							Type: pulumi.String("Role"),
						},
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("b4e74841-8e56-480b-be8b-910348b18b4c"),
							Type: pulumi.String("Scope"),
						},
					},
				},
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String("c5393580-f805-4401-95e8-94b7a6ef2fc2"),
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id:   pulumi.String("594c1fb6-4f81-4475-ae41-0c394909246c"),
							Type: pulumi.String("Role"),
						},
					},
				},
			},
			Web: &ApplicationWebArgs{
				HomepageUrl: pulumi.String("https://app.example.net"),
				LogoutUrl:   pulumi.String("https://app.example.net/logout"),
				RedirectUris: pulumi.StringArray{
					pulumi.String("https://app.example.net/account"),
				},
				ImplicitGrant: &ApplicationWebImplicitGrantArgs{
					AccessTokenIssuanceEnabled: pulumi.Bool(true),
					IdTokenIssuanceEnabled:     pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Create application from a gallery template*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleApplicationTemplate, err := azuread.GetApplicationTemplate(ctx, &GetApplicationTemplateArgs{
			DisplayName: pulumi.StringRef("Marketo"),
		}, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			TemplateId:  pulumi.String(exampleApplicationTemplate.TemplateId),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Applications can be imported using their object ID, e.g.

```sh 

$ pulumi import azuread:index/application:Application test 00000000-0000-0000-0000-000000000000

```

func GetApplication 

func GetApplication(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationState, opts ...pulumi.ResourceOption) (*Application, error)

GetApplication gets an existing Application resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplication 

func NewApplication(ctx *pulumi.Context,
	name string, args *ApplicationArgs, opts ...pulumi.ResourceOption) (*Application, error)

NewApplication registers a new resource with the given unique name, arguments, and options.

func (*Application) ElementType 

func (*Application) ElementType() reflect.Type

func (*Application) ToApplicationOutput 

func (i *Application) ToApplicationOutput() ApplicationOutput

func (*Application) ToApplicationOutputWithContext 

func (i *Application) ToApplicationOutputWithContext(ctx context.Context) ApplicationOutput

type ApplicationApi 

type ApplicationApi struct {
	// A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
	KnownClientApplications []string `pulumi:"knownClientApplications"`
	// Allows an application to use claims mapping without specifying a custom signing key. Defaults to `false`.
	MappedClaimsEnabled *bool `pulumi:"mappedClaimsEnabled"`
	// One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
	Oauth2PermissionScopes []ApplicationApiOauth2PermissionScope `pulumi:"oauth2PermissionScopes"`
	// The access token version expected by this resource. Must be one of `1` or `2`, and must be `2` when `signInAudience` is either `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount` Defaults to `1`.
	RequestedAccessTokenVersion *int `pulumi:"requestedAccessTokenVersion"`
}

type ApplicationApiArgs 

type ApplicationApiArgs struct {
	// A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
	KnownClientApplications pulumi.StringArrayInput `pulumi:"knownClientApplications"`
	// Allows an application to use claims mapping without specifying a custom signing key. Defaults to `false`.
	MappedClaimsEnabled pulumi.BoolPtrInput `pulumi:"mappedClaimsEnabled"`
	// One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
	Oauth2PermissionScopes ApplicationApiOauth2PermissionScopeArrayInput `pulumi:"oauth2PermissionScopes"`
	// The access token version expected by this resource. Must be one of `1` or `2`, and must be `2` when `signInAudience` is either `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount` Defaults to `1`.
	RequestedAccessTokenVersion pulumi.IntPtrInput `pulumi:"requestedAccessTokenVersion"`
}

func (ApplicationApiArgs) ElementType 

func (ApplicationApiArgs) ElementType() reflect.Type

func (ApplicationApiArgs) ToApplicationApiOutput 

func (i ApplicationApiArgs) ToApplicationApiOutput() ApplicationApiOutput

func (ApplicationApiArgs) ToApplicationApiOutputWithContext 

func (i ApplicationApiArgs) ToApplicationApiOutputWithContext(ctx context.Context) ApplicationApiOutput

func (ApplicationApiArgs) ToApplicationApiPtrOutput 

func (i ApplicationApiArgs) ToApplicationApiPtrOutput() ApplicationApiPtrOutput

func (ApplicationApiArgs) ToApplicationApiPtrOutputWithContext 

func (i ApplicationApiArgs) ToApplicationApiPtrOutputWithContext(ctx context.Context) ApplicationApiPtrOutput

type ApplicationApiInput 

type ApplicationApiInput interface {
	pulumi.Input

	ToApplicationApiOutput() ApplicationApiOutput
	ToApplicationApiOutputWithContext(context.Context) ApplicationApiOutput
}

ApplicationApiInput is an input type that accepts ApplicationApiArgs and ApplicationApiOutput values. You can construct a concrete instance of `ApplicationApiInput` via: 

ApplicationApiArgs{...}

type ApplicationApiOauth2PermissionScope 

type ApplicationApiOauth2PermissionScope struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription *string `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName *string `pulumi:"adminConsentDisplayName"`
	// Determines if the permission scope is enabled. Defaults to `true`.
	Enabled *bool `pulumi:"enabled"`
	// The unique identifier of the delegated permission. Must be a valid UUID.
	Id string `pulumi:"id"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to `User`. Possible values are `User` or `Admin`.
	Type *string `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription *string `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName *string `pulumi:"userConsentDisplayName"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value *string `pulumi:"value"`
}

type ApplicationApiOauth2PermissionScopeArgs 

type ApplicationApiOauth2PermissionScopeArgs struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription pulumi.StringPtrInput `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName pulumi.StringPtrInput `pulumi:"adminConsentDisplayName"`
	// Determines if the permission scope is enabled. Defaults to `true`.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The unique identifier of the delegated permission. Must be a valid UUID.
	Id pulumi.StringInput `pulumi:"id"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to `User`. Possible values are `User` or `Admin`.
	Type pulumi.StringPtrInput `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription pulumi.StringPtrInput `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName pulumi.StringPtrInput `pulumi:"userConsentDisplayName"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (ApplicationApiOauth2PermissionScopeArgs) ElementType 

func (ApplicationApiOauth2PermissionScopeArgs) ElementType() reflect.Type

func (ApplicationApiOauth2PermissionScopeArgs) ToApplicationApiOauth2PermissionScopeOutput 

func (i ApplicationApiOauth2PermissionScopeArgs) ToApplicationApiOauth2PermissionScopeOutput() ApplicationApiOauth2PermissionScopeOutput

func (ApplicationApiOauth2PermissionScopeArgs) ToApplicationApiOauth2PermissionScopeOutputWithContext 

func (i ApplicationApiOauth2PermissionScopeArgs) ToApplicationApiOauth2PermissionScopeOutputWithContext(ctx context.Context) ApplicationApiOauth2PermissionScopeOutput

type ApplicationApiOauth2PermissionScopeArray 

type ApplicationApiOauth2PermissionScopeArray []ApplicationApiOauth2PermissionScopeInput

func (ApplicationApiOauth2PermissionScopeArray) ElementType 

func (ApplicationApiOauth2PermissionScopeArray) ElementType() reflect.Type

func (ApplicationApiOauth2PermissionScopeArray) ToApplicationApiOauth2PermissionScopeArrayOutput 

func (i ApplicationApiOauth2PermissionScopeArray) ToApplicationApiOauth2PermissionScopeArrayOutput() ApplicationApiOauth2PermissionScopeArrayOutput

func (ApplicationApiOauth2PermissionScopeArray) ToApplicationApiOauth2PermissionScopeArrayOutputWithContext 

func (i ApplicationApiOauth2PermissionScopeArray) ToApplicationApiOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) ApplicationApiOauth2PermissionScopeArrayOutput

type ApplicationApiOauth2PermissionScopeArrayInput 

type ApplicationApiOauth2PermissionScopeArrayInput interface {
	pulumi.Input

	ToApplicationApiOauth2PermissionScopeArrayOutput() ApplicationApiOauth2PermissionScopeArrayOutput
	ToApplicationApiOauth2PermissionScopeArrayOutputWithContext(context.Context) ApplicationApiOauth2PermissionScopeArrayOutput
}

ApplicationApiOauth2PermissionScopeArrayInput is an input type that accepts ApplicationApiOauth2PermissionScopeArray and ApplicationApiOauth2PermissionScopeArrayOutput values. You can construct a concrete instance of `ApplicationApiOauth2PermissionScopeArrayInput` via: 

ApplicationApiOauth2PermissionScopeArray{ ApplicationApiOauth2PermissionScopeArgs{...} }

type ApplicationApiOauth2PermissionScopeArrayOutput 

type ApplicationApiOauth2PermissionScopeArrayOutput struct{ *pulumi.OutputState }

func (ApplicationApiOauth2PermissionScopeArrayOutput) ElementType 

func (ApplicationApiOauth2PermissionScopeArrayOutput) ElementType() reflect.Type

func (ApplicationApiOauth2PermissionScopeArrayOutput) Index 

func (o ApplicationApiOauth2PermissionScopeArrayOutput) Index(i pulumi.IntInput) ApplicationApiOauth2PermissionScopeOutput

func (ApplicationApiOauth2PermissionScopeArrayOutput) ToApplicationApiOauth2PermissionScopeArrayOutput 

func (o ApplicationApiOauth2PermissionScopeArrayOutput) ToApplicationApiOauth2PermissionScopeArrayOutput() ApplicationApiOauth2PermissionScopeArrayOutput

func (ApplicationApiOauth2PermissionScopeArrayOutput) ToApplicationApiOauth2PermissionScopeArrayOutputWithContext 

func (o ApplicationApiOauth2PermissionScopeArrayOutput) ToApplicationApiOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) ApplicationApiOauth2PermissionScopeArrayOutput

type ApplicationApiOauth2PermissionScopeInput 

type ApplicationApiOauth2PermissionScopeInput interface {
	pulumi.Input

	ToApplicationApiOauth2PermissionScopeOutput() ApplicationApiOauth2PermissionScopeOutput
	ToApplicationApiOauth2PermissionScopeOutputWithContext(context.Context) ApplicationApiOauth2PermissionScopeOutput
}

ApplicationApiOauth2PermissionScopeInput is an input type that accepts ApplicationApiOauth2PermissionScopeArgs and ApplicationApiOauth2PermissionScopeOutput values. You can construct a concrete instance of `ApplicationApiOauth2PermissionScopeInput` via: 

ApplicationApiOauth2PermissionScopeArgs{...}

type ApplicationApiOauth2PermissionScopeOutput 

type ApplicationApiOauth2PermissionScopeOutput struct{ *pulumi.OutputState }

func (ApplicationApiOauth2PermissionScopeOutput) AdminConsentDescription 

func (o ApplicationApiOauth2PermissionScopeOutput) AdminConsentDescription() pulumi.StringPtrOutput

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

func (ApplicationApiOauth2PermissionScopeOutput) AdminConsentDisplayName 

func (o ApplicationApiOauth2PermissionScopeOutput) AdminConsentDisplayName() pulumi.StringPtrOutput

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

func (ApplicationApiOauth2PermissionScopeOutput) ElementType 

func (ApplicationApiOauth2PermissionScopeOutput) ElementType() reflect.Type

func (ApplicationApiOauth2PermissionScopeOutput) Enabled 

func (o ApplicationApiOauth2PermissionScopeOutput) Enabled() pulumi.BoolPtrOutput

Determines if the permission scope is enabled. Defaults to `true`.

func (ApplicationApiOauth2PermissionScopeOutput) Id 

func (o ApplicationApiOauth2PermissionScopeOutput) Id() pulumi.StringOutput

The unique identifier of the delegated permission. Must be a valid UUID.

func (ApplicationApiOauth2PermissionScopeOutput) ToApplicationApiOauth2PermissionScopeOutput 

func (o ApplicationApiOauth2PermissionScopeOutput) ToApplicationApiOauth2PermissionScopeOutput() ApplicationApiOauth2PermissionScopeOutput

func (ApplicationApiOauth2PermissionScopeOutput) ToApplicationApiOauth2PermissionScopeOutputWithContext 

func (o ApplicationApiOauth2PermissionScopeOutput) ToApplicationApiOauth2PermissionScopeOutputWithContext(ctx context.Context) ApplicationApiOauth2PermissionScopeOutput

func (ApplicationApiOauth2PermissionScopeOutput) Type 

func (o ApplicationApiOauth2PermissionScopeOutput) Type() pulumi.StringPtrOutput

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Defaults to `User`. Possible values are `User` or `Admin`.

func (ApplicationApiOauth2PermissionScopeOutput) UserConsentDescription 

func (o ApplicationApiOauth2PermissionScopeOutput) UserConsentDescription() pulumi.StringPtrOutput

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

func (ApplicationApiOauth2PermissionScopeOutput) UserConsentDisplayName 

func (o ApplicationApiOauth2PermissionScopeOutput) UserConsentDisplayName() pulumi.StringPtrOutput

Display name for the delegated permission that appears in the end user consent experience.

func (ApplicationApiOauth2PermissionScopeOutput) Value 

func (o ApplicationApiOauth2PermissionScopeOutput) Value() pulumi.StringPtrOutput

The value that is used for the `scp` claim in OAuth 2.0 access tokens.

type ApplicationApiOutput 

type ApplicationApiOutput struct{ *pulumi.OutputState }

func (ApplicationApiOutput) ElementType 

func (ApplicationApiOutput) ElementType() reflect.Type

func (ApplicationApiOutput) KnownClientApplications 

func (o ApplicationApiOutput) KnownClientApplications() pulumi.StringArrayOutput

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

func (ApplicationApiOutput) MappedClaimsEnabled 

func (o ApplicationApiOutput) MappedClaimsEnabled() pulumi.BoolPtrOutput

Allows an application to use claims mapping without specifying a custom signing key. Defaults to `false`.

func (ApplicationApiOutput) Oauth2PermissionScopes 

func (o ApplicationApiOutput) Oauth2PermissionScopes() ApplicationApiOauth2PermissionScopeArrayOutput

One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

func (ApplicationApiOutput) RequestedAccessTokenVersion 

func (o ApplicationApiOutput) RequestedAccessTokenVersion() pulumi.IntPtrOutput

The access token version expected by this resource. Must be one of `1` or `2`, and must be `2` when `signInAudience` is either `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount` Defaults to `1`.

func (ApplicationApiOutput) ToApplicationApiOutput 

func (o ApplicationApiOutput) ToApplicationApiOutput() ApplicationApiOutput

func (ApplicationApiOutput) ToApplicationApiOutputWithContext 

func (o ApplicationApiOutput) ToApplicationApiOutputWithContext(ctx context.Context) ApplicationApiOutput

func (ApplicationApiOutput) ToApplicationApiPtrOutput 

func (o ApplicationApiOutput) ToApplicationApiPtrOutput() ApplicationApiPtrOutput

func (ApplicationApiOutput) ToApplicationApiPtrOutputWithContext 

func (o ApplicationApiOutput) ToApplicationApiPtrOutputWithContext(ctx context.Context) ApplicationApiPtrOutput

type ApplicationApiPtrInput 

type ApplicationApiPtrInput interface {
	pulumi.Input

	ToApplicationApiPtrOutput() ApplicationApiPtrOutput
	ToApplicationApiPtrOutputWithContext(context.Context) ApplicationApiPtrOutput
}

ApplicationApiPtrInput is an input type that accepts ApplicationApiArgs, ApplicationApiPtr and ApplicationApiPtrOutput values. You can construct a concrete instance of `ApplicationApiPtrInput` via: 

        ApplicationApiArgs{...}

or:

        nil

func ApplicationApiPtr 

func ApplicationApiPtr(v *ApplicationApiArgs) ApplicationApiPtrInput

type ApplicationApiPtrOutput 

type ApplicationApiPtrOutput struct{ *pulumi.OutputState }

func (ApplicationApiPtrOutput) Elem 

func (o ApplicationApiPtrOutput) Elem() ApplicationApiOutput

func (ApplicationApiPtrOutput) ElementType 

func (ApplicationApiPtrOutput) ElementType() reflect.Type

func (ApplicationApiPtrOutput) KnownClientApplications 

func (o ApplicationApiPtrOutput) KnownClientApplications() pulumi.StringArrayOutput

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

func (ApplicationApiPtrOutput) MappedClaimsEnabled 

func (o ApplicationApiPtrOutput) MappedClaimsEnabled() pulumi.BoolPtrOutput

Allows an application to use claims mapping without specifying a custom signing key. Defaults to `false`.

func (ApplicationApiPtrOutput) Oauth2PermissionScopes 

func (o ApplicationApiPtrOutput) Oauth2PermissionScopes() ApplicationApiOauth2PermissionScopeArrayOutput

One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

func (ApplicationApiPtrOutput) RequestedAccessTokenVersion 

func (o ApplicationApiPtrOutput) RequestedAccessTokenVersion() pulumi.IntPtrOutput

The access token version expected by this resource. Must be one of `1` or `2`, and must be `2` when `signInAudience` is either `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount` Defaults to `1`.

func (ApplicationApiPtrOutput) ToApplicationApiPtrOutput 

func (o ApplicationApiPtrOutput) ToApplicationApiPtrOutput() ApplicationApiPtrOutput

func (ApplicationApiPtrOutput) ToApplicationApiPtrOutputWithContext 

func (o ApplicationApiPtrOutput) ToApplicationApiPtrOutputWithContext(ctx context.Context) ApplicationApiPtrOutput

type ApplicationAppRole 

type ApplicationAppRole struct {
	// Specifies whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications (that are accessing this application in a standalone scenario) by setting to `Application`, or to both.
	AllowedMemberTypes []string `pulumi:"allowedMemberTypes"`
	// Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
	Description string `pulumi:"description"`
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName string `pulumi:"displayName"`
	// Determines if the app role is enabled. Defaults to `true`.
	Enabled *bool `pulumi:"enabled"`
	// The unique identifier of the app role. Must be a valid UUID.
	Id string `pulumi:"id"`
	// The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
	Value *string `pulumi:"value"`
}

type ApplicationAppRoleArgs 

type ApplicationAppRoleArgs struct {
	// Specifies whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications (that are accessing this application in a standalone scenario) by setting to `Application`, or to both.
	AllowedMemberTypes pulumi.StringArrayInput `pulumi:"allowedMemberTypes"`
	// Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
	Description pulumi.StringInput `pulumi:"description"`
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName pulumi.StringInput `pulumi:"displayName"`
	// Determines if the app role is enabled. Defaults to `true`.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The unique identifier of the app role. Must be a valid UUID.
	Id pulumi.StringInput `pulumi:"id"`
	// The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (ApplicationAppRoleArgs) ElementType 

func (ApplicationAppRoleArgs) ElementType() reflect.Type

func (ApplicationAppRoleArgs) ToApplicationAppRoleOutput 

func (i ApplicationAppRoleArgs) ToApplicationAppRoleOutput() ApplicationAppRoleOutput

func (ApplicationAppRoleArgs) ToApplicationAppRoleOutputWithContext 

func (i ApplicationAppRoleArgs) ToApplicationAppRoleOutputWithContext(ctx context.Context) ApplicationAppRoleOutput

type ApplicationAppRoleArray 

type ApplicationAppRoleArray []ApplicationAppRoleInput

func (ApplicationAppRoleArray) ElementType 

func (ApplicationAppRoleArray) ElementType() reflect.Type

func (ApplicationAppRoleArray) ToApplicationAppRoleArrayOutput 

func (i ApplicationAppRoleArray) ToApplicationAppRoleArrayOutput() ApplicationAppRoleArrayOutput

func (ApplicationAppRoleArray) ToApplicationAppRoleArrayOutputWithContext 

func (i ApplicationAppRoleArray) ToApplicationAppRoleArrayOutputWithContext(ctx context.Context) ApplicationAppRoleArrayOutput

type ApplicationAppRoleArrayInput 

type ApplicationAppRoleArrayInput interface {
	pulumi.Input

	ToApplicationAppRoleArrayOutput() ApplicationAppRoleArrayOutput
	ToApplicationAppRoleArrayOutputWithContext(context.Context) ApplicationAppRoleArrayOutput
}

ApplicationAppRoleArrayInput is an input type that accepts ApplicationAppRoleArray and ApplicationAppRoleArrayOutput values. You can construct a concrete instance of `ApplicationAppRoleArrayInput` via: 

ApplicationAppRoleArray{ ApplicationAppRoleArgs{...} }

type ApplicationAppRoleArrayOutput 

type ApplicationAppRoleArrayOutput struct{ *pulumi.OutputState }

func (ApplicationAppRoleArrayOutput) ElementType 

func (ApplicationAppRoleArrayOutput) ElementType() reflect.Type

func (ApplicationAppRoleArrayOutput) Index 

func (o ApplicationAppRoleArrayOutput) Index(i pulumi.IntInput) ApplicationAppRoleOutput

func (ApplicationAppRoleArrayOutput) ToApplicationAppRoleArrayOutput 

func (o ApplicationAppRoleArrayOutput) ToApplicationAppRoleArrayOutput() ApplicationAppRoleArrayOutput

func (ApplicationAppRoleArrayOutput) ToApplicationAppRoleArrayOutputWithContext 

func (o ApplicationAppRoleArrayOutput) ToApplicationAppRoleArrayOutputWithContext(ctx context.Context) ApplicationAppRoleArrayOutput

type ApplicationAppRoleInput 

type ApplicationAppRoleInput interface {
	pulumi.Input

	ToApplicationAppRoleOutput() ApplicationAppRoleOutput
	ToApplicationAppRoleOutputWithContext(context.Context) ApplicationAppRoleOutput
}

ApplicationAppRoleInput is an input type that accepts ApplicationAppRoleArgs and ApplicationAppRoleOutput values. You can construct a concrete instance of `ApplicationAppRoleInput` via: 

ApplicationAppRoleArgs{...}

type ApplicationAppRoleOutput 

type ApplicationAppRoleOutput struct{ *pulumi.OutputState }

func (ApplicationAppRoleOutput) AllowedMemberTypes 

func (o ApplicationAppRoleOutput) AllowedMemberTypes() pulumi.StringArrayOutput

Specifies whether this app role definition can be assigned to users and groups by setting to `User`, or to other applications (that are accessing this application in a standalone scenario) by setting to `Application`, or to both.

func (ApplicationAppRoleOutput) Description 

func (o ApplicationAppRoleOutput) Description() pulumi.StringOutput

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

func (ApplicationAppRoleOutput) DisplayName 

func (o ApplicationAppRoleOutput) DisplayName() pulumi.StringOutput

Display name for the app role that appears during app role assignment and in consent experiences.

func (ApplicationAppRoleOutput) ElementType 

func (ApplicationAppRoleOutput) ElementType() reflect.Type

func (ApplicationAppRoleOutput) Enabled 

func (o ApplicationAppRoleOutput) Enabled() pulumi.BoolPtrOutput

Determines if the app role is enabled. Defaults to `true`.

func (ApplicationAppRoleOutput) Id 

func (o ApplicationAppRoleOutput) Id() pulumi.StringOutput

The unique identifier of the app role. Must be a valid UUID.

func (ApplicationAppRoleOutput) ToApplicationAppRoleOutput 

func (o ApplicationAppRoleOutput) ToApplicationAppRoleOutput() ApplicationAppRoleOutput

func (ApplicationAppRoleOutput) ToApplicationAppRoleOutputWithContext 

func (o ApplicationAppRoleOutput) ToApplicationAppRoleOutputWithContext(ctx context.Context) ApplicationAppRoleOutput

func (ApplicationAppRoleOutput) Value 

func (o ApplicationAppRoleOutput) Value() pulumi.StringPtrOutput

The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

type ApplicationArgs 

type ApplicationArgs struct {
	// An `api` block as documented below, which configures API related settings for this application.
	Api ApplicationApiPtrInput
	// A collection of `appRole` blocks as documented below. For more information see [official documentation on Application Roles](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles ApplicationAppRoleArrayInput
	// Specifies whether this application supports device authentication without a user. Defaults to `false`.
	DeviceOnlyAuthEnabled pulumi.BoolPtrInput
	// The display name for the application.
	DisplayName pulumi.StringInput
	// Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to `false`.
	FallbackPublicClientEnabled pulumi.BoolPtrInput
	// A `featureTags` block as described below. Cannot be used together with the `tags` property.
	FeatureTags ApplicationFeatureTagArrayInput
	// Configures the `groups` claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are `None`, `SecurityGroup`, `DirectoryRole`, `ApplicationGroup` or `All`.
	GroupMembershipClaims pulumi.StringArrayInput
	// A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
	IdentifierUris pulumi.StringArrayInput
	// A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
	LogoImage pulumi.StringPtrInput
	// URL of the application's marketing page.
	MarketingUrl pulumi.StringPtrInput
	// Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to `false`, which specifies that only GET requests are allowed.
	Oauth2PostResponseRequired pulumi.BoolPtrInput
	// An `optionalClaims` block as documented below.
	OptionalClaims ApplicationOptionalClaimsPtrInput
	// A set of object IDs of principals that will be granted ownership of the application. Supported object types are users or service principals. By default, no owners are assigned.
	Owners pulumi.StringArrayInput
	// If `true`, will return an error if an existing application is found with the same name. Defaults to `false`.
	PreventDuplicateNames pulumi.BoolPtrInput
	// URL of the application's privacy statement.
	PrivacyStatementUrl pulumi.StringPtrInput
	// A `publicClient` block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
	PublicClient ApplicationPublicClientPtrInput
	// A collection of `requiredResourceAccess` blocks as documented below.
	RequiredResourceAccesses ApplicationRequiredResourceAccessArrayInput
	// The Microsoft account types that are supported for the current application. Must be one of `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`. Defaults to `AzureADMyOrg`.
	SignInAudience pulumi.StringPtrInput
	// A `singlePageApplication` block as documented below, which configures single-page application (SPA) related settings for this application.
	SinglePageApplication ApplicationSinglePageApplicationPtrInput
	// URL of the application's support page.
	SupportUrl pulumi.StringPtrInput
	// A set of tags to apply to the application. Cannot be used together with the `featureTags` block.
	Tags pulumi.StringArrayInput
	// Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
	TemplateId pulumi.StringPtrInput
	// URL of the application's terms of service statement.
	TermsOfServiceUrl pulumi.StringPtrInput
	// A `web` block as documented below, which configures web related settings for this application.
	Web ApplicationWebPtrInput
}

The set of arguments for constructing a Application resource.

func (ApplicationArgs) ElementType 

func (ApplicationArgs) ElementType() reflect.Type

type ApplicationArray 

type ApplicationArray []ApplicationInput

func (ApplicationArray) ElementType 

func (ApplicationArray) ElementType() reflect.Type

func (ApplicationArray) ToApplicationArrayOutput 

func (i ApplicationArray) ToApplicationArrayOutput() ApplicationArrayOutput

func (ApplicationArray) ToApplicationArrayOutputWithContext 

func (i ApplicationArray) ToApplicationArrayOutputWithContext(ctx context.Context) ApplicationArrayOutput

type ApplicationArrayInput 

type ApplicationArrayInput interface {
	pulumi.Input

	ToApplicationArrayOutput() ApplicationArrayOutput
	ToApplicationArrayOutputWithContext(context.Context) ApplicationArrayOutput
}

ApplicationArrayInput is an input type that accepts ApplicationArray and ApplicationArrayOutput values. You can construct a concrete instance of `ApplicationArrayInput` via: 

ApplicationArray{ ApplicationArgs{...} }

type ApplicationArrayOutput 

type ApplicationArrayOutput struct{ *pulumi.OutputState }

func (ApplicationArrayOutput) ElementType 

func (ApplicationArrayOutput) ElementType() reflect.Type

func (ApplicationArrayOutput) Index 

func (o ApplicationArrayOutput) Index(i pulumi.IntInput) ApplicationOutput

func (ApplicationArrayOutput) ToApplicationArrayOutput 

func (o ApplicationArrayOutput) ToApplicationArrayOutput() ApplicationArrayOutput

func (ApplicationArrayOutput) ToApplicationArrayOutputWithContext 

func (o ApplicationArrayOutput) ToApplicationArrayOutputWithContext(ctx context.Context) ApplicationArrayOutput

type ApplicationCertificate 

type ApplicationCertificate struct {
	pulumi.CustomResourceState

	// The object ID of the application for which this certificate should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringOutput `pulumi:"applicationObjectId"`
	// Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.
	Encoding pulumi.StringPtrOutput `pulumi:"encoding"`
	// The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If omitted, the API will decide a suitable expiry date, which is typically around 2 years from the start date. Changing this field forces a new resource to be created.
	EndDate pulumi.StringOutput `pulumi:"endDate"`
	// A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrOutput `pulumi:"endDateRelative"`
	// A UUID used to uniquely identify this certificate. If omitted, a random UUID will be automatically generated. Changing this field forces a new resource to be created.
	KeyId pulumi.StringOutput `pulumi:"keyId"`
	// The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date and time are used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringOutput `pulumi:"startDate"`
	// The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.
	Type pulumi.StringPtrOutput `pulumi:"type"`
	// The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.
	Value pulumi.StringOutput `pulumi:"value"`
}

## Import

Certificates can be imported using the object ID of the associated application and the key ID of the certificate credential, e.g.

```sh 

$ pulumi import azuread:index/applicationCertificate:ApplicationCertificate test 00000000-0000-0000-0000-000000000000/certificate/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the application's object ID, the string "certificate" and the certificate's key ID in the format `{ObjectId}/certificate/{CertificateKeyId}`.

func GetApplicationCertificate 

func GetApplicationCertificate(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationCertificateState, opts ...pulumi.ResourceOption) (*ApplicationCertificate, error)

GetApplicationCertificate gets an existing ApplicationCertificate resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationCertificate 

func NewApplicationCertificate(ctx *pulumi.Context,
	name string, args *ApplicationCertificateArgs, opts ...pulumi.ResourceOption) (*ApplicationCertificate, error)

NewApplicationCertificate registers a new resource with the given unique name, arguments, and options.

func (*ApplicationCertificate) ElementType 

func (*ApplicationCertificate) ElementType() reflect.Type

func (*ApplicationCertificate) ToApplicationCertificateOutput 

func (i *ApplicationCertificate) ToApplicationCertificateOutput() ApplicationCertificateOutput

func (*ApplicationCertificate) ToApplicationCertificateOutputWithContext 

func (i *ApplicationCertificate) ToApplicationCertificateOutputWithContext(ctx context.Context) ApplicationCertificateOutput

type ApplicationCertificateArgs 

type ApplicationCertificateArgs struct {
	// The object ID of the application for which this certificate should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringInput
	// Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.
	Encoding pulumi.StringPtrInput
	// The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If omitted, the API will decide a suitable expiry date, which is typically around 2 years from the start date. Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A UUID used to uniquely identify this certificate. If omitted, a random UUID will be automatically generated. Changing this field forces a new resource to be created.
	KeyId pulumi.StringPtrInput
	// The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date and time are used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
	// The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.
	Type pulumi.StringPtrInput
	// The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.
	Value pulumi.StringInput
}

The set of arguments for constructing a ApplicationCertificate resource.

func (ApplicationCertificateArgs) ElementType 

func (ApplicationCertificateArgs) ElementType() reflect.Type

type ApplicationCertificateArray 

type ApplicationCertificateArray []ApplicationCertificateInput

func (ApplicationCertificateArray) ElementType 

func (ApplicationCertificateArray) ElementType() reflect.Type

func (ApplicationCertificateArray) ToApplicationCertificateArrayOutput 

func (i ApplicationCertificateArray) ToApplicationCertificateArrayOutput() ApplicationCertificateArrayOutput

func (ApplicationCertificateArray) ToApplicationCertificateArrayOutputWithContext 

func (i ApplicationCertificateArray) ToApplicationCertificateArrayOutputWithContext(ctx context.Context) ApplicationCertificateArrayOutput

type ApplicationCertificateArrayInput 

type ApplicationCertificateArrayInput interface {
	pulumi.Input

	ToApplicationCertificateArrayOutput() ApplicationCertificateArrayOutput
	ToApplicationCertificateArrayOutputWithContext(context.Context) ApplicationCertificateArrayOutput
}

ApplicationCertificateArrayInput is an input type that accepts ApplicationCertificateArray and ApplicationCertificateArrayOutput values. You can construct a concrete instance of `ApplicationCertificateArrayInput` via: 

ApplicationCertificateArray{ ApplicationCertificateArgs{...} }

type ApplicationCertificateArrayOutput 

type ApplicationCertificateArrayOutput struct{ *pulumi.OutputState }

func (ApplicationCertificateArrayOutput) ElementType 

func (ApplicationCertificateArrayOutput) ElementType() reflect.Type

func (ApplicationCertificateArrayOutput) Index 

func (o ApplicationCertificateArrayOutput) Index(i pulumi.IntInput) ApplicationCertificateOutput

func (ApplicationCertificateArrayOutput) ToApplicationCertificateArrayOutput 

func (o ApplicationCertificateArrayOutput) ToApplicationCertificateArrayOutput() ApplicationCertificateArrayOutput

func (ApplicationCertificateArrayOutput) ToApplicationCertificateArrayOutputWithContext 

func (o ApplicationCertificateArrayOutput) ToApplicationCertificateArrayOutputWithContext(ctx context.Context) ApplicationCertificateArrayOutput

type ApplicationCertificateInput 

type ApplicationCertificateInput interface {
	pulumi.Input

	ToApplicationCertificateOutput() ApplicationCertificateOutput
	ToApplicationCertificateOutputWithContext(ctx context.Context) ApplicationCertificateOutput
}

type ApplicationCertificateMap 

type ApplicationCertificateMap map[string]ApplicationCertificateInput

func (ApplicationCertificateMap) ElementType 

func (ApplicationCertificateMap) ElementType() reflect.Type

func (ApplicationCertificateMap) ToApplicationCertificateMapOutput 

func (i ApplicationCertificateMap) ToApplicationCertificateMapOutput() ApplicationCertificateMapOutput

func (ApplicationCertificateMap) ToApplicationCertificateMapOutputWithContext 

func (i ApplicationCertificateMap) ToApplicationCertificateMapOutputWithContext(ctx context.Context) ApplicationCertificateMapOutput

type ApplicationCertificateMapInput 

type ApplicationCertificateMapInput interface {
	pulumi.Input

	ToApplicationCertificateMapOutput() ApplicationCertificateMapOutput
	ToApplicationCertificateMapOutputWithContext(context.Context) ApplicationCertificateMapOutput
}

ApplicationCertificateMapInput is an input type that accepts ApplicationCertificateMap and ApplicationCertificateMapOutput values. You can construct a concrete instance of `ApplicationCertificateMapInput` via: 

ApplicationCertificateMap{ "key": ApplicationCertificateArgs{...} }

type ApplicationCertificateMapOutput 

type ApplicationCertificateMapOutput struct{ *pulumi.OutputState }

func (ApplicationCertificateMapOutput) ElementType 

func (ApplicationCertificateMapOutput) ElementType() reflect.Type

func (ApplicationCertificateMapOutput) MapIndex 

func (o ApplicationCertificateMapOutput) MapIndex(k pulumi.StringInput) ApplicationCertificateOutput

func (ApplicationCertificateMapOutput) ToApplicationCertificateMapOutput 

func (o ApplicationCertificateMapOutput) ToApplicationCertificateMapOutput() ApplicationCertificateMapOutput

func (ApplicationCertificateMapOutput) ToApplicationCertificateMapOutputWithContext 

func (o ApplicationCertificateMapOutput) ToApplicationCertificateMapOutputWithContext(ctx context.Context) ApplicationCertificateMapOutput

type ApplicationCertificateOutput 

type ApplicationCertificateOutput struct{ *pulumi.OutputState }

func (ApplicationCertificateOutput) ApplicationObjectId added in v5.22.0 

func (o ApplicationCertificateOutput) ApplicationObjectId() pulumi.StringOutput

The object ID of the application for which this certificate should be created. Changing this field forces a new resource to be created.

func (ApplicationCertificateOutput) ElementType 

func (ApplicationCertificateOutput) ElementType() reflect.Type

func (ApplicationCertificateOutput) Encoding added in v5.22.0 

func (o ApplicationCertificateOutput) Encoding() pulumi.StringPtrOutput

Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.

func (ApplicationCertificateOutput) EndDate added in v5.22.0 

func (o ApplicationCertificateOutput) EndDate() pulumi.StringOutput

The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If omitted, the API will decide a suitable expiry date, which is typically around 2 years from the start date. Changing this field forces a new resource to be created.

func (ApplicationCertificateOutput) EndDateRelative added in v5.22.0 

func (o ApplicationCertificateOutput) EndDateRelative() pulumi.StringPtrOutput

A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.

func (ApplicationCertificateOutput) KeyId added in v5.22.0 

func (o ApplicationCertificateOutput) KeyId() pulumi.StringOutput

A UUID used to uniquely identify this certificate. If omitted, a random UUID will be automatically generated. Changing this field forces a new resource to be created.

func (ApplicationCertificateOutput) StartDate added in v5.22.0 

func (o ApplicationCertificateOutput) StartDate() pulumi.StringOutput

The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date and time are used. Changing this field forces a new resource to be created.

func (ApplicationCertificateOutput) ToApplicationCertificateOutput 

func (o ApplicationCertificateOutput) ToApplicationCertificateOutput() ApplicationCertificateOutput

func (ApplicationCertificateOutput) ToApplicationCertificateOutputWithContext 

func (o ApplicationCertificateOutput) ToApplicationCertificateOutputWithContext(ctx context.Context) ApplicationCertificateOutput

func (ApplicationCertificateOutput) Type added in v5.22.0 

func (o ApplicationCertificateOutput) Type() pulumi.StringPtrOutput

The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.

func (ApplicationCertificateOutput) Value added in v5.22.0 

func (o ApplicationCertificateOutput) Value() pulumi.StringOutput

The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.

type ApplicationCertificateState 

type ApplicationCertificateState struct {
	// The object ID of the application for which this certificate should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringPtrInput
	// Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.
	Encoding pulumi.StringPtrInput
	// The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If omitted, the API will decide a suitable expiry date, which is typically around 2 years from the start date. Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A UUID used to uniquely identify this certificate. If omitted, a random UUID will be automatically generated. Changing this field forces a new resource to be created.
	KeyId pulumi.StringPtrInput
	// The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date and time are used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
	// The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.
	Type pulumi.StringPtrInput
	// The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.
	Value pulumi.StringPtrInput
}

func (ApplicationCertificateState) ElementType 

func (ApplicationCertificateState) ElementType() reflect.Type

type ApplicationFeatureTag added in v5.6.0 

type ApplicationFeatureTag struct {
	// Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryCustomSingleSignOnApplication` tag. Defaults to `false`.
	CustomSingleSignOn *bool `pulumi:"customSingleSignOn"`
	// Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryIntegratedApp` tag. Defaults to `false`.
	Enterprise *bool `pulumi:"enterprise"`
	// Whether this application represents a gallery application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1` tag. Defaults to `false`.
	Gallery *bool `pulumi:"gallery"`
	// Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the `HideApp` tag. Defaults to `false`.
	Hide *bool `pulumi:"hide"`
}

type ApplicationFeatureTagArgs added in v5.6.0 

type ApplicationFeatureTagArgs struct {
	// Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryCustomSingleSignOnApplication` tag. Defaults to `false`.
	CustomSingleSignOn pulumi.BoolPtrInput `pulumi:"customSingleSignOn"`
	// Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryIntegratedApp` tag. Defaults to `false`.
	Enterprise pulumi.BoolPtrInput `pulumi:"enterprise"`
	// Whether this application represents a gallery application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1` tag. Defaults to `false`.
	Gallery pulumi.BoolPtrInput `pulumi:"gallery"`
	// Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the `HideApp` tag. Defaults to `false`.
	Hide pulumi.BoolPtrInput `pulumi:"hide"`
}

func (ApplicationFeatureTagArgs) ElementType added in v5.6.0 

func (ApplicationFeatureTagArgs) ElementType() reflect.Type

func (ApplicationFeatureTagArgs) ToApplicationFeatureTagOutput added in v5.6.0 

func (i ApplicationFeatureTagArgs) ToApplicationFeatureTagOutput() ApplicationFeatureTagOutput

func (ApplicationFeatureTagArgs) ToApplicationFeatureTagOutputWithContext added in v5.6.0 

func (i ApplicationFeatureTagArgs) ToApplicationFeatureTagOutputWithContext(ctx context.Context) ApplicationFeatureTagOutput

type ApplicationFeatureTagArray added in v5.6.0 

type ApplicationFeatureTagArray []ApplicationFeatureTagInput

func (ApplicationFeatureTagArray) ElementType added in v5.6.0 

func (ApplicationFeatureTagArray) ElementType() reflect.Type

func (ApplicationFeatureTagArray) ToApplicationFeatureTagArrayOutput added in v5.6.0 

func (i ApplicationFeatureTagArray) ToApplicationFeatureTagArrayOutput() ApplicationFeatureTagArrayOutput

func (ApplicationFeatureTagArray) ToApplicationFeatureTagArrayOutputWithContext added in v5.6.0 

func (i ApplicationFeatureTagArray) ToApplicationFeatureTagArrayOutputWithContext(ctx context.Context) ApplicationFeatureTagArrayOutput

type ApplicationFeatureTagArrayInput added in v5.6.0 

type ApplicationFeatureTagArrayInput interface {
	pulumi.Input

	ToApplicationFeatureTagArrayOutput() ApplicationFeatureTagArrayOutput
	ToApplicationFeatureTagArrayOutputWithContext(context.Context) ApplicationFeatureTagArrayOutput
}

ApplicationFeatureTagArrayInput is an input type that accepts ApplicationFeatureTagArray and ApplicationFeatureTagArrayOutput values. You can construct a concrete instance of `ApplicationFeatureTagArrayInput` via: 

ApplicationFeatureTagArray{ ApplicationFeatureTagArgs{...} }

type ApplicationFeatureTagArrayOutput added in v5.6.0 

type ApplicationFeatureTagArrayOutput struct{ *pulumi.OutputState }

func (ApplicationFeatureTagArrayOutput) ElementType added in v5.6.0 

func (ApplicationFeatureTagArrayOutput) ElementType() reflect.Type

func (ApplicationFeatureTagArrayOutput) Index added in v5.6.0 

func (o ApplicationFeatureTagArrayOutput) Index(i pulumi.IntInput) ApplicationFeatureTagOutput

func (ApplicationFeatureTagArrayOutput) ToApplicationFeatureTagArrayOutput added in v5.6.0 

func (o ApplicationFeatureTagArrayOutput) ToApplicationFeatureTagArrayOutput() ApplicationFeatureTagArrayOutput

func (ApplicationFeatureTagArrayOutput) ToApplicationFeatureTagArrayOutputWithContext added in v5.6.0 

func (o ApplicationFeatureTagArrayOutput) ToApplicationFeatureTagArrayOutputWithContext(ctx context.Context) ApplicationFeatureTagArrayOutput

type ApplicationFeatureTagInput added in v5.6.0 

type ApplicationFeatureTagInput interface {
	pulumi.Input

	ToApplicationFeatureTagOutput() ApplicationFeatureTagOutput
	ToApplicationFeatureTagOutputWithContext(context.Context) ApplicationFeatureTagOutput
}

ApplicationFeatureTagInput is an input type that accepts ApplicationFeatureTagArgs and ApplicationFeatureTagOutput values. You can construct a concrete instance of `ApplicationFeatureTagInput` via: 

ApplicationFeatureTagArgs{...}

type ApplicationFeatureTagOutput added in v5.6.0 

type ApplicationFeatureTagOutput struct{ *pulumi.OutputState }

func (ApplicationFeatureTagOutput) CustomSingleSignOn added in v5.6.0 

func (o ApplicationFeatureTagOutput) CustomSingleSignOn() pulumi.BoolPtrOutput

Whether this application represents a custom SAML application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryCustomSingleSignOnApplication` tag. Defaults to `false`.

func (ApplicationFeatureTagOutput) ElementType added in v5.6.0 

func (ApplicationFeatureTagOutput) ElementType() reflect.Type

func (ApplicationFeatureTagOutput) Enterprise added in v5.6.0 

func (o ApplicationFeatureTagOutput) Enterprise() pulumi.BoolPtrOutput

Whether this application represents an Enterprise Application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryIntegratedApp` tag. Defaults to `false`.

func (ApplicationFeatureTagOutput) Gallery added in v5.6.0 

func (o ApplicationFeatureTagOutput) Gallery() pulumi.BoolPtrOutput

Whether this application represents a gallery application for linked service principals. Enabling this will assign the `WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1` tag. Defaults to `false`.

func (ApplicationFeatureTagOutput) Hide added in v5.6.0 

func (o ApplicationFeatureTagOutput) Hide() pulumi.BoolPtrOutput

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the `HideApp` tag. Defaults to `false`.

func (ApplicationFeatureTagOutput) ToApplicationFeatureTagOutput added in v5.6.0 

func (o ApplicationFeatureTagOutput) ToApplicationFeatureTagOutput() ApplicationFeatureTagOutput

func (ApplicationFeatureTagOutput) ToApplicationFeatureTagOutputWithContext added in v5.6.0 

func (o ApplicationFeatureTagOutput) ToApplicationFeatureTagOutputWithContext(ctx context.Context) ApplicationFeatureTagOutput

type ApplicationFederatedIdentityCredential added in v5.15.0 

type ApplicationFederatedIdentityCredential struct {
	pulumi.CustomResourceState

	// The object ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringOutput `pulumi:"applicationObjectId"`
	// List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
	Audiences pulumi.StringArrayOutput `pulumi:"audiences"`
	// A UUID used to uniquely identify this federated identity credential.
	CredentialId pulumi.StringOutput `pulumi:"credentialId"`
	// A description for the federated identity credential.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// A unique display name for the federated identity credential. Changing this forces a new resource to be created.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
	Issuer pulumi.StringOutput `pulumi:"issuer"`
	// The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
	Subject pulumi.StringOutput `pulumi:"subject"`
}

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewApplicationFederatedIdentityCredential(ctx, "exampleApplicationFederatedIdentityCredential", &azuread.ApplicationFederatedIdentityCredentialArgs{
			ApplicationObjectId: exampleApplication.ObjectId,
			DisplayName:         pulumi.String("my-repo-deploy"),
			Description:         pulumi.String("Deployments for my-repo"),
			Audiences: pulumi.StringArray{
				pulumi.String("api://AzureADTokenExchange"),
			},
			Issuer:  pulumi.String("https://token.actions.githubusercontent.com"),
			Subject: pulumi.String("repo:my-organization/my-repo:environment:prod"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Federated Identity Credentials can be imported using the object ID of the associated application and the ID of the federated identity credential, e.g.

```sh 

$ pulumi import azuread:index/applicationFederatedIdentityCredential:ApplicationFederatedIdentityCredential test 00000000-0000-0000-0000-000000000000/federatedIdentityCredential/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the application's object ID, the string "federatedIdentityCredential" and the credential ID in the format `{ObjectId}/federatedIdentityCredential/{CredentialId}`.

func GetApplicationFederatedIdentityCredential added in v5.15.0 

func GetApplicationFederatedIdentityCredential(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationFederatedIdentityCredentialState, opts ...pulumi.ResourceOption) (*ApplicationFederatedIdentityCredential, error)

GetApplicationFederatedIdentityCredential gets an existing ApplicationFederatedIdentityCredential resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationFederatedIdentityCredential added in v5.15.0 

func NewApplicationFederatedIdentityCredential(ctx *pulumi.Context,
	name string, args *ApplicationFederatedIdentityCredentialArgs, opts ...pulumi.ResourceOption) (*ApplicationFederatedIdentityCredential, error)

NewApplicationFederatedIdentityCredential registers a new resource with the given unique name, arguments, and options.

func (*ApplicationFederatedIdentityCredential) ElementType added in v5.15.0 

func (*ApplicationFederatedIdentityCredential) ElementType() reflect.Type

func (*ApplicationFederatedIdentityCredential) ToApplicationFederatedIdentityCredentialOutput added in v5.15.0 

func (i *ApplicationFederatedIdentityCredential) ToApplicationFederatedIdentityCredentialOutput() ApplicationFederatedIdentityCredentialOutput

func (*ApplicationFederatedIdentityCredential) ToApplicationFederatedIdentityCredentialOutputWithContext added in v5.15.0 

func (i *ApplicationFederatedIdentityCredential) ToApplicationFederatedIdentityCredentialOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialOutput

type ApplicationFederatedIdentityCredentialArgs added in v5.15.0 

type ApplicationFederatedIdentityCredentialArgs struct {
	// The object ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringInput
	// List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
	Audiences pulumi.StringArrayInput
	// A description for the federated identity credential.
	Description pulumi.StringPtrInput
	// A unique display name for the federated identity credential. Changing this forces a new resource to be created.
	DisplayName pulumi.StringInput
	// The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
	Issuer pulumi.StringInput
	// The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
	Subject pulumi.StringInput
}

The set of arguments for constructing a ApplicationFederatedIdentityCredential resource.

func (ApplicationFederatedIdentityCredentialArgs) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialArgs) ElementType() reflect.Type

type ApplicationFederatedIdentityCredentialArray added in v5.15.0 

type ApplicationFederatedIdentityCredentialArray []ApplicationFederatedIdentityCredentialInput

func (ApplicationFederatedIdentityCredentialArray) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialArray) ElementType() reflect.Type

func (ApplicationFederatedIdentityCredentialArray) ToApplicationFederatedIdentityCredentialArrayOutput added in v5.15.0 

func (i ApplicationFederatedIdentityCredentialArray) ToApplicationFederatedIdentityCredentialArrayOutput() ApplicationFederatedIdentityCredentialArrayOutput

func (ApplicationFederatedIdentityCredentialArray) ToApplicationFederatedIdentityCredentialArrayOutputWithContext added in v5.15.0 

func (i ApplicationFederatedIdentityCredentialArray) ToApplicationFederatedIdentityCredentialArrayOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialArrayOutput

type ApplicationFederatedIdentityCredentialArrayInput added in v5.15.0 

type ApplicationFederatedIdentityCredentialArrayInput interface {
	pulumi.Input

	ToApplicationFederatedIdentityCredentialArrayOutput() ApplicationFederatedIdentityCredentialArrayOutput
	ToApplicationFederatedIdentityCredentialArrayOutputWithContext(context.Context) ApplicationFederatedIdentityCredentialArrayOutput
}

ApplicationFederatedIdentityCredentialArrayInput is an input type that accepts ApplicationFederatedIdentityCredentialArray and ApplicationFederatedIdentityCredentialArrayOutput values. You can construct a concrete instance of `ApplicationFederatedIdentityCredentialArrayInput` via: 

ApplicationFederatedIdentityCredentialArray{ ApplicationFederatedIdentityCredentialArgs{...} }

type ApplicationFederatedIdentityCredentialArrayOutput added in v5.15.0 

type ApplicationFederatedIdentityCredentialArrayOutput struct{ *pulumi.OutputState }

func (ApplicationFederatedIdentityCredentialArrayOutput) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialArrayOutput) ElementType() reflect.Type

func (ApplicationFederatedIdentityCredentialArrayOutput) Index added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialArrayOutput) Index(i pulumi.IntInput) ApplicationFederatedIdentityCredentialOutput

func (ApplicationFederatedIdentityCredentialArrayOutput) ToApplicationFederatedIdentityCredentialArrayOutput added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialArrayOutput) ToApplicationFederatedIdentityCredentialArrayOutput() ApplicationFederatedIdentityCredentialArrayOutput

func (ApplicationFederatedIdentityCredentialArrayOutput) ToApplicationFederatedIdentityCredentialArrayOutputWithContext added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialArrayOutput) ToApplicationFederatedIdentityCredentialArrayOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialArrayOutput

type ApplicationFederatedIdentityCredentialInput added in v5.15.0 

type ApplicationFederatedIdentityCredentialInput interface {
	pulumi.Input

	ToApplicationFederatedIdentityCredentialOutput() ApplicationFederatedIdentityCredentialOutput
	ToApplicationFederatedIdentityCredentialOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialOutput
}

type ApplicationFederatedIdentityCredentialMap added in v5.15.0 

type ApplicationFederatedIdentityCredentialMap map[string]ApplicationFederatedIdentityCredentialInput

func (ApplicationFederatedIdentityCredentialMap) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialMap) ElementType() reflect.Type

func (ApplicationFederatedIdentityCredentialMap) ToApplicationFederatedIdentityCredentialMapOutput added in v5.15.0 

func (i ApplicationFederatedIdentityCredentialMap) ToApplicationFederatedIdentityCredentialMapOutput() ApplicationFederatedIdentityCredentialMapOutput

func (ApplicationFederatedIdentityCredentialMap) ToApplicationFederatedIdentityCredentialMapOutputWithContext added in v5.15.0 

func (i ApplicationFederatedIdentityCredentialMap) ToApplicationFederatedIdentityCredentialMapOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialMapOutput

type ApplicationFederatedIdentityCredentialMapInput added in v5.15.0 

type ApplicationFederatedIdentityCredentialMapInput interface {
	pulumi.Input

	ToApplicationFederatedIdentityCredentialMapOutput() ApplicationFederatedIdentityCredentialMapOutput
	ToApplicationFederatedIdentityCredentialMapOutputWithContext(context.Context) ApplicationFederatedIdentityCredentialMapOutput
}

ApplicationFederatedIdentityCredentialMapInput is an input type that accepts ApplicationFederatedIdentityCredentialMap and ApplicationFederatedIdentityCredentialMapOutput values. You can construct a concrete instance of `ApplicationFederatedIdentityCredentialMapInput` via: 

ApplicationFederatedIdentityCredentialMap{ "key": ApplicationFederatedIdentityCredentialArgs{...} }

type ApplicationFederatedIdentityCredentialMapOutput added in v5.15.0 

type ApplicationFederatedIdentityCredentialMapOutput struct{ *pulumi.OutputState }

func (ApplicationFederatedIdentityCredentialMapOutput) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialMapOutput) ElementType() reflect.Type

func (ApplicationFederatedIdentityCredentialMapOutput) MapIndex added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialMapOutput) MapIndex(k pulumi.StringInput) ApplicationFederatedIdentityCredentialOutput

func (ApplicationFederatedIdentityCredentialMapOutput) ToApplicationFederatedIdentityCredentialMapOutput added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialMapOutput) ToApplicationFederatedIdentityCredentialMapOutput() ApplicationFederatedIdentityCredentialMapOutput

func (ApplicationFederatedIdentityCredentialMapOutput) ToApplicationFederatedIdentityCredentialMapOutputWithContext added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialMapOutput) ToApplicationFederatedIdentityCredentialMapOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialMapOutput

type ApplicationFederatedIdentityCredentialOutput added in v5.15.0 

type ApplicationFederatedIdentityCredentialOutput struct{ *pulumi.OutputState }

func (ApplicationFederatedIdentityCredentialOutput) ApplicationObjectId added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) ApplicationObjectId() pulumi.StringOutput

The object ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.

func (ApplicationFederatedIdentityCredentialOutput) Audiences added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) Audiences() pulumi.StringArrayOutput

List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.

func (ApplicationFederatedIdentityCredentialOutput) CredentialId added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) CredentialId() pulumi.StringOutput

A UUID used to uniquely identify this federated identity credential.

func (ApplicationFederatedIdentityCredentialOutput) Description added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) Description() pulumi.StringPtrOutput

A description for the federated identity credential.

func (ApplicationFederatedIdentityCredentialOutput) DisplayName added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) DisplayName() pulumi.StringOutput

A unique display name for the federated identity credential. Changing this forces a new resource to be created.

func (ApplicationFederatedIdentityCredentialOutput) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialOutput) ElementType() reflect.Type

func (ApplicationFederatedIdentityCredentialOutput) Issuer added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) Issuer() pulumi.StringOutput

The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.

func (ApplicationFederatedIdentityCredentialOutput) Subject added in v5.22.0 

func (o ApplicationFederatedIdentityCredentialOutput) Subject() pulumi.StringOutput

The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.

func (ApplicationFederatedIdentityCredentialOutput) ToApplicationFederatedIdentityCredentialOutput added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialOutput) ToApplicationFederatedIdentityCredentialOutput() ApplicationFederatedIdentityCredentialOutput

func (ApplicationFederatedIdentityCredentialOutput) ToApplicationFederatedIdentityCredentialOutputWithContext added in v5.15.0 

func (o ApplicationFederatedIdentityCredentialOutput) ToApplicationFederatedIdentityCredentialOutputWithContext(ctx context.Context) ApplicationFederatedIdentityCredentialOutput

type ApplicationFederatedIdentityCredentialState added in v5.15.0 

type ApplicationFederatedIdentityCredentialState struct {
	// The object ID of the application for which this federated identity credential should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringPtrInput
	// List of audiences that can appear in the external token. This specifies what should be accepted in the `aud` claim of incoming tokens.
	Audiences pulumi.StringArrayInput
	// A UUID used to uniquely identify this federated identity credential.
	CredentialId pulumi.StringPtrInput
	// A description for the federated identity credential.
	Description pulumi.StringPtrInput
	// A unique display name for the federated identity credential. Changing this forces a new resource to be created.
	DisplayName pulumi.StringPtrInput
	// The URL of the external identity provider, which must match the issuer claim of the external token being exchanged. The combination of the values of issuer and subject must be unique on the app.
	Issuer pulumi.StringPtrInput
	// The identifier of the external software workload within the external identity provider. The combination of issuer and subject must be unique on the app.
	Subject pulumi.StringPtrInput
}

func (ApplicationFederatedIdentityCredentialState) ElementType added in v5.15.0 

func (ApplicationFederatedIdentityCredentialState) ElementType() reflect.Type

type ApplicationInput 

type ApplicationInput interface {
	pulumi.Input

	ToApplicationOutput() ApplicationOutput
	ToApplicationOutputWithContext(ctx context.Context) ApplicationOutput
}

type ApplicationMap 

type ApplicationMap map[string]ApplicationInput

func (ApplicationMap) ElementType 

func (ApplicationMap) ElementType() reflect.Type

func (ApplicationMap) ToApplicationMapOutput 

func (i ApplicationMap) ToApplicationMapOutput() ApplicationMapOutput

func (ApplicationMap) ToApplicationMapOutputWithContext 

func (i ApplicationMap) ToApplicationMapOutputWithContext(ctx context.Context) ApplicationMapOutput

type ApplicationMapInput 

type ApplicationMapInput interface {
	pulumi.Input

	ToApplicationMapOutput() ApplicationMapOutput
	ToApplicationMapOutputWithContext(context.Context) ApplicationMapOutput
}

ApplicationMapInput is an input type that accepts ApplicationMap and ApplicationMapOutput values. You can construct a concrete instance of `ApplicationMapInput` via: 

ApplicationMap{ "key": ApplicationArgs{...} }

type ApplicationMapOutput 

type ApplicationMapOutput struct{ *pulumi.OutputState }

func (ApplicationMapOutput) ElementType 

func (ApplicationMapOutput) ElementType() reflect.Type

func (ApplicationMapOutput) MapIndex 

func (o ApplicationMapOutput) MapIndex(k pulumi.StringInput) ApplicationOutput

func (ApplicationMapOutput) ToApplicationMapOutput 

func (o ApplicationMapOutput) ToApplicationMapOutput() ApplicationMapOutput

func (ApplicationMapOutput) ToApplicationMapOutputWithContext 

func (o ApplicationMapOutput) ToApplicationMapOutputWithContext(ctx context.Context) ApplicationMapOutput

type ApplicationOptionalClaims 

type ApplicationOptionalClaims struct {
	// One or more `accessToken` blocks as documented below.
	AccessTokens []ApplicationOptionalClaimsAccessToken `pulumi:"accessTokens"`
	// One or more `idToken` blocks as documented below.
	IdTokens []ApplicationOptionalClaimsIdToken `pulumi:"idTokens"`
	// One or more `saml2Token` blocks as documented below.
	Saml2Tokens []ApplicationOptionalClaimsSaml2Token `pulumi:"saml2Tokens"`
}

type ApplicationOptionalClaimsAccessToken 

type ApplicationOptionalClaimsAccessToken struct {
	// List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties []string `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential *bool `pulumi:"essential"`
	// The name of the optional claim.
	Name string `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source *string `pulumi:"source"`
}

type ApplicationOptionalClaimsAccessTokenArgs 

type ApplicationOptionalClaimsAccessTokenArgs struct {
	// List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties pulumi.StringArrayInput `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential pulumi.BoolPtrInput `pulumi:"essential"`
	// The name of the optional claim.
	Name pulumi.StringInput `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source pulumi.StringPtrInput `pulumi:"source"`
}

func (ApplicationOptionalClaimsAccessTokenArgs) ElementType 

func (ApplicationOptionalClaimsAccessTokenArgs) ElementType() reflect.Type

func (ApplicationOptionalClaimsAccessTokenArgs) ToApplicationOptionalClaimsAccessTokenOutput 

func (i ApplicationOptionalClaimsAccessTokenArgs) ToApplicationOptionalClaimsAccessTokenOutput() ApplicationOptionalClaimsAccessTokenOutput

func (ApplicationOptionalClaimsAccessTokenArgs) ToApplicationOptionalClaimsAccessTokenOutputWithContext 

func (i ApplicationOptionalClaimsAccessTokenArgs) ToApplicationOptionalClaimsAccessTokenOutputWithContext(ctx context.Context) ApplicationOptionalClaimsAccessTokenOutput

type ApplicationOptionalClaimsAccessTokenArray 

type ApplicationOptionalClaimsAccessTokenArray []ApplicationOptionalClaimsAccessTokenInput

func (ApplicationOptionalClaimsAccessTokenArray) ElementType 

func (ApplicationOptionalClaimsAccessTokenArray) ElementType() reflect.Type

func (ApplicationOptionalClaimsAccessTokenArray) ToApplicationOptionalClaimsAccessTokenArrayOutput 

func (i ApplicationOptionalClaimsAccessTokenArray) ToApplicationOptionalClaimsAccessTokenArrayOutput() ApplicationOptionalClaimsAccessTokenArrayOutput

func (ApplicationOptionalClaimsAccessTokenArray) ToApplicationOptionalClaimsAccessTokenArrayOutputWithContext 

func (i ApplicationOptionalClaimsAccessTokenArray) ToApplicationOptionalClaimsAccessTokenArrayOutputWithContext(ctx context.Context) ApplicationOptionalClaimsAccessTokenArrayOutput

type ApplicationOptionalClaimsAccessTokenArrayInput 

type ApplicationOptionalClaimsAccessTokenArrayInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsAccessTokenArrayOutput() ApplicationOptionalClaimsAccessTokenArrayOutput
	ToApplicationOptionalClaimsAccessTokenArrayOutputWithContext(context.Context) ApplicationOptionalClaimsAccessTokenArrayOutput
}

ApplicationOptionalClaimsAccessTokenArrayInput is an input type that accepts ApplicationOptionalClaimsAccessTokenArray and ApplicationOptionalClaimsAccessTokenArrayOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsAccessTokenArrayInput` via: 

ApplicationOptionalClaimsAccessTokenArray{ ApplicationOptionalClaimsAccessTokenArgs{...} }

type ApplicationOptionalClaimsAccessTokenArrayOutput 

type ApplicationOptionalClaimsAccessTokenArrayOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsAccessTokenArrayOutput) ElementType 

func (ApplicationOptionalClaimsAccessTokenArrayOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsAccessTokenArrayOutput) Index 

func (o ApplicationOptionalClaimsAccessTokenArrayOutput) Index(i pulumi.IntInput) ApplicationOptionalClaimsAccessTokenOutput

func (ApplicationOptionalClaimsAccessTokenArrayOutput) ToApplicationOptionalClaimsAccessTokenArrayOutput 

func (o ApplicationOptionalClaimsAccessTokenArrayOutput) ToApplicationOptionalClaimsAccessTokenArrayOutput() ApplicationOptionalClaimsAccessTokenArrayOutput

func (ApplicationOptionalClaimsAccessTokenArrayOutput) ToApplicationOptionalClaimsAccessTokenArrayOutputWithContext 

func (o ApplicationOptionalClaimsAccessTokenArrayOutput) ToApplicationOptionalClaimsAccessTokenArrayOutputWithContext(ctx context.Context) ApplicationOptionalClaimsAccessTokenArrayOutput

type ApplicationOptionalClaimsAccessTokenInput 

type ApplicationOptionalClaimsAccessTokenInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsAccessTokenOutput() ApplicationOptionalClaimsAccessTokenOutput
	ToApplicationOptionalClaimsAccessTokenOutputWithContext(context.Context) ApplicationOptionalClaimsAccessTokenOutput
}

ApplicationOptionalClaimsAccessTokenInput is an input type that accepts ApplicationOptionalClaimsAccessTokenArgs and ApplicationOptionalClaimsAccessTokenOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsAccessTokenInput` via: 

ApplicationOptionalClaimsAccessTokenArgs{...}

type ApplicationOptionalClaimsAccessTokenOutput 

type ApplicationOptionalClaimsAccessTokenOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsAccessTokenOutput) AdditionalProperties 

func (o ApplicationOptionalClaimsAccessTokenOutput) AdditionalProperties() pulumi.StringArrayOutput

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

func (ApplicationOptionalClaimsAccessTokenOutput) ElementType 

func (ApplicationOptionalClaimsAccessTokenOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsAccessTokenOutput) Essential 

func (o ApplicationOptionalClaimsAccessTokenOutput) Essential() pulumi.BoolPtrOutput

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

func (ApplicationOptionalClaimsAccessTokenOutput) Name 

func (o ApplicationOptionalClaimsAccessTokenOutput) Name() pulumi.StringOutput

The name of the optional claim.

func (ApplicationOptionalClaimsAccessTokenOutput) Source 

func (o ApplicationOptionalClaimsAccessTokenOutput) Source() pulumi.StringPtrOutput

The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.

func (ApplicationOptionalClaimsAccessTokenOutput) ToApplicationOptionalClaimsAccessTokenOutput 

func (o ApplicationOptionalClaimsAccessTokenOutput) ToApplicationOptionalClaimsAccessTokenOutput() ApplicationOptionalClaimsAccessTokenOutput

func (ApplicationOptionalClaimsAccessTokenOutput) ToApplicationOptionalClaimsAccessTokenOutputWithContext 

func (o ApplicationOptionalClaimsAccessTokenOutput) ToApplicationOptionalClaimsAccessTokenOutputWithContext(ctx context.Context) ApplicationOptionalClaimsAccessTokenOutput

type ApplicationOptionalClaimsArgs 

type ApplicationOptionalClaimsArgs struct {
	// One or more `accessToken` blocks as documented below.
	AccessTokens ApplicationOptionalClaimsAccessTokenArrayInput `pulumi:"accessTokens"`
	// One or more `idToken` blocks as documented below.
	IdTokens ApplicationOptionalClaimsIdTokenArrayInput `pulumi:"idTokens"`
	// One or more `saml2Token` blocks as documented below.
	Saml2Tokens ApplicationOptionalClaimsSaml2TokenArrayInput `pulumi:"saml2Tokens"`
}

func (ApplicationOptionalClaimsArgs) ElementType 

func (ApplicationOptionalClaimsArgs) ElementType() reflect.Type

func (ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsOutput 

func (i ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsOutput() ApplicationOptionalClaimsOutput

func (ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsOutputWithContext 

func (i ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsOutputWithContext(ctx context.Context) ApplicationOptionalClaimsOutput

func (ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsPtrOutput 

func (i ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsPtrOutput() ApplicationOptionalClaimsPtrOutput

func (ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsPtrOutputWithContext 

func (i ApplicationOptionalClaimsArgs) ToApplicationOptionalClaimsPtrOutputWithContext(ctx context.Context) ApplicationOptionalClaimsPtrOutput

type ApplicationOptionalClaimsIdToken 

type ApplicationOptionalClaimsIdToken struct {
	// List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties []string `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential *bool `pulumi:"essential"`
	// The name of the optional claim.
	Name string `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source *string `pulumi:"source"`
}

type ApplicationOptionalClaimsIdTokenArgs 

type ApplicationOptionalClaimsIdTokenArgs struct {
	// List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties pulumi.StringArrayInput `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential pulumi.BoolPtrInput `pulumi:"essential"`
	// The name of the optional claim.
	Name pulumi.StringInput `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source pulumi.StringPtrInput `pulumi:"source"`
}

func (ApplicationOptionalClaimsIdTokenArgs) ElementType 

func (ApplicationOptionalClaimsIdTokenArgs) ElementType() reflect.Type

func (ApplicationOptionalClaimsIdTokenArgs) ToApplicationOptionalClaimsIdTokenOutput 

func (i ApplicationOptionalClaimsIdTokenArgs) ToApplicationOptionalClaimsIdTokenOutput() ApplicationOptionalClaimsIdTokenOutput

func (ApplicationOptionalClaimsIdTokenArgs) ToApplicationOptionalClaimsIdTokenOutputWithContext 

func (i ApplicationOptionalClaimsIdTokenArgs) ToApplicationOptionalClaimsIdTokenOutputWithContext(ctx context.Context) ApplicationOptionalClaimsIdTokenOutput

type ApplicationOptionalClaimsIdTokenArray 

type ApplicationOptionalClaimsIdTokenArray []ApplicationOptionalClaimsIdTokenInput

func (ApplicationOptionalClaimsIdTokenArray) ElementType 

func (ApplicationOptionalClaimsIdTokenArray) ElementType() reflect.Type

func (ApplicationOptionalClaimsIdTokenArray) ToApplicationOptionalClaimsIdTokenArrayOutput 

func (i ApplicationOptionalClaimsIdTokenArray) ToApplicationOptionalClaimsIdTokenArrayOutput() ApplicationOptionalClaimsIdTokenArrayOutput

func (ApplicationOptionalClaimsIdTokenArray) ToApplicationOptionalClaimsIdTokenArrayOutputWithContext 

func (i ApplicationOptionalClaimsIdTokenArray) ToApplicationOptionalClaimsIdTokenArrayOutputWithContext(ctx context.Context) ApplicationOptionalClaimsIdTokenArrayOutput

type ApplicationOptionalClaimsIdTokenArrayInput 

type ApplicationOptionalClaimsIdTokenArrayInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsIdTokenArrayOutput() ApplicationOptionalClaimsIdTokenArrayOutput
	ToApplicationOptionalClaimsIdTokenArrayOutputWithContext(context.Context) ApplicationOptionalClaimsIdTokenArrayOutput
}

ApplicationOptionalClaimsIdTokenArrayInput is an input type that accepts ApplicationOptionalClaimsIdTokenArray and ApplicationOptionalClaimsIdTokenArrayOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsIdTokenArrayInput` via: 

ApplicationOptionalClaimsIdTokenArray{ ApplicationOptionalClaimsIdTokenArgs{...} }

type ApplicationOptionalClaimsIdTokenArrayOutput 

type ApplicationOptionalClaimsIdTokenArrayOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsIdTokenArrayOutput) ElementType 

func (ApplicationOptionalClaimsIdTokenArrayOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsIdTokenArrayOutput) Index 

func (o ApplicationOptionalClaimsIdTokenArrayOutput) Index(i pulumi.IntInput) ApplicationOptionalClaimsIdTokenOutput

func (ApplicationOptionalClaimsIdTokenArrayOutput) ToApplicationOptionalClaimsIdTokenArrayOutput 

func (o ApplicationOptionalClaimsIdTokenArrayOutput) ToApplicationOptionalClaimsIdTokenArrayOutput() ApplicationOptionalClaimsIdTokenArrayOutput

func (ApplicationOptionalClaimsIdTokenArrayOutput) ToApplicationOptionalClaimsIdTokenArrayOutputWithContext 

func (o ApplicationOptionalClaimsIdTokenArrayOutput) ToApplicationOptionalClaimsIdTokenArrayOutputWithContext(ctx context.Context) ApplicationOptionalClaimsIdTokenArrayOutput

type ApplicationOptionalClaimsIdTokenInput 

type ApplicationOptionalClaimsIdTokenInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsIdTokenOutput() ApplicationOptionalClaimsIdTokenOutput
	ToApplicationOptionalClaimsIdTokenOutputWithContext(context.Context) ApplicationOptionalClaimsIdTokenOutput
}

ApplicationOptionalClaimsIdTokenInput is an input type that accepts ApplicationOptionalClaimsIdTokenArgs and ApplicationOptionalClaimsIdTokenOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsIdTokenInput` via: 

ApplicationOptionalClaimsIdTokenArgs{...}

type ApplicationOptionalClaimsIdTokenOutput 

type ApplicationOptionalClaimsIdTokenOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsIdTokenOutput) AdditionalProperties 

func (o ApplicationOptionalClaimsIdTokenOutput) AdditionalProperties() pulumi.StringArrayOutput

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

func (ApplicationOptionalClaimsIdTokenOutput) ElementType 

func (ApplicationOptionalClaimsIdTokenOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsIdTokenOutput) Essential 

func (o ApplicationOptionalClaimsIdTokenOutput) Essential() pulumi.BoolPtrOutput

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

func (ApplicationOptionalClaimsIdTokenOutput) Name 

func (o ApplicationOptionalClaimsIdTokenOutput) Name() pulumi.StringOutput

The name of the optional claim.

func (ApplicationOptionalClaimsIdTokenOutput) Source 

func (o ApplicationOptionalClaimsIdTokenOutput) Source() pulumi.StringPtrOutput

The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.

func (ApplicationOptionalClaimsIdTokenOutput) ToApplicationOptionalClaimsIdTokenOutput 

func (o ApplicationOptionalClaimsIdTokenOutput) ToApplicationOptionalClaimsIdTokenOutput() ApplicationOptionalClaimsIdTokenOutput

func (ApplicationOptionalClaimsIdTokenOutput) ToApplicationOptionalClaimsIdTokenOutputWithContext 

func (o ApplicationOptionalClaimsIdTokenOutput) ToApplicationOptionalClaimsIdTokenOutputWithContext(ctx context.Context) ApplicationOptionalClaimsIdTokenOutput

type ApplicationOptionalClaimsInput 

type ApplicationOptionalClaimsInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsOutput() ApplicationOptionalClaimsOutput
	ToApplicationOptionalClaimsOutputWithContext(context.Context) ApplicationOptionalClaimsOutput
}

ApplicationOptionalClaimsInput is an input type that accepts ApplicationOptionalClaimsArgs and ApplicationOptionalClaimsOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsInput` via: 

ApplicationOptionalClaimsArgs{...}

type ApplicationOptionalClaimsOutput 

type ApplicationOptionalClaimsOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsOutput) AccessTokens 

func (o ApplicationOptionalClaimsOutput) AccessTokens() ApplicationOptionalClaimsAccessTokenArrayOutput

One or more `accessToken` blocks as documented below.

func (ApplicationOptionalClaimsOutput) ElementType 

func (ApplicationOptionalClaimsOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsOutput) IdTokens 

func (o ApplicationOptionalClaimsOutput) IdTokens() ApplicationOptionalClaimsIdTokenArrayOutput

One or more `idToken` blocks as documented below.

func (ApplicationOptionalClaimsOutput) Saml2Tokens 

func (o ApplicationOptionalClaimsOutput) Saml2Tokens() ApplicationOptionalClaimsSaml2TokenArrayOutput

One or more `saml2Token` blocks as documented below.

func (ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsOutput 

func (o ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsOutput() ApplicationOptionalClaimsOutput

func (ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsOutputWithContext 

func (o ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsOutputWithContext(ctx context.Context) ApplicationOptionalClaimsOutput

func (ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsPtrOutput 

func (o ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsPtrOutput() ApplicationOptionalClaimsPtrOutput

func (ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsPtrOutputWithContext 

func (o ApplicationOptionalClaimsOutput) ToApplicationOptionalClaimsPtrOutputWithContext(ctx context.Context) ApplicationOptionalClaimsPtrOutput

type ApplicationOptionalClaimsPtrInput 

type ApplicationOptionalClaimsPtrInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsPtrOutput() ApplicationOptionalClaimsPtrOutput
	ToApplicationOptionalClaimsPtrOutputWithContext(context.Context) ApplicationOptionalClaimsPtrOutput
}

ApplicationOptionalClaimsPtrInput is an input type that accepts ApplicationOptionalClaimsArgs, ApplicationOptionalClaimsPtr and ApplicationOptionalClaimsPtrOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsPtrInput` via: 

        ApplicationOptionalClaimsArgs{...}

or:

        nil

func ApplicationOptionalClaimsPtr 

func ApplicationOptionalClaimsPtr(v *ApplicationOptionalClaimsArgs) ApplicationOptionalClaimsPtrInput

type ApplicationOptionalClaimsPtrOutput 

type ApplicationOptionalClaimsPtrOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsPtrOutput) AccessTokens 

func (o ApplicationOptionalClaimsPtrOutput) AccessTokens() ApplicationOptionalClaimsAccessTokenArrayOutput

One or more `accessToken` blocks as documented below.

func (ApplicationOptionalClaimsPtrOutput) Elem 

func (o ApplicationOptionalClaimsPtrOutput) Elem() ApplicationOptionalClaimsOutput

func (ApplicationOptionalClaimsPtrOutput) ElementType 

func (ApplicationOptionalClaimsPtrOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsPtrOutput) IdTokens 

func (o ApplicationOptionalClaimsPtrOutput) IdTokens() ApplicationOptionalClaimsIdTokenArrayOutput

One or more `idToken` blocks as documented below.

func (ApplicationOptionalClaimsPtrOutput) Saml2Tokens 

func (o ApplicationOptionalClaimsPtrOutput) Saml2Tokens() ApplicationOptionalClaimsSaml2TokenArrayOutput

One or more `saml2Token` blocks as documented below.

func (ApplicationOptionalClaimsPtrOutput) ToApplicationOptionalClaimsPtrOutput 

func (o ApplicationOptionalClaimsPtrOutput) ToApplicationOptionalClaimsPtrOutput() ApplicationOptionalClaimsPtrOutput

func (ApplicationOptionalClaimsPtrOutput) ToApplicationOptionalClaimsPtrOutputWithContext 

func (o ApplicationOptionalClaimsPtrOutput) ToApplicationOptionalClaimsPtrOutputWithContext(ctx context.Context) ApplicationOptionalClaimsPtrOutput

type ApplicationOptionalClaimsSaml2Token 

type ApplicationOptionalClaimsSaml2Token struct {
	// List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties []string `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential *bool `pulumi:"essential"`
	// The name of the optional claim.
	Name string `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source *string `pulumi:"source"`
}

type ApplicationOptionalClaimsSaml2TokenArgs 

type ApplicationOptionalClaimsSaml2TokenArgs struct {
	// List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties pulumi.StringArrayInput `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential pulumi.BoolPtrInput `pulumi:"essential"`
	// The name of the optional claim.
	Name pulumi.StringInput `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source pulumi.StringPtrInput `pulumi:"source"`
}

func (ApplicationOptionalClaimsSaml2TokenArgs) ElementType 

func (ApplicationOptionalClaimsSaml2TokenArgs) ElementType() reflect.Type

func (ApplicationOptionalClaimsSaml2TokenArgs) ToApplicationOptionalClaimsSaml2TokenOutput 

func (i ApplicationOptionalClaimsSaml2TokenArgs) ToApplicationOptionalClaimsSaml2TokenOutput() ApplicationOptionalClaimsSaml2TokenOutput

func (ApplicationOptionalClaimsSaml2TokenArgs) ToApplicationOptionalClaimsSaml2TokenOutputWithContext 

func (i ApplicationOptionalClaimsSaml2TokenArgs) ToApplicationOptionalClaimsSaml2TokenOutputWithContext(ctx context.Context) ApplicationOptionalClaimsSaml2TokenOutput

type ApplicationOptionalClaimsSaml2TokenArray 

type ApplicationOptionalClaimsSaml2TokenArray []ApplicationOptionalClaimsSaml2TokenInput

func (ApplicationOptionalClaimsSaml2TokenArray) ElementType 

func (ApplicationOptionalClaimsSaml2TokenArray) ElementType() reflect.Type

func (ApplicationOptionalClaimsSaml2TokenArray) ToApplicationOptionalClaimsSaml2TokenArrayOutput 

func (i ApplicationOptionalClaimsSaml2TokenArray) ToApplicationOptionalClaimsSaml2TokenArrayOutput() ApplicationOptionalClaimsSaml2TokenArrayOutput

func (ApplicationOptionalClaimsSaml2TokenArray) ToApplicationOptionalClaimsSaml2TokenArrayOutputWithContext 

func (i ApplicationOptionalClaimsSaml2TokenArray) ToApplicationOptionalClaimsSaml2TokenArrayOutputWithContext(ctx context.Context) ApplicationOptionalClaimsSaml2TokenArrayOutput

type ApplicationOptionalClaimsSaml2TokenArrayInput 

type ApplicationOptionalClaimsSaml2TokenArrayInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsSaml2TokenArrayOutput() ApplicationOptionalClaimsSaml2TokenArrayOutput
	ToApplicationOptionalClaimsSaml2TokenArrayOutputWithContext(context.Context) ApplicationOptionalClaimsSaml2TokenArrayOutput
}

ApplicationOptionalClaimsSaml2TokenArrayInput is an input type that accepts ApplicationOptionalClaimsSaml2TokenArray and ApplicationOptionalClaimsSaml2TokenArrayOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsSaml2TokenArrayInput` via: 

ApplicationOptionalClaimsSaml2TokenArray{ ApplicationOptionalClaimsSaml2TokenArgs{...} }

type ApplicationOptionalClaimsSaml2TokenArrayOutput 

type ApplicationOptionalClaimsSaml2TokenArrayOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsSaml2TokenArrayOutput) ElementType 

func (ApplicationOptionalClaimsSaml2TokenArrayOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsSaml2TokenArrayOutput) Index 

func (o ApplicationOptionalClaimsSaml2TokenArrayOutput) Index(i pulumi.IntInput) ApplicationOptionalClaimsSaml2TokenOutput

func (ApplicationOptionalClaimsSaml2TokenArrayOutput) ToApplicationOptionalClaimsSaml2TokenArrayOutput 

func (o ApplicationOptionalClaimsSaml2TokenArrayOutput) ToApplicationOptionalClaimsSaml2TokenArrayOutput() ApplicationOptionalClaimsSaml2TokenArrayOutput

func (ApplicationOptionalClaimsSaml2TokenArrayOutput) ToApplicationOptionalClaimsSaml2TokenArrayOutputWithContext 

func (o ApplicationOptionalClaimsSaml2TokenArrayOutput) ToApplicationOptionalClaimsSaml2TokenArrayOutputWithContext(ctx context.Context) ApplicationOptionalClaimsSaml2TokenArrayOutput

type ApplicationOptionalClaimsSaml2TokenInput 

type ApplicationOptionalClaimsSaml2TokenInput interface {
	pulumi.Input

	ToApplicationOptionalClaimsSaml2TokenOutput() ApplicationOptionalClaimsSaml2TokenOutput
	ToApplicationOptionalClaimsSaml2TokenOutputWithContext(context.Context) ApplicationOptionalClaimsSaml2TokenOutput
}

ApplicationOptionalClaimsSaml2TokenInput is an input type that accepts ApplicationOptionalClaimsSaml2TokenArgs and ApplicationOptionalClaimsSaml2TokenOutput values. You can construct a concrete instance of `ApplicationOptionalClaimsSaml2TokenInput` via: 

ApplicationOptionalClaimsSaml2TokenArgs{...}

type ApplicationOptionalClaimsSaml2TokenOutput 

type ApplicationOptionalClaimsSaml2TokenOutput struct{ *pulumi.OutputState }

func (ApplicationOptionalClaimsSaml2TokenOutput) AdditionalProperties 

func (o ApplicationOptionalClaimsSaml2TokenOutput) AdditionalProperties() pulumi.StringArrayOutput

List of additional properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

func (ApplicationOptionalClaimsSaml2TokenOutput) ElementType 

func (ApplicationOptionalClaimsSaml2TokenOutput) ElementType() reflect.Type

func (ApplicationOptionalClaimsSaml2TokenOutput) Essential 

func (o ApplicationOptionalClaimsSaml2TokenOutput) Essential() pulumi.BoolPtrOutput

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

func (ApplicationOptionalClaimsSaml2TokenOutput) Name 

func (o ApplicationOptionalClaimsSaml2TokenOutput) Name() pulumi.StringOutput

The name of the optional claim.

func (ApplicationOptionalClaimsSaml2TokenOutput) Source 

func (o ApplicationOptionalClaimsSaml2TokenOutput) Source() pulumi.StringPtrOutput

The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.

func (ApplicationOptionalClaimsSaml2TokenOutput) ToApplicationOptionalClaimsSaml2TokenOutput 

func (o ApplicationOptionalClaimsSaml2TokenOutput) ToApplicationOptionalClaimsSaml2TokenOutput() ApplicationOptionalClaimsSaml2TokenOutput

func (ApplicationOptionalClaimsSaml2TokenOutput) ToApplicationOptionalClaimsSaml2TokenOutputWithContext 

func (o ApplicationOptionalClaimsSaml2TokenOutput) ToApplicationOptionalClaimsSaml2TokenOutputWithContext(ctx context.Context) ApplicationOptionalClaimsSaml2TokenOutput

type ApplicationOutput 

type ApplicationOutput struct{ *pulumi.OutputState }

func (ApplicationOutput) Api added in v5.22.0 

func (o ApplicationOutput) Api() ApplicationApiPtrOutput

An `api` block as documented below, which configures API related settings for this application.

func (ApplicationOutput) AppRoleIds added in v5.22.0 

func (o ApplicationOutput) AppRoleIds() pulumi.StringMapOutput

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

func (ApplicationOutput) AppRoles added in v5.22.0 

func (o ApplicationOutput) AppRoles() ApplicationAppRoleArrayOutput

A collection of `appRole` blocks as documented below. For more information see [official documentation on Application Roles](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).

func (ApplicationOutput) ApplicationId added in v5.22.0 

func (o ApplicationOutput) ApplicationId() pulumi.StringOutput

The Application ID (also called Client ID).

func (ApplicationOutput) DeviceOnlyAuthEnabled added in v5.22.0 

func (o ApplicationOutput) DeviceOnlyAuthEnabled() pulumi.BoolPtrOutput

Specifies whether this application supports device authentication without a user. Defaults to `false`.

func (ApplicationOutput) DisabledByMicrosoft added in v5.22.0 

func (o ApplicationOutput) DisabledByMicrosoft() pulumi.StringOutput

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. `DisabledDueToViolationOfServicesAgreement`

func (ApplicationOutput) DisplayName added in v5.22.0 

func (o ApplicationOutput) DisplayName() pulumi.StringOutput

The display name for the application.

func (ApplicationOutput) ElementType 

func (ApplicationOutput) ElementType() reflect.Type

func (ApplicationOutput) FallbackPublicClientEnabled added in v5.22.0 

func (o ApplicationOutput) FallbackPublicClientEnabled() pulumi.BoolPtrOutput

Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to `false`.

func (ApplicationOutput) FeatureTags added in v5.22.0 

func (o ApplicationOutput) FeatureTags() ApplicationFeatureTagArrayOutput

A `featureTags` block as described below. Cannot be used together with the `tags` property.

func (ApplicationOutput) GroupMembershipClaims added in v5.22.0 

func (o ApplicationOutput) GroupMembershipClaims() pulumi.StringArrayOutput

Configures the `groups` claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are `None`, `SecurityGroup`, `DirectoryRole`, `ApplicationGroup` or `All`.

func (ApplicationOutput) IdentifierUris added in v5.22.0 

func (o ApplicationOutput) IdentifierUris() pulumi.StringArrayOutput

A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

func (ApplicationOutput) LogoImage added in v5.22.0 

func (o ApplicationOutput) LogoImage() pulumi.StringPtrOutput

A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.

func (ApplicationOutput) LogoUrl added in v5.22.0 

func (o ApplicationOutput) LogoUrl() pulumi.StringOutput

CDN URL to the application's logo, as uploaded with the `logoImage` property.

func (ApplicationOutput) MarketingUrl added in v5.22.0 

func (o ApplicationOutput) MarketingUrl() pulumi.StringPtrOutput

URL of the application's marketing page.

func (ApplicationOutput) Oauth2PermissionScopeIds added in v5.22.0 

func (o ApplicationOutput) Oauth2PermissionScopeIds() pulumi.StringMapOutput

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

func (ApplicationOutput) Oauth2PostResponseRequired added in v5.22.0 

func (o ApplicationOutput) Oauth2PostResponseRequired() pulumi.BoolPtrOutput

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to `false`, which specifies that only GET requests are allowed.

func (ApplicationOutput) ObjectId added in v5.22.0 

func (o ApplicationOutput) ObjectId() pulumi.StringOutput

The application's object ID.

func (ApplicationOutput) OptionalClaims added in v5.22.0 

func (o ApplicationOutput) OptionalClaims() ApplicationOptionalClaimsPtrOutput

An `optionalClaims` block as documented below.

func (ApplicationOutput) Owners added in v5.22.0 

func (o ApplicationOutput) Owners() pulumi.StringArrayOutput

A set of object IDs of principals that will be granted ownership of the application. Supported object types are users or service principals. By default, no owners are assigned.

func (ApplicationOutput) PreventDuplicateNames added in v5.22.0 

func (o ApplicationOutput) PreventDuplicateNames() pulumi.BoolPtrOutput

If `true`, will return an error if an existing application is found with the same name. Defaults to `false`.

func (ApplicationOutput) PrivacyStatementUrl added in v5.22.0 

func (o ApplicationOutput) PrivacyStatementUrl() pulumi.StringPtrOutput

URL of the application's privacy statement.

func (ApplicationOutput) PublicClient added in v5.22.0 

func (o ApplicationOutput) PublicClient() ApplicationPublicClientPtrOutput

A `publicClient` block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.

func (ApplicationOutput) PublisherDomain added in v5.22.0 

func (o ApplicationOutput) PublisherDomain() pulumi.StringOutput

The verified publisher domain for the application.

func (ApplicationOutput) RequiredResourceAccesses added in v5.22.0 

func (o ApplicationOutput) RequiredResourceAccesses() ApplicationRequiredResourceAccessArrayOutput

A collection of `requiredResourceAccess` blocks as documented below.

func (ApplicationOutput) SignInAudience added in v5.22.0 

func (o ApplicationOutput) SignInAudience() pulumi.StringPtrOutput

The Microsoft account types that are supported for the current application. Must be one of `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`. Defaults to `AzureADMyOrg`.

func (ApplicationOutput) SinglePageApplication added in v5.22.0 

func (o ApplicationOutput) SinglePageApplication() ApplicationSinglePageApplicationPtrOutput

A `singlePageApplication` block as documented below, which configures single-page application (SPA) related settings for this application.

func (ApplicationOutput) SupportUrl added in v5.22.0 

func (o ApplicationOutput) SupportUrl() pulumi.StringPtrOutput

URL of the application's support page.

func (ApplicationOutput) Tags added in v5.22.0 

func (o ApplicationOutput) Tags() pulumi.StringArrayOutput

A set of tags to apply to the application. Cannot be used together with the `featureTags` block.

func (ApplicationOutput) TemplateId added in v5.22.0 

func (o ApplicationOutput) TemplateId() pulumi.StringOutput

Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.

func (ApplicationOutput) TermsOfServiceUrl added in v5.22.0 

func (o ApplicationOutput) TermsOfServiceUrl() pulumi.StringPtrOutput

URL of the application's terms of service statement.

func (ApplicationOutput) ToApplicationOutput 

func (o ApplicationOutput) ToApplicationOutput() ApplicationOutput

func (ApplicationOutput) ToApplicationOutputWithContext 

func (o ApplicationOutput) ToApplicationOutputWithContext(ctx context.Context) ApplicationOutput

func (ApplicationOutput) Web added in v5.22.0 

func (o ApplicationOutput) Web() ApplicationWebPtrOutput

A `web` block as documented below, which configures web related settings for this application.

type ApplicationPassword 

type ApplicationPassword struct {
	pulumi.CustomResourceState

	// The object ID of the application for which this password should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringOutput `pulumi:"applicationObjectId"`
	// A display name for the password. Changing this field forces a new resource to be created.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringOutput `pulumi:"endDate"`
	// A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrOutput `pulumi:"endDateRelative"`
	// A UUID used to uniquely identify this password credential.
	KeyId pulumi.StringOutput `pulumi:"keyId"`
	// A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
	RotateWhenChanged pulumi.StringMapOutput `pulumi:"rotateWhenChanged"`
	// The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringOutput `pulumi:"startDate"`
	// The password for this application, which is generated by Azure Active Directory.
	Value pulumi.StringOutput `pulumi:"value"`
}

## Import

This resource does not support importing.

func GetApplicationPassword 

func GetApplicationPassword(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationPasswordState, opts ...pulumi.ResourceOption) (*ApplicationPassword, error)

GetApplicationPassword gets an existing ApplicationPassword resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationPassword 

func NewApplicationPassword(ctx *pulumi.Context,
	name string, args *ApplicationPasswordArgs, opts ...pulumi.ResourceOption) (*ApplicationPassword, error)

NewApplicationPassword registers a new resource with the given unique name, arguments, and options.

func (*ApplicationPassword) ElementType 

func (*ApplicationPassword) ElementType() reflect.Type

func (*ApplicationPassword) ToApplicationPasswordOutput 

func (i *ApplicationPassword) ToApplicationPasswordOutput() ApplicationPasswordOutput

func (*ApplicationPassword) ToApplicationPasswordOutputWithContext 

func (i *ApplicationPassword) ToApplicationPasswordOutputWithContext(ctx context.Context) ApplicationPasswordOutput

type ApplicationPasswordArgs 

type ApplicationPasswordArgs struct {
	// The object ID of the application for which this password should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringInput
	// A display name for the password. Changing this field forces a new resource to be created.
	DisplayName pulumi.StringPtrInput
	// The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
	RotateWhenChanged pulumi.StringMapInput
	// The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
}

The set of arguments for constructing a ApplicationPassword resource.

func (ApplicationPasswordArgs) ElementType 

func (ApplicationPasswordArgs) ElementType() reflect.Type

type ApplicationPasswordArray 

type ApplicationPasswordArray []ApplicationPasswordInput

func (ApplicationPasswordArray) ElementType 

func (ApplicationPasswordArray) ElementType() reflect.Type

func (ApplicationPasswordArray) ToApplicationPasswordArrayOutput 

func (i ApplicationPasswordArray) ToApplicationPasswordArrayOutput() ApplicationPasswordArrayOutput

func (ApplicationPasswordArray) ToApplicationPasswordArrayOutputWithContext 

func (i ApplicationPasswordArray) ToApplicationPasswordArrayOutputWithContext(ctx context.Context) ApplicationPasswordArrayOutput

type ApplicationPasswordArrayInput 

type ApplicationPasswordArrayInput interface {
	pulumi.Input

	ToApplicationPasswordArrayOutput() ApplicationPasswordArrayOutput
	ToApplicationPasswordArrayOutputWithContext(context.Context) ApplicationPasswordArrayOutput
}

ApplicationPasswordArrayInput is an input type that accepts ApplicationPasswordArray and ApplicationPasswordArrayOutput values. You can construct a concrete instance of `ApplicationPasswordArrayInput` via: 

ApplicationPasswordArray{ ApplicationPasswordArgs{...} }

type ApplicationPasswordArrayOutput 

type ApplicationPasswordArrayOutput struct{ *pulumi.OutputState }

func (ApplicationPasswordArrayOutput) ElementType 

func (ApplicationPasswordArrayOutput) ElementType() reflect.Type

func (ApplicationPasswordArrayOutput) Index 

func (o ApplicationPasswordArrayOutput) Index(i pulumi.IntInput) ApplicationPasswordOutput

func (ApplicationPasswordArrayOutput) ToApplicationPasswordArrayOutput 

func (o ApplicationPasswordArrayOutput) ToApplicationPasswordArrayOutput() ApplicationPasswordArrayOutput

func (ApplicationPasswordArrayOutput) ToApplicationPasswordArrayOutputWithContext 

func (o ApplicationPasswordArrayOutput) ToApplicationPasswordArrayOutputWithContext(ctx context.Context) ApplicationPasswordArrayOutput

type ApplicationPasswordInput 

type ApplicationPasswordInput interface {
	pulumi.Input

	ToApplicationPasswordOutput() ApplicationPasswordOutput
	ToApplicationPasswordOutputWithContext(ctx context.Context) ApplicationPasswordOutput
}

type ApplicationPasswordMap 

type ApplicationPasswordMap map[string]ApplicationPasswordInput

func (ApplicationPasswordMap) ElementType 

func (ApplicationPasswordMap) ElementType() reflect.Type

func (ApplicationPasswordMap) ToApplicationPasswordMapOutput 

func (i ApplicationPasswordMap) ToApplicationPasswordMapOutput() ApplicationPasswordMapOutput

func (ApplicationPasswordMap) ToApplicationPasswordMapOutputWithContext 

func (i ApplicationPasswordMap) ToApplicationPasswordMapOutputWithContext(ctx context.Context) ApplicationPasswordMapOutput

type ApplicationPasswordMapInput 

type ApplicationPasswordMapInput interface {
	pulumi.Input

	ToApplicationPasswordMapOutput() ApplicationPasswordMapOutput
	ToApplicationPasswordMapOutputWithContext(context.Context) ApplicationPasswordMapOutput
}

ApplicationPasswordMapInput is an input type that accepts ApplicationPasswordMap and ApplicationPasswordMapOutput values. You can construct a concrete instance of `ApplicationPasswordMapInput` via: 

ApplicationPasswordMap{ "key": ApplicationPasswordArgs{...} }

type ApplicationPasswordMapOutput 

type ApplicationPasswordMapOutput struct{ *pulumi.OutputState }

func (ApplicationPasswordMapOutput) ElementType 

func (ApplicationPasswordMapOutput) ElementType() reflect.Type

func (ApplicationPasswordMapOutput) MapIndex 

func (o ApplicationPasswordMapOutput) MapIndex(k pulumi.StringInput) ApplicationPasswordOutput

func (ApplicationPasswordMapOutput) ToApplicationPasswordMapOutput 

func (o ApplicationPasswordMapOutput) ToApplicationPasswordMapOutput() ApplicationPasswordMapOutput

func (ApplicationPasswordMapOutput) ToApplicationPasswordMapOutputWithContext 

func (o ApplicationPasswordMapOutput) ToApplicationPasswordMapOutputWithContext(ctx context.Context) ApplicationPasswordMapOutput

type ApplicationPasswordOutput 

type ApplicationPasswordOutput struct{ *pulumi.OutputState }

func (ApplicationPasswordOutput) ApplicationObjectId added in v5.22.0 

func (o ApplicationPasswordOutput) ApplicationObjectId() pulumi.StringOutput

The object ID of the application for which this password should be created. Changing this field forces a new resource to be created.

func (ApplicationPasswordOutput) DisplayName added in v5.22.0 

func (o ApplicationPasswordOutput) DisplayName() pulumi.StringOutput

A display name for the password. Changing this field forces a new resource to be created.

func (ApplicationPasswordOutput) ElementType 

func (ApplicationPasswordOutput) ElementType() reflect.Type

func (ApplicationPasswordOutput) EndDate added in v5.22.0 

func (o ApplicationPasswordOutput) EndDate() pulumi.StringOutput

The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.

func (ApplicationPasswordOutput) EndDateRelative added in v5.22.0 

func (o ApplicationPasswordOutput) EndDateRelative() pulumi.StringPtrOutput

A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.

func (ApplicationPasswordOutput) KeyId added in v5.22.0 

func (o ApplicationPasswordOutput) KeyId() pulumi.StringOutput

A UUID used to uniquely identify this password credential.

func (ApplicationPasswordOutput) RotateWhenChanged added in v5.22.0 

func (o ApplicationPasswordOutput) RotateWhenChanged() pulumi.StringMapOutput

A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.

func (ApplicationPasswordOutput) StartDate added in v5.22.0 

func (o ApplicationPasswordOutput) StartDate() pulumi.StringOutput

The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.

func (ApplicationPasswordOutput) ToApplicationPasswordOutput 

func (o ApplicationPasswordOutput) ToApplicationPasswordOutput() ApplicationPasswordOutput

func (ApplicationPasswordOutput) ToApplicationPasswordOutputWithContext 

func (o ApplicationPasswordOutput) ToApplicationPasswordOutputWithContext(ctx context.Context) ApplicationPasswordOutput

func (ApplicationPasswordOutput) Value added in v5.22.0 

func (o ApplicationPasswordOutput) Value() pulumi.StringOutput

The password for this application, which is generated by Azure Active Directory.

type ApplicationPasswordState 

type ApplicationPasswordState struct {
	// The object ID of the application for which this password should be created. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringPtrInput
	// A display name for the password. Changing this field forces a new resource to be created.
	DisplayName pulumi.StringPtrInput
	// The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A UUID used to uniquely identify this password credential.
	KeyId pulumi.StringPtrInput
	// A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
	RotateWhenChanged pulumi.StringMapInput
	// The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
	// The password for this application, which is generated by Azure Active Directory.
	Value pulumi.StringPtrInput
}

func (ApplicationPasswordState) ElementType 

func (ApplicationPasswordState) ElementType() reflect.Type

type ApplicationPreAuthorized 

type ApplicationPreAuthorized struct {
	pulumi.CustomResourceState

	// The object ID of the application for which permissions are being authorized. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringOutput `pulumi:"applicationObjectId"`
	// The application ID of the pre-authorized application
	AuthorizedAppId pulumi.StringOutput `pulumi:"authorizedAppId"`
	// A set of permission scope IDs required by the authorized application.
	PermissionIds pulumi.StringArrayOutput `pulumi:"permissionIds"`
}

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		authorized, err := azuread.NewApplication(ctx, "authorized", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example-authorized-app"),
		})
		if err != nil {
			return err
		}
		authorizer, err := azuread.NewApplication(ctx, "authorizer", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example-authorizing-app"),
			Api: &ApplicationApiArgs{
				Oauth2PermissionScopes: ApplicationApiOauth2PermissionScopeArray{
					&ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Administer the application"),
						AdminConsentDisplayName: pulumi.String("Administer"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("ced9c4c3-c273-4f0f-ac71-a20377b90f9c"),
						Type:                    pulumi.String("Admin"),
						Value:                   pulumi.String("administer"),
					},
					&ApplicationApiOauth2PermissionScopeArgs{
						AdminConsentDescription: pulumi.String("Access the application"),
						AdminConsentDisplayName: pulumi.String("Access"),
						Enabled:                 pulumi.Bool(true),
						Id:                      pulumi.String("2d5e07ca-664d-4d9b-ad61-ec07fd215213"),
						Type:                    pulumi.String("User"),
						UserConsentDescription:  pulumi.String("Access the application"),
						UserConsentDisplayName:  pulumi.String("Access"),
						Value:                   pulumi.String("user_impersonation"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewApplicationPreAuthorized(ctx, "example", &azuread.ApplicationPreAuthorizedArgs{
			ApplicationObjectId: authorizer.ObjectId,
			AuthorizedAppId:     authorized.ApplicationId,
			PermissionIds: pulumi.StringArray{
				pulumi.String("ced9c4c3-c273-4f0f-ac71-a20377b90f9c"),
				pulumi.String("2d5e07ca-664d-4d9b-ad61-ec07fd215213"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Pre-authorized applications can be imported using the object ID of the authorizing application and the application ID of the application being authorized, e.g.

```sh 

$ pulumi import azuread:index/applicationPreAuthorized:ApplicationPreAuthorized example 00000000-0000-0000-0000-000000000000/preAuthorizedApplication/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the authorizing application's object ID, the string "preAuthorizedApplication" and the authorized application's application ID (client ID) in the format `{ObjectId}/preAuthorizedApplication/{ApplicationId}`.

func GetApplicationPreAuthorized 

func GetApplicationPreAuthorized(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ApplicationPreAuthorizedState, opts ...pulumi.ResourceOption) (*ApplicationPreAuthorized, error)

GetApplicationPreAuthorized gets an existing ApplicationPreAuthorized resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewApplicationPreAuthorized 

func NewApplicationPreAuthorized(ctx *pulumi.Context,
	name string, args *ApplicationPreAuthorizedArgs, opts ...pulumi.ResourceOption) (*ApplicationPreAuthorized, error)

NewApplicationPreAuthorized registers a new resource with the given unique name, arguments, and options.

func (*ApplicationPreAuthorized) ElementType 

func (*ApplicationPreAuthorized) ElementType() reflect.Type

func (*ApplicationPreAuthorized) ToApplicationPreAuthorizedOutput 

func (i *ApplicationPreAuthorized) ToApplicationPreAuthorizedOutput() ApplicationPreAuthorizedOutput

func (*ApplicationPreAuthorized) ToApplicationPreAuthorizedOutputWithContext 

func (i *ApplicationPreAuthorized) ToApplicationPreAuthorizedOutputWithContext(ctx context.Context) ApplicationPreAuthorizedOutput

type ApplicationPreAuthorizedArgs 

type ApplicationPreAuthorizedArgs struct {
	// The object ID of the application for which permissions are being authorized. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringInput
	// The application ID of the pre-authorized application
	AuthorizedAppId pulumi.StringInput
	// A set of permission scope IDs required by the authorized application.
	PermissionIds pulumi.StringArrayInput
}

The set of arguments for constructing a ApplicationPreAuthorized resource.

func (ApplicationPreAuthorizedArgs) ElementType 

func (ApplicationPreAuthorizedArgs) ElementType() reflect.Type

type ApplicationPreAuthorizedArray 

type ApplicationPreAuthorizedArray []ApplicationPreAuthorizedInput

func (ApplicationPreAuthorizedArray) ElementType 

func (ApplicationPreAuthorizedArray) ElementType() reflect.Type

func (ApplicationPreAuthorizedArray) ToApplicationPreAuthorizedArrayOutput 

func (i ApplicationPreAuthorizedArray) ToApplicationPreAuthorizedArrayOutput() ApplicationPreAuthorizedArrayOutput

func (ApplicationPreAuthorizedArray) ToApplicationPreAuthorizedArrayOutputWithContext 

func (i ApplicationPreAuthorizedArray) ToApplicationPreAuthorizedArrayOutputWithContext(ctx context.Context) ApplicationPreAuthorizedArrayOutput

type ApplicationPreAuthorizedArrayInput 

type ApplicationPreAuthorizedArrayInput interface {
	pulumi.Input

	ToApplicationPreAuthorizedArrayOutput() ApplicationPreAuthorizedArrayOutput
	ToApplicationPreAuthorizedArrayOutputWithContext(context.Context) ApplicationPreAuthorizedArrayOutput
}

ApplicationPreAuthorizedArrayInput is an input type that accepts ApplicationPreAuthorizedArray and ApplicationPreAuthorizedArrayOutput values. You can construct a concrete instance of `ApplicationPreAuthorizedArrayInput` via: 

ApplicationPreAuthorizedArray{ ApplicationPreAuthorizedArgs{...} }

type ApplicationPreAuthorizedArrayOutput 

type ApplicationPreAuthorizedArrayOutput struct{ *pulumi.OutputState }

func (ApplicationPreAuthorizedArrayOutput) ElementType 

func (ApplicationPreAuthorizedArrayOutput) ElementType() reflect.Type

func (ApplicationPreAuthorizedArrayOutput) Index 

func (o ApplicationPreAuthorizedArrayOutput) Index(i pulumi.IntInput) ApplicationPreAuthorizedOutput

func (ApplicationPreAuthorizedArrayOutput) ToApplicationPreAuthorizedArrayOutput 

func (o ApplicationPreAuthorizedArrayOutput) ToApplicationPreAuthorizedArrayOutput() ApplicationPreAuthorizedArrayOutput

func (ApplicationPreAuthorizedArrayOutput) ToApplicationPreAuthorizedArrayOutputWithContext 

func (o ApplicationPreAuthorizedArrayOutput) ToApplicationPreAuthorizedArrayOutputWithContext(ctx context.Context) ApplicationPreAuthorizedArrayOutput

type ApplicationPreAuthorizedInput 

type ApplicationPreAuthorizedInput interface {
	pulumi.Input

	ToApplicationPreAuthorizedOutput() ApplicationPreAuthorizedOutput
	ToApplicationPreAuthorizedOutputWithContext(ctx context.Context) ApplicationPreAuthorizedOutput
}

type ApplicationPreAuthorizedMap 

type ApplicationPreAuthorizedMap map[string]ApplicationPreAuthorizedInput

func (ApplicationPreAuthorizedMap) ElementType 

func (ApplicationPreAuthorizedMap) ElementType() reflect.Type

func (ApplicationPreAuthorizedMap) ToApplicationPreAuthorizedMapOutput 

func (i ApplicationPreAuthorizedMap) ToApplicationPreAuthorizedMapOutput() ApplicationPreAuthorizedMapOutput

func (ApplicationPreAuthorizedMap) ToApplicationPreAuthorizedMapOutputWithContext 

func (i ApplicationPreAuthorizedMap) ToApplicationPreAuthorizedMapOutputWithContext(ctx context.Context) ApplicationPreAuthorizedMapOutput

type ApplicationPreAuthorizedMapInput 

type ApplicationPreAuthorizedMapInput interface {
	pulumi.Input

	ToApplicationPreAuthorizedMapOutput() ApplicationPreAuthorizedMapOutput
	ToApplicationPreAuthorizedMapOutputWithContext(context.Context) ApplicationPreAuthorizedMapOutput
}

ApplicationPreAuthorizedMapInput is an input type that accepts ApplicationPreAuthorizedMap and ApplicationPreAuthorizedMapOutput values. You can construct a concrete instance of `ApplicationPreAuthorizedMapInput` via: 

ApplicationPreAuthorizedMap{ "key": ApplicationPreAuthorizedArgs{...} }

type ApplicationPreAuthorizedMapOutput 

type ApplicationPreAuthorizedMapOutput struct{ *pulumi.OutputState }

func (ApplicationPreAuthorizedMapOutput) ElementType 

func (ApplicationPreAuthorizedMapOutput) ElementType() reflect.Type

func (ApplicationPreAuthorizedMapOutput) MapIndex 

func (o ApplicationPreAuthorizedMapOutput) MapIndex(k pulumi.StringInput) ApplicationPreAuthorizedOutput

func (ApplicationPreAuthorizedMapOutput) ToApplicationPreAuthorizedMapOutput 

func (o ApplicationPreAuthorizedMapOutput) ToApplicationPreAuthorizedMapOutput() ApplicationPreAuthorizedMapOutput

func (ApplicationPreAuthorizedMapOutput) ToApplicationPreAuthorizedMapOutputWithContext 

func (o ApplicationPreAuthorizedMapOutput) ToApplicationPreAuthorizedMapOutputWithContext(ctx context.Context) ApplicationPreAuthorizedMapOutput

type ApplicationPreAuthorizedOutput 

type ApplicationPreAuthorizedOutput struct{ *pulumi.OutputState }

func (ApplicationPreAuthorizedOutput) ApplicationObjectId added in v5.22.0 

func (o ApplicationPreAuthorizedOutput) ApplicationObjectId() pulumi.StringOutput

The object ID of the application for which permissions are being authorized. Changing this field forces a new resource to be created.

func (ApplicationPreAuthorizedOutput) AuthorizedAppId added in v5.22.0 

func (o ApplicationPreAuthorizedOutput) AuthorizedAppId() pulumi.StringOutput

The application ID of the pre-authorized application

func (ApplicationPreAuthorizedOutput) ElementType 

func (ApplicationPreAuthorizedOutput) ElementType() reflect.Type

func (ApplicationPreAuthorizedOutput) PermissionIds added in v5.22.0 

func (o ApplicationPreAuthorizedOutput) PermissionIds() pulumi.StringArrayOutput

A set of permission scope IDs required by the authorized application.

func (ApplicationPreAuthorizedOutput) ToApplicationPreAuthorizedOutput 

func (o ApplicationPreAuthorizedOutput) ToApplicationPreAuthorizedOutput() ApplicationPreAuthorizedOutput

func (ApplicationPreAuthorizedOutput) ToApplicationPreAuthorizedOutputWithContext 

func (o ApplicationPreAuthorizedOutput) ToApplicationPreAuthorizedOutputWithContext(ctx context.Context) ApplicationPreAuthorizedOutput

type ApplicationPreAuthorizedState 

type ApplicationPreAuthorizedState struct {
	// The object ID of the application for which permissions are being authorized. Changing this field forces a new resource to be created.
	ApplicationObjectId pulumi.StringPtrInput
	// The application ID of the pre-authorized application
	AuthorizedAppId pulumi.StringPtrInput
	// A set of permission scope IDs required by the authorized application.
	PermissionIds pulumi.StringArrayInput
}

func (ApplicationPreAuthorizedState) ElementType 

func (ApplicationPreAuthorizedState) ElementType() reflect.Type

type ApplicationPublicClient 

type ApplicationPublicClient struct {
	// A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` or `ms-appx-web` URL.
	RedirectUris []string `pulumi:"redirectUris"`
}

type ApplicationPublicClientArgs 

type ApplicationPublicClientArgs struct {
	// A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` or `ms-appx-web` URL.
	RedirectUris pulumi.StringArrayInput `pulumi:"redirectUris"`
}

func (ApplicationPublicClientArgs) ElementType 

func (ApplicationPublicClientArgs) ElementType() reflect.Type

func (ApplicationPublicClientArgs) ToApplicationPublicClientOutput 

func (i ApplicationPublicClientArgs) ToApplicationPublicClientOutput() ApplicationPublicClientOutput

func (ApplicationPublicClientArgs) ToApplicationPublicClientOutputWithContext 

func (i ApplicationPublicClientArgs) ToApplicationPublicClientOutputWithContext(ctx context.Context) ApplicationPublicClientOutput

func (ApplicationPublicClientArgs) ToApplicationPublicClientPtrOutput 

func (i ApplicationPublicClientArgs) ToApplicationPublicClientPtrOutput() ApplicationPublicClientPtrOutput

func (ApplicationPublicClientArgs) ToApplicationPublicClientPtrOutputWithContext 

func (i ApplicationPublicClientArgs) ToApplicationPublicClientPtrOutputWithContext(ctx context.Context) ApplicationPublicClientPtrOutput

type ApplicationPublicClientInput 

type ApplicationPublicClientInput interface {
	pulumi.Input

	ToApplicationPublicClientOutput() ApplicationPublicClientOutput
	ToApplicationPublicClientOutputWithContext(context.Context) ApplicationPublicClientOutput
}

ApplicationPublicClientInput is an input type that accepts ApplicationPublicClientArgs and ApplicationPublicClientOutput values. You can construct a concrete instance of `ApplicationPublicClientInput` via: 

ApplicationPublicClientArgs{...}

type ApplicationPublicClientOutput 

type ApplicationPublicClientOutput struct{ *pulumi.OutputState }

func (ApplicationPublicClientOutput) ElementType 

func (ApplicationPublicClientOutput) ElementType() reflect.Type

func (ApplicationPublicClientOutput) RedirectUris 

func (o ApplicationPublicClientOutput) RedirectUris() pulumi.StringArrayOutput

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` or `ms-appx-web` URL.

func (ApplicationPublicClientOutput) ToApplicationPublicClientOutput 

func (o ApplicationPublicClientOutput) ToApplicationPublicClientOutput() ApplicationPublicClientOutput

func (ApplicationPublicClientOutput) ToApplicationPublicClientOutputWithContext 

func (o ApplicationPublicClientOutput) ToApplicationPublicClientOutputWithContext(ctx context.Context) ApplicationPublicClientOutput

func (ApplicationPublicClientOutput) ToApplicationPublicClientPtrOutput 

func (o ApplicationPublicClientOutput) ToApplicationPublicClientPtrOutput() ApplicationPublicClientPtrOutput

func (ApplicationPublicClientOutput) ToApplicationPublicClientPtrOutputWithContext 

func (o ApplicationPublicClientOutput) ToApplicationPublicClientPtrOutputWithContext(ctx context.Context) ApplicationPublicClientPtrOutput

type ApplicationPublicClientPtrInput 

type ApplicationPublicClientPtrInput interface {
	pulumi.Input

	ToApplicationPublicClientPtrOutput() ApplicationPublicClientPtrOutput
	ToApplicationPublicClientPtrOutputWithContext(context.Context) ApplicationPublicClientPtrOutput
}

ApplicationPublicClientPtrInput is an input type that accepts ApplicationPublicClientArgs, ApplicationPublicClientPtr and ApplicationPublicClientPtrOutput values. You can construct a concrete instance of `ApplicationPublicClientPtrInput` via: 

        ApplicationPublicClientArgs{...}

or:

        nil

func ApplicationPublicClientPtr 

func ApplicationPublicClientPtr(v *ApplicationPublicClientArgs) ApplicationPublicClientPtrInput

type ApplicationPublicClientPtrOutput 

type ApplicationPublicClientPtrOutput struct{ *pulumi.OutputState }

func (ApplicationPublicClientPtrOutput) Elem 

func (o ApplicationPublicClientPtrOutput) Elem() ApplicationPublicClientOutput

func (ApplicationPublicClientPtrOutput) ElementType 

func (ApplicationPublicClientPtrOutput) ElementType() reflect.Type

func (ApplicationPublicClientPtrOutput) RedirectUris 

func (o ApplicationPublicClientPtrOutput) RedirectUris() pulumi.StringArrayOutput

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` or `ms-appx-web` URL.

func (ApplicationPublicClientPtrOutput) ToApplicationPublicClientPtrOutput 

func (o ApplicationPublicClientPtrOutput) ToApplicationPublicClientPtrOutput() ApplicationPublicClientPtrOutput

func (ApplicationPublicClientPtrOutput) ToApplicationPublicClientPtrOutputWithContext 

func (o ApplicationPublicClientPtrOutput) ToApplicationPublicClientPtrOutputWithContext(ctx context.Context) ApplicationPublicClientPtrOutput

type ApplicationRequiredResourceAccess 

type ApplicationRequiredResourceAccess struct {
	// A collection of `resourceAccess` blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
	ResourceAccesses []ApplicationRequiredResourceAccessResourceAccess `pulumi:"resourceAccesses"`
	// The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
	ResourceAppId string `pulumi:"resourceAppId"`
}

type ApplicationRequiredResourceAccessArgs 

type ApplicationRequiredResourceAccessArgs struct {
	// A collection of `resourceAccess` blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
	ResourceAccesses ApplicationRequiredResourceAccessResourceAccessArrayInput `pulumi:"resourceAccesses"`
	// The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.
	ResourceAppId pulumi.StringInput `pulumi:"resourceAppId"`
}

func (ApplicationRequiredResourceAccessArgs) ElementType 

func (ApplicationRequiredResourceAccessArgs) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessArgs) ToApplicationRequiredResourceAccessOutput 

func (i ApplicationRequiredResourceAccessArgs) ToApplicationRequiredResourceAccessOutput() ApplicationRequiredResourceAccessOutput

func (ApplicationRequiredResourceAccessArgs) ToApplicationRequiredResourceAccessOutputWithContext 

func (i ApplicationRequiredResourceAccessArgs) ToApplicationRequiredResourceAccessOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessOutput

type ApplicationRequiredResourceAccessArray 

type ApplicationRequiredResourceAccessArray []ApplicationRequiredResourceAccessInput

func (ApplicationRequiredResourceAccessArray) ElementType 

func (ApplicationRequiredResourceAccessArray) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessArray) ToApplicationRequiredResourceAccessArrayOutput 

func (i ApplicationRequiredResourceAccessArray) ToApplicationRequiredResourceAccessArrayOutput() ApplicationRequiredResourceAccessArrayOutput

func (ApplicationRequiredResourceAccessArray) ToApplicationRequiredResourceAccessArrayOutputWithContext 

func (i ApplicationRequiredResourceAccessArray) ToApplicationRequiredResourceAccessArrayOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessArrayOutput

type ApplicationRequiredResourceAccessArrayInput 

type ApplicationRequiredResourceAccessArrayInput interface {
	pulumi.Input

	ToApplicationRequiredResourceAccessArrayOutput() ApplicationRequiredResourceAccessArrayOutput
	ToApplicationRequiredResourceAccessArrayOutputWithContext(context.Context) ApplicationRequiredResourceAccessArrayOutput
}

ApplicationRequiredResourceAccessArrayInput is an input type that accepts ApplicationRequiredResourceAccessArray and ApplicationRequiredResourceAccessArrayOutput values. You can construct a concrete instance of `ApplicationRequiredResourceAccessArrayInput` via: 

ApplicationRequiredResourceAccessArray{ ApplicationRequiredResourceAccessArgs{...} }

type ApplicationRequiredResourceAccessArrayOutput 

type ApplicationRequiredResourceAccessArrayOutput struct{ *pulumi.OutputState }

func (ApplicationRequiredResourceAccessArrayOutput) ElementType 

func (ApplicationRequiredResourceAccessArrayOutput) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessArrayOutput) Index 

func (o ApplicationRequiredResourceAccessArrayOutput) Index(i pulumi.IntInput) ApplicationRequiredResourceAccessOutput

func (ApplicationRequiredResourceAccessArrayOutput) ToApplicationRequiredResourceAccessArrayOutput 

func (o ApplicationRequiredResourceAccessArrayOutput) ToApplicationRequiredResourceAccessArrayOutput() ApplicationRequiredResourceAccessArrayOutput

func (ApplicationRequiredResourceAccessArrayOutput) ToApplicationRequiredResourceAccessArrayOutputWithContext 

func (o ApplicationRequiredResourceAccessArrayOutput) ToApplicationRequiredResourceAccessArrayOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessArrayOutput

type ApplicationRequiredResourceAccessInput 

type ApplicationRequiredResourceAccessInput interface {
	pulumi.Input

	ToApplicationRequiredResourceAccessOutput() ApplicationRequiredResourceAccessOutput
	ToApplicationRequiredResourceAccessOutputWithContext(context.Context) ApplicationRequiredResourceAccessOutput
}

ApplicationRequiredResourceAccessInput is an input type that accepts ApplicationRequiredResourceAccessArgs and ApplicationRequiredResourceAccessOutput values. You can construct a concrete instance of `ApplicationRequiredResourceAccessInput` via: 

ApplicationRequiredResourceAccessArgs{...}

type ApplicationRequiredResourceAccessOutput 

type ApplicationRequiredResourceAccessOutput struct{ *pulumi.OutputState }

func (ApplicationRequiredResourceAccessOutput) ElementType 

func (ApplicationRequiredResourceAccessOutput) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessOutput) ResourceAccesses 

func (o ApplicationRequiredResourceAccessOutput) ResourceAccesses() ApplicationRequiredResourceAccessResourceAccessArrayOutput

A collection of `resourceAccess` blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

func (ApplicationRequiredResourceAccessOutput) ResourceAppId 

func (o ApplicationRequiredResourceAccessOutput) ResourceAppId() pulumi.StringOutput

The unique identifier for the resource that the application requires access to. This should be the Application ID of the target application.

func (ApplicationRequiredResourceAccessOutput) ToApplicationRequiredResourceAccessOutput 

func (o ApplicationRequiredResourceAccessOutput) ToApplicationRequiredResourceAccessOutput() ApplicationRequiredResourceAccessOutput

func (ApplicationRequiredResourceAccessOutput) ToApplicationRequiredResourceAccessOutputWithContext 

func (o ApplicationRequiredResourceAccessOutput) ToApplicationRequiredResourceAccessOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessOutput

type ApplicationRequiredResourceAccessResourceAccess 

type ApplicationRequiredResourceAccessResourceAccess struct {
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id string `pulumi:"id"`
	// Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.
	Type string `pulumi:"type"`
}

type ApplicationRequiredResourceAccessResourceAccessArgs 

type ApplicationRequiredResourceAccessResourceAccessArgs struct {
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id pulumi.StringInput `pulumi:"id"`
	// Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.
	Type pulumi.StringInput `pulumi:"type"`
}

func (ApplicationRequiredResourceAccessResourceAccessArgs) ElementType 

func (ApplicationRequiredResourceAccessResourceAccessArgs) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessResourceAccessArgs) ToApplicationRequiredResourceAccessResourceAccessOutput 

func (i ApplicationRequiredResourceAccessResourceAccessArgs) ToApplicationRequiredResourceAccessResourceAccessOutput() ApplicationRequiredResourceAccessResourceAccessOutput

func (ApplicationRequiredResourceAccessResourceAccessArgs) ToApplicationRequiredResourceAccessResourceAccessOutputWithContext 

func (i ApplicationRequiredResourceAccessResourceAccessArgs) ToApplicationRequiredResourceAccessResourceAccessOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessResourceAccessOutput

type ApplicationRequiredResourceAccessResourceAccessArray 

type ApplicationRequiredResourceAccessResourceAccessArray []ApplicationRequiredResourceAccessResourceAccessInput

func (ApplicationRequiredResourceAccessResourceAccessArray) ElementType 

func (ApplicationRequiredResourceAccessResourceAccessArray) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessResourceAccessArray) ToApplicationRequiredResourceAccessResourceAccessArrayOutput 

func (i ApplicationRequiredResourceAccessResourceAccessArray) ToApplicationRequiredResourceAccessResourceAccessArrayOutput() ApplicationRequiredResourceAccessResourceAccessArrayOutput

func (ApplicationRequiredResourceAccessResourceAccessArray) ToApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext 

func (i ApplicationRequiredResourceAccessResourceAccessArray) ToApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessResourceAccessArrayOutput

type ApplicationRequiredResourceAccessResourceAccessArrayInput 

type ApplicationRequiredResourceAccessResourceAccessArrayInput interface {
	pulumi.Input

	ToApplicationRequiredResourceAccessResourceAccessArrayOutput() ApplicationRequiredResourceAccessResourceAccessArrayOutput
	ToApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext(context.Context) ApplicationRequiredResourceAccessResourceAccessArrayOutput
}

ApplicationRequiredResourceAccessResourceAccessArrayInput is an input type that accepts ApplicationRequiredResourceAccessResourceAccessArray and ApplicationRequiredResourceAccessResourceAccessArrayOutput values. You can construct a concrete instance of `ApplicationRequiredResourceAccessResourceAccessArrayInput` via: 

ApplicationRequiredResourceAccessResourceAccessArray{ ApplicationRequiredResourceAccessResourceAccessArgs{...} }

type ApplicationRequiredResourceAccessResourceAccessArrayOutput 

type ApplicationRequiredResourceAccessResourceAccessArrayOutput struct{ *pulumi.OutputState }

func (ApplicationRequiredResourceAccessResourceAccessArrayOutput) ElementType 

func (ApplicationRequiredResourceAccessResourceAccessArrayOutput) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessResourceAccessArrayOutput) Index 

func (o ApplicationRequiredResourceAccessResourceAccessArrayOutput) Index(i pulumi.IntInput) ApplicationRequiredResourceAccessResourceAccessOutput

func (ApplicationRequiredResourceAccessResourceAccessArrayOutput) ToApplicationRequiredResourceAccessResourceAccessArrayOutput 

func (o ApplicationRequiredResourceAccessResourceAccessArrayOutput) ToApplicationRequiredResourceAccessResourceAccessArrayOutput() ApplicationRequiredResourceAccessResourceAccessArrayOutput

func (ApplicationRequiredResourceAccessResourceAccessArrayOutput) ToApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext 

func (o ApplicationRequiredResourceAccessResourceAccessArrayOutput) ToApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessResourceAccessArrayOutput

type ApplicationRequiredResourceAccessResourceAccessInput 

type ApplicationRequiredResourceAccessResourceAccessInput interface {
	pulumi.Input

	ToApplicationRequiredResourceAccessResourceAccessOutput() ApplicationRequiredResourceAccessResourceAccessOutput
	ToApplicationRequiredResourceAccessResourceAccessOutputWithContext(context.Context) ApplicationRequiredResourceAccessResourceAccessOutput
}

ApplicationRequiredResourceAccessResourceAccessInput is an input type that accepts ApplicationRequiredResourceAccessResourceAccessArgs and ApplicationRequiredResourceAccessResourceAccessOutput values. You can construct a concrete instance of `ApplicationRequiredResourceAccessResourceAccessInput` via: 

ApplicationRequiredResourceAccessResourceAccessArgs{...}

type ApplicationRequiredResourceAccessResourceAccessOutput 

type ApplicationRequiredResourceAccessResourceAccessOutput struct{ *pulumi.OutputState }

func (ApplicationRequiredResourceAccessResourceAccessOutput) ElementType 

func (ApplicationRequiredResourceAccessResourceAccessOutput) ElementType() reflect.Type

func (ApplicationRequiredResourceAccessResourceAccessOutput) Id 

func (o ApplicationRequiredResourceAccessResourceAccessOutput) Id() pulumi.StringOutput

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

func (ApplicationRequiredResourceAccessResourceAccessOutput) ToApplicationRequiredResourceAccessResourceAccessOutput 

func (o ApplicationRequiredResourceAccessResourceAccessOutput) ToApplicationRequiredResourceAccessResourceAccessOutput() ApplicationRequiredResourceAccessResourceAccessOutput

func (ApplicationRequiredResourceAccessResourceAccessOutput) ToApplicationRequiredResourceAccessResourceAccessOutputWithContext 

func (o ApplicationRequiredResourceAccessResourceAccessOutput) ToApplicationRequiredResourceAccessResourceAccessOutputWithContext(ctx context.Context) ApplicationRequiredResourceAccessResourceAccessOutput

func (ApplicationRequiredResourceAccessResourceAccessOutput) Type 

func (o ApplicationRequiredResourceAccessResourceAccessOutput) Type() pulumi.StringOutput

Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.

type ApplicationSinglePageApplication 

type ApplicationSinglePageApplication struct {
	// A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` URL.
	RedirectUris []string `pulumi:"redirectUris"`
}

type ApplicationSinglePageApplicationArgs 

type ApplicationSinglePageApplicationArgs struct {
	// A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` URL.
	RedirectUris pulumi.StringArrayInput `pulumi:"redirectUris"`
}

func (ApplicationSinglePageApplicationArgs) ElementType 

func (ApplicationSinglePageApplicationArgs) ElementType() reflect.Type

func (ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationOutput 

func (i ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationOutput() ApplicationSinglePageApplicationOutput

func (ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationOutputWithContext 

func (i ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationOutputWithContext(ctx context.Context) ApplicationSinglePageApplicationOutput

func (ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationPtrOutput 

func (i ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationPtrOutput() ApplicationSinglePageApplicationPtrOutput

func (ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationPtrOutputWithContext 

func (i ApplicationSinglePageApplicationArgs) ToApplicationSinglePageApplicationPtrOutputWithContext(ctx context.Context) ApplicationSinglePageApplicationPtrOutput

type ApplicationSinglePageApplicationInput 

type ApplicationSinglePageApplicationInput interface {
	pulumi.Input

	ToApplicationSinglePageApplicationOutput() ApplicationSinglePageApplicationOutput
	ToApplicationSinglePageApplicationOutputWithContext(context.Context) ApplicationSinglePageApplicationOutput
}

ApplicationSinglePageApplicationInput is an input type that accepts ApplicationSinglePageApplicationArgs and ApplicationSinglePageApplicationOutput values. You can construct a concrete instance of `ApplicationSinglePageApplicationInput` via: 

ApplicationSinglePageApplicationArgs{...}

type ApplicationSinglePageApplicationOutput 

type ApplicationSinglePageApplicationOutput struct{ *pulumi.OutputState }

func (ApplicationSinglePageApplicationOutput) ElementType 

func (ApplicationSinglePageApplicationOutput) ElementType() reflect.Type

func (ApplicationSinglePageApplicationOutput) RedirectUris 

func (o ApplicationSinglePageApplicationOutput) RedirectUris() pulumi.StringArrayOutput

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` URL.

func (ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationOutput 

func (o ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationOutput() ApplicationSinglePageApplicationOutput

func (ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationOutputWithContext 

func (o ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationOutputWithContext(ctx context.Context) ApplicationSinglePageApplicationOutput

func (ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationPtrOutput 

func (o ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationPtrOutput() ApplicationSinglePageApplicationPtrOutput

func (ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationPtrOutputWithContext 

func (o ApplicationSinglePageApplicationOutput) ToApplicationSinglePageApplicationPtrOutputWithContext(ctx context.Context) ApplicationSinglePageApplicationPtrOutput

type ApplicationSinglePageApplicationPtrInput 

type ApplicationSinglePageApplicationPtrInput interface {
	pulumi.Input

	ToApplicationSinglePageApplicationPtrOutput() ApplicationSinglePageApplicationPtrOutput
	ToApplicationSinglePageApplicationPtrOutputWithContext(context.Context) ApplicationSinglePageApplicationPtrOutput
}

ApplicationSinglePageApplicationPtrInput is an input type that accepts ApplicationSinglePageApplicationArgs, ApplicationSinglePageApplicationPtr and ApplicationSinglePageApplicationPtrOutput values. You can construct a concrete instance of `ApplicationSinglePageApplicationPtrInput` via: 

        ApplicationSinglePageApplicationArgs{...}

or:

        nil

func ApplicationSinglePageApplicationPtr 

func ApplicationSinglePageApplicationPtr(v *ApplicationSinglePageApplicationArgs) ApplicationSinglePageApplicationPtrInput

type ApplicationSinglePageApplicationPtrOutput 

type ApplicationSinglePageApplicationPtrOutput struct{ *pulumi.OutputState }

func (ApplicationSinglePageApplicationPtrOutput) Elem 

func (o ApplicationSinglePageApplicationPtrOutput) Elem() ApplicationSinglePageApplicationOutput

func (ApplicationSinglePageApplicationPtrOutput) ElementType 

func (ApplicationSinglePageApplicationPtrOutput) ElementType() reflect.Type

func (ApplicationSinglePageApplicationPtrOutput) RedirectUris 

func (o ApplicationSinglePageApplicationPtrOutput) RedirectUris() pulumi.StringArrayOutput

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `https` URL.

func (ApplicationSinglePageApplicationPtrOutput) ToApplicationSinglePageApplicationPtrOutput 

func (o ApplicationSinglePageApplicationPtrOutput) ToApplicationSinglePageApplicationPtrOutput() ApplicationSinglePageApplicationPtrOutput

func (ApplicationSinglePageApplicationPtrOutput) ToApplicationSinglePageApplicationPtrOutputWithContext 

func (o ApplicationSinglePageApplicationPtrOutput) ToApplicationSinglePageApplicationPtrOutputWithContext(ctx context.Context) ApplicationSinglePageApplicationPtrOutput

type ApplicationState 

type ApplicationState struct {
	// An `api` block as documented below, which configures API related settings for this application.
	Api ApplicationApiPtrInput
	// A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
	AppRoleIds pulumi.StringMapInput
	// A collection of `appRole` blocks as documented below. For more information see [official documentation on Application Roles](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles ApplicationAppRoleArrayInput
	// The Application ID (also called Client ID).
	ApplicationId pulumi.StringPtrInput
	// Specifies whether this application supports device authentication without a user. Defaults to `false`.
	DeviceOnlyAuthEnabled pulumi.BoolPtrInput
	// Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. `DisabledDueToViolationOfServicesAgreement`
	DisabledByMicrosoft pulumi.StringPtrInput
	// The display name for the application.
	DisplayName pulumi.StringPtrInput
	// Specifies whether the application is a public client. Appropriate for apps using token grant flows that don't use a redirect URI. Defaults to `false`.
	FallbackPublicClientEnabled pulumi.BoolPtrInput
	// A `featureTags` block as described below. Cannot be used together with the `tags` property.
	FeatureTags ApplicationFeatureTagArrayInput
	// Configures the `groups` claim issued in a user or OAuth 2.0 access token that the app expects. Possible values are `None`, `SecurityGroup`, `DirectoryRole`, `ApplicationGroup` or `All`.
	GroupMembershipClaims pulumi.StringArrayInput
	// A set of user-defined URI(s) that uniquely identify an application within its Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
	IdentifierUris pulumi.StringArrayInput
	// A logo image to upload for the application, as a raw base64-encoded string. The image should be in gif, jpeg or png format. Note that once an image has been uploaded, it is not possible to remove it without replacing it with another image.
	LogoImage pulumi.StringPtrInput
	// CDN URL to the application's logo, as uploaded with the `logoImage` property.
	LogoUrl pulumi.StringPtrInput
	// URL of the application's marketing page.
	MarketingUrl pulumi.StringPtrInput
	// A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
	Oauth2PermissionScopeIds pulumi.StringMapInput
	// Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. Defaults to `false`, which specifies that only GET requests are allowed.
	Oauth2PostResponseRequired pulumi.BoolPtrInput
	// The application's object ID.
	ObjectId pulumi.StringPtrInput
	// An `optionalClaims` block as documented below.
	OptionalClaims ApplicationOptionalClaimsPtrInput
	// A set of object IDs of principals that will be granted ownership of the application. Supported object types are users or service principals. By default, no owners are assigned.
	Owners pulumi.StringArrayInput
	// If `true`, will return an error if an existing application is found with the same name. Defaults to `false`.
	PreventDuplicateNames pulumi.BoolPtrInput
	// URL of the application's privacy statement.
	PrivacyStatementUrl pulumi.StringPtrInput
	// A `publicClient` block as documented below, which configures non-web app or non-web API application settings, for example mobile or other public clients such as an installed application running on a desktop device.
	PublicClient ApplicationPublicClientPtrInput
	// The verified publisher domain for the application.
	PublisherDomain pulumi.StringPtrInput
	// A collection of `requiredResourceAccess` blocks as documented below.
	RequiredResourceAccesses ApplicationRequiredResourceAccessArrayInput
	// The Microsoft account types that are supported for the current application. Must be one of `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`. Defaults to `AzureADMyOrg`.
	SignInAudience pulumi.StringPtrInput
	// A `singlePageApplication` block as documented below, which configures single-page application (SPA) related settings for this application.
	SinglePageApplication ApplicationSinglePageApplicationPtrInput
	// URL of the application's support page.
	SupportUrl pulumi.StringPtrInput
	// A set of tags to apply to the application. Cannot be used together with the `featureTags` block.
	Tags pulumi.StringArrayInput
	// Unique ID for a templated application in the Azure AD App Gallery, from which to create the application. Changing this forces a new resource to be created.
	TemplateId pulumi.StringPtrInput
	// URL of the application's terms of service statement.
	TermsOfServiceUrl pulumi.StringPtrInput
	// A `web` block as documented below, which configures web related settings for this application.
	Web ApplicationWebPtrInput
}

func (ApplicationState) ElementType 

func (ApplicationState) ElementType() reflect.Type

type ApplicationWeb 

type ApplicationWeb struct {
	// Home page or landing page of the application.
	HomepageUrl *string `pulumi:"homepageUrl"`
	// An `implicitGrant` block as documented above.
	ImplicitGrant *ApplicationWebImplicitGrant `pulumi:"implicitGrant"`
	// The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
	LogoutUrl *string `pulumi:"logoutUrl"`
	// A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `http` URL or a URN.
	RedirectUris []string `pulumi:"redirectUris"`
}

type ApplicationWebArgs 

type ApplicationWebArgs struct {
	// Home page or landing page of the application.
	HomepageUrl pulumi.StringPtrInput `pulumi:"homepageUrl"`
	// An `implicitGrant` block as documented above.
	ImplicitGrant ApplicationWebImplicitGrantPtrInput `pulumi:"implicitGrant"`
	// The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
	LogoutUrl pulumi.StringPtrInput `pulumi:"logoutUrl"`
	// A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `http` URL or a URN.
	RedirectUris pulumi.StringArrayInput `pulumi:"redirectUris"`
}

func (ApplicationWebArgs) ElementType 

func (ApplicationWebArgs) ElementType() reflect.Type

func (ApplicationWebArgs) ToApplicationWebOutput 

func (i ApplicationWebArgs) ToApplicationWebOutput() ApplicationWebOutput

func (ApplicationWebArgs) ToApplicationWebOutputWithContext 

func (i ApplicationWebArgs) ToApplicationWebOutputWithContext(ctx context.Context) ApplicationWebOutput

func (ApplicationWebArgs) ToApplicationWebPtrOutput 

func (i ApplicationWebArgs) ToApplicationWebPtrOutput() ApplicationWebPtrOutput

func (ApplicationWebArgs) ToApplicationWebPtrOutputWithContext 

func (i ApplicationWebArgs) ToApplicationWebPtrOutputWithContext(ctx context.Context) ApplicationWebPtrOutput

type ApplicationWebImplicitGrant 

type ApplicationWebImplicitGrant struct {
	// Whether this web application can request an access token using OAuth 2.0 implicit flow.
	AccessTokenIssuanceEnabled *bool `pulumi:"accessTokenIssuanceEnabled"`
	// Whether this web application can request an ID token using OAuth 2.0 implicit flow.
	IdTokenIssuanceEnabled *bool `pulumi:"idTokenIssuanceEnabled"`
}

type ApplicationWebImplicitGrantArgs 

type ApplicationWebImplicitGrantArgs struct {
	// Whether this web application can request an access token using OAuth 2.0 implicit flow.
	AccessTokenIssuanceEnabled pulumi.BoolPtrInput `pulumi:"accessTokenIssuanceEnabled"`
	// Whether this web application can request an ID token using OAuth 2.0 implicit flow.
	IdTokenIssuanceEnabled pulumi.BoolPtrInput `pulumi:"idTokenIssuanceEnabled"`
}

func (ApplicationWebImplicitGrantArgs) ElementType 

func (ApplicationWebImplicitGrantArgs) ElementType() reflect.Type

func (ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantOutput 

func (i ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantOutput() ApplicationWebImplicitGrantOutput

func (ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantOutputWithContext 

func (i ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantOutputWithContext(ctx context.Context) ApplicationWebImplicitGrantOutput

func (ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantPtrOutput 

func (i ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantPtrOutput() ApplicationWebImplicitGrantPtrOutput

func (ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantPtrOutputWithContext 

func (i ApplicationWebImplicitGrantArgs) ToApplicationWebImplicitGrantPtrOutputWithContext(ctx context.Context) ApplicationWebImplicitGrantPtrOutput

type ApplicationWebImplicitGrantInput 

type ApplicationWebImplicitGrantInput interface {
	pulumi.Input

	ToApplicationWebImplicitGrantOutput() ApplicationWebImplicitGrantOutput
	ToApplicationWebImplicitGrantOutputWithContext(context.Context) ApplicationWebImplicitGrantOutput
}

ApplicationWebImplicitGrantInput is an input type that accepts ApplicationWebImplicitGrantArgs and ApplicationWebImplicitGrantOutput values. You can construct a concrete instance of `ApplicationWebImplicitGrantInput` via: 

ApplicationWebImplicitGrantArgs{...}

type ApplicationWebImplicitGrantOutput 

type ApplicationWebImplicitGrantOutput struct{ *pulumi.OutputState }

func (ApplicationWebImplicitGrantOutput) AccessTokenIssuanceEnabled 

func (o ApplicationWebImplicitGrantOutput) AccessTokenIssuanceEnabled() pulumi.BoolPtrOutput

Whether this web application can request an access token using OAuth 2.0 implicit flow.

func (ApplicationWebImplicitGrantOutput) ElementType 

func (ApplicationWebImplicitGrantOutput) ElementType() reflect.Type

func (ApplicationWebImplicitGrantOutput) IdTokenIssuanceEnabled 

func (o ApplicationWebImplicitGrantOutput) IdTokenIssuanceEnabled() pulumi.BoolPtrOutput

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

func (ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantOutput 

func (o ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantOutput() ApplicationWebImplicitGrantOutput

func (ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantOutputWithContext 

func (o ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantOutputWithContext(ctx context.Context) ApplicationWebImplicitGrantOutput

func (ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantPtrOutput 

func (o ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantPtrOutput() ApplicationWebImplicitGrantPtrOutput

func (ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantPtrOutputWithContext 

func (o ApplicationWebImplicitGrantOutput) ToApplicationWebImplicitGrantPtrOutputWithContext(ctx context.Context) ApplicationWebImplicitGrantPtrOutput

type ApplicationWebImplicitGrantPtrInput 

type ApplicationWebImplicitGrantPtrInput interface {
	pulumi.Input

	ToApplicationWebImplicitGrantPtrOutput() ApplicationWebImplicitGrantPtrOutput
	ToApplicationWebImplicitGrantPtrOutputWithContext(context.Context) ApplicationWebImplicitGrantPtrOutput
}

ApplicationWebImplicitGrantPtrInput is an input type that accepts ApplicationWebImplicitGrantArgs, ApplicationWebImplicitGrantPtr and ApplicationWebImplicitGrantPtrOutput values. You can construct a concrete instance of `ApplicationWebImplicitGrantPtrInput` via: 

        ApplicationWebImplicitGrantArgs{...}

or:

        nil

func ApplicationWebImplicitGrantPtr 

func ApplicationWebImplicitGrantPtr(v *ApplicationWebImplicitGrantArgs) ApplicationWebImplicitGrantPtrInput

type ApplicationWebImplicitGrantPtrOutput 

type ApplicationWebImplicitGrantPtrOutput struct{ *pulumi.OutputState }

func (ApplicationWebImplicitGrantPtrOutput) AccessTokenIssuanceEnabled 

func (o ApplicationWebImplicitGrantPtrOutput) AccessTokenIssuanceEnabled() pulumi.BoolPtrOutput

Whether this web application can request an access token using OAuth 2.0 implicit flow.

func (ApplicationWebImplicitGrantPtrOutput) Elem 

func (o ApplicationWebImplicitGrantPtrOutput) Elem() ApplicationWebImplicitGrantOutput

func (ApplicationWebImplicitGrantPtrOutput) ElementType 

func (ApplicationWebImplicitGrantPtrOutput) ElementType() reflect.Type

func (ApplicationWebImplicitGrantPtrOutput) IdTokenIssuanceEnabled 

func (o ApplicationWebImplicitGrantPtrOutput) IdTokenIssuanceEnabled() pulumi.BoolPtrOutput

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

func (ApplicationWebImplicitGrantPtrOutput) ToApplicationWebImplicitGrantPtrOutput 

func (o ApplicationWebImplicitGrantPtrOutput) ToApplicationWebImplicitGrantPtrOutput() ApplicationWebImplicitGrantPtrOutput

func (ApplicationWebImplicitGrantPtrOutput) ToApplicationWebImplicitGrantPtrOutputWithContext 

func (o ApplicationWebImplicitGrantPtrOutput) ToApplicationWebImplicitGrantPtrOutputWithContext(ctx context.Context) ApplicationWebImplicitGrantPtrOutput

type ApplicationWebInput 

type ApplicationWebInput interface {
	pulumi.Input

	ToApplicationWebOutput() ApplicationWebOutput
	ToApplicationWebOutputWithContext(context.Context) ApplicationWebOutput
}

ApplicationWebInput is an input type that accepts ApplicationWebArgs and ApplicationWebOutput values. You can construct a concrete instance of `ApplicationWebInput` via: 

ApplicationWebArgs{...}

type ApplicationWebOutput 

type ApplicationWebOutput struct{ *pulumi.OutputState }

func (ApplicationWebOutput) ElementType 

func (ApplicationWebOutput) ElementType() reflect.Type

func (ApplicationWebOutput) HomepageUrl 

func (o ApplicationWebOutput) HomepageUrl() pulumi.StringPtrOutput

Home page or landing page of the application.

func (ApplicationWebOutput) ImplicitGrant 

func (o ApplicationWebOutput) ImplicitGrant() ApplicationWebImplicitGrantPtrOutput

An `implicitGrant` block as documented above.

func (ApplicationWebOutput) LogoutUrl 

func (o ApplicationWebOutput) LogoutUrl() pulumi.StringPtrOutput

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

func (ApplicationWebOutput) RedirectUris 

func (o ApplicationWebOutput) RedirectUris() pulumi.StringArrayOutput

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `http` URL or a URN.

func (ApplicationWebOutput) ToApplicationWebOutput 

func (o ApplicationWebOutput) ToApplicationWebOutput() ApplicationWebOutput

func (ApplicationWebOutput) ToApplicationWebOutputWithContext 

func (o ApplicationWebOutput) ToApplicationWebOutputWithContext(ctx context.Context) ApplicationWebOutput

func (ApplicationWebOutput) ToApplicationWebPtrOutput 

func (o ApplicationWebOutput) ToApplicationWebPtrOutput() ApplicationWebPtrOutput

func (ApplicationWebOutput) ToApplicationWebPtrOutputWithContext 

func (o ApplicationWebOutput) ToApplicationWebPtrOutputWithContext(ctx context.Context) ApplicationWebPtrOutput

type ApplicationWebPtrInput 

type ApplicationWebPtrInput interface {
	pulumi.Input

	ToApplicationWebPtrOutput() ApplicationWebPtrOutput
	ToApplicationWebPtrOutputWithContext(context.Context) ApplicationWebPtrOutput
}

ApplicationWebPtrInput is an input type that accepts ApplicationWebArgs, ApplicationWebPtr and ApplicationWebPtrOutput values. You can construct a concrete instance of `ApplicationWebPtrInput` via: 

        ApplicationWebArgs{...}

or:

        nil

func ApplicationWebPtr 

func ApplicationWebPtr(v *ApplicationWebArgs) ApplicationWebPtrInput

type ApplicationWebPtrOutput 

type ApplicationWebPtrOutput struct{ *pulumi.OutputState }

func (ApplicationWebPtrOutput) Elem 

func (o ApplicationWebPtrOutput) Elem() ApplicationWebOutput

func (ApplicationWebPtrOutput) ElementType 

func (ApplicationWebPtrOutput) ElementType() reflect.Type

func (ApplicationWebPtrOutput) HomepageUrl 

func (o ApplicationWebPtrOutput) HomepageUrl() pulumi.StringPtrOutput

Home page or landing page of the application.

func (ApplicationWebPtrOutput) ImplicitGrant 

func (o ApplicationWebPtrOutput) ImplicitGrant() ApplicationWebImplicitGrantPtrOutput

An `implicitGrant` block as documented above.

func (ApplicationWebPtrOutput) LogoutUrl 

func (o ApplicationWebPtrOutput) LogoutUrl() pulumi.StringPtrOutput

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

func (ApplicationWebPtrOutput) RedirectUris 

func (o ApplicationWebPtrOutput) RedirectUris() pulumi.StringArrayOutput

A set of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent. Must be a valid `http` URL or a URN.

func (ApplicationWebPtrOutput) ToApplicationWebPtrOutput 

func (o ApplicationWebPtrOutput) ToApplicationWebPtrOutput() ApplicationWebPtrOutput

func (ApplicationWebPtrOutput) ToApplicationWebPtrOutputWithContext 

func (o ApplicationWebPtrOutput) ToApplicationWebPtrOutputWithContext(ctx context.Context) ApplicationWebPtrOutput

type ClaimsMappingPolicy added in v5.19.0 

type ClaimsMappingPolicy struct {
	pulumi.CustomResourceState

	// A string collection containing a JSON string that defines the rules and settings for this policy
	Definitions pulumi.StringArrayOutput `pulumi:"definitions"`
	// The display name for this Claims Mapping Policy.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
}

Manages a Claims Mapping Policy within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ApplicationConfiguration` and `Policy.Read.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"encoding/json"

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		tmpJSON0, err := json.Marshal(map[string]interface{}{
			"ClaimsMappingPolicy": map[string]interface{}{
				"ClaimsSchema": []map[string]interface{}{
					map[string]interface{}{
						"ID":            "employeeid",
						"JwtClaimType":  "name",
						"SamlClaimType": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name",
						"Source":        "user",
					},
					map[string]interface{}{
						"ID":            "tenantcountry",
						"JwtClaimType":  "country",
						"SamlClaimType": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country",
						"Source":        "company",
					},
				},
				"IncludeBasicClaimSet": "true",
				"Version":              1,
			},
		})
		if err != nil {
			return err
		}
		json0 := string(tmpJSON0)
		_, err = azuread.NewClaimsMappingPolicy(ctx, "myPolicy", &azuread.ClaimsMappingPolicyArgs{
			Definitions: pulumi.StringArray{
				pulumi.String(json0),
			},
			DisplayName: pulumi.String("My Policy"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Claims Mapping Policy can be imported using the `id`, e.g.

```sh 

$ pulumi import azuread:index/claimsMappingPolicy:ClaimsMappingPolicy my_policy 00000000-0000-0000-0000-000000000000

```

func GetClaimsMappingPolicy added in v5.19.0 

func GetClaimsMappingPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ClaimsMappingPolicyState, opts ...pulumi.ResourceOption) (*ClaimsMappingPolicy, error)

GetClaimsMappingPolicy gets an existing ClaimsMappingPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewClaimsMappingPolicy added in v5.19.0 

func NewClaimsMappingPolicy(ctx *pulumi.Context,
	name string, args *ClaimsMappingPolicyArgs, opts ...pulumi.ResourceOption) (*ClaimsMappingPolicy, error)

NewClaimsMappingPolicy registers a new resource with the given unique name, arguments, and options.

func (*ClaimsMappingPolicy) ElementType added in v5.19.0 

func (*ClaimsMappingPolicy) ElementType() reflect.Type

func (*ClaimsMappingPolicy) ToClaimsMappingPolicyOutput added in v5.19.0 

func (i *ClaimsMappingPolicy) ToClaimsMappingPolicyOutput() ClaimsMappingPolicyOutput

func (*ClaimsMappingPolicy) ToClaimsMappingPolicyOutputWithContext added in v5.19.0 

func (i *ClaimsMappingPolicy) ToClaimsMappingPolicyOutputWithContext(ctx context.Context) ClaimsMappingPolicyOutput

type ClaimsMappingPolicyArgs added in v5.19.0 

type ClaimsMappingPolicyArgs struct {
	// A string collection containing a JSON string that defines the rules and settings for this policy
	Definitions pulumi.StringArrayInput
	// The display name for this Claims Mapping Policy.
	DisplayName pulumi.StringInput
}

The set of arguments for constructing a ClaimsMappingPolicy resource.

func (ClaimsMappingPolicyArgs) ElementType added in v5.19.0 

func (ClaimsMappingPolicyArgs) ElementType() reflect.Type

type ClaimsMappingPolicyArray added in v5.19.0 

type ClaimsMappingPolicyArray []ClaimsMappingPolicyInput

func (ClaimsMappingPolicyArray) ElementType added in v5.19.0 

func (ClaimsMappingPolicyArray) ElementType() reflect.Type

func (ClaimsMappingPolicyArray) ToClaimsMappingPolicyArrayOutput added in v5.19.0 

func (i ClaimsMappingPolicyArray) ToClaimsMappingPolicyArrayOutput() ClaimsMappingPolicyArrayOutput

func (ClaimsMappingPolicyArray) ToClaimsMappingPolicyArrayOutputWithContext added in v5.19.0 

func (i ClaimsMappingPolicyArray) ToClaimsMappingPolicyArrayOutputWithContext(ctx context.Context) ClaimsMappingPolicyArrayOutput

type ClaimsMappingPolicyArrayInput added in v5.19.0 

type ClaimsMappingPolicyArrayInput interface {
	pulumi.Input

	ToClaimsMappingPolicyArrayOutput() ClaimsMappingPolicyArrayOutput
	ToClaimsMappingPolicyArrayOutputWithContext(context.Context) ClaimsMappingPolicyArrayOutput
}

ClaimsMappingPolicyArrayInput is an input type that accepts ClaimsMappingPolicyArray and ClaimsMappingPolicyArrayOutput values. You can construct a concrete instance of `ClaimsMappingPolicyArrayInput` via: 

ClaimsMappingPolicyArray{ ClaimsMappingPolicyArgs{...} }

type ClaimsMappingPolicyArrayOutput added in v5.19.0 

type ClaimsMappingPolicyArrayOutput struct{ *pulumi.OutputState }

func (ClaimsMappingPolicyArrayOutput) ElementType added in v5.19.0 

func (ClaimsMappingPolicyArrayOutput) ElementType() reflect.Type

func (ClaimsMappingPolicyArrayOutput) Index added in v5.19.0 

func (o ClaimsMappingPolicyArrayOutput) Index(i pulumi.IntInput) ClaimsMappingPolicyOutput

func (ClaimsMappingPolicyArrayOutput) ToClaimsMappingPolicyArrayOutput added in v5.19.0 

func (o ClaimsMappingPolicyArrayOutput) ToClaimsMappingPolicyArrayOutput() ClaimsMappingPolicyArrayOutput

func (ClaimsMappingPolicyArrayOutput) ToClaimsMappingPolicyArrayOutputWithContext added in v5.19.0 

func (o ClaimsMappingPolicyArrayOutput) ToClaimsMappingPolicyArrayOutputWithContext(ctx context.Context) ClaimsMappingPolicyArrayOutput

type ClaimsMappingPolicyInput added in v5.19.0 

type ClaimsMappingPolicyInput interface {
	pulumi.Input

	ToClaimsMappingPolicyOutput() ClaimsMappingPolicyOutput
	ToClaimsMappingPolicyOutputWithContext(ctx context.Context) ClaimsMappingPolicyOutput
}

type ClaimsMappingPolicyMap added in v5.19.0 

type ClaimsMappingPolicyMap map[string]ClaimsMappingPolicyInput

func (ClaimsMappingPolicyMap) ElementType added in v5.19.0 

func (ClaimsMappingPolicyMap) ElementType() reflect.Type

func (ClaimsMappingPolicyMap) ToClaimsMappingPolicyMapOutput added in v5.19.0 

func (i ClaimsMappingPolicyMap) ToClaimsMappingPolicyMapOutput() ClaimsMappingPolicyMapOutput

func (ClaimsMappingPolicyMap) ToClaimsMappingPolicyMapOutputWithContext added in v5.19.0 

func (i ClaimsMappingPolicyMap) ToClaimsMappingPolicyMapOutputWithContext(ctx context.Context) ClaimsMappingPolicyMapOutput

type ClaimsMappingPolicyMapInput added in v5.19.0 

type ClaimsMappingPolicyMapInput interface {
	pulumi.Input

	ToClaimsMappingPolicyMapOutput() ClaimsMappingPolicyMapOutput
	ToClaimsMappingPolicyMapOutputWithContext(context.Context) ClaimsMappingPolicyMapOutput
}

ClaimsMappingPolicyMapInput is an input type that accepts ClaimsMappingPolicyMap and ClaimsMappingPolicyMapOutput values. You can construct a concrete instance of `ClaimsMappingPolicyMapInput` via: 

ClaimsMappingPolicyMap{ "key": ClaimsMappingPolicyArgs{...} }

type ClaimsMappingPolicyMapOutput added in v5.19.0 

type ClaimsMappingPolicyMapOutput struct{ *pulumi.OutputState }

func (ClaimsMappingPolicyMapOutput) ElementType added in v5.19.0 

func (ClaimsMappingPolicyMapOutput) ElementType() reflect.Type

func (ClaimsMappingPolicyMapOutput) MapIndex added in v5.19.0 

func (o ClaimsMappingPolicyMapOutput) MapIndex(k pulumi.StringInput) ClaimsMappingPolicyOutput

func (ClaimsMappingPolicyMapOutput) ToClaimsMappingPolicyMapOutput added in v5.19.0 

func (o ClaimsMappingPolicyMapOutput) ToClaimsMappingPolicyMapOutput() ClaimsMappingPolicyMapOutput

func (ClaimsMappingPolicyMapOutput) ToClaimsMappingPolicyMapOutputWithContext added in v5.19.0 

func (o ClaimsMappingPolicyMapOutput) ToClaimsMappingPolicyMapOutputWithContext(ctx context.Context) ClaimsMappingPolicyMapOutput

type ClaimsMappingPolicyOutput added in v5.19.0 

type ClaimsMappingPolicyOutput struct{ *pulumi.OutputState }

func (ClaimsMappingPolicyOutput) Definitions added in v5.22.0 

func (o ClaimsMappingPolicyOutput) Definitions() pulumi.StringArrayOutput

A string collection containing a JSON string that defines the rules and settings for this policy

func (ClaimsMappingPolicyOutput) DisplayName added in v5.22.0 

func (o ClaimsMappingPolicyOutput) DisplayName() pulumi.StringOutput

The display name for this Claims Mapping Policy.

func (ClaimsMappingPolicyOutput) ElementType added in v5.19.0 

func (ClaimsMappingPolicyOutput) ElementType() reflect.Type

func (ClaimsMappingPolicyOutput) ToClaimsMappingPolicyOutput added in v5.19.0 

func (o ClaimsMappingPolicyOutput) ToClaimsMappingPolicyOutput() ClaimsMappingPolicyOutput

func (ClaimsMappingPolicyOutput) ToClaimsMappingPolicyOutputWithContext added in v5.19.0 

func (o ClaimsMappingPolicyOutput) ToClaimsMappingPolicyOutputWithContext(ctx context.Context) ClaimsMappingPolicyOutput

type ClaimsMappingPolicyState added in v5.19.0 

type ClaimsMappingPolicyState struct {
	// A string collection containing a JSON string that defines the rules and settings for this policy
	Definitions pulumi.StringArrayInput
	// The display name for this Claims Mapping Policy.
	DisplayName pulumi.StringPtrInput
}

func (ClaimsMappingPolicyState) ElementType added in v5.19.0 

func (ClaimsMappingPolicyState) ElementType() reflect.Type

type ConditionalAccessPolicy added in v5.2.0 

type ConditionalAccessPolicy struct {
	pulumi.CustomResourceState

	// A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.
	Conditions ConditionalAccessPolicyConditionsOutput `pulumi:"conditions"`
	// The friendly name for this Conditional Access Policy.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.
	GrantControls ConditionalAccessPolicyGrantControlsOutput `pulumi:"grantControls"`
	// A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.
	SessionControls ConditionalAccessPolicySessionControlsPtrOutput `pulumi:"sessionControls"`
	// Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`
	State pulumi.StringOutput `pulumi:"state"`
}

Manages a Conditional Access Policy within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ConditionalAccess` and `Policy.Read.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Conditional Access Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewConditionalAccessPolicy(ctx, "example", &azuread.ConditionalAccessPolicyArgs{
			Conditions: &ConditionalAccessPolicyConditionsArgs{
				Applications: &ConditionalAccessPolicyConditionsApplicationsArgs{
					ExcludedApplications: pulumi.StringArray{},
					IncludedApplications: pulumi.StringArray{
						pulumi.String("All"),
					},
				},
				ClientAppTypes: pulumi.StringArray{
					pulumi.String("all"),
				},
				Devices: &ConditionalAccessPolicyConditionsDevicesArgs{
					Filter: &ConditionalAccessPolicyConditionsDevicesFilterArgs{
						Mode: pulumi.String("exclude"),
						Rule: pulumi.String("device.operatingSystem eq \"Doors\""),
					},
				},
				Locations: &ConditionalAccessPolicyConditionsLocationsArgs{
					ExcludedLocations: pulumi.StringArray{
						pulumi.String("AllTrusted"),
					},
					IncludedLocations: pulumi.StringArray{
						pulumi.String("All"),
					},
				},
				Platforms: &ConditionalAccessPolicyConditionsPlatformsArgs{
					ExcludedPlatforms: pulumi.StringArray{
						pulumi.String("iOS"),
					},
					IncludedPlatforms: pulumi.StringArray{
						pulumi.String("android"),
					},
				},
				SignInRiskLevels: pulumi.StringArray{
					pulumi.String("medium"),
				},
				UserRiskLevels: pulumi.StringArray{
					pulumi.String("medium"),
				},
				Users: &ConditionalAccessPolicyConditionsUsersArgs{
					ExcludedUsers: pulumi.StringArray{
						pulumi.String("GuestsOrExternalUsers"),
					},
					IncludedUsers: pulumi.StringArray{
						pulumi.String("All"),
					},
				},
			},
			DisplayName: pulumi.String("example policy"),
			GrantControls: &ConditionalAccessPolicyGrantControlsArgs{
				BuiltInControls: pulumi.StringArray{
					pulumi.String("mfa"),
				},
				Operator: pulumi.String("OR"),
			},
			SessionControls: &ConditionalAccessPolicySessionControlsArgs{
				ApplicationEnforcedRestrictionsEnabled: pulumi.Bool(true),
				CloudAppSecurityPolicy:                 pulumi.String("monitorOnly"),
				SignInFrequency:                        pulumi.Int(10),
				SignInFrequencyPeriod:                  pulumi.String("hours"),
			},
			State: pulumi.String("disabled"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Conditional Access Policies can be imported using the `id`, e.g.

```sh 

$ pulumi import azuread:index/conditionalAccessPolicy:ConditionalAccessPolicy my_location 00000000-0000-0000-0000-000000000000

```

func GetConditionalAccessPolicy added in v5.2.0 

func GetConditionalAccessPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ConditionalAccessPolicyState, opts ...pulumi.ResourceOption) (*ConditionalAccessPolicy, error)

GetConditionalAccessPolicy gets an existing ConditionalAccessPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewConditionalAccessPolicy added in v5.2.0 

func NewConditionalAccessPolicy(ctx *pulumi.Context,
	name string, args *ConditionalAccessPolicyArgs, opts ...pulumi.ResourceOption) (*ConditionalAccessPolicy, error)

NewConditionalAccessPolicy registers a new resource with the given unique name, arguments, and options.

func (*ConditionalAccessPolicy) ElementType added in v5.2.0 

func (*ConditionalAccessPolicy) ElementType() reflect.Type

func (*ConditionalAccessPolicy) ToConditionalAccessPolicyOutput added in v5.2.0 

func (i *ConditionalAccessPolicy) ToConditionalAccessPolicyOutput() ConditionalAccessPolicyOutput

func (*ConditionalAccessPolicy) ToConditionalAccessPolicyOutputWithContext added in v5.2.0 

func (i *ConditionalAccessPolicy) ToConditionalAccessPolicyOutputWithContext(ctx context.Context) ConditionalAccessPolicyOutput

type ConditionalAccessPolicyArgs added in v5.2.0 

type ConditionalAccessPolicyArgs struct {
	// A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.
	Conditions ConditionalAccessPolicyConditionsInput
	// The friendly name for this Conditional Access Policy.
	DisplayName pulumi.StringInput
	// A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.
	GrantControls ConditionalAccessPolicyGrantControlsInput
	// A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.
	SessionControls ConditionalAccessPolicySessionControlsPtrInput
	// Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`
	State pulumi.StringInput
}

The set of arguments for constructing a ConditionalAccessPolicy resource.

func (ConditionalAccessPolicyArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyArgs) ElementType() reflect.Type

type ConditionalAccessPolicyArray added in v5.2.0 

type ConditionalAccessPolicyArray []ConditionalAccessPolicyInput

func (ConditionalAccessPolicyArray) ElementType added in v5.2.0 

func (ConditionalAccessPolicyArray) ElementType() reflect.Type

func (ConditionalAccessPolicyArray) ToConditionalAccessPolicyArrayOutput added in v5.2.0 

func (i ConditionalAccessPolicyArray) ToConditionalAccessPolicyArrayOutput() ConditionalAccessPolicyArrayOutput

func (ConditionalAccessPolicyArray) ToConditionalAccessPolicyArrayOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyArray) ToConditionalAccessPolicyArrayOutputWithContext(ctx context.Context) ConditionalAccessPolicyArrayOutput

type ConditionalAccessPolicyArrayInput added in v5.2.0 

type ConditionalAccessPolicyArrayInput interface {
	pulumi.Input

	ToConditionalAccessPolicyArrayOutput() ConditionalAccessPolicyArrayOutput
	ToConditionalAccessPolicyArrayOutputWithContext(context.Context) ConditionalAccessPolicyArrayOutput
}

ConditionalAccessPolicyArrayInput is an input type that accepts ConditionalAccessPolicyArray and ConditionalAccessPolicyArrayOutput values. You can construct a concrete instance of `ConditionalAccessPolicyArrayInput` via: 

ConditionalAccessPolicyArray{ ConditionalAccessPolicyArgs{...} }

type ConditionalAccessPolicyArrayOutput added in v5.2.0 

type ConditionalAccessPolicyArrayOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyArrayOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyArrayOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyArrayOutput) Index added in v5.2.0 

func (o ConditionalAccessPolicyArrayOutput) Index(i pulumi.IntInput) ConditionalAccessPolicyOutput

func (ConditionalAccessPolicyArrayOutput) ToConditionalAccessPolicyArrayOutput added in v5.2.0 

func (o ConditionalAccessPolicyArrayOutput) ToConditionalAccessPolicyArrayOutput() ConditionalAccessPolicyArrayOutput

func (ConditionalAccessPolicyArrayOutput) ToConditionalAccessPolicyArrayOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyArrayOutput) ToConditionalAccessPolicyArrayOutputWithContext(ctx context.Context) ConditionalAccessPolicyArrayOutput

type ConditionalAccessPolicyConditions added in v5.2.0 

type ConditionalAccessPolicyConditions struct {
	// An `applications` block as documented below, which specifies applications and user actions included in and excluded from the policy.
	Applications ConditionalAccessPolicyConditionsApplications `pulumi:"applications"`
	// A list of client application types included in the policy. Possible values are: `all`, `browser`, `mobileAppsAndDesktopClients`, `exchangeActiveSync`, `easSupported` and `other`.
	ClientAppTypes []string `pulumi:"clientAppTypes"`
	// A `devices` block as documented below, which describes devices to be included in and excluded from the policy. A `devices` block can be added to an existing policy, but removing the `devices` block forces a new resource to be created.
	Devices *ConditionalAccessPolicyConditionsDevices `pulumi:"devices"`
	// A `locations` block as documented below, which specifies locations included in and excluded from the policy.
	Locations *ConditionalAccessPolicyConditionsLocations `pulumi:"locations"`
	// A `platforms` block as documented below, which specifies platforms included in and excluded from the policy.
	Platforms *ConditionalAccessPolicyConditionsPlatforms `pulumi:"platforms"`
	// A list of sign-in risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.
	SignInRiskLevels []string `pulumi:"signInRiskLevels"`
	// A list of user risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.
	UserRiskLevels []string `pulumi:"userRiskLevels"`
	// A `users` block as documented below, which specifies users, groups, and roles included in and excluded from the policy.
	Users ConditionalAccessPolicyConditionsUsers `pulumi:"users"`
}

type ConditionalAccessPolicyConditionsApplications added in v5.2.0 

type ConditionalAccessPolicyConditionsApplications struct {
	// A list of application IDs explicitly excluded from the policy.
	ExcludedApplications []string `pulumi:"excludedApplications"`
	// A list of application IDs the policy applies to, unless explicitly excluded (in `excludedApplications`). Can also be set to `All`. Cannot be specified with `includedUserActions`. One of `includedApplications` or `includedUserActions` must be specified.
	IncludedApplications []string `pulumi:"includedApplications"`
	// A list of user actions to include. Supported values are `urn:user:registerdevice` and `urn:user:registersecurityinfo`. Cannot be specified with `includedApplications`. One of `includedApplications` or `includedUserActions` must be specified.
	IncludedUserActions []string `pulumi:"includedUserActions"`
}

type ConditionalAccessPolicyConditionsApplicationsArgs added in v5.2.0 

type ConditionalAccessPolicyConditionsApplicationsArgs struct {
	// A list of application IDs explicitly excluded from the policy.
	ExcludedApplications pulumi.StringArrayInput `pulumi:"excludedApplications"`
	// A list of application IDs the policy applies to, unless explicitly excluded (in `excludedApplications`). Can also be set to `All`. Cannot be specified with `includedUserActions`. One of `includedApplications` or `includedUserActions` must be specified.
	IncludedApplications pulumi.StringArrayInput `pulumi:"includedApplications"`
	// A list of user actions to include. Supported values are `urn:user:registerdevice` and `urn:user:registersecurityinfo`. Cannot be specified with `includedApplications`. One of `includedApplications` or `includedUserActions` must be specified.
	IncludedUserActions pulumi.StringArrayInput `pulumi:"includedUserActions"`
}

func (ConditionalAccessPolicyConditionsApplicationsArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsApplicationsArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsOutput() ConditionalAccessPolicyConditionsApplicationsOutput

func (ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsApplicationsOutput

func (ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsPtrOutput() ConditionalAccessPolicyConditionsApplicationsPtrOutput

func (ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsApplicationsArgs) ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsApplicationsPtrOutput

type ConditionalAccessPolicyConditionsApplicationsInput added in v5.2.0 

type ConditionalAccessPolicyConditionsApplicationsInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsApplicationsOutput() ConditionalAccessPolicyConditionsApplicationsOutput
	ToConditionalAccessPolicyConditionsApplicationsOutputWithContext(context.Context) ConditionalAccessPolicyConditionsApplicationsOutput
}

ConditionalAccessPolicyConditionsApplicationsInput is an input type that accepts ConditionalAccessPolicyConditionsApplicationsArgs and ConditionalAccessPolicyConditionsApplicationsOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsApplicationsInput` via: 

ConditionalAccessPolicyConditionsApplicationsArgs{...}

type ConditionalAccessPolicyConditionsApplicationsOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsApplicationsOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsApplicationsOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsApplicationsOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsApplicationsOutput) ExcludedApplications added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) ExcludedApplications() pulumi.StringArrayOutput

A list of application IDs explicitly excluded from the policy.

func (ConditionalAccessPolicyConditionsApplicationsOutput) IncludedApplications added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) IncludedApplications() pulumi.StringArrayOutput

A list of application IDs the policy applies to, unless explicitly excluded (in `excludedApplications`). Can also be set to `All`. Cannot be specified with `includedUserActions`. One of `includedApplications` or `includedUserActions` must be specified.

func (ConditionalAccessPolicyConditionsApplicationsOutput) IncludedUserActions added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) IncludedUserActions() pulumi.StringArrayOutput

A list of user actions to include. Supported values are `urn:user:registerdevice` and `urn:user:registersecurityinfo`. Cannot be specified with `includedApplications`. One of `includedApplications` or `includedUserActions` must be specified.

func (ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsOutput() ConditionalAccessPolicyConditionsApplicationsOutput

func (ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsApplicationsOutput

func (ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutput() ConditionalAccessPolicyConditionsApplicationsPtrOutput

func (ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsApplicationsPtrOutput

type ConditionalAccessPolicyConditionsApplicationsPtrInput added in v5.2.0 

type ConditionalAccessPolicyConditionsApplicationsPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsApplicationsPtrOutput() ConditionalAccessPolicyConditionsApplicationsPtrOutput
	ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsApplicationsPtrOutput
}

ConditionalAccessPolicyConditionsApplicationsPtrInput is an input type that accepts ConditionalAccessPolicyConditionsApplicationsArgs, ConditionalAccessPolicyConditionsApplicationsPtr and ConditionalAccessPolicyConditionsApplicationsPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsApplicationsPtrInput` via: 

        ConditionalAccessPolicyConditionsApplicationsArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsApplicationsPtr added in v5.2.0 

func ConditionalAccessPolicyConditionsApplicationsPtr(v *ConditionalAccessPolicyConditionsApplicationsArgs) ConditionalAccessPolicyConditionsApplicationsPtrInput

type ConditionalAccessPolicyConditionsApplicationsPtrOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsApplicationsPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsPtrOutput) Elem() ConditionalAccessPolicyConditionsApplicationsOutput

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) ExcludedApplications added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsPtrOutput) ExcludedApplications() pulumi.StringArrayOutput

A list of application IDs explicitly excluded from the policy.

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) IncludedApplications added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsPtrOutput) IncludedApplications() pulumi.StringArrayOutput

A list of application IDs the policy applies to, unless explicitly excluded (in `excludedApplications`). Can also be set to `All`. Cannot be specified with `includedUserActions`. One of `includedApplications` or `includedUserActions` must be specified.

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) IncludedUserActions added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsPtrOutput) IncludedUserActions() pulumi.StringArrayOutput

A list of user actions to include. Supported values are `urn:user:registerdevice` and `urn:user:registersecurityinfo`. Cannot be specified with `includedApplications`. One of `includedApplications` or `includedUserActions` must be specified.

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsPtrOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutput() ConditionalAccessPolicyConditionsApplicationsPtrOutput

func (ConditionalAccessPolicyConditionsApplicationsPtrOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsApplicationsPtrOutput) ToConditionalAccessPolicyConditionsApplicationsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsApplicationsPtrOutput

type ConditionalAccessPolicyConditionsArgs added in v5.2.0 

type ConditionalAccessPolicyConditionsArgs struct {
	// An `applications` block as documented below, which specifies applications and user actions included in and excluded from the policy.
	Applications ConditionalAccessPolicyConditionsApplicationsInput `pulumi:"applications"`
	// A list of client application types included in the policy. Possible values are: `all`, `browser`, `mobileAppsAndDesktopClients`, `exchangeActiveSync`, `easSupported` and `other`.
	ClientAppTypes pulumi.StringArrayInput `pulumi:"clientAppTypes"`
	// A `devices` block as documented below, which describes devices to be included in and excluded from the policy. A `devices` block can be added to an existing policy, but removing the `devices` block forces a new resource to be created.
	Devices ConditionalAccessPolicyConditionsDevicesPtrInput `pulumi:"devices"`
	// A `locations` block as documented below, which specifies locations included in and excluded from the policy.
	Locations ConditionalAccessPolicyConditionsLocationsPtrInput `pulumi:"locations"`
	// A `platforms` block as documented below, which specifies platforms included in and excluded from the policy.
	Platforms ConditionalAccessPolicyConditionsPlatformsPtrInput `pulumi:"platforms"`
	// A list of sign-in risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.
	SignInRiskLevels pulumi.StringArrayInput `pulumi:"signInRiskLevels"`
	// A list of user risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.
	UserRiskLevels pulumi.StringArrayInput `pulumi:"userRiskLevels"`
	// A `users` block as documented below, which specifies users, groups, and roles included in and excluded from the policy.
	Users ConditionalAccessPolicyConditionsUsersInput `pulumi:"users"`
}

func (ConditionalAccessPolicyConditionsArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsOutput() ConditionalAccessPolicyConditionsOutput

func (ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsOutput

func (ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsPtrOutput() ConditionalAccessPolicyConditionsPtrOutput

func (ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsArgs) ToConditionalAccessPolicyConditionsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPtrOutput

type ConditionalAccessPolicyConditionsDevices added in v5.10.0 

type ConditionalAccessPolicyConditionsDevices struct {
	// A `filter` block as described below. A `filter` block can be added to an existing policy, but removing the `filter` block forces a new resource to be created.
	Filter *ConditionalAccessPolicyConditionsDevicesFilter `pulumi:"filter"`
}

type ConditionalAccessPolicyConditionsDevicesArgs added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesArgs struct {
	// A `filter` block as described below. A `filter` block can be added to an existing policy, but removing the `filter` block forces a new resource to be created.
	Filter ConditionalAccessPolicyConditionsDevicesFilterPtrInput `pulumi:"filter"`
}

func (ConditionalAccessPolicyConditionsDevicesArgs) ElementType added in v5.10.0 

func (ConditionalAccessPolicyConditionsDevicesArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesOutput added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesOutput() ConditionalAccessPolicyConditionsDevicesOutput

func (ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesOutputWithContext added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesOutput

func (ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesPtrOutput added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesPtrOutput() ConditionalAccessPolicyConditionsDevicesPtrOutput

func (ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesArgs) ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesPtrOutput

type ConditionalAccessPolicyConditionsDevicesFilter added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesFilter struct {
	// Whether to include in, or exclude from, matching devices from the policy. Supported values are `include` or `exclude`.
	Mode string `pulumi:"mode"`
	// Condition filter to match devices. For more information, see [official documentation](https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices#supported-operators-and-device-properties-for-filters).
	Rule string `pulumi:"rule"`
}

type ConditionalAccessPolicyConditionsDevicesFilterArgs added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesFilterArgs struct {
	// Whether to include in, or exclude from, matching devices from the policy. Supported values are `include` or `exclude`.
	Mode pulumi.StringInput `pulumi:"mode"`
	// Condition filter to match devices. For more information, see [official documentation](https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices#supported-operators-and-device-properties-for-filters).
	Rule pulumi.StringInput `pulumi:"rule"`
}

func (ConditionalAccessPolicyConditionsDevicesFilterArgs) ElementType added in v5.10.0 

func (ConditionalAccessPolicyConditionsDevicesFilterArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterOutput added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterOutput() ConditionalAccessPolicyConditionsDevicesFilterOutput

func (ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterOutputWithContext added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesFilterOutput

func (ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput() ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

func (ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext added in v5.10.0 

func (i ConditionalAccessPolicyConditionsDevicesFilterArgs) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

type ConditionalAccessPolicyConditionsDevicesFilterInput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesFilterInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsDevicesFilterOutput() ConditionalAccessPolicyConditionsDevicesFilterOutput
	ToConditionalAccessPolicyConditionsDevicesFilterOutputWithContext(context.Context) ConditionalAccessPolicyConditionsDevicesFilterOutput
}

ConditionalAccessPolicyConditionsDevicesFilterInput is an input type that accepts ConditionalAccessPolicyConditionsDevicesFilterArgs and ConditionalAccessPolicyConditionsDevicesFilterOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsDevicesFilterInput` via: 

ConditionalAccessPolicyConditionsDevicesFilterArgs{...}

type ConditionalAccessPolicyConditionsDevicesFilterOutput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesFilterOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) ElementType added in v5.10.0 

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) Mode added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterOutput) Mode() pulumi.StringOutput

Whether to include in, or exclude from, matching devices from the policy. Supported values are `include` or `exclude`.

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) Rule added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterOutput) Rule() pulumi.StringOutput

Condition filter to match devices. For more information, see [official documentation](https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices#supported-operators-and-device-properties-for-filters).

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterOutput added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterOutput() ConditionalAccessPolicyConditionsDevicesFilterOutput

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterOutputWithContext added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesFilterOutput

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput() ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

func (ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

type ConditionalAccessPolicyConditionsDevicesFilterPtrInput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesFilterPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput() ConditionalAccessPolicyConditionsDevicesFilterPtrOutput
	ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsDevicesFilterPtrOutput
}

ConditionalAccessPolicyConditionsDevicesFilterPtrInput is an input type that accepts ConditionalAccessPolicyConditionsDevicesFilterArgs, ConditionalAccessPolicyConditionsDevicesFilterPtr and ConditionalAccessPolicyConditionsDevicesFilterPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsDevicesFilterPtrInput` via: 

        ConditionalAccessPolicyConditionsDevicesFilterArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsDevicesFilterPtr added in v5.10.0 

func ConditionalAccessPolicyConditionsDevicesFilterPtr(v *ConditionalAccessPolicyConditionsDevicesFilterArgs) ConditionalAccessPolicyConditionsDevicesFilterPtrInput

type ConditionalAccessPolicyConditionsDevicesFilterPtrOutput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesFilterPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) Elem added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) Elem() ConditionalAccessPolicyConditionsDevicesFilterOutput

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) ElementType added in v5.10.0 

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) Mode added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) Mode() pulumi.StringPtrOutput

Whether to include in, or exclude from, matching devices from the policy. Supported values are `include` or `exclude`.

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) Rule added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) Rule() pulumi.StringPtrOutput

Condition filter to match devices. For more information, see [official documentation](https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices#supported-operators-and-device-properties-for-filters).

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutput() ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

func (ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesFilterPtrOutput) ToConditionalAccessPolicyConditionsDevicesFilterPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

type ConditionalAccessPolicyConditionsDevicesInput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsDevicesOutput() ConditionalAccessPolicyConditionsDevicesOutput
	ToConditionalAccessPolicyConditionsDevicesOutputWithContext(context.Context) ConditionalAccessPolicyConditionsDevicesOutput
}

ConditionalAccessPolicyConditionsDevicesInput is an input type that accepts ConditionalAccessPolicyConditionsDevicesArgs and ConditionalAccessPolicyConditionsDevicesOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsDevicesInput` via: 

ConditionalAccessPolicyConditionsDevicesArgs{...}

type ConditionalAccessPolicyConditionsDevicesOutput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsDevicesOutput) ElementType added in v5.10.0 

func (ConditionalAccessPolicyConditionsDevicesOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsDevicesOutput) Filter added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesOutput) Filter() ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

A `filter` block as described below. A `filter` block can be added to an existing policy, but removing the `filter` block forces a new resource to be created.

func (ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesOutput added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesOutput() ConditionalAccessPolicyConditionsDevicesOutput

func (ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesOutputWithContext added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesOutput

func (ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutput added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutput() ConditionalAccessPolicyConditionsDevicesPtrOutput

func (ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesPtrOutput

type ConditionalAccessPolicyConditionsDevicesPtrInput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsDevicesPtrOutput() ConditionalAccessPolicyConditionsDevicesPtrOutput
	ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsDevicesPtrOutput
}

ConditionalAccessPolicyConditionsDevicesPtrInput is an input type that accepts ConditionalAccessPolicyConditionsDevicesArgs, ConditionalAccessPolicyConditionsDevicesPtr and ConditionalAccessPolicyConditionsDevicesPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsDevicesPtrInput` via: 

        ConditionalAccessPolicyConditionsDevicesArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsDevicesPtr added in v5.10.0 

func ConditionalAccessPolicyConditionsDevicesPtr(v *ConditionalAccessPolicyConditionsDevicesArgs) ConditionalAccessPolicyConditionsDevicesPtrInput

type ConditionalAccessPolicyConditionsDevicesPtrOutput added in v5.10.0 

type ConditionalAccessPolicyConditionsDevicesPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsDevicesPtrOutput) Elem added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesPtrOutput) Elem() ConditionalAccessPolicyConditionsDevicesOutput

func (ConditionalAccessPolicyConditionsDevicesPtrOutput) ElementType added in v5.10.0 

func (ConditionalAccessPolicyConditionsDevicesPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsDevicesPtrOutput) Filter added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesPtrOutput) Filter() ConditionalAccessPolicyConditionsDevicesFilterPtrOutput

A `filter` block as described below. A `filter` block can be added to an existing policy, but removing the `filter` block forces a new resource to be created.

func (ConditionalAccessPolicyConditionsDevicesPtrOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutput added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesPtrOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutput() ConditionalAccessPolicyConditionsDevicesPtrOutput

func (ConditionalAccessPolicyConditionsDevicesPtrOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext added in v5.10.0 

func (o ConditionalAccessPolicyConditionsDevicesPtrOutput) ToConditionalAccessPolicyConditionsDevicesPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsDevicesPtrOutput

type ConditionalAccessPolicyConditionsInput added in v5.2.0 

type ConditionalAccessPolicyConditionsInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsOutput() ConditionalAccessPolicyConditionsOutput
	ToConditionalAccessPolicyConditionsOutputWithContext(context.Context) ConditionalAccessPolicyConditionsOutput
}

ConditionalAccessPolicyConditionsInput is an input type that accepts ConditionalAccessPolicyConditionsArgs and ConditionalAccessPolicyConditionsOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsInput` via: 

ConditionalAccessPolicyConditionsArgs{...}

type ConditionalAccessPolicyConditionsLocations added in v5.2.0 

type ConditionalAccessPolicyConditionsLocations struct {
	// A list of location IDs excluded from scope of policy.
	ExcludedLocations []string `pulumi:"excludedLocations"`
	// A list of location IDs in scope of policy unless explicitly excluded. Can also be set to `All`, or `AllTrusted`.
	IncludedLocations []string `pulumi:"includedLocations"`
}

type ConditionalAccessPolicyConditionsLocationsArgs added in v5.2.0 

type ConditionalAccessPolicyConditionsLocationsArgs struct {
	// A list of location IDs excluded from scope of policy.
	ExcludedLocations pulumi.StringArrayInput `pulumi:"excludedLocations"`
	// A list of location IDs in scope of policy unless explicitly excluded. Can also be set to `All`, or `AllTrusted`.
	IncludedLocations pulumi.StringArrayInput `pulumi:"includedLocations"`
}

func (ConditionalAccessPolicyConditionsLocationsArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsLocationsArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsOutput() ConditionalAccessPolicyConditionsLocationsOutput

func (ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsLocationsOutput

func (ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsPtrOutput() ConditionalAccessPolicyConditionsLocationsPtrOutput

func (ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsLocationsArgs) ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsLocationsPtrOutput

type ConditionalAccessPolicyConditionsLocationsInput added in v5.2.0 

type ConditionalAccessPolicyConditionsLocationsInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsLocationsOutput() ConditionalAccessPolicyConditionsLocationsOutput
	ToConditionalAccessPolicyConditionsLocationsOutputWithContext(context.Context) ConditionalAccessPolicyConditionsLocationsOutput
}

ConditionalAccessPolicyConditionsLocationsInput is an input type that accepts ConditionalAccessPolicyConditionsLocationsArgs and ConditionalAccessPolicyConditionsLocationsOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsLocationsInput` via: 

ConditionalAccessPolicyConditionsLocationsArgs{...}

type ConditionalAccessPolicyConditionsLocationsOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsLocationsOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsLocationsOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsLocationsOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsLocationsOutput) ExcludedLocations added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsOutput) ExcludedLocations() pulumi.StringArrayOutput

A list of location IDs excluded from scope of policy.

func (ConditionalAccessPolicyConditionsLocationsOutput) IncludedLocations added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsOutput) IncludedLocations() pulumi.StringArrayOutput

A list of location IDs in scope of policy unless explicitly excluded. Can also be set to `All`, or `AllTrusted`.

func (ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsOutput() ConditionalAccessPolicyConditionsLocationsOutput

func (ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsLocationsOutput

func (ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutput() ConditionalAccessPolicyConditionsLocationsPtrOutput

func (ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsLocationsPtrOutput

type ConditionalAccessPolicyConditionsLocationsPtrInput added in v5.2.0 

type ConditionalAccessPolicyConditionsLocationsPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsLocationsPtrOutput() ConditionalAccessPolicyConditionsLocationsPtrOutput
	ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsLocationsPtrOutput
}

ConditionalAccessPolicyConditionsLocationsPtrInput is an input type that accepts ConditionalAccessPolicyConditionsLocationsArgs, ConditionalAccessPolicyConditionsLocationsPtr and ConditionalAccessPolicyConditionsLocationsPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsLocationsPtrInput` via: 

        ConditionalAccessPolicyConditionsLocationsArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsLocationsPtr added in v5.2.0 

func ConditionalAccessPolicyConditionsLocationsPtr(v *ConditionalAccessPolicyConditionsLocationsArgs) ConditionalAccessPolicyConditionsLocationsPtrInput

type ConditionalAccessPolicyConditionsLocationsPtrOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsLocationsPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsPtrOutput) Elem() ConditionalAccessPolicyConditionsLocationsOutput

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) ExcludedLocations added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsPtrOutput) ExcludedLocations() pulumi.StringArrayOutput

A list of location IDs excluded from scope of policy.

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) IncludedLocations added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsPtrOutput) IncludedLocations() pulumi.StringArrayOutput

A list of location IDs in scope of policy unless explicitly excluded. Can also be set to `All`, or `AllTrusted`.

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsPtrOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutput() ConditionalAccessPolicyConditionsLocationsPtrOutput

func (ConditionalAccessPolicyConditionsLocationsPtrOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsLocationsPtrOutput) ToConditionalAccessPolicyConditionsLocationsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsLocationsPtrOutput

type ConditionalAccessPolicyConditionsOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsOutput) Applications added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) Applications() ConditionalAccessPolicyConditionsApplicationsOutput

An `applications` block as documented below, which specifies applications and user actions included in and excluded from the policy.

func (ConditionalAccessPolicyConditionsOutput) ClientAppTypes added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) ClientAppTypes() pulumi.StringArrayOutput

A list of client application types included in the policy. Possible values are: `all`, `browser`, `mobileAppsAndDesktopClients`, `exchangeActiveSync`, `easSupported` and `other`.

func (ConditionalAccessPolicyConditionsOutput) Devices added in v5.10.0 

func (o ConditionalAccessPolicyConditionsOutput) Devices() ConditionalAccessPolicyConditionsDevicesPtrOutput

A `devices` block as documented below, which describes devices to be included in and excluded from the policy. A `devices` block can be added to an existing policy, but removing the `devices` block forces a new resource to be created.

func (ConditionalAccessPolicyConditionsOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsOutput) Locations added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) Locations() ConditionalAccessPolicyConditionsLocationsPtrOutput

A `locations` block as documented below, which specifies locations included in and excluded from the policy.

func (ConditionalAccessPolicyConditionsOutput) Platforms added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) Platforms() ConditionalAccessPolicyConditionsPlatformsPtrOutput

A `platforms` block as documented below, which specifies platforms included in and excluded from the policy.

func (ConditionalAccessPolicyConditionsOutput) SignInRiskLevels added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) SignInRiskLevels() pulumi.StringArrayOutput

A list of sign-in risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsOutput() ConditionalAccessPolicyConditionsOutput

func (ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsOutput

func (ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsPtrOutput() ConditionalAccessPolicyConditionsPtrOutput

func (ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) ToConditionalAccessPolicyConditionsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPtrOutput

func (ConditionalAccessPolicyConditionsOutput) UserRiskLevels added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) UserRiskLevels() pulumi.StringArrayOutput

A list of user risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsOutput) Users added in v5.2.0 

func (o ConditionalAccessPolicyConditionsOutput) Users() ConditionalAccessPolicyConditionsUsersOutput

A `users` block as documented below, which specifies users, groups, and roles included in and excluded from the policy.

type ConditionalAccessPolicyConditionsPlatforms added in v5.2.0 

type ConditionalAccessPolicyConditionsPlatforms struct {
	// A list of platforms explicitly excluded from the policy. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.
	ExcludedPlatforms []string `pulumi:"excludedPlatforms"`
	// A list of platforms the policy applies to, unless explicitly excluded. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.
	IncludedPlatforms []string `pulumi:"includedPlatforms"`
}

type ConditionalAccessPolicyConditionsPlatformsArgs added in v5.2.0 

type ConditionalAccessPolicyConditionsPlatformsArgs struct {
	// A list of platforms explicitly excluded from the policy. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.
	ExcludedPlatforms pulumi.StringArrayInput `pulumi:"excludedPlatforms"`
	// A list of platforms the policy applies to, unless explicitly excluded. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.
	IncludedPlatforms pulumi.StringArrayInput `pulumi:"includedPlatforms"`
}

func (ConditionalAccessPolicyConditionsPlatformsArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsPlatformsArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsOutput() ConditionalAccessPolicyConditionsPlatformsOutput

func (ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPlatformsOutput

func (ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsPtrOutput() ConditionalAccessPolicyConditionsPlatformsPtrOutput

func (ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsPlatformsArgs) ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPlatformsPtrOutput

type ConditionalAccessPolicyConditionsPlatformsInput added in v5.2.0 

type ConditionalAccessPolicyConditionsPlatformsInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsPlatformsOutput() ConditionalAccessPolicyConditionsPlatformsOutput
	ToConditionalAccessPolicyConditionsPlatformsOutputWithContext(context.Context) ConditionalAccessPolicyConditionsPlatformsOutput
}

ConditionalAccessPolicyConditionsPlatformsInput is an input type that accepts ConditionalAccessPolicyConditionsPlatformsArgs and ConditionalAccessPolicyConditionsPlatformsOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsPlatformsInput` via: 

ConditionalAccessPolicyConditionsPlatformsArgs{...}

type ConditionalAccessPolicyConditionsPlatformsOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsPlatformsOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsPlatformsOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsPlatformsOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsPlatformsOutput) ExcludedPlatforms added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsOutput) ExcludedPlatforms() pulumi.StringArrayOutput

A list of platforms explicitly excluded from the policy. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsPlatformsOutput) IncludedPlatforms added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsOutput) IncludedPlatforms() pulumi.StringArrayOutput

A list of platforms the policy applies to, unless explicitly excluded. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsOutput() ConditionalAccessPolicyConditionsPlatformsOutput

func (ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPlatformsOutput

func (ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutput() ConditionalAccessPolicyConditionsPlatformsPtrOutput

func (ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPlatformsPtrOutput

type ConditionalAccessPolicyConditionsPlatformsPtrInput added in v5.2.0 

type ConditionalAccessPolicyConditionsPlatformsPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsPlatformsPtrOutput() ConditionalAccessPolicyConditionsPlatformsPtrOutput
	ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsPlatformsPtrOutput
}

ConditionalAccessPolicyConditionsPlatformsPtrInput is an input type that accepts ConditionalAccessPolicyConditionsPlatformsArgs, ConditionalAccessPolicyConditionsPlatformsPtr and ConditionalAccessPolicyConditionsPlatformsPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsPlatformsPtrInput` via: 

        ConditionalAccessPolicyConditionsPlatformsArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsPlatformsPtr added in v5.2.0 

func ConditionalAccessPolicyConditionsPlatformsPtr(v *ConditionalAccessPolicyConditionsPlatformsArgs) ConditionalAccessPolicyConditionsPlatformsPtrInput

type ConditionalAccessPolicyConditionsPlatformsPtrOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsPlatformsPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsPtrOutput) Elem() ConditionalAccessPolicyConditionsPlatformsOutput

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) ExcludedPlatforms added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsPtrOutput) ExcludedPlatforms() pulumi.StringArrayOutput

A list of platforms explicitly excluded from the policy. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) IncludedPlatforms added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsPtrOutput) IncludedPlatforms() pulumi.StringArrayOutput

A list of platforms the policy applies to, unless explicitly excluded. Possible values are: `all`, `android`, `iOS`, `linux`, `macOS`, `windows`, `windowsPhone` or `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsPtrOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutput() ConditionalAccessPolicyConditionsPlatformsPtrOutput

func (ConditionalAccessPolicyConditionsPlatformsPtrOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPlatformsPtrOutput) ToConditionalAccessPolicyConditionsPlatformsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPlatformsPtrOutput

type ConditionalAccessPolicyConditionsPtrInput added in v5.2.0 

type ConditionalAccessPolicyConditionsPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsPtrOutput() ConditionalAccessPolicyConditionsPtrOutput
	ToConditionalAccessPolicyConditionsPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsPtrOutput
}

ConditionalAccessPolicyConditionsPtrInput is an input type that accepts ConditionalAccessPolicyConditionsArgs, ConditionalAccessPolicyConditionsPtr and ConditionalAccessPolicyConditionsPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsPtrInput` via: 

        ConditionalAccessPolicyConditionsArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsPtr added in v5.2.0 

func ConditionalAccessPolicyConditionsPtr(v *ConditionalAccessPolicyConditionsArgs) ConditionalAccessPolicyConditionsPtrInput

type ConditionalAccessPolicyConditionsPtrOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsPtrOutput) Applications added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) Applications() ConditionalAccessPolicyConditionsApplicationsPtrOutput

An `applications` block as documented below, which specifies applications and user actions included in and excluded from the policy.

func (ConditionalAccessPolicyConditionsPtrOutput) ClientAppTypes added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) ClientAppTypes() pulumi.StringArrayOutput

A list of client application types included in the policy. Possible values are: `all`, `browser`, `mobileAppsAndDesktopClients`, `exchangeActiveSync`, `easSupported` and `other`.

func (ConditionalAccessPolicyConditionsPtrOutput) Devices added in v5.10.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) Devices() ConditionalAccessPolicyConditionsDevicesPtrOutput

A `devices` block as documented below, which describes devices to be included in and excluded from the policy. A `devices` block can be added to an existing policy, but removing the `devices` block forces a new resource to be created.

func (ConditionalAccessPolicyConditionsPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) Elem() ConditionalAccessPolicyConditionsOutput

func (ConditionalAccessPolicyConditionsPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsPtrOutput) Locations added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) Locations() ConditionalAccessPolicyConditionsLocationsPtrOutput

A `locations` block as documented below, which specifies locations included in and excluded from the policy.

func (ConditionalAccessPolicyConditionsPtrOutput) Platforms added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) Platforms() ConditionalAccessPolicyConditionsPlatformsPtrOutput

A `platforms` block as documented below, which specifies platforms included in and excluded from the policy.

func (ConditionalAccessPolicyConditionsPtrOutput) SignInRiskLevels added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) SignInRiskLevels() pulumi.StringArrayOutput

A list of sign-in risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsPtrOutput) ToConditionalAccessPolicyConditionsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) ToConditionalAccessPolicyConditionsPtrOutput() ConditionalAccessPolicyConditionsPtrOutput

func (ConditionalAccessPolicyConditionsPtrOutput) ToConditionalAccessPolicyConditionsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) ToConditionalAccessPolicyConditionsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsPtrOutput

func (ConditionalAccessPolicyConditionsPtrOutput) UserRiskLevels added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) UserRiskLevels() pulumi.StringArrayOutput

A list of user risk levels included in the policy. Possible values are: `low`, `medium`, `high`, `hidden`, `none`, `unknownFutureValue`.

func (ConditionalAccessPolicyConditionsPtrOutput) Users added in v5.2.0 

func (o ConditionalAccessPolicyConditionsPtrOutput) Users() ConditionalAccessPolicyConditionsUsersPtrOutput

A `users` block as documented below, which specifies users, groups, and roles included in and excluded from the policy.

type ConditionalAccessPolicyConditionsUsers added in v5.2.0 

type ConditionalAccessPolicyConditionsUsers struct {
	// A list of group IDs excluded from scope of policy.
	ExcludedGroups []string `pulumi:"excludedGroups"`
	// A list of role IDs excluded from scope of policy.
	ExcludedRoles []string `pulumi:"excludedRoles"`
	// A list of user IDs excluded from scope of policy and/or `GuestsOrExternalUsers`.
	ExcludedUsers []string `pulumi:"excludedUsers"`
	// A list of group IDs in scope of policy unless explicitly excluded.
	IncludedGroups []string `pulumi:"includedGroups"`
	// A list of role IDs in scope of policy unless explicitly excluded.
	IncludedRoles []string `pulumi:"includedRoles"`
	// A list of user IDs in scope of policy unless explicitly excluded, or `None` or `All` or `GuestsOrExternalUsers`.
	IncludedUsers []string `pulumi:"includedUsers"`
}

type ConditionalAccessPolicyConditionsUsersArgs added in v5.2.0 

type ConditionalAccessPolicyConditionsUsersArgs struct {
	// A list of group IDs excluded from scope of policy.
	ExcludedGroups pulumi.StringArrayInput `pulumi:"excludedGroups"`
	// A list of role IDs excluded from scope of policy.
	ExcludedRoles pulumi.StringArrayInput `pulumi:"excludedRoles"`
	// A list of user IDs excluded from scope of policy and/or `GuestsOrExternalUsers`.
	ExcludedUsers pulumi.StringArrayInput `pulumi:"excludedUsers"`
	// A list of group IDs in scope of policy unless explicitly excluded.
	IncludedGroups pulumi.StringArrayInput `pulumi:"includedGroups"`
	// A list of role IDs in scope of policy unless explicitly excluded.
	IncludedRoles pulumi.StringArrayInput `pulumi:"includedRoles"`
	// A list of user IDs in scope of policy unless explicitly excluded, or `None` or `All` or `GuestsOrExternalUsers`.
	IncludedUsers pulumi.StringArrayInput `pulumi:"includedUsers"`
}

func (ConditionalAccessPolicyConditionsUsersArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsUsersArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersOutput() ConditionalAccessPolicyConditionsUsersOutput

func (ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsUsersOutput

func (ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersPtrOutput() ConditionalAccessPolicyConditionsUsersPtrOutput

func (ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyConditionsUsersArgs) ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsUsersPtrOutput

type ConditionalAccessPolicyConditionsUsersInput added in v5.2.0 

type ConditionalAccessPolicyConditionsUsersInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsUsersOutput() ConditionalAccessPolicyConditionsUsersOutput
	ToConditionalAccessPolicyConditionsUsersOutputWithContext(context.Context) ConditionalAccessPolicyConditionsUsersOutput
}

ConditionalAccessPolicyConditionsUsersInput is an input type that accepts ConditionalAccessPolicyConditionsUsersArgs and ConditionalAccessPolicyConditionsUsersOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsUsersInput` via: 

ConditionalAccessPolicyConditionsUsersArgs{...}

type ConditionalAccessPolicyConditionsUsersOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsUsersOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsUsersOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsUsersOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsUsersOutput) ExcludedGroups added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ExcludedGroups() pulumi.StringArrayOutput

A list of group IDs excluded from scope of policy.

func (ConditionalAccessPolicyConditionsUsersOutput) ExcludedRoles added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ExcludedRoles() pulumi.StringArrayOutput

A list of role IDs excluded from scope of policy.

func (ConditionalAccessPolicyConditionsUsersOutput) ExcludedUsers added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ExcludedUsers() pulumi.StringArrayOutput

A list of user IDs excluded from scope of policy and/or `GuestsOrExternalUsers`.

func (ConditionalAccessPolicyConditionsUsersOutput) IncludedGroups added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) IncludedGroups() pulumi.StringArrayOutput

A list of group IDs in scope of policy unless explicitly excluded.

func (ConditionalAccessPolicyConditionsUsersOutput) IncludedRoles added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) IncludedRoles() pulumi.StringArrayOutput

A list of role IDs in scope of policy unless explicitly excluded.

func (ConditionalAccessPolicyConditionsUsersOutput) IncludedUsers added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) IncludedUsers() pulumi.StringArrayOutput

A list of user IDs in scope of policy unless explicitly excluded, or `None` or `All` or `GuestsOrExternalUsers`.

func (ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersOutput() ConditionalAccessPolicyConditionsUsersOutput

func (ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsUsersOutput

func (ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersPtrOutput() ConditionalAccessPolicyConditionsUsersPtrOutput

func (ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersOutput) ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsUsersPtrOutput

type ConditionalAccessPolicyConditionsUsersPtrInput added in v5.2.0 

type ConditionalAccessPolicyConditionsUsersPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyConditionsUsersPtrOutput() ConditionalAccessPolicyConditionsUsersPtrOutput
	ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext(context.Context) ConditionalAccessPolicyConditionsUsersPtrOutput
}

ConditionalAccessPolicyConditionsUsersPtrInput is an input type that accepts ConditionalAccessPolicyConditionsUsersArgs, ConditionalAccessPolicyConditionsUsersPtr and ConditionalAccessPolicyConditionsUsersPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyConditionsUsersPtrInput` via: 

        ConditionalAccessPolicyConditionsUsersArgs{...}

or:

        nil

func ConditionalAccessPolicyConditionsUsersPtr added in v5.2.0 

func ConditionalAccessPolicyConditionsUsersPtr(v *ConditionalAccessPolicyConditionsUsersArgs) ConditionalAccessPolicyConditionsUsersPtrInput

type ConditionalAccessPolicyConditionsUsersPtrOutput added in v5.2.0 

type ConditionalAccessPolicyConditionsUsersPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyConditionsUsersPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) Elem() ConditionalAccessPolicyConditionsUsersOutput

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ExcludedGroups added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) ExcludedGroups() pulumi.StringArrayOutput

A list of group IDs excluded from scope of policy.

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ExcludedRoles added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) ExcludedRoles() pulumi.StringArrayOutput

A list of role IDs excluded from scope of policy.

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ExcludedUsers added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) ExcludedUsers() pulumi.StringArrayOutput

A list of user IDs excluded from scope of policy and/or `GuestsOrExternalUsers`.

func (ConditionalAccessPolicyConditionsUsersPtrOutput) IncludedGroups added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) IncludedGroups() pulumi.StringArrayOutput

A list of group IDs in scope of policy unless explicitly excluded.

func (ConditionalAccessPolicyConditionsUsersPtrOutput) IncludedRoles added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) IncludedRoles() pulumi.StringArrayOutput

A list of role IDs in scope of policy unless explicitly excluded.

func (ConditionalAccessPolicyConditionsUsersPtrOutput) IncludedUsers added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) IncludedUsers() pulumi.StringArrayOutput

A list of user IDs in scope of policy unless explicitly excluded, or `None` or `All` or `GuestsOrExternalUsers`.

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ToConditionalAccessPolicyConditionsUsersPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) ToConditionalAccessPolicyConditionsUsersPtrOutput() ConditionalAccessPolicyConditionsUsersPtrOutput

func (ConditionalAccessPolicyConditionsUsersPtrOutput) ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyConditionsUsersPtrOutput) ToConditionalAccessPolicyConditionsUsersPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyConditionsUsersPtrOutput

type ConditionalAccessPolicyGrantControls added in v5.2.0 

type ConditionalAccessPolicyGrantControls struct {
	// List of built-in controls required by the policy. Possible values are: `block`, `mfa`, `approvedApplication`, `compliantApplication`, `compliantDevice`, `domainJoinedDevice`, `passwordChange` or `unknownFutureValue`.
	BuiltInControls []string `pulumi:"builtInControls"`
	// List of custom controls IDs required by the policy.
	CustomAuthenticationFactors []string `pulumi:"customAuthenticationFactors"`
	// Defines the relationship of the grant controls. Possible values are: `AND`, `OR`.
	Operator string `pulumi:"operator"`
	// List of terms of use IDs required by the policy.
	TermsOfUses []string `pulumi:"termsOfUses"`
}

type ConditionalAccessPolicyGrantControlsArgs added in v5.2.0 

type ConditionalAccessPolicyGrantControlsArgs struct {
	// List of built-in controls required by the policy. Possible values are: `block`, `mfa`, `approvedApplication`, `compliantApplication`, `compliantDevice`, `domainJoinedDevice`, `passwordChange` or `unknownFutureValue`.
	BuiltInControls pulumi.StringArrayInput `pulumi:"builtInControls"`
	// List of custom controls IDs required by the policy.
	CustomAuthenticationFactors pulumi.StringArrayInput `pulumi:"customAuthenticationFactors"`
	// Defines the relationship of the grant controls. Possible values are: `AND`, `OR`.
	Operator pulumi.StringInput `pulumi:"operator"`
	// List of terms of use IDs required by the policy.
	TermsOfUses pulumi.StringArrayInput `pulumi:"termsOfUses"`
}

func (ConditionalAccessPolicyGrantControlsArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicyGrantControlsArgs) ElementType() reflect.Type

func (ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsOutput added in v5.2.0 

func (i ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsOutput() ConditionalAccessPolicyGrantControlsOutput

func (ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsOutputWithContext(ctx context.Context) ConditionalAccessPolicyGrantControlsOutput

func (ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsPtrOutput() ConditionalAccessPolicyGrantControlsPtrOutput

func (ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyGrantControlsArgs) ToConditionalAccessPolicyGrantControlsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyGrantControlsPtrOutput

type ConditionalAccessPolicyGrantControlsInput added in v5.2.0 

type ConditionalAccessPolicyGrantControlsInput interface {
	pulumi.Input

	ToConditionalAccessPolicyGrantControlsOutput() ConditionalAccessPolicyGrantControlsOutput
	ToConditionalAccessPolicyGrantControlsOutputWithContext(context.Context) ConditionalAccessPolicyGrantControlsOutput
}

ConditionalAccessPolicyGrantControlsInput is an input type that accepts ConditionalAccessPolicyGrantControlsArgs and ConditionalAccessPolicyGrantControlsOutput values. You can construct a concrete instance of `ConditionalAccessPolicyGrantControlsInput` via: 

ConditionalAccessPolicyGrantControlsArgs{...}

type ConditionalAccessPolicyGrantControlsOutput added in v5.2.0 

type ConditionalAccessPolicyGrantControlsOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyGrantControlsOutput) BuiltInControls added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) BuiltInControls() pulumi.StringArrayOutput

List of built-in controls required by the policy. Possible values are: `block`, `mfa`, `approvedApplication`, `compliantApplication`, `compliantDevice`, `domainJoinedDevice`, `passwordChange` or `unknownFutureValue`.

func (ConditionalAccessPolicyGrantControlsOutput) CustomAuthenticationFactors added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) CustomAuthenticationFactors() pulumi.StringArrayOutput

List of custom controls IDs required by the policy.

func (ConditionalAccessPolicyGrantControlsOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyGrantControlsOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyGrantControlsOutput) Operator added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) Operator() pulumi.StringOutput

Defines the relationship of the grant controls. Possible values are: `AND`, `OR`.

func (ConditionalAccessPolicyGrantControlsOutput) TermsOfUses added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) TermsOfUses() pulumi.StringArrayOutput

List of terms of use IDs required by the policy.

func (ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsOutput added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsOutput() ConditionalAccessPolicyGrantControlsOutput

func (ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsOutputWithContext(ctx context.Context) ConditionalAccessPolicyGrantControlsOutput

func (ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsPtrOutput() ConditionalAccessPolicyGrantControlsPtrOutput

func (ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsOutput) ToConditionalAccessPolicyGrantControlsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyGrantControlsPtrOutput

type ConditionalAccessPolicyGrantControlsPtrInput added in v5.2.0 

type ConditionalAccessPolicyGrantControlsPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicyGrantControlsPtrOutput() ConditionalAccessPolicyGrantControlsPtrOutput
	ToConditionalAccessPolicyGrantControlsPtrOutputWithContext(context.Context) ConditionalAccessPolicyGrantControlsPtrOutput
}

ConditionalAccessPolicyGrantControlsPtrInput is an input type that accepts ConditionalAccessPolicyGrantControlsArgs, ConditionalAccessPolicyGrantControlsPtr and ConditionalAccessPolicyGrantControlsPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicyGrantControlsPtrInput` via: 

        ConditionalAccessPolicyGrantControlsArgs{...}

or:

        nil

func ConditionalAccessPolicyGrantControlsPtr added in v5.2.0 

func ConditionalAccessPolicyGrantControlsPtr(v *ConditionalAccessPolicyGrantControlsArgs) ConditionalAccessPolicyGrantControlsPtrInput

type ConditionalAccessPolicyGrantControlsPtrOutput added in v5.2.0 

type ConditionalAccessPolicyGrantControlsPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyGrantControlsPtrOutput) BuiltInControls added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) BuiltInControls() pulumi.StringArrayOutput

List of built-in controls required by the policy. Possible values are: `block`, `mfa`, `approvedApplication`, `compliantApplication`, `compliantDevice`, `domainJoinedDevice`, `passwordChange` or `unknownFutureValue`.

func (ConditionalAccessPolicyGrantControlsPtrOutput) CustomAuthenticationFactors added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) CustomAuthenticationFactors() pulumi.StringArrayOutput

List of custom controls IDs required by the policy.

func (ConditionalAccessPolicyGrantControlsPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) Elem() ConditionalAccessPolicyGrantControlsOutput

func (ConditionalAccessPolicyGrantControlsPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyGrantControlsPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyGrantControlsPtrOutput) Operator added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) Operator() pulumi.StringPtrOutput

Defines the relationship of the grant controls. Possible values are: `AND`, `OR`.

func (ConditionalAccessPolicyGrantControlsPtrOutput) TermsOfUses added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) TermsOfUses() pulumi.StringArrayOutput

List of terms of use IDs required by the policy.

func (ConditionalAccessPolicyGrantControlsPtrOutput) ToConditionalAccessPolicyGrantControlsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) ToConditionalAccessPolicyGrantControlsPtrOutput() ConditionalAccessPolicyGrantControlsPtrOutput

func (ConditionalAccessPolicyGrantControlsPtrOutput) ToConditionalAccessPolicyGrantControlsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyGrantControlsPtrOutput) ToConditionalAccessPolicyGrantControlsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicyGrantControlsPtrOutput

type ConditionalAccessPolicyInput added in v5.2.0 

type ConditionalAccessPolicyInput interface {
	pulumi.Input

	ToConditionalAccessPolicyOutput() ConditionalAccessPolicyOutput
	ToConditionalAccessPolicyOutputWithContext(ctx context.Context) ConditionalAccessPolicyOutput
}

type ConditionalAccessPolicyMap added in v5.2.0 

type ConditionalAccessPolicyMap map[string]ConditionalAccessPolicyInput

func (ConditionalAccessPolicyMap) ElementType added in v5.2.0 

func (ConditionalAccessPolicyMap) ElementType() reflect.Type

func (ConditionalAccessPolicyMap) ToConditionalAccessPolicyMapOutput added in v5.2.0 

func (i ConditionalAccessPolicyMap) ToConditionalAccessPolicyMapOutput() ConditionalAccessPolicyMapOutput

func (ConditionalAccessPolicyMap) ToConditionalAccessPolicyMapOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicyMap) ToConditionalAccessPolicyMapOutputWithContext(ctx context.Context) ConditionalAccessPolicyMapOutput

type ConditionalAccessPolicyMapInput added in v5.2.0 

type ConditionalAccessPolicyMapInput interface {
	pulumi.Input

	ToConditionalAccessPolicyMapOutput() ConditionalAccessPolicyMapOutput
	ToConditionalAccessPolicyMapOutputWithContext(context.Context) ConditionalAccessPolicyMapOutput
}

ConditionalAccessPolicyMapInput is an input type that accepts ConditionalAccessPolicyMap and ConditionalAccessPolicyMapOutput values. You can construct a concrete instance of `ConditionalAccessPolicyMapInput` via: 

ConditionalAccessPolicyMap{ "key": ConditionalAccessPolicyArgs{...} }

type ConditionalAccessPolicyMapOutput added in v5.2.0 

type ConditionalAccessPolicyMapOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyMapOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyMapOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyMapOutput) MapIndex added in v5.2.0 

func (o ConditionalAccessPolicyMapOutput) MapIndex(k pulumi.StringInput) ConditionalAccessPolicyOutput

func (ConditionalAccessPolicyMapOutput) ToConditionalAccessPolicyMapOutput added in v5.2.0 

func (o ConditionalAccessPolicyMapOutput) ToConditionalAccessPolicyMapOutput() ConditionalAccessPolicyMapOutput

func (ConditionalAccessPolicyMapOutput) ToConditionalAccessPolicyMapOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyMapOutput) ToConditionalAccessPolicyMapOutputWithContext(ctx context.Context) ConditionalAccessPolicyMapOutput

type ConditionalAccessPolicyOutput added in v5.2.0 

type ConditionalAccessPolicyOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicyOutput) Conditions added in v5.22.0 

func (o ConditionalAccessPolicyOutput) Conditions() ConditionalAccessPolicyConditionsOutput

A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.

func (ConditionalAccessPolicyOutput) DisplayName added in v5.22.0 

func (o ConditionalAccessPolicyOutput) DisplayName() pulumi.StringOutput

The friendly name for this Conditional Access Policy.

func (ConditionalAccessPolicyOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicyOutput) ElementType() reflect.Type

func (ConditionalAccessPolicyOutput) GrantControls added in v5.22.0 

func (o ConditionalAccessPolicyOutput) GrantControls() ConditionalAccessPolicyGrantControlsOutput

A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.

func (ConditionalAccessPolicyOutput) SessionControls added in v5.22.0 

func (o ConditionalAccessPolicyOutput) SessionControls() ConditionalAccessPolicySessionControlsPtrOutput

A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.

func (ConditionalAccessPolicyOutput) State added in v5.22.0 

func (o ConditionalAccessPolicyOutput) State() pulumi.StringOutput

Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`

func (ConditionalAccessPolicyOutput) ToConditionalAccessPolicyOutput added in v5.2.0 

func (o ConditionalAccessPolicyOutput) ToConditionalAccessPolicyOutput() ConditionalAccessPolicyOutput

func (ConditionalAccessPolicyOutput) ToConditionalAccessPolicyOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicyOutput) ToConditionalAccessPolicyOutputWithContext(ctx context.Context) ConditionalAccessPolicyOutput

type ConditionalAccessPolicySessionControls added in v5.2.0 

type ConditionalAccessPolicySessionControls struct {
	// Whether or not application enforced restrictions are enabled. Defaults to `false`.
	ApplicationEnforcedRestrictionsEnabled *bool `pulumi:"applicationEnforcedRestrictionsEnabled"`
	// Enables cloud app security and specifies the cloud app security policy to use. Possible values are: `blockDownloads`, `mcasConfigured`, `monitorOnly` or `unknownFutureValue`.
	CloudAppSecurityPolicy *string `pulumi:"cloudAppSecurityPolicy"`
	// Session control to define whether to persist cookies or not. Possible values are: `always` or `never`.
	PersistentBrowserMode *string `pulumi:"persistentBrowserMode"`
	// Number of days or hours to enforce sign-in frequency. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.
	SignInFrequency *int `pulumi:"signInFrequency"`
	// The time period to enforce sign-in frequency. Possible values are: `hours` or `days`. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.
	SignInFrequencyPeriod *string `pulumi:"signInFrequencyPeriod"`
}

type ConditionalAccessPolicySessionControlsArgs added in v5.2.0 

type ConditionalAccessPolicySessionControlsArgs struct {
	// Whether or not application enforced restrictions are enabled. Defaults to `false`.
	ApplicationEnforcedRestrictionsEnabled pulumi.BoolPtrInput `pulumi:"applicationEnforcedRestrictionsEnabled"`
	// Enables cloud app security and specifies the cloud app security policy to use. Possible values are: `blockDownloads`, `mcasConfigured`, `monitorOnly` or `unknownFutureValue`.
	CloudAppSecurityPolicy pulumi.StringPtrInput `pulumi:"cloudAppSecurityPolicy"`
	// Session control to define whether to persist cookies or not. Possible values are: `always` or `never`.
	PersistentBrowserMode pulumi.StringPtrInput `pulumi:"persistentBrowserMode"`
	// Number of days or hours to enforce sign-in frequency. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.
	SignInFrequency pulumi.IntPtrInput `pulumi:"signInFrequency"`
	// The time period to enforce sign-in frequency. Possible values are: `hours` or `days`. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.
	SignInFrequencyPeriod pulumi.StringPtrInput `pulumi:"signInFrequencyPeriod"`
}

func (ConditionalAccessPolicySessionControlsArgs) ElementType added in v5.2.0 

func (ConditionalAccessPolicySessionControlsArgs) ElementType() reflect.Type

func (ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsOutput added in v5.2.0 

func (i ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsOutput() ConditionalAccessPolicySessionControlsOutput

func (ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsOutputWithContext(ctx context.Context) ConditionalAccessPolicySessionControlsOutput

func (ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsPtrOutput added in v5.2.0 

func (i ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsPtrOutput() ConditionalAccessPolicySessionControlsPtrOutput

func (ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsPtrOutputWithContext added in v5.2.0 

func (i ConditionalAccessPolicySessionControlsArgs) ToConditionalAccessPolicySessionControlsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicySessionControlsPtrOutput

type ConditionalAccessPolicySessionControlsInput added in v5.2.0 

type ConditionalAccessPolicySessionControlsInput interface {
	pulumi.Input

	ToConditionalAccessPolicySessionControlsOutput() ConditionalAccessPolicySessionControlsOutput
	ToConditionalAccessPolicySessionControlsOutputWithContext(context.Context) ConditionalAccessPolicySessionControlsOutput
}

ConditionalAccessPolicySessionControlsInput is an input type that accepts ConditionalAccessPolicySessionControlsArgs and ConditionalAccessPolicySessionControlsOutput values. You can construct a concrete instance of `ConditionalAccessPolicySessionControlsInput` via: 

ConditionalAccessPolicySessionControlsArgs{...}

type ConditionalAccessPolicySessionControlsOutput added in v5.2.0 

type ConditionalAccessPolicySessionControlsOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicySessionControlsOutput) ApplicationEnforcedRestrictionsEnabled added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) ApplicationEnforcedRestrictionsEnabled() pulumi.BoolPtrOutput

Whether or not application enforced restrictions are enabled. Defaults to `false`.

func (ConditionalAccessPolicySessionControlsOutput) CloudAppSecurityPolicy added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) CloudAppSecurityPolicy() pulumi.StringPtrOutput

Enables cloud app security and specifies the cloud app security policy to use. Possible values are: `blockDownloads`, `mcasConfigured`, `monitorOnly` or `unknownFutureValue`.

func (ConditionalAccessPolicySessionControlsOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicySessionControlsOutput) ElementType() reflect.Type

func (ConditionalAccessPolicySessionControlsOutput) PersistentBrowserMode added in v5.11.0 

func (o ConditionalAccessPolicySessionControlsOutput) PersistentBrowserMode() pulumi.StringPtrOutput

Session control to define whether to persist cookies or not. Possible values are: `always` or `never`.

func (ConditionalAccessPolicySessionControlsOutput) SignInFrequency added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) SignInFrequency() pulumi.IntPtrOutput

Number of days or hours to enforce sign-in frequency. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.

func (ConditionalAccessPolicySessionControlsOutput) SignInFrequencyPeriod added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) SignInFrequencyPeriod() pulumi.StringPtrOutput

The time period to enforce sign-in frequency. Possible values are: `hours` or `days`. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.

func (ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsOutput added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsOutput() ConditionalAccessPolicySessionControlsOutput

func (ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsOutputWithContext(ctx context.Context) ConditionalAccessPolicySessionControlsOutput

func (ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsPtrOutput() ConditionalAccessPolicySessionControlsPtrOutput

func (ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsOutput) ToConditionalAccessPolicySessionControlsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicySessionControlsPtrOutput

type ConditionalAccessPolicySessionControlsPtrInput added in v5.2.0 

type ConditionalAccessPolicySessionControlsPtrInput interface {
	pulumi.Input

	ToConditionalAccessPolicySessionControlsPtrOutput() ConditionalAccessPolicySessionControlsPtrOutput
	ToConditionalAccessPolicySessionControlsPtrOutputWithContext(context.Context) ConditionalAccessPolicySessionControlsPtrOutput
}

ConditionalAccessPolicySessionControlsPtrInput is an input type that accepts ConditionalAccessPolicySessionControlsArgs, ConditionalAccessPolicySessionControlsPtr and ConditionalAccessPolicySessionControlsPtrOutput values. You can construct a concrete instance of `ConditionalAccessPolicySessionControlsPtrInput` via: 

        ConditionalAccessPolicySessionControlsArgs{...}

or:

        nil

func ConditionalAccessPolicySessionControlsPtr added in v5.2.0 

func ConditionalAccessPolicySessionControlsPtr(v *ConditionalAccessPolicySessionControlsArgs) ConditionalAccessPolicySessionControlsPtrInput

type ConditionalAccessPolicySessionControlsPtrOutput added in v5.2.0 

type ConditionalAccessPolicySessionControlsPtrOutput struct{ *pulumi.OutputState }

func (ConditionalAccessPolicySessionControlsPtrOutput) ApplicationEnforcedRestrictionsEnabled added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) ApplicationEnforcedRestrictionsEnabled() pulumi.BoolPtrOutput

Whether or not application enforced restrictions are enabled. Defaults to `false`.

func (ConditionalAccessPolicySessionControlsPtrOutput) CloudAppSecurityPolicy added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) CloudAppSecurityPolicy() pulumi.StringPtrOutput

Enables cloud app security and specifies the cloud app security policy to use. Possible values are: `blockDownloads`, `mcasConfigured`, `monitorOnly` or `unknownFutureValue`.

func (ConditionalAccessPolicySessionControlsPtrOutput) Elem added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) Elem() ConditionalAccessPolicySessionControlsOutput

func (ConditionalAccessPolicySessionControlsPtrOutput) ElementType added in v5.2.0 

func (ConditionalAccessPolicySessionControlsPtrOutput) ElementType() reflect.Type

func (ConditionalAccessPolicySessionControlsPtrOutput) PersistentBrowserMode added in v5.11.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) PersistentBrowserMode() pulumi.StringPtrOutput

Session control to define whether to persist cookies or not. Possible values are: `always` or `never`.

func (ConditionalAccessPolicySessionControlsPtrOutput) SignInFrequency added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) SignInFrequency() pulumi.IntPtrOutput

Number of days or hours to enforce sign-in frequency. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.

func (ConditionalAccessPolicySessionControlsPtrOutput) SignInFrequencyPeriod added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) SignInFrequencyPeriod() pulumi.StringPtrOutput

The time period to enforce sign-in frequency. Possible values are: `hours` or `days`. Required when `signInFrequencyPeriod` is specified. Due to an API issue, removing this property forces a new resource to be created.

func (ConditionalAccessPolicySessionControlsPtrOutput) ToConditionalAccessPolicySessionControlsPtrOutput added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) ToConditionalAccessPolicySessionControlsPtrOutput() ConditionalAccessPolicySessionControlsPtrOutput

func (ConditionalAccessPolicySessionControlsPtrOutput) ToConditionalAccessPolicySessionControlsPtrOutputWithContext added in v5.2.0 

func (o ConditionalAccessPolicySessionControlsPtrOutput) ToConditionalAccessPolicySessionControlsPtrOutputWithContext(ctx context.Context) ConditionalAccessPolicySessionControlsPtrOutput

type ConditionalAccessPolicyState added in v5.2.0 

type ConditionalAccessPolicyState struct {
	// A `conditions` block as documented below, which specifies the rules that must be met for the policy to apply.
	Conditions ConditionalAccessPolicyConditionsPtrInput
	// The friendly name for this Conditional Access Policy.
	DisplayName pulumi.StringPtrInput
	// A `grantControls` block as documented below, which specifies the grant controls that must be fulfilled to pass the policy.
	GrantControls ConditionalAccessPolicyGrantControlsPtrInput
	// A `sessionControls` block as documented below, which specifies the session controls that are enforced after sign-in.
	SessionControls ConditionalAccessPolicySessionControlsPtrInput
	// Specifies the state of the policy object. Possible values are: `enabled`, `disabled` and `enabledForReportingButNotEnforced`
	State pulumi.StringPtrInput
}

func (ConditionalAccessPolicyState) ElementType added in v5.2.0 

func (ConditionalAccessPolicyState) ElementType() reflect.Type

type CustomDirectoryRole added in v5.16.0 

type CustomDirectoryRole struct {
	pulumi.CustomResourceState

	// The description of the custom directory role.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The display name of the custom directory role.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Indicates whether the role is enabled for assignment.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// The object ID of the custom directory role.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// A collection of `permissions` blocks as documented below.
	Permissions CustomDirectoryRolePermissionArrayOutput `pulumi:"permissions"`
	// Custom template identifier that is typically used if one needs an identifier to be the same across different directories. Changing this forces a new resource to be created.
	TemplateId pulumi.StringOutput `pulumi:"templateId"`
	// - The version of the role definition. This can be any arbitrary string between 1-128 characters.
	Version pulumi.StringOutput `pulumi:"version"`
}

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewCustomDirectoryRole(ctx, "example", &azuread.CustomDirectoryRoleArgs{
			Description: pulumi.String("Allows reading applications and updating groups"),
			DisplayName: pulumi.String("My Custom Role"),
			Enabled:     pulumi.Bool(true),
			Permissions: CustomDirectoryRolePermissionArray{
				&CustomDirectoryRolePermissionArgs{
					AllowedResourceActions: pulumi.StringArray{
						pulumi.String("microsoft.directory/applications/basic/update"),
						pulumi.String("microsoft.directory/applications/create"),
						pulumi.String("microsoft.directory/applications/standard/read"),
					},
				},
				&CustomDirectoryRolePermissionArgs{
					AllowedResourceActions: pulumi.StringArray{
						pulumi.String("microsoft.directory/groups/allProperties/read"),
						pulumi.String("microsoft.directory/groups/allProperties/read"),
						pulumi.String("microsoft.directory/groups/basic/update"),
						pulumi.String("microsoft.directory/groups/create"),
						pulumi.String("microsoft.directory/groups/delete"),
					},
				},
			},
			Version: pulumi.String("1.0"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

This resource does not support importing.

func GetCustomDirectoryRole added in v5.16.0 

func GetCustomDirectoryRole(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CustomDirectoryRoleState, opts ...pulumi.ResourceOption) (*CustomDirectoryRole, error)

GetCustomDirectoryRole gets an existing CustomDirectoryRole resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCustomDirectoryRole added in v5.16.0 

func NewCustomDirectoryRole(ctx *pulumi.Context,
	name string, args *CustomDirectoryRoleArgs, opts ...pulumi.ResourceOption) (*CustomDirectoryRole, error)

NewCustomDirectoryRole registers a new resource with the given unique name, arguments, and options.

func (*CustomDirectoryRole) ElementType added in v5.16.0 

func (*CustomDirectoryRole) ElementType() reflect.Type

func (*CustomDirectoryRole) ToCustomDirectoryRoleOutput added in v5.16.0 

func (i *CustomDirectoryRole) ToCustomDirectoryRoleOutput() CustomDirectoryRoleOutput

func (*CustomDirectoryRole) ToCustomDirectoryRoleOutputWithContext added in v5.16.0 

func (i *CustomDirectoryRole) ToCustomDirectoryRoleOutputWithContext(ctx context.Context) CustomDirectoryRoleOutput

type CustomDirectoryRoleArgs added in v5.16.0 

type CustomDirectoryRoleArgs struct {
	// The description of the custom directory role.
	Description pulumi.StringPtrInput
	// The display name of the custom directory role.
	DisplayName pulumi.StringInput
	// Indicates whether the role is enabled for assignment.
	Enabled pulumi.BoolInput
	// A collection of `permissions` blocks as documented below.
	Permissions CustomDirectoryRolePermissionArrayInput
	// Custom template identifier that is typically used if one needs an identifier to be the same across different directories. Changing this forces a new resource to be created.
	TemplateId pulumi.StringPtrInput
	// - The version of the role definition. This can be any arbitrary string between 1-128 characters.
	Version pulumi.StringInput
}

The set of arguments for constructing a CustomDirectoryRole resource.

func (CustomDirectoryRoleArgs) ElementType added in v5.16.0 

func (CustomDirectoryRoleArgs) ElementType() reflect.Type

type CustomDirectoryRoleArray added in v5.16.0 

type CustomDirectoryRoleArray []CustomDirectoryRoleInput

func (CustomDirectoryRoleArray) ElementType added in v5.16.0 

func (CustomDirectoryRoleArray) ElementType() reflect.Type

func (CustomDirectoryRoleArray) ToCustomDirectoryRoleArrayOutput added in v5.16.0 

func (i CustomDirectoryRoleArray) ToCustomDirectoryRoleArrayOutput() CustomDirectoryRoleArrayOutput

func (CustomDirectoryRoleArray) ToCustomDirectoryRoleArrayOutputWithContext added in v5.16.0 

func (i CustomDirectoryRoleArray) ToCustomDirectoryRoleArrayOutputWithContext(ctx context.Context) CustomDirectoryRoleArrayOutput

type CustomDirectoryRoleArrayInput added in v5.16.0 

type CustomDirectoryRoleArrayInput interface {
	pulumi.Input

	ToCustomDirectoryRoleArrayOutput() CustomDirectoryRoleArrayOutput
	ToCustomDirectoryRoleArrayOutputWithContext(context.Context) CustomDirectoryRoleArrayOutput
}

CustomDirectoryRoleArrayInput is an input type that accepts CustomDirectoryRoleArray and CustomDirectoryRoleArrayOutput values. You can construct a concrete instance of `CustomDirectoryRoleArrayInput` via: 

CustomDirectoryRoleArray{ CustomDirectoryRoleArgs{...} }

type CustomDirectoryRoleArrayOutput added in v5.16.0 

type CustomDirectoryRoleArrayOutput struct{ *pulumi.OutputState }

func (CustomDirectoryRoleArrayOutput) ElementType added in v5.16.0 

func (CustomDirectoryRoleArrayOutput) ElementType() reflect.Type

func (CustomDirectoryRoleArrayOutput) Index added in v5.16.0 

func (o CustomDirectoryRoleArrayOutput) Index(i pulumi.IntInput) CustomDirectoryRoleOutput

func (CustomDirectoryRoleArrayOutput) ToCustomDirectoryRoleArrayOutput added in v5.16.0 

func (o CustomDirectoryRoleArrayOutput) ToCustomDirectoryRoleArrayOutput() CustomDirectoryRoleArrayOutput

func (CustomDirectoryRoleArrayOutput) ToCustomDirectoryRoleArrayOutputWithContext added in v5.16.0 

func (o CustomDirectoryRoleArrayOutput) ToCustomDirectoryRoleArrayOutputWithContext(ctx context.Context) CustomDirectoryRoleArrayOutput

type CustomDirectoryRoleInput added in v5.16.0 

type CustomDirectoryRoleInput interface {
	pulumi.Input

	ToCustomDirectoryRoleOutput() CustomDirectoryRoleOutput
	ToCustomDirectoryRoleOutputWithContext(ctx context.Context) CustomDirectoryRoleOutput
}

type CustomDirectoryRoleMap added in v5.16.0 

type CustomDirectoryRoleMap map[string]CustomDirectoryRoleInput

func (CustomDirectoryRoleMap) ElementType added in v5.16.0 

func (CustomDirectoryRoleMap) ElementType() reflect.Type

func (CustomDirectoryRoleMap) ToCustomDirectoryRoleMapOutput added in v5.16.0 

func (i CustomDirectoryRoleMap) ToCustomDirectoryRoleMapOutput() CustomDirectoryRoleMapOutput

func (CustomDirectoryRoleMap) ToCustomDirectoryRoleMapOutputWithContext added in v5.16.0 

func (i CustomDirectoryRoleMap) ToCustomDirectoryRoleMapOutputWithContext(ctx context.Context) CustomDirectoryRoleMapOutput

type CustomDirectoryRoleMapInput added in v5.16.0 

type CustomDirectoryRoleMapInput interface {
	pulumi.Input

	ToCustomDirectoryRoleMapOutput() CustomDirectoryRoleMapOutput
	ToCustomDirectoryRoleMapOutputWithContext(context.Context) CustomDirectoryRoleMapOutput
}

CustomDirectoryRoleMapInput is an input type that accepts CustomDirectoryRoleMap and CustomDirectoryRoleMapOutput values. You can construct a concrete instance of `CustomDirectoryRoleMapInput` via: 

CustomDirectoryRoleMap{ "key": CustomDirectoryRoleArgs{...} }

type CustomDirectoryRoleMapOutput added in v5.16.0 

type CustomDirectoryRoleMapOutput struct{ *pulumi.OutputState }

func (CustomDirectoryRoleMapOutput) ElementType added in v5.16.0 

func (CustomDirectoryRoleMapOutput) ElementType() reflect.Type

func (CustomDirectoryRoleMapOutput) MapIndex added in v5.16.0 

func (o CustomDirectoryRoleMapOutput) MapIndex(k pulumi.StringInput) CustomDirectoryRoleOutput

func (CustomDirectoryRoleMapOutput) ToCustomDirectoryRoleMapOutput added in v5.16.0 

func (o CustomDirectoryRoleMapOutput) ToCustomDirectoryRoleMapOutput() CustomDirectoryRoleMapOutput

func (CustomDirectoryRoleMapOutput) ToCustomDirectoryRoleMapOutputWithContext added in v5.16.0 

func (o CustomDirectoryRoleMapOutput) ToCustomDirectoryRoleMapOutputWithContext(ctx context.Context) CustomDirectoryRoleMapOutput

type CustomDirectoryRoleOutput added in v5.16.0 

type CustomDirectoryRoleOutput struct{ *pulumi.OutputState }

func (CustomDirectoryRoleOutput) Description added in v5.22.0 

func (o CustomDirectoryRoleOutput) Description() pulumi.StringPtrOutput

The description of the custom directory role.

func (CustomDirectoryRoleOutput) DisplayName added in v5.22.0 

func (o CustomDirectoryRoleOutput) DisplayName() pulumi.StringOutput

The display name of the custom directory role.

func (CustomDirectoryRoleOutput) ElementType added in v5.16.0 

func (CustomDirectoryRoleOutput) ElementType() reflect.Type

func (CustomDirectoryRoleOutput) Enabled added in v5.22.0 

func (o CustomDirectoryRoleOutput) Enabled() pulumi.BoolOutput

Indicates whether the role is enabled for assignment.

func (CustomDirectoryRoleOutput) ObjectId added in v5.22.0 

func (o CustomDirectoryRoleOutput) ObjectId() pulumi.StringOutput

The object ID of the custom directory role.

func (CustomDirectoryRoleOutput) Permissions added in v5.22.0 

func (o CustomDirectoryRoleOutput) Permissions() CustomDirectoryRolePermissionArrayOutput

A collection of `permissions` blocks as documented below.

func (CustomDirectoryRoleOutput) TemplateId added in v5.22.0 

func (o CustomDirectoryRoleOutput) TemplateId() pulumi.StringOutput

Custom template identifier that is typically used if one needs an identifier to be the same across different directories. Changing this forces a new resource to be created.

func (CustomDirectoryRoleOutput) ToCustomDirectoryRoleOutput added in v5.16.0 

func (o CustomDirectoryRoleOutput) ToCustomDirectoryRoleOutput() CustomDirectoryRoleOutput

func (CustomDirectoryRoleOutput) ToCustomDirectoryRoleOutputWithContext added in v5.16.0 

func (o CustomDirectoryRoleOutput) ToCustomDirectoryRoleOutputWithContext(ctx context.Context) CustomDirectoryRoleOutput

func (CustomDirectoryRoleOutput) Version added in v5.22.0 

func (o CustomDirectoryRoleOutput) Version() pulumi.StringOutput

- The version of the role definition. This can be any arbitrary string between 1-128 characters.

type CustomDirectoryRolePermission added in v5.16.0 

type CustomDirectoryRolePermission struct {
	// A set of tasks that can be performed on a resource. For more information, see the [Permissions Reference](https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference) documentation.
	AllowedResourceActions []string `pulumi:"allowedResourceActions"`
}

type CustomDirectoryRolePermissionArgs added in v5.16.0 

type CustomDirectoryRolePermissionArgs struct {
	// A set of tasks that can be performed on a resource. For more information, see the [Permissions Reference](https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference) documentation.
	AllowedResourceActions pulumi.StringArrayInput `pulumi:"allowedResourceActions"`
}

func (CustomDirectoryRolePermissionArgs) ElementType added in v5.16.0 

func (CustomDirectoryRolePermissionArgs) ElementType() reflect.Type

func (CustomDirectoryRolePermissionArgs) ToCustomDirectoryRolePermissionOutput added in v5.16.0 

func (i CustomDirectoryRolePermissionArgs) ToCustomDirectoryRolePermissionOutput() CustomDirectoryRolePermissionOutput

func (CustomDirectoryRolePermissionArgs) ToCustomDirectoryRolePermissionOutputWithContext added in v5.16.0 

func (i CustomDirectoryRolePermissionArgs) ToCustomDirectoryRolePermissionOutputWithContext(ctx context.Context) CustomDirectoryRolePermissionOutput

type CustomDirectoryRolePermissionArray added in v5.16.0 

type CustomDirectoryRolePermissionArray []CustomDirectoryRolePermissionInput

func (CustomDirectoryRolePermissionArray) ElementType added in v5.16.0 

func (CustomDirectoryRolePermissionArray) ElementType() reflect.Type

func (CustomDirectoryRolePermissionArray) ToCustomDirectoryRolePermissionArrayOutput added in v5.16.0 

func (i CustomDirectoryRolePermissionArray) ToCustomDirectoryRolePermissionArrayOutput() CustomDirectoryRolePermissionArrayOutput

func (CustomDirectoryRolePermissionArray) ToCustomDirectoryRolePermissionArrayOutputWithContext added in v5.16.0 

func (i CustomDirectoryRolePermissionArray) ToCustomDirectoryRolePermissionArrayOutputWithContext(ctx context.Context) CustomDirectoryRolePermissionArrayOutput

type CustomDirectoryRolePermissionArrayInput added in v5.16.0 

type CustomDirectoryRolePermissionArrayInput interface {
	pulumi.Input

	ToCustomDirectoryRolePermissionArrayOutput() CustomDirectoryRolePermissionArrayOutput
	ToCustomDirectoryRolePermissionArrayOutputWithContext(context.Context) CustomDirectoryRolePermissionArrayOutput
}

CustomDirectoryRolePermissionArrayInput is an input type that accepts CustomDirectoryRolePermissionArray and CustomDirectoryRolePermissionArrayOutput values. You can construct a concrete instance of `CustomDirectoryRolePermissionArrayInput` via: 

CustomDirectoryRolePermissionArray{ CustomDirectoryRolePermissionArgs{...} }

type CustomDirectoryRolePermissionArrayOutput added in v5.16.0 

type CustomDirectoryRolePermissionArrayOutput struct{ *pulumi.OutputState }

func (CustomDirectoryRolePermissionArrayOutput) ElementType added in v5.16.0 

func (CustomDirectoryRolePermissionArrayOutput) ElementType() reflect.Type

func (CustomDirectoryRolePermissionArrayOutput) Index added in v5.16.0 

func (o CustomDirectoryRolePermissionArrayOutput) Index(i pulumi.IntInput) CustomDirectoryRolePermissionOutput

func (CustomDirectoryRolePermissionArrayOutput) ToCustomDirectoryRolePermissionArrayOutput added in v5.16.0 

func (o CustomDirectoryRolePermissionArrayOutput) ToCustomDirectoryRolePermissionArrayOutput() CustomDirectoryRolePermissionArrayOutput

func (CustomDirectoryRolePermissionArrayOutput) ToCustomDirectoryRolePermissionArrayOutputWithContext added in v5.16.0 

func (o CustomDirectoryRolePermissionArrayOutput) ToCustomDirectoryRolePermissionArrayOutputWithContext(ctx context.Context) CustomDirectoryRolePermissionArrayOutput

type CustomDirectoryRolePermissionInput added in v5.16.0 

type CustomDirectoryRolePermissionInput interface {
	pulumi.Input

	ToCustomDirectoryRolePermissionOutput() CustomDirectoryRolePermissionOutput
	ToCustomDirectoryRolePermissionOutputWithContext(context.Context) CustomDirectoryRolePermissionOutput
}

CustomDirectoryRolePermissionInput is an input type that accepts CustomDirectoryRolePermissionArgs and CustomDirectoryRolePermissionOutput values. You can construct a concrete instance of `CustomDirectoryRolePermissionInput` via: 

CustomDirectoryRolePermissionArgs{...}

type CustomDirectoryRolePermissionOutput added in v5.16.0 

type CustomDirectoryRolePermissionOutput struct{ *pulumi.OutputState }

func (CustomDirectoryRolePermissionOutput) AllowedResourceActions added in v5.16.0 

func (o CustomDirectoryRolePermissionOutput) AllowedResourceActions() pulumi.StringArrayOutput

A set of tasks that can be performed on a resource. For more information, see the [Permissions Reference](https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference) documentation.

func (CustomDirectoryRolePermissionOutput) ElementType added in v5.16.0 

func (CustomDirectoryRolePermissionOutput) ElementType() reflect.Type

func (CustomDirectoryRolePermissionOutput) ToCustomDirectoryRolePermissionOutput added in v5.16.0 

func (o CustomDirectoryRolePermissionOutput) ToCustomDirectoryRolePermissionOutput() CustomDirectoryRolePermissionOutput

func (CustomDirectoryRolePermissionOutput) ToCustomDirectoryRolePermissionOutputWithContext added in v5.16.0 

func (o CustomDirectoryRolePermissionOutput) ToCustomDirectoryRolePermissionOutputWithContext(ctx context.Context) CustomDirectoryRolePermissionOutput

type CustomDirectoryRoleState added in v5.16.0 

type CustomDirectoryRoleState struct {
	// The description of the custom directory role.
	Description pulumi.StringPtrInput
	// The display name of the custom directory role.
	DisplayName pulumi.StringPtrInput
	// Indicates whether the role is enabled for assignment.
	Enabled pulumi.BoolPtrInput
	// The object ID of the custom directory role.
	ObjectId pulumi.StringPtrInput
	// A collection of `permissions` blocks as documented below.
	Permissions CustomDirectoryRolePermissionArrayInput
	// Custom template identifier that is typically used if one needs an identifier to be the same across different directories. Changing this forces a new resource to be created.
	TemplateId pulumi.StringPtrInput
	// - The version of the role definition. This can be any arbitrary string between 1-128 characters.
	Version pulumi.StringPtrInput
}

func (CustomDirectoryRoleState) ElementType added in v5.16.0 

func (CustomDirectoryRoleState) ElementType() reflect.Type

type DirectoryRole added in v5.3.0 

type DirectoryRole struct {
	pulumi.CustomResourceState

	// The description of the directory role.
	Description pulumi.StringOutput `pulumi:"description"`
	// The display name of the directory role to activate. Changing this forces a new resource to be created.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The object ID of the directory role.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// The object ID of the role template from which to activate the directory role. Changing this forces a new resource to be created.
	TemplateId pulumi.StringOutput `pulumi:"templateId"`
}

Manages a Directory Role within Azure Active Directory. Directory Roles are also known as Administrator Roles.

Directory Roles are built-in to Azure Active Directory and are immutable. However, by default they are not activated in a tenant (except for the Global Administrator role). This resource ensures a directory role is activated from its associated role template, and exports the object ID of the role, so that role assignments can be made for it.

Once activated, directory roles cannot be deactivated and so this resource does not perform any actions on destroy.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `RoleManagement.ReadWrite.Directory` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Privileged Role Administrator` or `Global Administrator`

## Example Usage

*Activate a directory role by its template ID*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewDirectoryRole(ctx, "example", &azuread.DirectoryRoleArgs{
			TemplateId: pulumi.String("00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Activate a directory role by display name*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewDirectoryRole(ctx, "example", &azuread.DirectoryRoleArgs{
			DisplayName: pulumi.String("Printer administrator"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

This resource does not support importing.

func GetDirectoryRole added in v5.3.0 

func GetDirectoryRole(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DirectoryRoleState, opts ...pulumi.ResourceOption) (*DirectoryRole, error)

GetDirectoryRole gets an existing DirectoryRole resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDirectoryRole added in v5.3.0 

func NewDirectoryRole(ctx *pulumi.Context,
	name string, args *DirectoryRoleArgs, opts ...pulumi.ResourceOption) (*DirectoryRole, error)

NewDirectoryRole registers a new resource with the given unique name, arguments, and options.

func (*DirectoryRole) ElementType added in v5.3.0 

func (*DirectoryRole) ElementType() reflect.Type

func (*DirectoryRole) ToDirectoryRoleOutput added in v5.3.0 

func (i *DirectoryRole) ToDirectoryRoleOutput() DirectoryRoleOutput

func (*DirectoryRole) ToDirectoryRoleOutputWithContext added in v5.3.0 

func (i *DirectoryRole) ToDirectoryRoleOutputWithContext(ctx context.Context) DirectoryRoleOutput

type DirectoryRoleArgs added in v5.3.0 

type DirectoryRoleArgs struct {
	// The display name of the directory role to activate. Changing this forces a new resource to be created.
	DisplayName pulumi.StringPtrInput
	// The object ID of the role template from which to activate the directory role. Changing this forces a new resource to be created.
	TemplateId pulumi.StringPtrInput
}

The set of arguments for constructing a DirectoryRole resource.

func (DirectoryRoleArgs) ElementType added in v5.3.0 

func (DirectoryRoleArgs) ElementType() reflect.Type

type DirectoryRoleArray added in v5.3.0 

type DirectoryRoleArray []DirectoryRoleInput

func (DirectoryRoleArray) ElementType added in v5.3.0 

func (DirectoryRoleArray) ElementType() reflect.Type

func (DirectoryRoleArray) ToDirectoryRoleArrayOutput added in v5.3.0 

func (i DirectoryRoleArray) ToDirectoryRoleArrayOutput() DirectoryRoleArrayOutput

func (DirectoryRoleArray) ToDirectoryRoleArrayOutputWithContext added in v5.3.0 

func (i DirectoryRoleArray) ToDirectoryRoleArrayOutputWithContext(ctx context.Context) DirectoryRoleArrayOutput

type DirectoryRoleArrayInput added in v5.3.0 

type DirectoryRoleArrayInput interface {
	pulumi.Input

	ToDirectoryRoleArrayOutput() DirectoryRoleArrayOutput
	ToDirectoryRoleArrayOutputWithContext(context.Context) DirectoryRoleArrayOutput
}

DirectoryRoleArrayInput is an input type that accepts DirectoryRoleArray and DirectoryRoleArrayOutput values. You can construct a concrete instance of `DirectoryRoleArrayInput` via: 

DirectoryRoleArray{ DirectoryRoleArgs{...} }

type DirectoryRoleArrayOutput added in v5.3.0 

type DirectoryRoleArrayOutput struct{ *pulumi.OutputState }

func (DirectoryRoleArrayOutput) ElementType added in v5.3.0 

func (DirectoryRoleArrayOutput) ElementType() reflect.Type

func (DirectoryRoleArrayOutput) Index added in v5.3.0 

func (o DirectoryRoleArrayOutput) Index(i pulumi.IntInput) DirectoryRoleOutput

func (DirectoryRoleArrayOutput) ToDirectoryRoleArrayOutput added in v5.3.0 

func (o DirectoryRoleArrayOutput) ToDirectoryRoleArrayOutput() DirectoryRoleArrayOutput

func (DirectoryRoleArrayOutput) ToDirectoryRoleArrayOutputWithContext added in v5.3.0 

func (o DirectoryRoleArrayOutput) ToDirectoryRoleArrayOutputWithContext(ctx context.Context) DirectoryRoleArrayOutput

type DirectoryRoleAssignment added in v5.25.0 

type DirectoryRoleAssignment struct {
	pulumi.CustomResourceState

	// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directoryScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.
	AppScopeId pulumi.StringOutput `pulumi:"appScopeId"`
	// Identifier of the app-specific scope when the assignment scope is app-specific
	//
	// Deprecated: `app_scope_object_id` has been renamed to `app_scope_id` and will be removed in version 3.0 or the AzureAD Provider
	AppScopeObjectId pulumi.StringOutput `pulumi:"appScopeObjectId"`
	// Identifier of the directory object representing the scope of the assignment. Cannot be used with `appScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.
	DirectoryScopeId pulumi.StringOutput `pulumi:"directoryScopeId"`
	// Identifier of the directory object representing the scope of the assignment
	DirectoryScopeObjectId pulumi.StringOutput `pulumi:"directoryScopeObjectId"`
	// The object ID of the principal for you want to create a role assignment. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	PrincipalObjectId pulumi.StringOutput `pulumi:"principalObjectId"`
	// The template ID (in the case of built-in roles) or object ID (in the case of custom roles) of the directory role you want to assign. Changing this forces a new resource to be created.
	RoleId pulumi.StringOutput `pulumi:"roleId"`
}

Manages a single directory role assignment within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `RoleManagement.ReadWrite.Directory` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Privileged Role Administrator` or `Global Administrator`

## Import

Directory role assignments can be imported using the ID of the assignment, e.g.

```sh 

$ pulumi import azuread:index/directoryRoleAssignment:DirectoryRoleAssignment test ePROZI_iKE653D_d6aoLHyr-lKgHI8ZGiIdz8CLVcng-1

```

func GetDirectoryRoleAssignment added in v5.25.0 

func GetDirectoryRoleAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DirectoryRoleAssignmentState, opts ...pulumi.ResourceOption) (*DirectoryRoleAssignment, error)

GetDirectoryRoleAssignment gets an existing DirectoryRoleAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDirectoryRoleAssignment added in v5.25.0 

func NewDirectoryRoleAssignment(ctx *pulumi.Context,
	name string, args *DirectoryRoleAssignmentArgs, opts ...pulumi.ResourceOption) (*DirectoryRoleAssignment, error)

NewDirectoryRoleAssignment registers a new resource with the given unique name, arguments, and options.

func (*DirectoryRoleAssignment) ElementType added in v5.25.0 

func (*DirectoryRoleAssignment) ElementType() reflect.Type

func (*DirectoryRoleAssignment) ToDirectoryRoleAssignmentOutput added in v5.25.0 

func (i *DirectoryRoleAssignment) ToDirectoryRoleAssignmentOutput() DirectoryRoleAssignmentOutput

func (*DirectoryRoleAssignment) ToDirectoryRoleAssignmentOutputWithContext added in v5.25.0 

func (i *DirectoryRoleAssignment) ToDirectoryRoleAssignmentOutputWithContext(ctx context.Context) DirectoryRoleAssignmentOutput

type DirectoryRoleAssignmentArgs added in v5.25.0 

type DirectoryRoleAssignmentArgs struct {
	// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directoryScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.
	AppScopeId pulumi.StringPtrInput
	// Identifier of the app-specific scope when the assignment scope is app-specific
	//
	// Deprecated: `app_scope_object_id` has been renamed to `app_scope_id` and will be removed in version 3.0 or the AzureAD Provider
	AppScopeObjectId pulumi.StringPtrInput
	// Identifier of the directory object representing the scope of the assignment. Cannot be used with `appScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.
	DirectoryScopeId pulumi.StringPtrInput
	// Identifier of the directory object representing the scope of the assignment
	DirectoryScopeObjectId pulumi.StringPtrInput
	// The object ID of the principal for you want to create a role assignment. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	PrincipalObjectId pulumi.StringInput
	// The template ID (in the case of built-in roles) or object ID (in the case of custom roles) of the directory role you want to assign. Changing this forces a new resource to be created.
	RoleId pulumi.StringInput
}

The set of arguments for constructing a DirectoryRoleAssignment resource.

func (DirectoryRoleAssignmentArgs) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentArgs) ElementType() reflect.Type

type DirectoryRoleAssignmentArray added in v5.25.0 

type DirectoryRoleAssignmentArray []DirectoryRoleAssignmentInput

func (DirectoryRoleAssignmentArray) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentArray) ElementType() reflect.Type

func (DirectoryRoleAssignmentArray) ToDirectoryRoleAssignmentArrayOutput added in v5.25.0 

func (i DirectoryRoleAssignmentArray) ToDirectoryRoleAssignmentArrayOutput() DirectoryRoleAssignmentArrayOutput

func (DirectoryRoleAssignmentArray) ToDirectoryRoleAssignmentArrayOutputWithContext added in v5.25.0 

func (i DirectoryRoleAssignmentArray) ToDirectoryRoleAssignmentArrayOutputWithContext(ctx context.Context) DirectoryRoleAssignmentArrayOutput

type DirectoryRoleAssignmentArrayInput added in v5.25.0 

type DirectoryRoleAssignmentArrayInput interface {
	pulumi.Input

	ToDirectoryRoleAssignmentArrayOutput() DirectoryRoleAssignmentArrayOutput
	ToDirectoryRoleAssignmentArrayOutputWithContext(context.Context) DirectoryRoleAssignmentArrayOutput
}

DirectoryRoleAssignmentArrayInput is an input type that accepts DirectoryRoleAssignmentArray and DirectoryRoleAssignmentArrayOutput values. You can construct a concrete instance of `DirectoryRoleAssignmentArrayInput` via: 

DirectoryRoleAssignmentArray{ DirectoryRoleAssignmentArgs{...} }

type DirectoryRoleAssignmentArrayOutput added in v5.25.0 

type DirectoryRoleAssignmentArrayOutput struct{ *pulumi.OutputState }

func (DirectoryRoleAssignmentArrayOutput) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentArrayOutput) ElementType() reflect.Type

func (DirectoryRoleAssignmentArrayOutput) Index added in v5.25.0 

func (o DirectoryRoleAssignmentArrayOutput) Index(i pulumi.IntInput) DirectoryRoleAssignmentOutput

func (DirectoryRoleAssignmentArrayOutput) ToDirectoryRoleAssignmentArrayOutput added in v5.25.0 

func (o DirectoryRoleAssignmentArrayOutput) ToDirectoryRoleAssignmentArrayOutput() DirectoryRoleAssignmentArrayOutput

func (DirectoryRoleAssignmentArrayOutput) ToDirectoryRoleAssignmentArrayOutputWithContext added in v5.25.0 

func (o DirectoryRoleAssignmentArrayOutput) ToDirectoryRoleAssignmentArrayOutputWithContext(ctx context.Context) DirectoryRoleAssignmentArrayOutput

type DirectoryRoleAssignmentInput added in v5.25.0 

type DirectoryRoleAssignmentInput interface {
	pulumi.Input

	ToDirectoryRoleAssignmentOutput() DirectoryRoleAssignmentOutput
	ToDirectoryRoleAssignmentOutputWithContext(ctx context.Context) DirectoryRoleAssignmentOutput
}

type DirectoryRoleAssignmentMap added in v5.25.0 

type DirectoryRoleAssignmentMap map[string]DirectoryRoleAssignmentInput

func (DirectoryRoleAssignmentMap) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentMap) ElementType() reflect.Type

func (DirectoryRoleAssignmentMap) ToDirectoryRoleAssignmentMapOutput added in v5.25.0 

func (i DirectoryRoleAssignmentMap) ToDirectoryRoleAssignmentMapOutput() DirectoryRoleAssignmentMapOutput

func (DirectoryRoleAssignmentMap) ToDirectoryRoleAssignmentMapOutputWithContext added in v5.25.0 

func (i DirectoryRoleAssignmentMap) ToDirectoryRoleAssignmentMapOutputWithContext(ctx context.Context) DirectoryRoleAssignmentMapOutput

type DirectoryRoleAssignmentMapInput added in v5.25.0 

type DirectoryRoleAssignmentMapInput interface {
	pulumi.Input

	ToDirectoryRoleAssignmentMapOutput() DirectoryRoleAssignmentMapOutput
	ToDirectoryRoleAssignmentMapOutputWithContext(context.Context) DirectoryRoleAssignmentMapOutput
}

DirectoryRoleAssignmentMapInput is an input type that accepts DirectoryRoleAssignmentMap and DirectoryRoleAssignmentMapOutput values. You can construct a concrete instance of `DirectoryRoleAssignmentMapInput` via: 

DirectoryRoleAssignmentMap{ "key": DirectoryRoleAssignmentArgs{...} }

type DirectoryRoleAssignmentMapOutput added in v5.25.0 

type DirectoryRoleAssignmentMapOutput struct{ *pulumi.OutputState }

func (DirectoryRoleAssignmentMapOutput) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentMapOutput) ElementType() reflect.Type

func (DirectoryRoleAssignmentMapOutput) MapIndex added in v5.25.0 

func (o DirectoryRoleAssignmentMapOutput) MapIndex(k pulumi.StringInput) DirectoryRoleAssignmentOutput

func (DirectoryRoleAssignmentMapOutput) ToDirectoryRoleAssignmentMapOutput added in v5.25.0 

func (o DirectoryRoleAssignmentMapOutput) ToDirectoryRoleAssignmentMapOutput() DirectoryRoleAssignmentMapOutput

func (DirectoryRoleAssignmentMapOutput) ToDirectoryRoleAssignmentMapOutputWithContext added in v5.25.0 

func (o DirectoryRoleAssignmentMapOutput) ToDirectoryRoleAssignmentMapOutputWithContext(ctx context.Context) DirectoryRoleAssignmentMapOutput

type DirectoryRoleAssignmentOutput added in v5.25.0 

type DirectoryRoleAssignmentOutput struct{ *pulumi.OutputState }

func (DirectoryRoleAssignmentOutput) AppScopeId added in v5.26.0 

func (o DirectoryRoleAssignmentOutput) AppScopeId() pulumi.StringOutput

Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directoryScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.

func (DirectoryRoleAssignmentOutput) AppScopeObjectId deprecated added in v5.25.0 

func (o DirectoryRoleAssignmentOutput) AppScopeObjectId() pulumi.StringOutput

Identifier of the app-specific scope when the assignment scope is app-specific

Deprecated: `app_scope_object_id` has been renamed to `app_scope_id` and will be removed in version 3.0 or the AzureAD Provider

func (DirectoryRoleAssignmentOutput) DirectoryScopeId added in v5.26.0 

func (o DirectoryRoleAssignmentOutput) DirectoryScopeId() pulumi.StringOutput

Identifier of the directory object representing the scope of the assignment. Cannot be used with `appScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.

func (DirectoryRoleAssignmentOutput) DirectoryScopeObjectId added in v5.25.0 

func (o DirectoryRoleAssignmentOutput) DirectoryScopeObjectId() pulumi.StringOutput

Identifier of the directory object representing the scope of the assignment

func (DirectoryRoleAssignmentOutput) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentOutput) ElementType() reflect.Type

func (DirectoryRoleAssignmentOutput) PrincipalObjectId added in v5.25.0 

func (o DirectoryRoleAssignmentOutput) PrincipalObjectId() pulumi.StringOutput

The object ID of the principal for you want to create a role assignment. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.

func (DirectoryRoleAssignmentOutput) RoleId added in v5.25.0 

func (o DirectoryRoleAssignmentOutput) RoleId() pulumi.StringOutput

The template ID (in the case of built-in roles) or object ID (in the case of custom roles) of the directory role you want to assign. Changing this forces a new resource to be created.

func (DirectoryRoleAssignmentOutput) ToDirectoryRoleAssignmentOutput added in v5.25.0 

func (o DirectoryRoleAssignmentOutput) ToDirectoryRoleAssignmentOutput() DirectoryRoleAssignmentOutput

func (DirectoryRoleAssignmentOutput) ToDirectoryRoleAssignmentOutputWithContext added in v5.25.0 

func (o DirectoryRoleAssignmentOutput) ToDirectoryRoleAssignmentOutputWithContext(ctx context.Context) DirectoryRoleAssignmentOutput

type DirectoryRoleAssignmentState added in v5.25.0 

type DirectoryRoleAssignmentState struct {
	// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directoryScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.
	AppScopeId pulumi.StringPtrInput
	// Identifier of the app-specific scope when the assignment scope is app-specific
	//
	// Deprecated: `app_scope_object_id` has been renamed to `app_scope_id` and will be removed in version 3.0 or the AzureAD Provider
	AppScopeObjectId pulumi.StringPtrInput
	// Identifier of the directory object representing the scope of the assignment. Cannot be used with `appScopeId`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created.
	DirectoryScopeId pulumi.StringPtrInput
	// Identifier of the directory object representing the scope of the assignment
	DirectoryScopeObjectId pulumi.StringPtrInput
	// The object ID of the principal for you want to create a role assignment. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	PrincipalObjectId pulumi.StringPtrInput
	// The template ID (in the case of built-in roles) or object ID (in the case of custom roles) of the directory role you want to assign. Changing this forces a new resource to be created.
	RoleId pulumi.StringPtrInput
}

func (DirectoryRoleAssignmentState) ElementType added in v5.25.0 

func (DirectoryRoleAssignmentState) ElementType() reflect.Type

type DirectoryRoleInput added in v5.3.0 

type DirectoryRoleInput interface {
	pulumi.Input

	ToDirectoryRoleOutput() DirectoryRoleOutput
	ToDirectoryRoleOutputWithContext(ctx context.Context) DirectoryRoleOutput
}

type DirectoryRoleMap added in v5.3.0 

type DirectoryRoleMap map[string]DirectoryRoleInput

func (DirectoryRoleMap) ElementType added in v5.3.0 

func (DirectoryRoleMap) ElementType() reflect.Type

func (DirectoryRoleMap) ToDirectoryRoleMapOutput added in v5.3.0 

func (i DirectoryRoleMap) ToDirectoryRoleMapOutput() DirectoryRoleMapOutput

func (DirectoryRoleMap) ToDirectoryRoleMapOutputWithContext added in v5.3.0 

func (i DirectoryRoleMap) ToDirectoryRoleMapOutputWithContext(ctx context.Context) DirectoryRoleMapOutput

type DirectoryRoleMapInput added in v5.3.0 

type DirectoryRoleMapInput interface {
	pulumi.Input

	ToDirectoryRoleMapOutput() DirectoryRoleMapOutput
	ToDirectoryRoleMapOutputWithContext(context.Context) DirectoryRoleMapOutput
}

DirectoryRoleMapInput is an input type that accepts DirectoryRoleMap and DirectoryRoleMapOutput values. You can construct a concrete instance of `DirectoryRoleMapInput` via: 

DirectoryRoleMap{ "key": DirectoryRoleArgs{...} }

type DirectoryRoleMapOutput added in v5.3.0 

type DirectoryRoleMapOutput struct{ *pulumi.OutputState }

func (DirectoryRoleMapOutput) ElementType added in v5.3.0 

func (DirectoryRoleMapOutput) ElementType() reflect.Type

func (DirectoryRoleMapOutput) MapIndex added in v5.3.0 

func (o DirectoryRoleMapOutput) MapIndex(k pulumi.StringInput) DirectoryRoleOutput

func (DirectoryRoleMapOutput) ToDirectoryRoleMapOutput added in v5.3.0 

func (o DirectoryRoleMapOutput) ToDirectoryRoleMapOutput() DirectoryRoleMapOutput

func (DirectoryRoleMapOutput) ToDirectoryRoleMapOutputWithContext added in v5.3.0 

func (o DirectoryRoleMapOutput) ToDirectoryRoleMapOutputWithContext(ctx context.Context) DirectoryRoleMapOutput

type DirectoryRoleMember added in v5.3.0 

type DirectoryRoleMember struct {
	pulumi.CustomResourceState

	// The object ID of the principal you want to add as a member to the directory role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrOutput `pulumi:"memberObjectId"`
	// The object ID of the directory role you want to add the member to. Changing this forces a new resource to be created.
	RoleObjectId pulumi.StringPtrOutput `pulumi:"roleObjectId"`
}

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleUser, err := azuread.LookupUser(ctx, &GetUserArgs{
			UserPrincipalName: pulumi.StringRef("jdoe@hashicorp.com"),
		}, nil)
		if err != nil {
			return err
		}
		exampleDirectoryRole, err := azuread.NewDirectoryRole(ctx, "exampleDirectoryRole", &azuread.DirectoryRoleArgs{
			DisplayName: pulumi.String("Security administrator"),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewDirectoryRoleMember(ctx, "exampleDirectoryRoleMember", &azuread.DirectoryRoleMemberArgs{
			RoleObjectId:   exampleDirectoryRole.ObjectId,
			MemberObjectId: pulumi.String(exampleUser.ObjectId),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Directory role members can be imported using the object ID of the role and the object ID of the member, e.g.

```sh 

$ pulumi import azuread:index/directoryRoleMember:DirectoryRoleMember test 00000000-0000-0000-0000-000000000000/member/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the Directory Role Object ID and the target Member Object ID in the format `{RoleObjectID}/member/{MemberObjectID}`.

func GetDirectoryRoleMember added in v5.3.0 

func GetDirectoryRoleMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DirectoryRoleMemberState, opts ...pulumi.ResourceOption) (*DirectoryRoleMember, error)

GetDirectoryRoleMember gets an existing DirectoryRoleMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDirectoryRoleMember added in v5.3.0 

func NewDirectoryRoleMember(ctx *pulumi.Context,
	name string, args *DirectoryRoleMemberArgs, opts ...pulumi.ResourceOption) (*DirectoryRoleMember, error)

NewDirectoryRoleMember registers a new resource with the given unique name, arguments, and options.

func (*DirectoryRoleMember) ElementType added in v5.3.0 

func (*DirectoryRoleMember) ElementType() reflect.Type

func (*DirectoryRoleMember) ToDirectoryRoleMemberOutput added in v5.3.0 

func (i *DirectoryRoleMember) ToDirectoryRoleMemberOutput() DirectoryRoleMemberOutput

func (*DirectoryRoleMember) ToDirectoryRoleMemberOutputWithContext added in v5.3.0 

func (i *DirectoryRoleMember) ToDirectoryRoleMemberOutputWithContext(ctx context.Context) DirectoryRoleMemberOutput

type DirectoryRoleMemberArgs added in v5.3.0 

type DirectoryRoleMemberArgs struct {
	// The object ID of the principal you want to add as a member to the directory role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrInput
	// The object ID of the directory role you want to add the member to. Changing this forces a new resource to be created.
	RoleObjectId pulumi.StringPtrInput
}

The set of arguments for constructing a DirectoryRoleMember resource.

func (DirectoryRoleMemberArgs) ElementType added in v5.3.0 

func (DirectoryRoleMemberArgs) ElementType() reflect.Type

type DirectoryRoleMemberArray added in v5.3.0 

type DirectoryRoleMemberArray []DirectoryRoleMemberInput

func (DirectoryRoleMemberArray) ElementType added in v5.3.0 

func (DirectoryRoleMemberArray) ElementType() reflect.Type

func (DirectoryRoleMemberArray) ToDirectoryRoleMemberArrayOutput added in v5.3.0 

func (i DirectoryRoleMemberArray) ToDirectoryRoleMemberArrayOutput() DirectoryRoleMemberArrayOutput

func (DirectoryRoleMemberArray) ToDirectoryRoleMemberArrayOutputWithContext added in v5.3.0 

func (i DirectoryRoleMemberArray) ToDirectoryRoleMemberArrayOutputWithContext(ctx context.Context) DirectoryRoleMemberArrayOutput

type DirectoryRoleMemberArrayInput added in v5.3.0 

type DirectoryRoleMemberArrayInput interface {
	pulumi.Input

	ToDirectoryRoleMemberArrayOutput() DirectoryRoleMemberArrayOutput
	ToDirectoryRoleMemberArrayOutputWithContext(context.Context) DirectoryRoleMemberArrayOutput
}

DirectoryRoleMemberArrayInput is an input type that accepts DirectoryRoleMemberArray and DirectoryRoleMemberArrayOutput values. You can construct a concrete instance of `DirectoryRoleMemberArrayInput` via: 

DirectoryRoleMemberArray{ DirectoryRoleMemberArgs{...} }

type DirectoryRoleMemberArrayOutput added in v5.3.0 

type DirectoryRoleMemberArrayOutput struct{ *pulumi.OutputState }

func (DirectoryRoleMemberArrayOutput) ElementType added in v5.3.0 

func (DirectoryRoleMemberArrayOutput) ElementType() reflect.Type

func (DirectoryRoleMemberArrayOutput) Index added in v5.3.0 

func (o DirectoryRoleMemberArrayOutput) Index(i pulumi.IntInput) DirectoryRoleMemberOutput

func (DirectoryRoleMemberArrayOutput) ToDirectoryRoleMemberArrayOutput added in v5.3.0 

func (o DirectoryRoleMemberArrayOutput) ToDirectoryRoleMemberArrayOutput() DirectoryRoleMemberArrayOutput

func (DirectoryRoleMemberArrayOutput) ToDirectoryRoleMemberArrayOutputWithContext added in v5.3.0 

func (o DirectoryRoleMemberArrayOutput) ToDirectoryRoleMemberArrayOutputWithContext(ctx context.Context) DirectoryRoleMemberArrayOutput

type DirectoryRoleMemberInput added in v5.3.0 

type DirectoryRoleMemberInput interface {
	pulumi.Input

	ToDirectoryRoleMemberOutput() DirectoryRoleMemberOutput
	ToDirectoryRoleMemberOutputWithContext(ctx context.Context) DirectoryRoleMemberOutput
}

type DirectoryRoleMemberMap added in v5.3.0 

type DirectoryRoleMemberMap map[string]DirectoryRoleMemberInput

func (DirectoryRoleMemberMap) ElementType added in v5.3.0 

func (DirectoryRoleMemberMap) ElementType() reflect.Type

func (DirectoryRoleMemberMap) ToDirectoryRoleMemberMapOutput added in v5.3.0 

func (i DirectoryRoleMemberMap) ToDirectoryRoleMemberMapOutput() DirectoryRoleMemberMapOutput

func (DirectoryRoleMemberMap) ToDirectoryRoleMemberMapOutputWithContext added in v5.3.0 

func (i DirectoryRoleMemberMap) ToDirectoryRoleMemberMapOutputWithContext(ctx context.Context) DirectoryRoleMemberMapOutput

type DirectoryRoleMemberMapInput added in v5.3.0 

type DirectoryRoleMemberMapInput interface {
	pulumi.Input

	ToDirectoryRoleMemberMapOutput() DirectoryRoleMemberMapOutput
	ToDirectoryRoleMemberMapOutputWithContext(context.Context) DirectoryRoleMemberMapOutput
}

DirectoryRoleMemberMapInput is an input type that accepts DirectoryRoleMemberMap and DirectoryRoleMemberMapOutput values. You can construct a concrete instance of `DirectoryRoleMemberMapInput` via: 

DirectoryRoleMemberMap{ "key": DirectoryRoleMemberArgs{...} }

type DirectoryRoleMemberMapOutput added in v5.3.0 

type DirectoryRoleMemberMapOutput struct{ *pulumi.OutputState }

func (DirectoryRoleMemberMapOutput) ElementType added in v5.3.0 

func (DirectoryRoleMemberMapOutput) ElementType() reflect.Type

func (DirectoryRoleMemberMapOutput) MapIndex added in v5.3.0 

func (o DirectoryRoleMemberMapOutput) MapIndex(k pulumi.StringInput) DirectoryRoleMemberOutput

func (DirectoryRoleMemberMapOutput) ToDirectoryRoleMemberMapOutput added in v5.3.0 

func (o DirectoryRoleMemberMapOutput) ToDirectoryRoleMemberMapOutput() DirectoryRoleMemberMapOutput

func (DirectoryRoleMemberMapOutput) ToDirectoryRoleMemberMapOutputWithContext added in v5.3.0 

func (o DirectoryRoleMemberMapOutput) ToDirectoryRoleMemberMapOutputWithContext(ctx context.Context) DirectoryRoleMemberMapOutput

type DirectoryRoleMemberOutput added in v5.3.0 

type DirectoryRoleMemberOutput struct{ *pulumi.OutputState }

func (DirectoryRoleMemberOutput) ElementType added in v5.3.0 

func (DirectoryRoleMemberOutput) ElementType() reflect.Type

func (DirectoryRoleMemberOutput) MemberObjectId added in v5.22.0 

func (o DirectoryRoleMemberOutput) MemberObjectId() pulumi.StringPtrOutput

The object ID of the principal you want to add as a member to the directory role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.

func (DirectoryRoleMemberOutput) RoleObjectId added in v5.22.0 

func (o DirectoryRoleMemberOutput) RoleObjectId() pulumi.StringPtrOutput

The object ID of the directory role you want to add the member to. Changing this forces a new resource to be created.

func (DirectoryRoleMemberOutput) ToDirectoryRoleMemberOutput added in v5.3.0 

func (o DirectoryRoleMemberOutput) ToDirectoryRoleMemberOutput() DirectoryRoleMemberOutput

func (DirectoryRoleMemberOutput) ToDirectoryRoleMemberOutputWithContext added in v5.3.0 

func (o DirectoryRoleMemberOutput) ToDirectoryRoleMemberOutputWithContext(ctx context.Context) DirectoryRoleMemberOutput

type DirectoryRoleMemberState added in v5.3.0 

type DirectoryRoleMemberState struct {
	// The object ID of the principal you want to add as a member to the directory role. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrInput
	// The object ID of the directory role you want to add the member to. Changing this forces a new resource to be created.
	RoleObjectId pulumi.StringPtrInput
}

func (DirectoryRoleMemberState) ElementType added in v5.3.0 

func (DirectoryRoleMemberState) ElementType() reflect.Type

type DirectoryRoleOutput added in v5.3.0 

type DirectoryRoleOutput struct{ *pulumi.OutputState }

func (DirectoryRoleOutput) Description added in v5.22.0 

func (o DirectoryRoleOutput) Description() pulumi.StringOutput

The description of the directory role.

func (DirectoryRoleOutput) DisplayName added in v5.22.0 

func (o DirectoryRoleOutput) DisplayName() pulumi.StringOutput

The display name of the directory role to activate. Changing this forces a new resource to be created.

func (DirectoryRoleOutput) ElementType added in v5.3.0 

func (DirectoryRoleOutput) ElementType() reflect.Type

func (DirectoryRoleOutput) ObjectId added in v5.22.0 

func (o DirectoryRoleOutput) ObjectId() pulumi.StringOutput

The object ID of the directory role.

func (DirectoryRoleOutput) TemplateId added in v5.22.0 

func (o DirectoryRoleOutput) TemplateId() pulumi.StringOutput

The object ID of the role template from which to activate the directory role. Changing this forces a new resource to be created.

func (DirectoryRoleOutput) ToDirectoryRoleOutput added in v5.3.0 

func (o DirectoryRoleOutput) ToDirectoryRoleOutput() DirectoryRoleOutput

func (DirectoryRoleOutput) ToDirectoryRoleOutputWithContext added in v5.3.0 

func (o DirectoryRoleOutput) ToDirectoryRoleOutputWithContext(ctx context.Context) DirectoryRoleOutput

type DirectoryRoleState added in v5.3.0 

type DirectoryRoleState struct {
	// The description of the directory role.
	Description pulumi.StringPtrInput
	// The display name of the directory role to activate. Changing this forces a new resource to be created.
	DisplayName pulumi.StringPtrInput
	// The object ID of the directory role.
	ObjectId pulumi.StringPtrInput
	// The object ID of the role template from which to activate the directory role. Changing this forces a new resource to be created.
	TemplateId pulumi.StringPtrInput
}

func (DirectoryRoleState) ElementType added in v5.3.0 

func (DirectoryRoleState) ElementType() reflect.Type

type GetApplicationApi 

type GetApplicationApi struct {
	// A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
	KnownClientApplications []string `pulumi:"knownClientApplications"`
	// Allows an application to use claims mapping without specifying a custom signing key.
	MappedClaimsEnabled bool `pulumi:"mappedClaimsEnabled"`
	// One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
	Oauth2PermissionScopes []GetApplicationApiOauth2PermissionScope `pulumi:"oauth2PermissionScopes"`
	// The access token version expected by this resource. Possible values are `1` or `2`.
	RequestedAccessTokenVersion int `pulumi:"requestedAccessTokenVersion"`
}

type GetApplicationApiArgs 

type GetApplicationApiArgs struct {
	// A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.
	KnownClientApplications pulumi.StringArrayInput `pulumi:"knownClientApplications"`
	// Allows an application to use claims mapping without specifying a custom signing key.
	MappedClaimsEnabled pulumi.BoolInput `pulumi:"mappedClaimsEnabled"`
	// One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.
	Oauth2PermissionScopes GetApplicationApiOauth2PermissionScopeArrayInput `pulumi:"oauth2PermissionScopes"`
	// The access token version expected by this resource. Possible values are `1` or `2`.
	RequestedAccessTokenVersion pulumi.IntInput `pulumi:"requestedAccessTokenVersion"`
}

func (GetApplicationApiArgs) ElementType 

func (GetApplicationApiArgs) ElementType() reflect.Type

func (GetApplicationApiArgs) ToGetApplicationApiOutput 

func (i GetApplicationApiArgs) ToGetApplicationApiOutput() GetApplicationApiOutput

func (GetApplicationApiArgs) ToGetApplicationApiOutputWithContext 

func (i GetApplicationApiArgs) ToGetApplicationApiOutputWithContext(ctx context.Context) GetApplicationApiOutput

type GetApplicationApiArray 

type GetApplicationApiArray []GetApplicationApiInput

func (GetApplicationApiArray) ElementType 

func (GetApplicationApiArray) ElementType() reflect.Type

func (GetApplicationApiArray) ToGetApplicationApiArrayOutput 

func (i GetApplicationApiArray) ToGetApplicationApiArrayOutput() GetApplicationApiArrayOutput

func (GetApplicationApiArray) ToGetApplicationApiArrayOutputWithContext 

func (i GetApplicationApiArray) ToGetApplicationApiArrayOutputWithContext(ctx context.Context) GetApplicationApiArrayOutput

type GetApplicationApiArrayInput 

type GetApplicationApiArrayInput interface {
	pulumi.Input

	ToGetApplicationApiArrayOutput() GetApplicationApiArrayOutput
	ToGetApplicationApiArrayOutputWithContext(context.Context) GetApplicationApiArrayOutput
}

GetApplicationApiArrayInput is an input type that accepts GetApplicationApiArray and GetApplicationApiArrayOutput values. You can construct a concrete instance of `GetApplicationApiArrayInput` via: 

GetApplicationApiArray{ GetApplicationApiArgs{...} }

type GetApplicationApiArrayOutput 

type GetApplicationApiArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationApiArrayOutput) ElementType 

func (GetApplicationApiArrayOutput) ElementType() reflect.Type

func (GetApplicationApiArrayOutput) Index 

func (o GetApplicationApiArrayOutput) Index(i pulumi.IntInput) GetApplicationApiOutput

func (GetApplicationApiArrayOutput) ToGetApplicationApiArrayOutput 

func (o GetApplicationApiArrayOutput) ToGetApplicationApiArrayOutput() GetApplicationApiArrayOutput

func (GetApplicationApiArrayOutput) ToGetApplicationApiArrayOutputWithContext 

func (o GetApplicationApiArrayOutput) ToGetApplicationApiArrayOutputWithContext(ctx context.Context) GetApplicationApiArrayOutput

type GetApplicationApiInput 

type GetApplicationApiInput interface {
	pulumi.Input

	ToGetApplicationApiOutput() GetApplicationApiOutput
	ToGetApplicationApiOutputWithContext(context.Context) GetApplicationApiOutput
}

GetApplicationApiInput is an input type that accepts GetApplicationApiArgs and GetApplicationApiOutput values. You can construct a concrete instance of `GetApplicationApiInput` via: 

GetApplicationApiArgs{...}

type GetApplicationApiOauth2PermissionScope 

type GetApplicationApiOauth2PermissionScope struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription string `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName string `pulumi:"adminConsentDisplayName"`
	// Determines if the app role is enabled.
	Enabled bool `pulumi:"enabled"`
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id string `pulumi:"id"`
	// Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.
	Type string `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription string `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName string `pulumi:"userConsentDisplayName"`
	// The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
	Value string `pulumi:"value"`
}

type GetApplicationApiOauth2PermissionScopeArgs 

type GetApplicationApiOauth2PermissionScopeArgs struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription pulumi.StringInput `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName pulumi.StringInput `pulumi:"adminConsentDisplayName"`
	// Determines if the app role is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id pulumi.StringInput `pulumi:"id"`
	// Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.
	Type pulumi.StringInput `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription pulumi.StringInput `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName pulumi.StringInput `pulumi:"userConsentDisplayName"`
	// The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
	Value pulumi.StringInput `pulumi:"value"`
}

func (GetApplicationApiOauth2PermissionScopeArgs) ElementType 

func (GetApplicationApiOauth2PermissionScopeArgs) ElementType() reflect.Type

func (GetApplicationApiOauth2PermissionScopeArgs) ToGetApplicationApiOauth2PermissionScopeOutput 

func (i GetApplicationApiOauth2PermissionScopeArgs) ToGetApplicationApiOauth2PermissionScopeOutput() GetApplicationApiOauth2PermissionScopeOutput

func (GetApplicationApiOauth2PermissionScopeArgs) ToGetApplicationApiOauth2PermissionScopeOutputWithContext 

func (i GetApplicationApiOauth2PermissionScopeArgs) ToGetApplicationApiOauth2PermissionScopeOutputWithContext(ctx context.Context) GetApplicationApiOauth2PermissionScopeOutput

type GetApplicationApiOauth2PermissionScopeArray 

type GetApplicationApiOauth2PermissionScopeArray []GetApplicationApiOauth2PermissionScopeInput

func (GetApplicationApiOauth2PermissionScopeArray) ElementType 

func (GetApplicationApiOauth2PermissionScopeArray) ElementType() reflect.Type

func (GetApplicationApiOauth2PermissionScopeArray) ToGetApplicationApiOauth2PermissionScopeArrayOutput 

func (i GetApplicationApiOauth2PermissionScopeArray) ToGetApplicationApiOauth2PermissionScopeArrayOutput() GetApplicationApiOauth2PermissionScopeArrayOutput

func (GetApplicationApiOauth2PermissionScopeArray) ToGetApplicationApiOauth2PermissionScopeArrayOutputWithContext 

func (i GetApplicationApiOauth2PermissionScopeArray) ToGetApplicationApiOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) GetApplicationApiOauth2PermissionScopeArrayOutput

type GetApplicationApiOauth2PermissionScopeArrayInput 

type GetApplicationApiOauth2PermissionScopeArrayInput interface {
	pulumi.Input

	ToGetApplicationApiOauth2PermissionScopeArrayOutput() GetApplicationApiOauth2PermissionScopeArrayOutput
	ToGetApplicationApiOauth2PermissionScopeArrayOutputWithContext(context.Context) GetApplicationApiOauth2PermissionScopeArrayOutput
}

GetApplicationApiOauth2PermissionScopeArrayInput is an input type that accepts GetApplicationApiOauth2PermissionScopeArray and GetApplicationApiOauth2PermissionScopeArrayOutput values. You can construct a concrete instance of `GetApplicationApiOauth2PermissionScopeArrayInput` via: 

GetApplicationApiOauth2PermissionScopeArray{ GetApplicationApiOauth2PermissionScopeArgs{...} }

type GetApplicationApiOauth2PermissionScopeArrayOutput 

type GetApplicationApiOauth2PermissionScopeArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationApiOauth2PermissionScopeArrayOutput) ElementType 

func (GetApplicationApiOauth2PermissionScopeArrayOutput) ElementType() reflect.Type

func (GetApplicationApiOauth2PermissionScopeArrayOutput) Index 

func (o GetApplicationApiOauth2PermissionScopeArrayOutput) Index(i pulumi.IntInput) GetApplicationApiOauth2PermissionScopeOutput

func (GetApplicationApiOauth2PermissionScopeArrayOutput) ToGetApplicationApiOauth2PermissionScopeArrayOutput 

func (o GetApplicationApiOauth2PermissionScopeArrayOutput) ToGetApplicationApiOauth2PermissionScopeArrayOutput() GetApplicationApiOauth2PermissionScopeArrayOutput

func (GetApplicationApiOauth2PermissionScopeArrayOutput) ToGetApplicationApiOauth2PermissionScopeArrayOutputWithContext 

func (o GetApplicationApiOauth2PermissionScopeArrayOutput) ToGetApplicationApiOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) GetApplicationApiOauth2PermissionScopeArrayOutput

type GetApplicationApiOauth2PermissionScopeInput 

type GetApplicationApiOauth2PermissionScopeInput interface {
	pulumi.Input

	ToGetApplicationApiOauth2PermissionScopeOutput() GetApplicationApiOauth2PermissionScopeOutput
	ToGetApplicationApiOauth2PermissionScopeOutputWithContext(context.Context) GetApplicationApiOauth2PermissionScopeOutput
}

GetApplicationApiOauth2PermissionScopeInput is an input type that accepts GetApplicationApiOauth2PermissionScopeArgs and GetApplicationApiOauth2PermissionScopeOutput values. You can construct a concrete instance of `GetApplicationApiOauth2PermissionScopeInput` via: 

GetApplicationApiOauth2PermissionScopeArgs{...}

type GetApplicationApiOauth2PermissionScopeOutput 

type GetApplicationApiOauth2PermissionScopeOutput struct{ *pulumi.OutputState }

func (GetApplicationApiOauth2PermissionScopeOutput) AdminConsentDescription 

func (o GetApplicationApiOauth2PermissionScopeOutput) AdminConsentDescription() pulumi.StringOutput

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

func (GetApplicationApiOauth2PermissionScopeOutput) AdminConsentDisplayName 

func (o GetApplicationApiOauth2PermissionScopeOutput) AdminConsentDisplayName() pulumi.StringOutput

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

func (GetApplicationApiOauth2PermissionScopeOutput) ElementType 

func (GetApplicationApiOauth2PermissionScopeOutput) ElementType() reflect.Type

func (GetApplicationApiOauth2PermissionScopeOutput) Enabled 

func (o GetApplicationApiOauth2PermissionScopeOutput) Enabled() pulumi.BoolOutput

Determines if the app role is enabled.

func (GetApplicationApiOauth2PermissionScopeOutput) Id 

func (o GetApplicationApiOauth2PermissionScopeOutput) Id() pulumi.StringOutput

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

func (GetApplicationApiOauth2PermissionScopeOutput) ToGetApplicationApiOauth2PermissionScopeOutput 

func (o GetApplicationApiOauth2PermissionScopeOutput) ToGetApplicationApiOauth2PermissionScopeOutput() GetApplicationApiOauth2PermissionScopeOutput

func (GetApplicationApiOauth2PermissionScopeOutput) ToGetApplicationApiOauth2PermissionScopeOutputWithContext 

func (o GetApplicationApiOauth2PermissionScopeOutput) ToGetApplicationApiOauth2PermissionScopeOutputWithContext(ctx context.Context) GetApplicationApiOauth2PermissionScopeOutput

func (GetApplicationApiOauth2PermissionScopeOutput) Type 

func (o GetApplicationApiOauth2PermissionScopeOutput) Type() pulumi.StringOutput

Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.

func (GetApplicationApiOauth2PermissionScopeOutput) UserConsentDescription 

func (o GetApplicationApiOauth2PermissionScopeOutput) UserConsentDescription() pulumi.StringOutput

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

func (GetApplicationApiOauth2PermissionScopeOutput) UserConsentDisplayName 

func (o GetApplicationApiOauth2PermissionScopeOutput) UserConsentDisplayName() pulumi.StringOutput

Display name for the delegated permission that appears in the end user consent experience.

func (GetApplicationApiOauth2PermissionScopeOutput) Value 

func (o GetApplicationApiOauth2PermissionScopeOutput) Value() pulumi.StringOutput

The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

type GetApplicationApiOutput 

type GetApplicationApiOutput struct{ *pulumi.OutputState }

func (GetApplicationApiOutput) ElementType 

func (GetApplicationApiOutput) ElementType() reflect.Type

func (GetApplicationApiOutput) KnownClientApplications 

func (o GetApplicationApiOutput) KnownClientApplications() pulumi.StringArrayOutput

A set of application IDs (client IDs), used for bundling consent if you have a solution that contains two parts: a client app and a custom web API app.

func (GetApplicationApiOutput) MappedClaimsEnabled 

func (o GetApplicationApiOutput) MappedClaimsEnabled() pulumi.BoolOutput

Allows an application to use claims mapping without specifying a custom signing key.

func (GetApplicationApiOutput) Oauth2PermissionScopes 

func (o GetApplicationApiOutput) Oauth2PermissionScopes() GetApplicationApiOauth2PermissionScopeArrayOutput

One or more `oauth2PermissionScope` blocks as documented below, to describe delegated permissions exposed by the web API represented by this application.

func (GetApplicationApiOutput) RequestedAccessTokenVersion 

func (o GetApplicationApiOutput) RequestedAccessTokenVersion() pulumi.IntOutput

The access token version expected by this resource. Possible values are `1` or `2`.

func (GetApplicationApiOutput) ToGetApplicationApiOutput 

func (o GetApplicationApiOutput) ToGetApplicationApiOutput() GetApplicationApiOutput

func (GetApplicationApiOutput) ToGetApplicationApiOutputWithContext 

func (o GetApplicationApiOutput) ToGetApplicationApiOutputWithContext(ctx context.Context) GetApplicationApiOutput

type GetApplicationAppRole 

type GetApplicationAppRole struct {
	// Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are `User` or `Application`, or both.
	AllowedMemberTypes []string `pulumi:"allowedMemberTypes"`
	// Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
	Description string `pulumi:"description"`
	// Specifies the display name of the application.
	DisplayName string `pulumi:"displayName"`
	// Determines if the app role is enabled.
	Enabled bool `pulumi:"enabled"`
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id string `pulumi:"id"`
	// The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
	Value string `pulumi:"value"`
}

type GetApplicationAppRoleArgs 

type GetApplicationAppRoleArgs struct {
	// Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are `User` or `Application`, or both.
	AllowedMemberTypes pulumi.StringArrayInput `pulumi:"allowedMemberTypes"`
	// Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.
	Description pulumi.StringInput `pulumi:"description"`
	// Specifies the display name of the application.
	DisplayName pulumi.StringInput `pulumi:"displayName"`
	// Determines if the app role is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id pulumi.StringInput `pulumi:"id"`
	// The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.
	Value pulumi.StringInput `pulumi:"value"`
}

func (GetApplicationAppRoleArgs) ElementType 

func (GetApplicationAppRoleArgs) ElementType() reflect.Type

func (GetApplicationAppRoleArgs) ToGetApplicationAppRoleOutput 

func (i GetApplicationAppRoleArgs) ToGetApplicationAppRoleOutput() GetApplicationAppRoleOutput

func (GetApplicationAppRoleArgs) ToGetApplicationAppRoleOutputWithContext 

func (i GetApplicationAppRoleArgs) ToGetApplicationAppRoleOutputWithContext(ctx context.Context) GetApplicationAppRoleOutput

type GetApplicationAppRoleArray 

type GetApplicationAppRoleArray []GetApplicationAppRoleInput

func (GetApplicationAppRoleArray) ElementType 

func (GetApplicationAppRoleArray) ElementType() reflect.Type

func (GetApplicationAppRoleArray) ToGetApplicationAppRoleArrayOutput 

func (i GetApplicationAppRoleArray) ToGetApplicationAppRoleArrayOutput() GetApplicationAppRoleArrayOutput

func (GetApplicationAppRoleArray) ToGetApplicationAppRoleArrayOutputWithContext 

func (i GetApplicationAppRoleArray) ToGetApplicationAppRoleArrayOutputWithContext(ctx context.Context) GetApplicationAppRoleArrayOutput

type GetApplicationAppRoleArrayInput 

type GetApplicationAppRoleArrayInput interface {
	pulumi.Input

	ToGetApplicationAppRoleArrayOutput() GetApplicationAppRoleArrayOutput
	ToGetApplicationAppRoleArrayOutputWithContext(context.Context) GetApplicationAppRoleArrayOutput
}

GetApplicationAppRoleArrayInput is an input type that accepts GetApplicationAppRoleArray and GetApplicationAppRoleArrayOutput values. You can construct a concrete instance of `GetApplicationAppRoleArrayInput` via: 

GetApplicationAppRoleArray{ GetApplicationAppRoleArgs{...} }

type GetApplicationAppRoleArrayOutput 

type GetApplicationAppRoleArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationAppRoleArrayOutput) ElementType 

func (GetApplicationAppRoleArrayOutput) ElementType() reflect.Type

func (GetApplicationAppRoleArrayOutput) Index 

func (o GetApplicationAppRoleArrayOutput) Index(i pulumi.IntInput) GetApplicationAppRoleOutput

func (GetApplicationAppRoleArrayOutput) ToGetApplicationAppRoleArrayOutput 

func (o GetApplicationAppRoleArrayOutput) ToGetApplicationAppRoleArrayOutput() GetApplicationAppRoleArrayOutput

func (GetApplicationAppRoleArrayOutput) ToGetApplicationAppRoleArrayOutputWithContext 

func (o GetApplicationAppRoleArrayOutput) ToGetApplicationAppRoleArrayOutputWithContext(ctx context.Context) GetApplicationAppRoleArrayOutput

type GetApplicationAppRoleInput 

type GetApplicationAppRoleInput interface {
	pulumi.Input

	ToGetApplicationAppRoleOutput() GetApplicationAppRoleOutput
	ToGetApplicationAppRoleOutputWithContext(context.Context) GetApplicationAppRoleOutput
}

GetApplicationAppRoleInput is an input type that accepts GetApplicationAppRoleArgs and GetApplicationAppRoleOutput values. You can construct a concrete instance of `GetApplicationAppRoleInput` via: 

GetApplicationAppRoleArgs{...}

type GetApplicationAppRoleOutput 

type GetApplicationAppRoleOutput struct{ *pulumi.OutputState }

func (GetApplicationAppRoleOutput) AllowedMemberTypes 

func (o GetApplicationAppRoleOutput) AllowedMemberTypes() pulumi.StringArrayOutput

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are `User` or `Application`, or both.

func (GetApplicationAppRoleOutput) Description 

func (o GetApplicationAppRoleOutput) Description() pulumi.StringOutput

Description of the app role that appears when the role is being assigned and, if the role functions as an application permissions, during the consent experiences.

func (GetApplicationAppRoleOutput) DisplayName 

func (o GetApplicationAppRoleOutput) DisplayName() pulumi.StringOutput

Specifies the display name of the application.

func (GetApplicationAppRoleOutput) ElementType 

func (GetApplicationAppRoleOutput) ElementType() reflect.Type

func (GetApplicationAppRoleOutput) Enabled 

func (o GetApplicationAppRoleOutput) Enabled() pulumi.BoolOutput

Determines if the app role is enabled.

func (GetApplicationAppRoleOutput) Id 

func (o GetApplicationAppRoleOutput) Id() pulumi.StringOutput

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

func (GetApplicationAppRoleOutput) ToGetApplicationAppRoleOutput 

func (o GetApplicationAppRoleOutput) ToGetApplicationAppRoleOutput() GetApplicationAppRoleOutput

func (GetApplicationAppRoleOutput) ToGetApplicationAppRoleOutputWithContext 

func (o GetApplicationAppRoleOutput) ToGetApplicationAppRoleOutputWithContext(ctx context.Context) GetApplicationAppRoleOutput

func (GetApplicationAppRoleOutput) Value 

func (o GetApplicationAppRoleOutput) Value() pulumi.StringOutput

The value that is used for the `roles` claim in ID tokens and OAuth 2.0 access tokens that are authenticating an assigned service or user principal.

type GetApplicationFeatureTag added in v5.6.0 

type GetApplicationFeatureTag struct {
	// Whether this application represents a custom SAML application for linked service principals.
	CustomSingleSignOn *bool `pulumi:"customSingleSignOn"`
	// Whether this application represents an Enterprise Application for linked service principals.
	Enterprise *bool `pulumi:"enterprise"`
	// Whether this application represents a gallery application for linked service principals.
	Gallery *bool `pulumi:"gallery"`
	// Whether this app is visible to users in My Apps and Office 365 Launcher.
	Hide *bool `pulumi:"hide"`
}

type GetApplicationFeatureTagArgs added in v5.6.0 

type GetApplicationFeatureTagArgs struct {
	// Whether this application represents a custom SAML application for linked service principals.
	CustomSingleSignOn pulumi.BoolPtrInput `pulumi:"customSingleSignOn"`
	// Whether this application represents an Enterprise Application for linked service principals.
	Enterprise pulumi.BoolPtrInput `pulumi:"enterprise"`
	// Whether this application represents a gallery application for linked service principals.
	Gallery pulumi.BoolPtrInput `pulumi:"gallery"`
	// Whether this app is visible to users in My Apps and Office 365 Launcher.
	Hide pulumi.BoolPtrInput `pulumi:"hide"`
}

func (GetApplicationFeatureTagArgs) ElementType added in v5.6.0 

func (GetApplicationFeatureTagArgs) ElementType() reflect.Type

func (GetApplicationFeatureTagArgs) ToGetApplicationFeatureTagOutput added in v5.6.0 

func (i GetApplicationFeatureTagArgs) ToGetApplicationFeatureTagOutput() GetApplicationFeatureTagOutput

func (GetApplicationFeatureTagArgs) ToGetApplicationFeatureTagOutputWithContext added in v5.6.0 

func (i GetApplicationFeatureTagArgs) ToGetApplicationFeatureTagOutputWithContext(ctx context.Context) GetApplicationFeatureTagOutput

type GetApplicationFeatureTagArray added in v5.6.0 

type GetApplicationFeatureTagArray []GetApplicationFeatureTagInput

func (GetApplicationFeatureTagArray) ElementType added in v5.6.0 

func (GetApplicationFeatureTagArray) ElementType() reflect.Type

func (GetApplicationFeatureTagArray) ToGetApplicationFeatureTagArrayOutput added in v5.6.0 

func (i GetApplicationFeatureTagArray) ToGetApplicationFeatureTagArrayOutput() GetApplicationFeatureTagArrayOutput

func (GetApplicationFeatureTagArray) ToGetApplicationFeatureTagArrayOutputWithContext added in v5.6.0 

func (i GetApplicationFeatureTagArray) ToGetApplicationFeatureTagArrayOutputWithContext(ctx context.Context) GetApplicationFeatureTagArrayOutput

type GetApplicationFeatureTagArrayInput added in v5.6.0 

type GetApplicationFeatureTagArrayInput interface {
	pulumi.Input

	ToGetApplicationFeatureTagArrayOutput() GetApplicationFeatureTagArrayOutput
	ToGetApplicationFeatureTagArrayOutputWithContext(context.Context) GetApplicationFeatureTagArrayOutput
}

GetApplicationFeatureTagArrayInput is an input type that accepts GetApplicationFeatureTagArray and GetApplicationFeatureTagArrayOutput values. You can construct a concrete instance of `GetApplicationFeatureTagArrayInput` via: 

GetApplicationFeatureTagArray{ GetApplicationFeatureTagArgs{...} }

type GetApplicationFeatureTagArrayOutput added in v5.6.0 

type GetApplicationFeatureTagArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationFeatureTagArrayOutput) ElementType added in v5.6.0 

func (GetApplicationFeatureTagArrayOutput) ElementType() reflect.Type

func (GetApplicationFeatureTagArrayOutput) Index added in v5.6.0 

func (o GetApplicationFeatureTagArrayOutput) Index(i pulumi.IntInput) GetApplicationFeatureTagOutput

func (GetApplicationFeatureTagArrayOutput) ToGetApplicationFeatureTagArrayOutput added in v5.6.0 

func (o GetApplicationFeatureTagArrayOutput) ToGetApplicationFeatureTagArrayOutput() GetApplicationFeatureTagArrayOutput

func (GetApplicationFeatureTagArrayOutput) ToGetApplicationFeatureTagArrayOutputWithContext added in v5.6.0 

func (o GetApplicationFeatureTagArrayOutput) ToGetApplicationFeatureTagArrayOutputWithContext(ctx context.Context) GetApplicationFeatureTagArrayOutput

type GetApplicationFeatureTagInput added in v5.6.0 

type GetApplicationFeatureTagInput interface {
	pulumi.Input

	ToGetApplicationFeatureTagOutput() GetApplicationFeatureTagOutput
	ToGetApplicationFeatureTagOutputWithContext(context.Context) GetApplicationFeatureTagOutput
}

GetApplicationFeatureTagInput is an input type that accepts GetApplicationFeatureTagArgs and GetApplicationFeatureTagOutput values. You can construct a concrete instance of `GetApplicationFeatureTagInput` via: 

GetApplicationFeatureTagArgs{...}

type GetApplicationFeatureTagOutput added in v5.6.0 

type GetApplicationFeatureTagOutput struct{ *pulumi.OutputState }

func (GetApplicationFeatureTagOutput) CustomSingleSignOn added in v5.6.0 

func (o GetApplicationFeatureTagOutput) CustomSingleSignOn() pulumi.BoolPtrOutput

Whether this application represents a custom SAML application for linked service principals.

func (GetApplicationFeatureTagOutput) ElementType added in v5.6.0 

func (GetApplicationFeatureTagOutput) ElementType() reflect.Type

func (GetApplicationFeatureTagOutput) Enterprise added in v5.6.0 

func (o GetApplicationFeatureTagOutput) Enterprise() pulumi.BoolPtrOutput

Whether this application represents an Enterprise Application for linked service principals.

func (GetApplicationFeatureTagOutput) Gallery added in v5.6.0 

func (o GetApplicationFeatureTagOutput) Gallery() pulumi.BoolPtrOutput

Whether this application represents a gallery application for linked service principals.

func (GetApplicationFeatureTagOutput) Hide added in v5.6.0 

func (o GetApplicationFeatureTagOutput) Hide() pulumi.BoolPtrOutput

Whether this app is visible to users in My Apps and Office 365 Launcher.

func (GetApplicationFeatureTagOutput) ToGetApplicationFeatureTagOutput added in v5.6.0 

func (o GetApplicationFeatureTagOutput) ToGetApplicationFeatureTagOutput() GetApplicationFeatureTagOutput

func (GetApplicationFeatureTagOutput) ToGetApplicationFeatureTagOutputWithContext added in v5.6.0 

func (o GetApplicationFeatureTagOutput) ToGetApplicationFeatureTagOutputWithContext(ctx context.Context) GetApplicationFeatureTagOutput

type GetApplicationOptionalClaim 

type GetApplicationOptionalClaim struct {
	// One or more `accessToken` blocks as documented below.
	AccessTokens []GetApplicationOptionalClaimAccessToken `pulumi:"accessTokens"`
	// One or more `idToken` blocks as documented below.
	IdTokens []GetApplicationOptionalClaimIdToken `pulumi:"idTokens"`
	// One or more `saml2Token` blocks as documented below.
	Saml2Tokens []GetApplicationOptionalClaimSaml2Token `pulumi:"saml2Tokens"`
}

type GetApplicationOptionalClaimAccessToken 

type GetApplicationOptionalClaimAccessToken struct {
	// List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties []string `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential *bool `pulumi:"essential"`
	// The name of the optional claim.
	Name string `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source *string `pulumi:"source"`
}

type GetApplicationOptionalClaimAccessTokenArgs 

type GetApplicationOptionalClaimAccessTokenArgs struct {
	// List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties pulumi.StringArrayInput `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential pulumi.BoolPtrInput `pulumi:"essential"`
	// The name of the optional claim.
	Name pulumi.StringInput `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source pulumi.StringPtrInput `pulumi:"source"`
}

func (GetApplicationOptionalClaimAccessTokenArgs) ElementType 

func (GetApplicationOptionalClaimAccessTokenArgs) ElementType() reflect.Type

func (GetApplicationOptionalClaimAccessTokenArgs) ToGetApplicationOptionalClaimAccessTokenOutput 

func (i GetApplicationOptionalClaimAccessTokenArgs) ToGetApplicationOptionalClaimAccessTokenOutput() GetApplicationOptionalClaimAccessTokenOutput

func (GetApplicationOptionalClaimAccessTokenArgs) ToGetApplicationOptionalClaimAccessTokenOutputWithContext 

func (i GetApplicationOptionalClaimAccessTokenArgs) ToGetApplicationOptionalClaimAccessTokenOutputWithContext(ctx context.Context) GetApplicationOptionalClaimAccessTokenOutput

type GetApplicationOptionalClaimAccessTokenArray 

type GetApplicationOptionalClaimAccessTokenArray []GetApplicationOptionalClaimAccessTokenInput

func (GetApplicationOptionalClaimAccessTokenArray) ElementType 

func (GetApplicationOptionalClaimAccessTokenArray) ElementType() reflect.Type

func (GetApplicationOptionalClaimAccessTokenArray) ToGetApplicationOptionalClaimAccessTokenArrayOutput 

func (i GetApplicationOptionalClaimAccessTokenArray) ToGetApplicationOptionalClaimAccessTokenArrayOutput() GetApplicationOptionalClaimAccessTokenArrayOutput

func (GetApplicationOptionalClaimAccessTokenArray) ToGetApplicationOptionalClaimAccessTokenArrayOutputWithContext 

func (i GetApplicationOptionalClaimAccessTokenArray) ToGetApplicationOptionalClaimAccessTokenArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimAccessTokenArrayOutput

type GetApplicationOptionalClaimAccessTokenArrayInput 

type GetApplicationOptionalClaimAccessTokenArrayInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimAccessTokenArrayOutput() GetApplicationOptionalClaimAccessTokenArrayOutput
	ToGetApplicationOptionalClaimAccessTokenArrayOutputWithContext(context.Context) GetApplicationOptionalClaimAccessTokenArrayOutput
}

GetApplicationOptionalClaimAccessTokenArrayInput is an input type that accepts GetApplicationOptionalClaimAccessTokenArray and GetApplicationOptionalClaimAccessTokenArrayOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimAccessTokenArrayInput` via: 

GetApplicationOptionalClaimAccessTokenArray{ GetApplicationOptionalClaimAccessTokenArgs{...} }

type GetApplicationOptionalClaimAccessTokenArrayOutput 

type GetApplicationOptionalClaimAccessTokenArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimAccessTokenArrayOutput) ElementType 

func (GetApplicationOptionalClaimAccessTokenArrayOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimAccessTokenArrayOutput) Index 

func (o GetApplicationOptionalClaimAccessTokenArrayOutput) Index(i pulumi.IntInput) GetApplicationOptionalClaimAccessTokenOutput

func (GetApplicationOptionalClaimAccessTokenArrayOutput) ToGetApplicationOptionalClaimAccessTokenArrayOutput 

func (o GetApplicationOptionalClaimAccessTokenArrayOutput) ToGetApplicationOptionalClaimAccessTokenArrayOutput() GetApplicationOptionalClaimAccessTokenArrayOutput

func (GetApplicationOptionalClaimAccessTokenArrayOutput) ToGetApplicationOptionalClaimAccessTokenArrayOutputWithContext 

func (o GetApplicationOptionalClaimAccessTokenArrayOutput) ToGetApplicationOptionalClaimAccessTokenArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimAccessTokenArrayOutput

type GetApplicationOptionalClaimAccessTokenInput 

type GetApplicationOptionalClaimAccessTokenInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimAccessTokenOutput() GetApplicationOptionalClaimAccessTokenOutput
	ToGetApplicationOptionalClaimAccessTokenOutputWithContext(context.Context) GetApplicationOptionalClaimAccessTokenOutput
}

GetApplicationOptionalClaimAccessTokenInput is an input type that accepts GetApplicationOptionalClaimAccessTokenArgs and GetApplicationOptionalClaimAccessTokenOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimAccessTokenInput` via: 

GetApplicationOptionalClaimAccessTokenArgs{...}

type GetApplicationOptionalClaimAccessTokenOutput 

type GetApplicationOptionalClaimAccessTokenOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimAccessTokenOutput) AdditionalProperties 

func (o GetApplicationOptionalClaimAccessTokenOutput) AdditionalProperties() pulumi.StringArrayOutput

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

func (GetApplicationOptionalClaimAccessTokenOutput) ElementType 

func (GetApplicationOptionalClaimAccessTokenOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimAccessTokenOutput) Essential 

func (o GetApplicationOptionalClaimAccessTokenOutput) Essential() pulumi.BoolPtrOutput

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

func (GetApplicationOptionalClaimAccessTokenOutput) Name 

func (o GetApplicationOptionalClaimAccessTokenOutput) Name() pulumi.StringOutput

The name of the optional claim.

func (GetApplicationOptionalClaimAccessTokenOutput) Source 

func (o GetApplicationOptionalClaimAccessTokenOutput) Source() pulumi.StringPtrOutput

The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.

func (GetApplicationOptionalClaimAccessTokenOutput) ToGetApplicationOptionalClaimAccessTokenOutput 

func (o GetApplicationOptionalClaimAccessTokenOutput) ToGetApplicationOptionalClaimAccessTokenOutput() GetApplicationOptionalClaimAccessTokenOutput

func (GetApplicationOptionalClaimAccessTokenOutput) ToGetApplicationOptionalClaimAccessTokenOutputWithContext 

func (o GetApplicationOptionalClaimAccessTokenOutput) ToGetApplicationOptionalClaimAccessTokenOutputWithContext(ctx context.Context) GetApplicationOptionalClaimAccessTokenOutput

type GetApplicationOptionalClaimArgs 

type GetApplicationOptionalClaimArgs struct {
	// One or more `accessToken` blocks as documented below.
	AccessTokens GetApplicationOptionalClaimAccessTokenArrayInput `pulumi:"accessTokens"`
	// One or more `idToken` blocks as documented below.
	IdTokens GetApplicationOptionalClaimIdTokenArrayInput `pulumi:"idTokens"`
	// One or more `saml2Token` blocks as documented below.
	Saml2Tokens GetApplicationOptionalClaimSaml2TokenArrayInput `pulumi:"saml2Tokens"`
}

func (GetApplicationOptionalClaimArgs) ElementType 

func (GetApplicationOptionalClaimArgs) ElementType() reflect.Type

func (GetApplicationOptionalClaimArgs) ToGetApplicationOptionalClaimOutput 

func (i GetApplicationOptionalClaimArgs) ToGetApplicationOptionalClaimOutput() GetApplicationOptionalClaimOutput

func (GetApplicationOptionalClaimArgs) ToGetApplicationOptionalClaimOutputWithContext 

func (i GetApplicationOptionalClaimArgs) ToGetApplicationOptionalClaimOutputWithContext(ctx context.Context) GetApplicationOptionalClaimOutput

type GetApplicationOptionalClaimArray 

type GetApplicationOptionalClaimArray []GetApplicationOptionalClaimInput

func (GetApplicationOptionalClaimArray) ElementType 

func (GetApplicationOptionalClaimArray) ElementType() reflect.Type

func (GetApplicationOptionalClaimArray) ToGetApplicationOptionalClaimArrayOutput 

func (i GetApplicationOptionalClaimArray) ToGetApplicationOptionalClaimArrayOutput() GetApplicationOptionalClaimArrayOutput

func (GetApplicationOptionalClaimArray) ToGetApplicationOptionalClaimArrayOutputWithContext 

func (i GetApplicationOptionalClaimArray) ToGetApplicationOptionalClaimArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimArrayOutput

type GetApplicationOptionalClaimArrayInput 

type GetApplicationOptionalClaimArrayInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimArrayOutput() GetApplicationOptionalClaimArrayOutput
	ToGetApplicationOptionalClaimArrayOutputWithContext(context.Context) GetApplicationOptionalClaimArrayOutput
}

GetApplicationOptionalClaimArrayInput is an input type that accepts GetApplicationOptionalClaimArray and GetApplicationOptionalClaimArrayOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimArrayInput` via: 

GetApplicationOptionalClaimArray{ GetApplicationOptionalClaimArgs{...} }

type GetApplicationOptionalClaimArrayOutput 

type GetApplicationOptionalClaimArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimArrayOutput) ElementType 

func (GetApplicationOptionalClaimArrayOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimArrayOutput) Index 

func (o GetApplicationOptionalClaimArrayOutput) Index(i pulumi.IntInput) GetApplicationOptionalClaimOutput

func (GetApplicationOptionalClaimArrayOutput) ToGetApplicationOptionalClaimArrayOutput 

func (o GetApplicationOptionalClaimArrayOutput) ToGetApplicationOptionalClaimArrayOutput() GetApplicationOptionalClaimArrayOutput

func (GetApplicationOptionalClaimArrayOutput) ToGetApplicationOptionalClaimArrayOutputWithContext 

func (o GetApplicationOptionalClaimArrayOutput) ToGetApplicationOptionalClaimArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimArrayOutput

type GetApplicationOptionalClaimIdToken 

type GetApplicationOptionalClaimIdToken struct {
	// List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties []string `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential *bool `pulumi:"essential"`
	// The name of the optional claim.
	Name string `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source *string `pulumi:"source"`
}

type GetApplicationOptionalClaimIdTokenArgs 

type GetApplicationOptionalClaimIdTokenArgs struct {
	// List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties pulumi.StringArrayInput `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential pulumi.BoolPtrInput `pulumi:"essential"`
	// The name of the optional claim.
	Name pulumi.StringInput `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source pulumi.StringPtrInput `pulumi:"source"`
}

func (GetApplicationOptionalClaimIdTokenArgs) ElementType 

func (GetApplicationOptionalClaimIdTokenArgs) ElementType() reflect.Type

func (GetApplicationOptionalClaimIdTokenArgs) ToGetApplicationOptionalClaimIdTokenOutput 

func (i GetApplicationOptionalClaimIdTokenArgs) ToGetApplicationOptionalClaimIdTokenOutput() GetApplicationOptionalClaimIdTokenOutput

func (GetApplicationOptionalClaimIdTokenArgs) ToGetApplicationOptionalClaimIdTokenOutputWithContext 

func (i GetApplicationOptionalClaimIdTokenArgs) ToGetApplicationOptionalClaimIdTokenOutputWithContext(ctx context.Context) GetApplicationOptionalClaimIdTokenOutput

type GetApplicationOptionalClaimIdTokenArray 

type GetApplicationOptionalClaimIdTokenArray []GetApplicationOptionalClaimIdTokenInput

func (GetApplicationOptionalClaimIdTokenArray) ElementType 

func (GetApplicationOptionalClaimIdTokenArray) ElementType() reflect.Type

func (GetApplicationOptionalClaimIdTokenArray) ToGetApplicationOptionalClaimIdTokenArrayOutput 

func (i GetApplicationOptionalClaimIdTokenArray) ToGetApplicationOptionalClaimIdTokenArrayOutput() GetApplicationOptionalClaimIdTokenArrayOutput

func (GetApplicationOptionalClaimIdTokenArray) ToGetApplicationOptionalClaimIdTokenArrayOutputWithContext 

func (i GetApplicationOptionalClaimIdTokenArray) ToGetApplicationOptionalClaimIdTokenArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimIdTokenArrayOutput

type GetApplicationOptionalClaimIdTokenArrayInput 

type GetApplicationOptionalClaimIdTokenArrayInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimIdTokenArrayOutput() GetApplicationOptionalClaimIdTokenArrayOutput
	ToGetApplicationOptionalClaimIdTokenArrayOutputWithContext(context.Context) GetApplicationOptionalClaimIdTokenArrayOutput
}

GetApplicationOptionalClaimIdTokenArrayInput is an input type that accepts GetApplicationOptionalClaimIdTokenArray and GetApplicationOptionalClaimIdTokenArrayOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimIdTokenArrayInput` via: 

GetApplicationOptionalClaimIdTokenArray{ GetApplicationOptionalClaimIdTokenArgs{...} }

type GetApplicationOptionalClaimIdTokenArrayOutput 

type GetApplicationOptionalClaimIdTokenArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimIdTokenArrayOutput) ElementType 

func (GetApplicationOptionalClaimIdTokenArrayOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimIdTokenArrayOutput) Index 

func (o GetApplicationOptionalClaimIdTokenArrayOutput) Index(i pulumi.IntInput) GetApplicationOptionalClaimIdTokenOutput

func (GetApplicationOptionalClaimIdTokenArrayOutput) ToGetApplicationOptionalClaimIdTokenArrayOutput 

func (o GetApplicationOptionalClaimIdTokenArrayOutput) ToGetApplicationOptionalClaimIdTokenArrayOutput() GetApplicationOptionalClaimIdTokenArrayOutput

func (GetApplicationOptionalClaimIdTokenArrayOutput) ToGetApplicationOptionalClaimIdTokenArrayOutputWithContext 

func (o GetApplicationOptionalClaimIdTokenArrayOutput) ToGetApplicationOptionalClaimIdTokenArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimIdTokenArrayOutput

type GetApplicationOptionalClaimIdTokenInput 

type GetApplicationOptionalClaimIdTokenInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimIdTokenOutput() GetApplicationOptionalClaimIdTokenOutput
	ToGetApplicationOptionalClaimIdTokenOutputWithContext(context.Context) GetApplicationOptionalClaimIdTokenOutput
}

GetApplicationOptionalClaimIdTokenInput is an input type that accepts GetApplicationOptionalClaimIdTokenArgs and GetApplicationOptionalClaimIdTokenOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimIdTokenInput` via: 

GetApplicationOptionalClaimIdTokenArgs{...}

type GetApplicationOptionalClaimIdTokenOutput 

type GetApplicationOptionalClaimIdTokenOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimIdTokenOutput) AdditionalProperties 

func (o GetApplicationOptionalClaimIdTokenOutput) AdditionalProperties() pulumi.StringArrayOutput

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

func (GetApplicationOptionalClaimIdTokenOutput) ElementType 

func (GetApplicationOptionalClaimIdTokenOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimIdTokenOutput) Essential 

func (o GetApplicationOptionalClaimIdTokenOutput) Essential() pulumi.BoolPtrOutput

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

func (GetApplicationOptionalClaimIdTokenOutput) Name 

func (o GetApplicationOptionalClaimIdTokenOutput) Name() pulumi.StringOutput

The name of the optional claim.

func (GetApplicationOptionalClaimIdTokenOutput) Source 

func (o GetApplicationOptionalClaimIdTokenOutput) Source() pulumi.StringPtrOutput

The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.

func (GetApplicationOptionalClaimIdTokenOutput) ToGetApplicationOptionalClaimIdTokenOutput 

func (o GetApplicationOptionalClaimIdTokenOutput) ToGetApplicationOptionalClaimIdTokenOutput() GetApplicationOptionalClaimIdTokenOutput

func (GetApplicationOptionalClaimIdTokenOutput) ToGetApplicationOptionalClaimIdTokenOutputWithContext 

func (o GetApplicationOptionalClaimIdTokenOutput) ToGetApplicationOptionalClaimIdTokenOutputWithContext(ctx context.Context) GetApplicationOptionalClaimIdTokenOutput

type GetApplicationOptionalClaimInput 

type GetApplicationOptionalClaimInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimOutput() GetApplicationOptionalClaimOutput
	ToGetApplicationOptionalClaimOutputWithContext(context.Context) GetApplicationOptionalClaimOutput
}

GetApplicationOptionalClaimInput is an input type that accepts GetApplicationOptionalClaimArgs and GetApplicationOptionalClaimOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimInput` via: 

GetApplicationOptionalClaimArgs{...}

type GetApplicationOptionalClaimOutput 

type GetApplicationOptionalClaimOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimOutput) AccessTokens 

func (o GetApplicationOptionalClaimOutput) AccessTokens() GetApplicationOptionalClaimAccessTokenArrayOutput

One or more `accessToken` blocks as documented below.

func (GetApplicationOptionalClaimOutput) ElementType 

func (GetApplicationOptionalClaimOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimOutput) IdTokens 

func (o GetApplicationOptionalClaimOutput) IdTokens() GetApplicationOptionalClaimIdTokenArrayOutput

One or more `idToken` blocks as documented below.

func (GetApplicationOptionalClaimOutput) Saml2Tokens 

func (o GetApplicationOptionalClaimOutput) Saml2Tokens() GetApplicationOptionalClaimSaml2TokenArrayOutput

One or more `saml2Token` blocks as documented below.

func (GetApplicationOptionalClaimOutput) ToGetApplicationOptionalClaimOutput 

func (o GetApplicationOptionalClaimOutput) ToGetApplicationOptionalClaimOutput() GetApplicationOptionalClaimOutput

func (GetApplicationOptionalClaimOutput) ToGetApplicationOptionalClaimOutputWithContext 

func (o GetApplicationOptionalClaimOutput) ToGetApplicationOptionalClaimOutputWithContext(ctx context.Context) GetApplicationOptionalClaimOutput

type GetApplicationOptionalClaimSaml2Token 

type GetApplicationOptionalClaimSaml2Token struct {
	// List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties []string `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential *bool `pulumi:"essential"`
	// The name of the optional claim.
	Name string `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source *string `pulumi:"source"`
}

type GetApplicationOptionalClaimSaml2TokenArgs 

type GetApplicationOptionalClaimSaml2TokenArgs struct {
	// List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.
	AdditionalProperties pulumi.StringArrayInput `pulumi:"additionalProperties"`
	// Whether the claim specified by the client is necessary to ensure a smooth authorization experience.
	Essential pulumi.BoolPtrInput `pulumi:"essential"`
	// The name of the optional claim.
	Name pulumi.StringInput `pulumi:"name"`
	// The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.
	Source pulumi.StringPtrInput `pulumi:"source"`
}

func (GetApplicationOptionalClaimSaml2TokenArgs) ElementType 

func (GetApplicationOptionalClaimSaml2TokenArgs) ElementType() reflect.Type

func (GetApplicationOptionalClaimSaml2TokenArgs) ToGetApplicationOptionalClaimSaml2TokenOutput 

func (i GetApplicationOptionalClaimSaml2TokenArgs) ToGetApplicationOptionalClaimSaml2TokenOutput() GetApplicationOptionalClaimSaml2TokenOutput

func (GetApplicationOptionalClaimSaml2TokenArgs) ToGetApplicationOptionalClaimSaml2TokenOutputWithContext 

func (i GetApplicationOptionalClaimSaml2TokenArgs) ToGetApplicationOptionalClaimSaml2TokenOutputWithContext(ctx context.Context) GetApplicationOptionalClaimSaml2TokenOutput

type GetApplicationOptionalClaimSaml2TokenArray 

type GetApplicationOptionalClaimSaml2TokenArray []GetApplicationOptionalClaimSaml2TokenInput

func (GetApplicationOptionalClaimSaml2TokenArray) ElementType 

func (GetApplicationOptionalClaimSaml2TokenArray) ElementType() reflect.Type

func (GetApplicationOptionalClaimSaml2TokenArray) ToGetApplicationOptionalClaimSaml2TokenArrayOutput 

func (i GetApplicationOptionalClaimSaml2TokenArray) ToGetApplicationOptionalClaimSaml2TokenArrayOutput() GetApplicationOptionalClaimSaml2TokenArrayOutput

func (GetApplicationOptionalClaimSaml2TokenArray) ToGetApplicationOptionalClaimSaml2TokenArrayOutputWithContext 

func (i GetApplicationOptionalClaimSaml2TokenArray) ToGetApplicationOptionalClaimSaml2TokenArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimSaml2TokenArrayOutput

type GetApplicationOptionalClaimSaml2TokenArrayInput 

type GetApplicationOptionalClaimSaml2TokenArrayInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimSaml2TokenArrayOutput() GetApplicationOptionalClaimSaml2TokenArrayOutput
	ToGetApplicationOptionalClaimSaml2TokenArrayOutputWithContext(context.Context) GetApplicationOptionalClaimSaml2TokenArrayOutput
}

GetApplicationOptionalClaimSaml2TokenArrayInput is an input type that accepts GetApplicationOptionalClaimSaml2TokenArray and GetApplicationOptionalClaimSaml2TokenArrayOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimSaml2TokenArrayInput` via: 

GetApplicationOptionalClaimSaml2TokenArray{ GetApplicationOptionalClaimSaml2TokenArgs{...} }

type GetApplicationOptionalClaimSaml2TokenArrayOutput 

type GetApplicationOptionalClaimSaml2TokenArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimSaml2TokenArrayOutput) ElementType 

func (GetApplicationOptionalClaimSaml2TokenArrayOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimSaml2TokenArrayOutput) Index 

func (o GetApplicationOptionalClaimSaml2TokenArrayOutput) Index(i pulumi.IntInput) GetApplicationOptionalClaimSaml2TokenOutput

func (GetApplicationOptionalClaimSaml2TokenArrayOutput) ToGetApplicationOptionalClaimSaml2TokenArrayOutput 

func (o GetApplicationOptionalClaimSaml2TokenArrayOutput) ToGetApplicationOptionalClaimSaml2TokenArrayOutput() GetApplicationOptionalClaimSaml2TokenArrayOutput

func (GetApplicationOptionalClaimSaml2TokenArrayOutput) ToGetApplicationOptionalClaimSaml2TokenArrayOutputWithContext 

func (o GetApplicationOptionalClaimSaml2TokenArrayOutput) ToGetApplicationOptionalClaimSaml2TokenArrayOutputWithContext(ctx context.Context) GetApplicationOptionalClaimSaml2TokenArrayOutput

type GetApplicationOptionalClaimSaml2TokenInput 

type GetApplicationOptionalClaimSaml2TokenInput interface {
	pulumi.Input

	ToGetApplicationOptionalClaimSaml2TokenOutput() GetApplicationOptionalClaimSaml2TokenOutput
	ToGetApplicationOptionalClaimSaml2TokenOutputWithContext(context.Context) GetApplicationOptionalClaimSaml2TokenOutput
}

GetApplicationOptionalClaimSaml2TokenInput is an input type that accepts GetApplicationOptionalClaimSaml2TokenArgs and GetApplicationOptionalClaimSaml2TokenOutput values. You can construct a concrete instance of `GetApplicationOptionalClaimSaml2TokenInput` via: 

GetApplicationOptionalClaimSaml2TokenArgs{...}

type GetApplicationOptionalClaimSaml2TokenOutput 

type GetApplicationOptionalClaimSaml2TokenOutput struct{ *pulumi.OutputState }

func (GetApplicationOptionalClaimSaml2TokenOutput) AdditionalProperties 

func (o GetApplicationOptionalClaimSaml2TokenOutput) AdditionalProperties() pulumi.StringArrayOutput

List of Additional Properties of the claim. If a property exists in this list, it modifies the behaviour of the optional claim.

func (GetApplicationOptionalClaimSaml2TokenOutput) ElementType 

func (GetApplicationOptionalClaimSaml2TokenOutput) ElementType() reflect.Type

func (GetApplicationOptionalClaimSaml2TokenOutput) Essential 

func (o GetApplicationOptionalClaimSaml2TokenOutput) Essential() pulumi.BoolPtrOutput

Whether the claim specified by the client is necessary to ensure a smooth authorization experience.

func (GetApplicationOptionalClaimSaml2TokenOutput) Name 

func (o GetApplicationOptionalClaimSaml2TokenOutput) Name() pulumi.StringOutput

The name of the optional claim.

func (GetApplicationOptionalClaimSaml2TokenOutput) Source 

func (o GetApplicationOptionalClaimSaml2TokenOutput) Source() pulumi.StringPtrOutput

The source of the claim. If `source` is absent, the claim is a predefined optional claim. If `source` is `user`, the value of `name` is the extension property from the user object.

func (GetApplicationOptionalClaimSaml2TokenOutput) ToGetApplicationOptionalClaimSaml2TokenOutput 

func (o GetApplicationOptionalClaimSaml2TokenOutput) ToGetApplicationOptionalClaimSaml2TokenOutput() GetApplicationOptionalClaimSaml2TokenOutput

func (GetApplicationOptionalClaimSaml2TokenOutput) ToGetApplicationOptionalClaimSaml2TokenOutputWithContext 

func (o GetApplicationOptionalClaimSaml2TokenOutput) ToGetApplicationOptionalClaimSaml2TokenOutputWithContext(ctx context.Context) GetApplicationOptionalClaimSaml2TokenOutput

type GetApplicationPublicClient 

type GetApplicationPublicClient struct {
	// A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.
	RedirectUris []string `pulumi:"redirectUris"`
}

type GetApplicationPublicClientArgs 

type GetApplicationPublicClientArgs struct {
	// A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.
	RedirectUris pulumi.StringArrayInput `pulumi:"redirectUris"`
}

func (GetApplicationPublicClientArgs) ElementType 

func (GetApplicationPublicClientArgs) ElementType() reflect.Type

func (GetApplicationPublicClientArgs) ToGetApplicationPublicClientOutput 

func (i GetApplicationPublicClientArgs) ToGetApplicationPublicClientOutput() GetApplicationPublicClientOutput

func (GetApplicationPublicClientArgs) ToGetApplicationPublicClientOutputWithContext 

func (i GetApplicationPublicClientArgs) ToGetApplicationPublicClientOutputWithContext(ctx context.Context) GetApplicationPublicClientOutput

type GetApplicationPublicClientArray 

type GetApplicationPublicClientArray []GetApplicationPublicClientInput

func (GetApplicationPublicClientArray) ElementType 

func (GetApplicationPublicClientArray) ElementType() reflect.Type

func (GetApplicationPublicClientArray) ToGetApplicationPublicClientArrayOutput 

func (i GetApplicationPublicClientArray) ToGetApplicationPublicClientArrayOutput() GetApplicationPublicClientArrayOutput

func (GetApplicationPublicClientArray) ToGetApplicationPublicClientArrayOutputWithContext 

func (i GetApplicationPublicClientArray) ToGetApplicationPublicClientArrayOutputWithContext(ctx context.Context) GetApplicationPublicClientArrayOutput

type GetApplicationPublicClientArrayInput 

type GetApplicationPublicClientArrayInput interface {
	pulumi.Input

	ToGetApplicationPublicClientArrayOutput() GetApplicationPublicClientArrayOutput
	ToGetApplicationPublicClientArrayOutputWithContext(context.Context) GetApplicationPublicClientArrayOutput
}

GetApplicationPublicClientArrayInput is an input type that accepts GetApplicationPublicClientArray and GetApplicationPublicClientArrayOutput values. You can construct a concrete instance of `GetApplicationPublicClientArrayInput` via: 

GetApplicationPublicClientArray{ GetApplicationPublicClientArgs{...} }

type GetApplicationPublicClientArrayOutput 

type GetApplicationPublicClientArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationPublicClientArrayOutput) ElementType 

func (GetApplicationPublicClientArrayOutput) ElementType() reflect.Type

func (GetApplicationPublicClientArrayOutput) Index 

func (o GetApplicationPublicClientArrayOutput) Index(i pulumi.IntInput) GetApplicationPublicClientOutput

func (GetApplicationPublicClientArrayOutput) ToGetApplicationPublicClientArrayOutput 

func (o GetApplicationPublicClientArrayOutput) ToGetApplicationPublicClientArrayOutput() GetApplicationPublicClientArrayOutput

func (GetApplicationPublicClientArrayOutput) ToGetApplicationPublicClientArrayOutputWithContext 

func (o GetApplicationPublicClientArrayOutput) ToGetApplicationPublicClientArrayOutputWithContext(ctx context.Context) GetApplicationPublicClientArrayOutput

type GetApplicationPublicClientInput 

type GetApplicationPublicClientInput interface {
	pulumi.Input

	ToGetApplicationPublicClientOutput() GetApplicationPublicClientOutput
	ToGetApplicationPublicClientOutputWithContext(context.Context) GetApplicationPublicClientOutput
}

GetApplicationPublicClientInput is an input type that accepts GetApplicationPublicClientArgs and GetApplicationPublicClientOutput values. You can construct a concrete instance of `GetApplicationPublicClientInput` via: 

GetApplicationPublicClientArgs{...}

type GetApplicationPublicClientOutput 

type GetApplicationPublicClientOutput struct{ *pulumi.OutputState }

func (GetApplicationPublicClientOutput) ElementType 

func (GetApplicationPublicClientOutput) ElementType() reflect.Type

func (GetApplicationPublicClientOutput) RedirectUris 

func (o GetApplicationPublicClientOutput) RedirectUris() pulumi.StringArrayOutput

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

func (GetApplicationPublicClientOutput) ToGetApplicationPublicClientOutput 

func (o GetApplicationPublicClientOutput) ToGetApplicationPublicClientOutput() GetApplicationPublicClientOutput

func (GetApplicationPublicClientOutput) ToGetApplicationPublicClientOutputWithContext 

func (o GetApplicationPublicClientOutput) ToGetApplicationPublicClientOutputWithContext(ctx context.Context) GetApplicationPublicClientOutput

type GetApplicationPublishedAppIdsResult 

type GetApplicationPublishedAppIdsResult struct {
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// A map of application names to application IDs.
	Result map[string]string `pulumi:"result"`
}

A collection of values returned by getApplicationPublishedAppIds.

func GetApplicationPublishedAppIds 

func GetApplicationPublishedAppIds(ctx *pulumi.Context, opts ...pulumi.InvokeOption) (*GetApplicationPublishedAppIdsResult, error)

Use this data source to discover application IDs for APIs published by Microsoft.

This data source uses an [unofficial source of application IDs](https://github.com/manicminer/hamilton/blob/main/environments/published.go), as there is currently no available official indexed source for applications or APIs published by Microsoft.

The app IDs returned by this data source are sourced from the Azure Global (Public) Cloud, however some of them are known to work in government and national clouds.

## Example Usage

*Listing well-known application IDs*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		wellKnown, err := azuread.GetApplicationPublishedAppIds(ctx, nil, nil)
		if err != nil {
			return err
		}
		ctx.Export("publishedAppIds", wellKnown.Result)
		return nil
	})
}

```

*Granting access to an application*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		wellKnown, err := azuread.GetApplicationPublishedAppIds(ctx, nil, nil)
		if err != nil {
			return err
		}
		msgraph, err := azuread.NewServicePrincipal(ctx, "msgraph", &azuread.ServicePrincipalArgs{
			ApplicationId: pulumi.String(wellKnown.Result.MicrosoftGraph),
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewApplication(ctx, "example", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			RequiredResourceAccesses: ApplicationRequiredResourceAccessArray{
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String(wellKnown.Result.MicrosoftGraph),
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.AppRoleIds.ApplyT(func(appRoleIds map[string]string) (string, error) {
								return appRoleIds.User.Read.All, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Role"),
						},
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.Oauth2PermissionScopeIds.ApplyT(func(oauth2PermissionScopeIds map[string]string) (string, error) {
								return oauth2PermissionScopeIds.User.ReadWrite, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Scope"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetApplicationRequiredResourceAccess 

type GetApplicationRequiredResourceAccess struct {
	// A collection of `resourceAccess` blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
	ResourceAccesses []GetApplicationRequiredResourceAccessResourceAccess `pulumi:"resourceAccesses"`
	// The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.
	ResourceAppId string `pulumi:"resourceAppId"`
}

type GetApplicationRequiredResourceAccessArgs 

type GetApplicationRequiredResourceAccessArgs struct {
	// A collection of `resourceAccess` blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.
	ResourceAccesses GetApplicationRequiredResourceAccessResourceAccessArrayInput `pulumi:"resourceAccesses"`
	// The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.
	ResourceAppId pulumi.StringInput `pulumi:"resourceAppId"`
}

func (GetApplicationRequiredResourceAccessArgs) ElementType 

func (GetApplicationRequiredResourceAccessArgs) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessArgs) ToGetApplicationRequiredResourceAccessOutput 

func (i GetApplicationRequiredResourceAccessArgs) ToGetApplicationRequiredResourceAccessOutput() GetApplicationRequiredResourceAccessOutput

func (GetApplicationRequiredResourceAccessArgs) ToGetApplicationRequiredResourceAccessOutputWithContext 

func (i GetApplicationRequiredResourceAccessArgs) ToGetApplicationRequiredResourceAccessOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessOutput

type GetApplicationRequiredResourceAccessArray 

type GetApplicationRequiredResourceAccessArray []GetApplicationRequiredResourceAccessInput

func (GetApplicationRequiredResourceAccessArray) ElementType 

func (GetApplicationRequiredResourceAccessArray) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessArray) ToGetApplicationRequiredResourceAccessArrayOutput 

func (i GetApplicationRequiredResourceAccessArray) ToGetApplicationRequiredResourceAccessArrayOutput() GetApplicationRequiredResourceAccessArrayOutput

func (GetApplicationRequiredResourceAccessArray) ToGetApplicationRequiredResourceAccessArrayOutputWithContext 

func (i GetApplicationRequiredResourceAccessArray) ToGetApplicationRequiredResourceAccessArrayOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessArrayOutput

type GetApplicationRequiredResourceAccessArrayInput 

type GetApplicationRequiredResourceAccessArrayInput interface {
	pulumi.Input

	ToGetApplicationRequiredResourceAccessArrayOutput() GetApplicationRequiredResourceAccessArrayOutput
	ToGetApplicationRequiredResourceAccessArrayOutputWithContext(context.Context) GetApplicationRequiredResourceAccessArrayOutput
}

GetApplicationRequiredResourceAccessArrayInput is an input type that accepts GetApplicationRequiredResourceAccessArray and GetApplicationRequiredResourceAccessArrayOutput values. You can construct a concrete instance of `GetApplicationRequiredResourceAccessArrayInput` via: 

GetApplicationRequiredResourceAccessArray{ GetApplicationRequiredResourceAccessArgs{...} }

type GetApplicationRequiredResourceAccessArrayOutput 

type GetApplicationRequiredResourceAccessArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationRequiredResourceAccessArrayOutput) ElementType 

func (GetApplicationRequiredResourceAccessArrayOutput) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessArrayOutput) Index 

func (o GetApplicationRequiredResourceAccessArrayOutput) Index(i pulumi.IntInput) GetApplicationRequiredResourceAccessOutput

func (GetApplicationRequiredResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessArrayOutput 

func (o GetApplicationRequiredResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessArrayOutput() GetApplicationRequiredResourceAccessArrayOutput

func (GetApplicationRequiredResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessArrayOutputWithContext 

func (o GetApplicationRequiredResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessArrayOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessArrayOutput

type GetApplicationRequiredResourceAccessInput 

type GetApplicationRequiredResourceAccessInput interface {
	pulumi.Input

	ToGetApplicationRequiredResourceAccessOutput() GetApplicationRequiredResourceAccessOutput
	ToGetApplicationRequiredResourceAccessOutputWithContext(context.Context) GetApplicationRequiredResourceAccessOutput
}

GetApplicationRequiredResourceAccessInput is an input type that accepts GetApplicationRequiredResourceAccessArgs and GetApplicationRequiredResourceAccessOutput values. You can construct a concrete instance of `GetApplicationRequiredResourceAccessInput` via: 

GetApplicationRequiredResourceAccessArgs{...}

type GetApplicationRequiredResourceAccessOutput 

type GetApplicationRequiredResourceAccessOutput struct{ *pulumi.OutputState }

func (GetApplicationRequiredResourceAccessOutput) ElementType 

func (GetApplicationRequiredResourceAccessOutput) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessOutput) ResourceAccesses 

func (o GetApplicationRequiredResourceAccessOutput) ResourceAccesses() GetApplicationRequiredResourceAccessResourceAccessArrayOutput

A collection of `resourceAccess` blocks as documented below, describing OAuth2.0 permission scopes and app roles that the application requires from the specified resource.

func (GetApplicationRequiredResourceAccessOutput) ResourceAppId 

func (o GetApplicationRequiredResourceAccessOutput) ResourceAppId() pulumi.StringOutput

The unique identifier for the resource that the application requires access to. This is the Application ID of the target application.

func (GetApplicationRequiredResourceAccessOutput) ToGetApplicationRequiredResourceAccessOutput 

func (o GetApplicationRequiredResourceAccessOutput) ToGetApplicationRequiredResourceAccessOutput() GetApplicationRequiredResourceAccessOutput

func (GetApplicationRequiredResourceAccessOutput) ToGetApplicationRequiredResourceAccessOutputWithContext 

func (o GetApplicationRequiredResourceAccessOutput) ToGetApplicationRequiredResourceAccessOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessOutput

type GetApplicationRequiredResourceAccessResourceAccess 

type GetApplicationRequiredResourceAccessResourceAccess struct {
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id string `pulumi:"id"`
	// Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.
	Type string `pulumi:"type"`
}

type GetApplicationRequiredResourceAccessResourceAccessArgs 

type GetApplicationRequiredResourceAccessResourceAccessArgs struct {
	// The unique identifier for an app role or OAuth2 permission scope published by the resource application.
	Id pulumi.StringInput `pulumi:"id"`
	// Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.
	Type pulumi.StringInput `pulumi:"type"`
}

func (GetApplicationRequiredResourceAccessResourceAccessArgs) ElementType 

func (GetApplicationRequiredResourceAccessResourceAccessArgs) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessResourceAccessArgs) ToGetApplicationRequiredResourceAccessResourceAccessOutput 

func (i GetApplicationRequiredResourceAccessResourceAccessArgs) ToGetApplicationRequiredResourceAccessResourceAccessOutput() GetApplicationRequiredResourceAccessResourceAccessOutput

func (GetApplicationRequiredResourceAccessResourceAccessArgs) ToGetApplicationRequiredResourceAccessResourceAccessOutputWithContext 

func (i GetApplicationRequiredResourceAccessResourceAccessArgs) ToGetApplicationRequiredResourceAccessResourceAccessOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessResourceAccessOutput

type GetApplicationRequiredResourceAccessResourceAccessArray 

type GetApplicationRequiredResourceAccessResourceAccessArray []GetApplicationRequiredResourceAccessResourceAccessInput

func (GetApplicationRequiredResourceAccessResourceAccessArray) ElementType 

func (GetApplicationRequiredResourceAccessResourceAccessArray) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessResourceAccessArray) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutput 

func (i GetApplicationRequiredResourceAccessResourceAccessArray) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutput() GetApplicationRequiredResourceAccessResourceAccessArrayOutput

func (GetApplicationRequiredResourceAccessResourceAccessArray) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext 

func (i GetApplicationRequiredResourceAccessResourceAccessArray) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessResourceAccessArrayOutput

type GetApplicationRequiredResourceAccessResourceAccessArrayInput 

type GetApplicationRequiredResourceAccessResourceAccessArrayInput interface {
	pulumi.Input

	ToGetApplicationRequiredResourceAccessResourceAccessArrayOutput() GetApplicationRequiredResourceAccessResourceAccessArrayOutput
	ToGetApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext(context.Context) GetApplicationRequiredResourceAccessResourceAccessArrayOutput
}

GetApplicationRequiredResourceAccessResourceAccessArrayInput is an input type that accepts GetApplicationRequiredResourceAccessResourceAccessArray and GetApplicationRequiredResourceAccessResourceAccessArrayOutput values. You can construct a concrete instance of `GetApplicationRequiredResourceAccessResourceAccessArrayInput` via: 

GetApplicationRequiredResourceAccessResourceAccessArray{ GetApplicationRequiredResourceAccessResourceAccessArgs{...} }

type GetApplicationRequiredResourceAccessResourceAccessArrayOutput 

type GetApplicationRequiredResourceAccessResourceAccessArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationRequiredResourceAccessResourceAccessArrayOutput) ElementType 

func (GetApplicationRequiredResourceAccessResourceAccessArrayOutput) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessResourceAccessArrayOutput) Index 

func (o GetApplicationRequiredResourceAccessResourceAccessArrayOutput) Index(i pulumi.IntInput) GetApplicationRequiredResourceAccessResourceAccessOutput

func (GetApplicationRequiredResourceAccessResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutput 

func (o GetApplicationRequiredResourceAccessResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutput() GetApplicationRequiredResourceAccessResourceAccessArrayOutput

func (GetApplicationRequiredResourceAccessResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext 

func (o GetApplicationRequiredResourceAccessResourceAccessArrayOutput) ToGetApplicationRequiredResourceAccessResourceAccessArrayOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessResourceAccessArrayOutput

type GetApplicationRequiredResourceAccessResourceAccessInput 

type GetApplicationRequiredResourceAccessResourceAccessInput interface {
	pulumi.Input

	ToGetApplicationRequiredResourceAccessResourceAccessOutput() GetApplicationRequiredResourceAccessResourceAccessOutput
	ToGetApplicationRequiredResourceAccessResourceAccessOutputWithContext(context.Context) GetApplicationRequiredResourceAccessResourceAccessOutput
}

GetApplicationRequiredResourceAccessResourceAccessInput is an input type that accepts GetApplicationRequiredResourceAccessResourceAccessArgs and GetApplicationRequiredResourceAccessResourceAccessOutput values. You can construct a concrete instance of `GetApplicationRequiredResourceAccessResourceAccessInput` via: 

GetApplicationRequiredResourceAccessResourceAccessArgs{...}

type GetApplicationRequiredResourceAccessResourceAccessOutput 

type GetApplicationRequiredResourceAccessResourceAccessOutput struct{ *pulumi.OutputState }

func (GetApplicationRequiredResourceAccessResourceAccessOutput) ElementType 

func (GetApplicationRequiredResourceAccessResourceAccessOutput) ElementType() reflect.Type

func (GetApplicationRequiredResourceAccessResourceAccessOutput) Id 

func (o GetApplicationRequiredResourceAccessResourceAccessOutput) Id() pulumi.StringOutput

The unique identifier for an app role or OAuth2 permission scope published by the resource application.

func (GetApplicationRequiredResourceAccessResourceAccessOutput) ToGetApplicationRequiredResourceAccessResourceAccessOutput 

func (o GetApplicationRequiredResourceAccessResourceAccessOutput) ToGetApplicationRequiredResourceAccessResourceAccessOutput() GetApplicationRequiredResourceAccessResourceAccessOutput

func (GetApplicationRequiredResourceAccessResourceAccessOutput) ToGetApplicationRequiredResourceAccessResourceAccessOutputWithContext 

func (o GetApplicationRequiredResourceAccessResourceAccessOutput) ToGetApplicationRequiredResourceAccessResourceAccessOutputWithContext(ctx context.Context) GetApplicationRequiredResourceAccessResourceAccessOutput

func (GetApplicationRequiredResourceAccessResourceAccessOutput) Type 

func (o GetApplicationRequiredResourceAccessResourceAccessOutput) Type() pulumi.StringOutput

Specifies whether the `id` property references an app role or an OAuth2 permission scope. Possible values are `Role` or `Scope`.

type GetApplicationSinglePageApplication 

type GetApplicationSinglePageApplication struct {
	// A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.
	RedirectUris []string `pulumi:"redirectUris"`
}

type GetApplicationSinglePageApplicationArgs 

type GetApplicationSinglePageApplicationArgs struct {
	// A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.
	RedirectUris pulumi.StringArrayInput `pulumi:"redirectUris"`
}

func (GetApplicationSinglePageApplicationArgs) ElementType 

func (GetApplicationSinglePageApplicationArgs) ElementType() reflect.Type

func (GetApplicationSinglePageApplicationArgs) ToGetApplicationSinglePageApplicationOutput 

func (i GetApplicationSinglePageApplicationArgs) ToGetApplicationSinglePageApplicationOutput() GetApplicationSinglePageApplicationOutput

func (GetApplicationSinglePageApplicationArgs) ToGetApplicationSinglePageApplicationOutputWithContext 

func (i GetApplicationSinglePageApplicationArgs) ToGetApplicationSinglePageApplicationOutputWithContext(ctx context.Context) GetApplicationSinglePageApplicationOutput

type GetApplicationSinglePageApplicationArray 

type GetApplicationSinglePageApplicationArray []GetApplicationSinglePageApplicationInput

func (GetApplicationSinglePageApplicationArray) ElementType 

func (GetApplicationSinglePageApplicationArray) ElementType() reflect.Type

func (GetApplicationSinglePageApplicationArray) ToGetApplicationSinglePageApplicationArrayOutput 

func (i GetApplicationSinglePageApplicationArray) ToGetApplicationSinglePageApplicationArrayOutput() GetApplicationSinglePageApplicationArrayOutput

func (GetApplicationSinglePageApplicationArray) ToGetApplicationSinglePageApplicationArrayOutputWithContext 

func (i GetApplicationSinglePageApplicationArray) ToGetApplicationSinglePageApplicationArrayOutputWithContext(ctx context.Context) GetApplicationSinglePageApplicationArrayOutput

type GetApplicationSinglePageApplicationArrayInput 

type GetApplicationSinglePageApplicationArrayInput interface {
	pulumi.Input

	ToGetApplicationSinglePageApplicationArrayOutput() GetApplicationSinglePageApplicationArrayOutput
	ToGetApplicationSinglePageApplicationArrayOutputWithContext(context.Context) GetApplicationSinglePageApplicationArrayOutput
}

GetApplicationSinglePageApplicationArrayInput is an input type that accepts GetApplicationSinglePageApplicationArray and GetApplicationSinglePageApplicationArrayOutput values. You can construct a concrete instance of `GetApplicationSinglePageApplicationArrayInput` via: 

GetApplicationSinglePageApplicationArray{ GetApplicationSinglePageApplicationArgs{...} }

type GetApplicationSinglePageApplicationArrayOutput 

type GetApplicationSinglePageApplicationArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationSinglePageApplicationArrayOutput) ElementType 

func (GetApplicationSinglePageApplicationArrayOutput) ElementType() reflect.Type

func (GetApplicationSinglePageApplicationArrayOutput) Index 

func (o GetApplicationSinglePageApplicationArrayOutput) Index(i pulumi.IntInput) GetApplicationSinglePageApplicationOutput

func (GetApplicationSinglePageApplicationArrayOutput) ToGetApplicationSinglePageApplicationArrayOutput 

func (o GetApplicationSinglePageApplicationArrayOutput) ToGetApplicationSinglePageApplicationArrayOutput() GetApplicationSinglePageApplicationArrayOutput

func (GetApplicationSinglePageApplicationArrayOutput) ToGetApplicationSinglePageApplicationArrayOutputWithContext 

func (o GetApplicationSinglePageApplicationArrayOutput) ToGetApplicationSinglePageApplicationArrayOutputWithContext(ctx context.Context) GetApplicationSinglePageApplicationArrayOutput

type GetApplicationSinglePageApplicationInput 

type GetApplicationSinglePageApplicationInput interface {
	pulumi.Input

	ToGetApplicationSinglePageApplicationOutput() GetApplicationSinglePageApplicationOutput
	ToGetApplicationSinglePageApplicationOutputWithContext(context.Context) GetApplicationSinglePageApplicationOutput
}

GetApplicationSinglePageApplicationInput is an input type that accepts GetApplicationSinglePageApplicationArgs and GetApplicationSinglePageApplicationOutput values. You can construct a concrete instance of `GetApplicationSinglePageApplicationInput` via: 

GetApplicationSinglePageApplicationArgs{...}

type GetApplicationSinglePageApplicationOutput 

type GetApplicationSinglePageApplicationOutput struct{ *pulumi.OutputState }

func (GetApplicationSinglePageApplicationOutput) ElementType 

func (GetApplicationSinglePageApplicationOutput) ElementType() reflect.Type

func (GetApplicationSinglePageApplicationOutput) RedirectUris 

func (o GetApplicationSinglePageApplicationOutput) RedirectUris() pulumi.StringArrayOutput

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

func (GetApplicationSinglePageApplicationOutput) ToGetApplicationSinglePageApplicationOutput 

func (o GetApplicationSinglePageApplicationOutput) ToGetApplicationSinglePageApplicationOutput() GetApplicationSinglePageApplicationOutput

func (GetApplicationSinglePageApplicationOutput) ToGetApplicationSinglePageApplicationOutputWithContext 

func (o GetApplicationSinglePageApplicationOutput) ToGetApplicationSinglePageApplicationOutputWithContext(ctx context.Context) GetApplicationSinglePageApplicationOutput

type GetApplicationTemplateArgs added in v5.2.0 

type GetApplicationTemplateArgs struct {
	// Specifies the display name of the templated application.
	DisplayName *string `pulumi:"displayName"`
	// Specifies the ID of the templated application.
	TemplateId *string `pulumi:"templateId"`
}

A collection of arguments for invoking getApplicationTemplate.

type GetApplicationTemplateOutputArgs added in v5.3.0 

type GetApplicationTemplateOutputArgs struct {
	// Specifies the display name of the templated application.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Specifies the ID of the templated application.
	TemplateId pulumi.StringPtrInput `pulumi:"templateId"`
}

A collection of arguments for invoking getApplicationTemplate.

func (GetApplicationTemplateOutputArgs) ElementType added in v5.3.0 

func (GetApplicationTemplateOutputArgs) ElementType() reflect.Type

type GetApplicationTemplateResult added in v5.2.0 

type GetApplicationTemplateResult struct {
	// List of categories for this templated application.
	Categories []string `pulumi:"categories"`
	// The display name for the templated application.
	DisplayName string `pulumi:"displayName"`
	// Home page URL of the templated application.
	HomepageUrl string `pulumi:"homepageUrl"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// URL to retrieve the logo for this templated application.
	LogoUrl string `pulumi:"logoUrl"`
	// Name of the publisher for this templated application.
	Publisher string `pulumi:"publisher"`
	// List of provisioning modes supported by this templated application.
	SupportedProvisioningTypes []string `pulumi:"supportedProvisioningTypes"`
	// List of single sign on modes supported by this templated application.
	SupportedSingleSignOnModes []string `pulumi:"supportedSingleSignOnModes"`
	// The ID of the templated application.
	TemplateId string `pulumi:"templateId"`
}

A collection of values returned by getApplicationTemplate.

func GetApplicationTemplate added in v5.2.0 

func GetApplicationTemplate(ctx *pulumi.Context, args *GetApplicationTemplateArgs, opts ...pulumi.InvokeOption) (*GetApplicationTemplateResult, error)

Use this data source to access information about an Application Template from the [Azure AD App Gallery](https://azuremarketplace.microsoft.com/en-US/marketplace/apps/category/azure-active-directory-apps).

## API Permissions

This data source does not require any additional roles.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := azuread.GetApplicationTemplate(ctx, &GetApplicationTemplateArgs{
			DisplayName: pulumi.StringRef("Marketo"),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("applicationTemplateId", example.TemplateId)
		return nil
	})
}

```

type GetApplicationTemplateResultOutput added in v5.3.0 

type GetApplicationTemplateResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getApplicationTemplate.

func GetApplicationTemplateOutput added in v5.3.0 

func GetApplicationTemplateOutput(ctx *pulumi.Context, args GetApplicationTemplateOutputArgs, opts ...pulumi.InvokeOption) GetApplicationTemplateResultOutput

func (GetApplicationTemplateResultOutput) Categories added in v5.3.0 

func (o GetApplicationTemplateResultOutput) Categories() pulumi.StringArrayOutput

List of categories for this templated application.

func (GetApplicationTemplateResultOutput) DisplayName added in v5.3.0 

func (o GetApplicationTemplateResultOutput) DisplayName() pulumi.StringOutput

The display name for the templated application.

func (GetApplicationTemplateResultOutput) ElementType added in v5.3.0 

func (GetApplicationTemplateResultOutput) ElementType() reflect.Type

func (GetApplicationTemplateResultOutput) HomepageUrl added in v5.3.0 

func (o GetApplicationTemplateResultOutput) HomepageUrl() pulumi.StringOutput

Home page URL of the templated application.

func (GetApplicationTemplateResultOutput) Id added in v5.3.0 

func (o GetApplicationTemplateResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetApplicationTemplateResultOutput) LogoUrl added in v5.3.0 

func (o GetApplicationTemplateResultOutput) LogoUrl() pulumi.StringOutput

URL to retrieve the logo for this templated application.

func (GetApplicationTemplateResultOutput) Publisher added in v5.3.0 

func (o GetApplicationTemplateResultOutput) Publisher() pulumi.StringOutput

Name of the publisher for this templated application.

func (GetApplicationTemplateResultOutput) SupportedProvisioningTypes added in v5.3.0 

func (o GetApplicationTemplateResultOutput) SupportedProvisioningTypes() pulumi.StringArrayOutput

List of provisioning modes supported by this templated application.

func (GetApplicationTemplateResultOutput) SupportedSingleSignOnModes added in v5.3.0 

func (o GetApplicationTemplateResultOutput) SupportedSingleSignOnModes() pulumi.StringArrayOutput

List of single sign on modes supported by this templated application.

func (GetApplicationTemplateResultOutput) TemplateId added in v5.3.0 

func (o GetApplicationTemplateResultOutput) TemplateId() pulumi.StringOutput

The ID of the templated application.

func (GetApplicationTemplateResultOutput) ToGetApplicationTemplateResultOutput added in v5.3.0 

func (o GetApplicationTemplateResultOutput) ToGetApplicationTemplateResultOutput() GetApplicationTemplateResultOutput

func (GetApplicationTemplateResultOutput) ToGetApplicationTemplateResultOutputWithContext added in v5.3.0 

func (o GetApplicationTemplateResultOutput) ToGetApplicationTemplateResultOutputWithContext(ctx context.Context) GetApplicationTemplateResultOutput

type GetApplicationWeb 

type GetApplicationWeb struct {
	// Home page or landing page of the application.
	HomepageUrl string `pulumi:"homepageUrl"`
	// An `implicitGrant` block as documented above.
	ImplicitGrants []GetApplicationWebImplicitGrant `pulumi:"implicitGrants"`
	// The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
	LogoutUrl string `pulumi:"logoutUrl"`
	// A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.
	RedirectUris []string `pulumi:"redirectUris"`
}

type GetApplicationWebArgs 

type GetApplicationWebArgs struct {
	// Home page or landing page of the application.
	HomepageUrl pulumi.StringInput `pulumi:"homepageUrl"`
	// An `implicitGrant` block as documented above.
	ImplicitGrants GetApplicationWebImplicitGrantArrayInput `pulumi:"implicitGrants"`
	// The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.
	LogoutUrl pulumi.StringInput `pulumi:"logoutUrl"`
	// A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.
	RedirectUris pulumi.StringArrayInput `pulumi:"redirectUris"`
}

func (GetApplicationWebArgs) ElementType 

func (GetApplicationWebArgs) ElementType() reflect.Type

func (GetApplicationWebArgs) ToGetApplicationWebOutput 

func (i GetApplicationWebArgs) ToGetApplicationWebOutput() GetApplicationWebOutput

func (GetApplicationWebArgs) ToGetApplicationWebOutputWithContext 

func (i GetApplicationWebArgs) ToGetApplicationWebOutputWithContext(ctx context.Context) GetApplicationWebOutput

type GetApplicationWebArray 

type GetApplicationWebArray []GetApplicationWebInput

func (GetApplicationWebArray) ElementType 

func (GetApplicationWebArray) ElementType() reflect.Type

func (GetApplicationWebArray) ToGetApplicationWebArrayOutput 

func (i GetApplicationWebArray) ToGetApplicationWebArrayOutput() GetApplicationWebArrayOutput

func (GetApplicationWebArray) ToGetApplicationWebArrayOutputWithContext 

func (i GetApplicationWebArray) ToGetApplicationWebArrayOutputWithContext(ctx context.Context) GetApplicationWebArrayOutput

type GetApplicationWebArrayInput 

type GetApplicationWebArrayInput interface {
	pulumi.Input

	ToGetApplicationWebArrayOutput() GetApplicationWebArrayOutput
	ToGetApplicationWebArrayOutputWithContext(context.Context) GetApplicationWebArrayOutput
}

GetApplicationWebArrayInput is an input type that accepts GetApplicationWebArray and GetApplicationWebArrayOutput values. You can construct a concrete instance of `GetApplicationWebArrayInput` via: 

GetApplicationWebArray{ GetApplicationWebArgs{...} }

type GetApplicationWebArrayOutput 

type GetApplicationWebArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationWebArrayOutput) ElementType 

func (GetApplicationWebArrayOutput) ElementType() reflect.Type

func (GetApplicationWebArrayOutput) Index 

func (o GetApplicationWebArrayOutput) Index(i pulumi.IntInput) GetApplicationWebOutput

func (GetApplicationWebArrayOutput) ToGetApplicationWebArrayOutput 

func (o GetApplicationWebArrayOutput) ToGetApplicationWebArrayOutput() GetApplicationWebArrayOutput

func (GetApplicationWebArrayOutput) ToGetApplicationWebArrayOutputWithContext 

func (o GetApplicationWebArrayOutput) ToGetApplicationWebArrayOutputWithContext(ctx context.Context) GetApplicationWebArrayOutput

type GetApplicationWebImplicitGrant 

type GetApplicationWebImplicitGrant struct {
	// Whether this web application can request an access token using OAuth 2.0 implicit flow.
	AccessTokenIssuanceEnabled bool `pulumi:"accessTokenIssuanceEnabled"`
	// Whether this web application can request an ID token using OAuth 2.0 implicit flow.
	IdTokenIssuanceEnabled bool `pulumi:"idTokenIssuanceEnabled"`
}

type GetApplicationWebImplicitGrantArgs 

type GetApplicationWebImplicitGrantArgs struct {
	// Whether this web application can request an access token using OAuth 2.0 implicit flow.
	AccessTokenIssuanceEnabled pulumi.BoolInput `pulumi:"accessTokenIssuanceEnabled"`
	// Whether this web application can request an ID token using OAuth 2.0 implicit flow.
	IdTokenIssuanceEnabled pulumi.BoolInput `pulumi:"idTokenIssuanceEnabled"`
}

func (GetApplicationWebImplicitGrantArgs) ElementType 

func (GetApplicationWebImplicitGrantArgs) ElementType() reflect.Type

func (GetApplicationWebImplicitGrantArgs) ToGetApplicationWebImplicitGrantOutput 

func (i GetApplicationWebImplicitGrantArgs) ToGetApplicationWebImplicitGrantOutput() GetApplicationWebImplicitGrantOutput

func (GetApplicationWebImplicitGrantArgs) ToGetApplicationWebImplicitGrantOutputWithContext 

func (i GetApplicationWebImplicitGrantArgs) ToGetApplicationWebImplicitGrantOutputWithContext(ctx context.Context) GetApplicationWebImplicitGrantOutput

type GetApplicationWebImplicitGrantArray 

type GetApplicationWebImplicitGrantArray []GetApplicationWebImplicitGrantInput

func (GetApplicationWebImplicitGrantArray) ElementType 

func (GetApplicationWebImplicitGrantArray) ElementType() reflect.Type

func (GetApplicationWebImplicitGrantArray) ToGetApplicationWebImplicitGrantArrayOutput 

func (i GetApplicationWebImplicitGrantArray) ToGetApplicationWebImplicitGrantArrayOutput() GetApplicationWebImplicitGrantArrayOutput

func (GetApplicationWebImplicitGrantArray) ToGetApplicationWebImplicitGrantArrayOutputWithContext 

func (i GetApplicationWebImplicitGrantArray) ToGetApplicationWebImplicitGrantArrayOutputWithContext(ctx context.Context) GetApplicationWebImplicitGrantArrayOutput

type GetApplicationWebImplicitGrantArrayInput 

type GetApplicationWebImplicitGrantArrayInput interface {
	pulumi.Input

	ToGetApplicationWebImplicitGrantArrayOutput() GetApplicationWebImplicitGrantArrayOutput
	ToGetApplicationWebImplicitGrantArrayOutputWithContext(context.Context) GetApplicationWebImplicitGrantArrayOutput
}

GetApplicationWebImplicitGrantArrayInput is an input type that accepts GetApplicationWebImplicitGrantArray and GetApplicationWebImplicitGrantArrayOutput values. You can construct a concrete instance of `GetApplicationWebImplicitGrantArrayInput` via: 

GetApplicationWebImplicitGrantArray{ GetApplicationWebImplicitGrantArgs{...} }

type GetApplicationWebImplicitGrantArrayOutput 

type GetApplicationWebImplicitGrantArrayOutput struct{ *pulumi.OutputState }

func (GetApplicationWebImplicitGrantArrayOutput) ElementType 

func (GetApplicationWebImplicitGrantArrayOutput) ElementType() reflect.Type

func (GetApplicationWebImplicitGrantArrayOutput) Index 

func (o GetApplicationWebImplicitGrantArrayOutput) Index(i pulumi.IntInput) GetApplicationWebImplicitGrantOutput

func (GetApplicationWebImplicitGrantArrayOutput) ToGetApplicationWebImplicitGrantArrayOutput 

func (o GetApplicationWebImplicitGrantArrayOutput) ToGetApplicationWebImplicitGrantArrayOutput() GetApplicationWebImplicitGrantArrayOutput

func (GetApplicationWebImplicitGrantArrayOutput) ToGetApplicationWebImplicitGrantArrayOutputWithContext 

func (o GetApplicationWebImplicitGrantArrayOutput) ToGetApplicationWebImplicitGrantArrayOutputWithContext(ctx context.Context) GetApplicationWebImplicitGrantArrayOutput

type GetApplicationWebImplicitGrantInput 

type GetApplicationWebImplicitGrantInput interface {
	pulumi.Input

	ToGetApplicationWebImplicitGrantOutput() GetApplicationWebImplicitGrantOutput
	ToGetApplicationWebImplicitGrantOutputWithContext(context.Context) GetApplicationWebImplicitGrantOutput
}

GetApplicationWebImplicitGrantInput is an input type that accepts GetApplicationWebImplicitGrantArgs and GetApplicationWebImplicitGrantOutput values. You can construct a concrete instance of `GetApplicationWebImplicitGrantInput` via: 

GetApplicationWebImplicitGrantArgs{...}

type GetApplicationWebImplicitGrantOutput 

type GetApplicationWebImplicitGrantOutput struct{ *pulumi.OutputState }

func (GetApplicationWebImplicitGrantOutput) AccessTokenIssuanceEnabled 

func (o GetApplicationWebImplicitGrantOutput) AccessTokenIssuanceEnabled() pulumi.BoolOutput

Whether this web application can request an access token using OAuth 2.0 implicit flow.

func (GetApplicationWebImplicitGrantOutput) ElementType 

func (GetApplicationWebImplicitGrantOutput) ElementType() reflect.Type

func (GetApplicationWebImplicitGrantOutput) IdTokenIssuanceEnabled 

func (o GetApplicationWebImplicitGrantOutput) IdTokenIssuanceEnabled() pulumi.BoolOutput

Whether this web application can request an ID token using OAuth 2.0 implicit flow.

func (GetApplicationWebImplicitGrantOutput) ToGetApplicationWebImplicitGrantOutput 

func (o GetApplicationWebImplicitGrantOutput) ToGetApplicationWebImplicitGrantOutput() GetApplicationWebImplicitGrantOutput

func (GetApplicationWebImplicitGrantOutput) ToGetApplicationWebImplicitGrantOutputWithContext 

func (o GetApplicationWebImplicitGrantOutput) ToGetApplicationWebImplicitGrantOutputWithContext(ctx context.Context) GetApplicationWebImplicitGrantOutput

type GetApplicationWebInput 

type GetApplicationWebInput interface {
	pulumi.Input

	ToGetApplicationWebOutput() GetApplicationWebOutput
	ToGetApplicationWebOutputWithContext(context.Context) GetApplicationWebOutput
}

GetApplicationWebInput is an input type that accepts GetApplicationWebArgs and GetApplicationWebOutput values. You can construct a concrete instance of `GetApplicationWebInput` via: 

GetApplicationWebArgs{...}

type GetApplicationWebOutput 

type GetApplicationWebOutput struct{ *pulumi.OutputState }

func (GetApplicationWebOutput) ElementType 

func (GetApplicationWebOutput) ElementType() reflect.Type

func (GetApplicationWebOutput) HomepageUrl 

func (o GetApplicationWebOutput) HomepageUrl() pulumi.StringOutput

Home page or landing page of the application.

func (GetApplicationWebOutput) ImplicitGrants 

func (o GetApplicationWebOutput) ImplicitGrants() GetApplicationWebImplicitGrantArrayOutput

An `implicitGrant` block as documented above.

func (GetApplicationWebOutput) LogoutUrl 

func (o GetApplicationWebOutput) LogoutUrl() pulumi.StringOutput

The URL that will be used by Microsoft's authorization service to sign out a user using front-channel, back-channel or SAML logout protocols.

func (GetApplicationWebOutput) RedirectUris 

func (o GetApplicationWebOutput) RedirectUris() pulumi.StringArrayOutput

A list of URLs where user tokens are sent for sign-in, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent.

func (GetApplicationWebOutput) ToGetApplicationWebOutput 

func (o GetApplicationWebOutput) ToGetApplicationWebOutput() GetApplicationWebOutput

func (GetApplicationWebOutput) ToGetApplicationWebOutputWithContext 

func (o GetApplicationWebOutput) ToGetApplicationWebOutputWithContext(ctx context.Context) GetApplicationWebOutput

type GetClientConfigResult 

type GetClientConfigResult struct {
	// The client ID (application ID) linked to the authenticated principal, or the application used for delegated authentication.
	ClientId string `pulumi:"clientId"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// The object ID of the authenticated principal.
	ObjectId string `pulumi:"objectId"`
	// The tenant ID of the authenticated principal.
	TenantId string `pulumi:"tenantId"`
}

A collection of values returned by getClientConfig.

func GetClientConfig 

func GetClientConfig(ctx *pulumi.Context, opts ...pulumi.InvokeOption) (*GetClientConfigResult, error)

Use this data source to access the configuration of the AzureAD provider.

## API Permissions

No additional roles are required to use this data source.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := azuread.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		ctx.Export("objectId", current.ObjectId)
		return nil
	})
}

```

type GetDirectoryObjectArgs added in v5.28.0 

type GetDirectoryObjectArgs struct {
	// Specifies the Object ID of the directory object to look up.
	ObjectId string `pulumi:"objectId"`
}

A collection of arguments for invoking getDirectoryObject.

type GetDirectoryObjectOutputArgs added in v5.28.0 

type GetDirectoryObjectOutputArgs struct {
	// Specifies the Object ID of the directory object to look up.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
}

A collection of arguments for invoking getDirectoryObject.

func (GetDirectoryObjectOutputArgs) ElementType added in v5.28.0 

func (GetDirectoryObjectOutputArgs) ElementType() reflect.Type

type GetDirectoryObjectResult added in v5.28.0 

type GetDirectoryObjectResult struct {
	// The provider-assigned unique ID for this managed resource.
	Id       string `pulumi:"id"`
	ObjectId string `pulumi:"objectId"`
	Type     string `pulumi:"type"`
}

A collection of values returned by getDirectoryObject.

func GetDirectoryObject added in v5.28.0 

func GetDirectoryObject(ctx *pulumi.Context, args *GetDirectoryObjectArgs, opts ...pulumi.InvokeOption) (*GetDirectoryObjectResult, error)

Retrieves the OData type for a generic directory object having the provided object ID.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires either `User.Read.All`, `Group.Read.All` or `Directory.Read.All`, depending on the type of object being queried.

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

*Look up and output type of object by ID* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := azuread.GetDirectoryObject(ctx, &GetDirectoryObjectArgs{
			ObjectId: "00000000-0000-0000-0000-000000000000",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("objectType", example.Type)
		return nil
	})
}

``` ## Attributes Reference

The following attributes are exported:

*`objectId` - The object ID of the directory object. *`type` - The shortened OData type of the directory object. Possible values include: `Group`, `User` or `ServicePrincipal`.

type GetDirectoryObjectResultOutput added in v5.28.0 

type GetDirectoryObjectResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getDirectoryObject.

func GetDirectoryObjectOutput added in v5.28.0 

func GetDirectoryObjectOutput(ctx *pulumi.Context, args GetDirectoryObjectOutputArgs, opts ...pulumi.InvokeOption) GetDirectoryObjectResultOutput

func (GetDirectoryObjectResultOutput) ElementType added in v5.28.0 

func (GetDirectoryObjectResultOutput) ElementType() reflect.Type

func (GetDirectoryObjectResultOutput) Id added in v5.28.0 

func (o GetDirectoryObjectResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetDirectoryObjectResultOutput) ObjectId added in v5.28.0 

func (o GetDirectoryObjectResultOutput) ObjectId() pulumi.StringOutput

func (GetDirectoryObjectResultOutput) ToGetDirectoryObjectResultOutput added in v5.28.0 

func (o GetDirectoryObjectResultOutput) ToGetDirectoryObjectResultOutput() GetDirectoryObjectResultOutput

func (GetDirectoryObjectResultOutput) ToGetDirectoryObjectResultOutputWithContext added in v5.28.0 

func (o GetDirectoryObjectResultOutput) ToGetDirectoryObjectResultOutputWithContext(ctx context.Context) GetDirectoryObjectResultOutput

func (GetDirectoryObjectResultOutput) Type added in v5.28.0 

func (o GetDirectoryObjectResultOutput) Type() pulumi.StringOutput

type GetDomainsArgs 

type GetDomainsArgs struct {
	// Set to `true` to only return domains whose DNS is managed by Microsoft 365. Defaults to `false`.
	AdminManaged *bool `pulumi:"adminManaged"`
	// Set to `true` if unverified Azure AD domains should be included. Defaults to `false`.
	IncludeUnverified *bool `pulumi:"includeUnverified"`
	// Set to `true` to only return the default domain.
	OnlyDefault *bool `pulumi:"onlyDefault"`
	// Set to `true` to only return the initial domain, which is your primary Azure Active Directory tenant domain. Defaults to `false`.
	OnlyInitial *bool `pulumi:"onlyInitial"`
	// Set to `true` to only return verified root domains. Excludes subdomains and unverified domains.
	OnlyRoot *bool `pulumi:"onlyRoot"`
	// A list of supported services that must be supported by a domain. Possible values include `Email`, `Sharepoint`, `EmailInternalRelayOnly`, `OfficeCommunicationsOnline`, `SharePointDefaultDomain`, `FullRedelegation`, `SharePointPublic`, `OrgIdAuthentication`, `Yammer` and `Intune`.
	SupportsServices []string `pulumi:"supportsServices"`
}

A collection of arguments for invoking getDomains.

type GetDomainsDomain 

type GetDomainsDomain struct {
	// Set to `true` to only return domains whose DNS is managed by Microsoft 365. Defaults to `false`.
	AdminManaged bool `pulumi:"adminManaged"`
	// The authentication type of the domain. Possible values include `Managed` or `Federated`.
	AuthenticationType string `pulumi:"authenticationType"`
	// Whether this is the default domain that is used for user creation.
	Default bool `pulumi:"default"`
	// The name of the domain.
	DomainName string `pulumi:"domainName"`
	// Whether this is the initial domain created by Azure Active Directory.
	Initial bool `pulumi:"initial"`
	// Whether the domain is a verified root domain (not a subdomain).
	Root bool `pulumi:"root"`
	// A list of capabilities / services supported by the domain. Possible values include `Email`, `Sharepoint`, `EmailInternalRelayOnly`, `OfficeCommunicationsOnline`, `SharePointDefaultDomain`, `FullRedelegation`, `SharePointPublic`, `OrgIdAuthentication`, `Yammer` and `Intune`.
	SupportedServices []string `pulumi:"supportedServices"`
	// Whether the domain has completed domain ownership verification.
	Verified bool `pulumi:"verified"`
}

type GetDomainsDomainArgs 

type GetDomainsDomainArgs struct {
	// Set to `true` to only return domains whose DNS is managed by Microsoft 365. Defaults to `false`.
	AdminManaged pulumi.BoolInput `pulumi:"adminManaged"`
	// The authentication type of the domain. Possible values include `Managed` or `Federated`.
	AuthenticationType pulumi.StringInput `pulumi:"authenticationType"`
	// Whether this is the default domain that is used for user creation.
	Default pulumi.BoolInput `pulumi:"default"`
	// The name of the domain.
	DomainName pulumi.StringInput `pulumi:"domainName"`
	// Whether this is the initial domain created by Azure Active Directory.
	Initial pulumi.BoolInput `pulumi:"initial"`
	// Whether the domain is a verified root domain (not a subdomain).
	Root pulumi.BoolInput `pulumi:"root"`
	// A list of capabilities / services supported by the domain. Possible values include `Email`, `Sharepoint`, `EmailInternalRelayOnly`, `OfficeCommunicationsOnline`, `SharePointDefaultDomain`, `FullRedelegation`, `SharePointPublic`, `OrgIdAuthentication`, `Yammer` and `Intune`.
	SupportedServices pulumi.StringArrayInput `pulumi:"supportedServices"`
	// Whether the domain has completed domain ownership verification.
	Verified pulumi.BoolInput `pulumi:"verified"`
}

func (GetDomainsDomainArgs) ElementType 

func (GetDomainsDomainArgs) ElementType() reflect.Type

func (GetDomainsDomainArgs) ToGetDomainsDomainOutput 

func (i GetDomainsDomainArgs) ToGetDomainsDomainOutput() GetDomainsDomainOutput

func (GetDomainsDomainArgs) ToGetDomainsDomainOutputWithContext 

func (i GetDomainsDomainArgs) ToGetDomainsDomainOutputWithContext(ctx context.Context) GetDomainsDomainOutput

type GetDomainsDomainArray 

type GetDomainsDomainArray []GetDomainsDomainInput

func (GetDomainsDomainArray) ElementType 

func (GetDomainsDomainArray) ElementType() reflect.Type

func (GetDomainsDomainArray) ToGetDomainsDomainArrayOutput 

func (i GetDomainsDomainArray) ToGetDomainsDomainArrayOutput() GetDomainsDomainArrayOutput

func (GetDomainsDomainArray) ToGetDomainsDomainArrayOutputWithContext 

func (i GetDomainsDomainArray) ToGetDomainsDomainArrayOutputWithContext(ctx context.Context) GetDomainsDomainArrayOutput

type GetDomainsDomainArrayInput 

type GetDomainsDomainArrayInput interface {
	pulumi.Input

	ToGetDomainsDomainArrayOutput() GetDomainsDomainArrayOutput
	ToGetDomainsDomainArrayOutputWithContext(context.Context) GetDomainsDomainArrayOutput
}

GetDomainsDomainArrayInput is an input type that accepts GetDomainsDomainArray and GetDomainsDomainArrayOutput values. You can construct a concrete instance of `GetDomainsDomainArrayInput` via: 

GetDomainsDomainArray{ GetDomainsDomainArgs{...} }

type GetDomainsDomainArrayOutput 

type GetDomainsDomainArrayOutput struct{ *pulumi.OutputState }

func (GetDomainsDomainArrayOutput) ElementType 

func (GetDomainsDomainArrayOutput) ElementType() reflect.Type

func (GetDomainsDomainArrayOutput) Index 

func (o GetDomainsDomainArrayOutput) Index(i pulumi.IntInput) GetDomainsDomainOutput

func (GetDomainsDomainArrayOutput) ToGetDomainsDomainArrayOutput 

func (o GetDomainsDomainArrayOutput) ToGetDomainsDomainArrayOutput() GetDomainsDomainArrayOutput

func (GetDomainsDomainArrayOutput) ToGetDomainsDomainArrayOutputWithContext 

func (o GetDomainsDomainArrayOutput) ToGetDomainsDomainArrayOutputWithContext(ctx context.Context) GetDomainsDomainArrayOutput

type GetDomainsDomainInput 

type GetDomainsDomainInput interface {
	pulumi.Input

	ToGetDomainsDomainOutput() GetDomainsDomainOutput
	ToGetDomainsDomainOutputWithContext(context.Context) GetDomainsDomainOutput
}

GetDomainsDomainInput is an input type that accepts GetDomainsDomainArgs and GetDomainsDomainOutput values. You can construct a concrete instance of `GetDomainsDomainInput` via: 

GetDomainsDomainArgs{...}

type GetDomainsDomainOutput 

type GetDomainsDomainOutput struct{ *pulumi.OutputState }

func (GetDomainsDomainOutput) AdminManaged 

func (o GetDomainsDomainOutput) AdminManaged() pulumi.BoolOutput

Set to `true` to only return domains whose DNS is managed by Microsoft 365. Defaults to `false`.

func (GetDomainsDomainOutput) AuthenticationType 

func (o GetDomainsDomainOutput) AuthenticationType() pulumi.StringOutput

The authentication type of the domain. Possible values include `Managed` or `Federated`.

func (GetDomainsDomainOutput) Default 

func (o GetDomainsDomainOutput) Default() pulumi.BoolOutput

Whether this is the default domain that is used for user creation.

func (GetDomainsDomainOutput) DomainName 

func (o GetDomainsDomainOutput) DomainName() pulumi.StringOutput

The name of the domain.

func (GetDomainsDomainOutput) ElementType 

func (GetDomainsDomainOutput) ElementType() reflect.Type

func (GetDomainsDomainOutput) Initial 

func (o GetDomainsDomainOutput) Initial() pulumi.BoolOutput

Whether this is the initial domain created by Azure Active Directory.

func (GetDomainsDomainOutput) Root 

func (o GetDomainsDomainOutput) Root() pulumi.BoolOutput

Whether the domain is a verified root domain (not a subdomain).

func (GetDomainsDomainOutput) SupportedServices 

func (o GetDomainsDomainOutput) SupportedServices() pulumi.StringArrayOutput

A list of capabilities / services supported by the domain. Possible values include `Email`, `Sharepoint`, `EmailInternalRelayOnly`, `OfficeCommunicationsOnline`, `SharePointDefaultDomain`, `FullRedelegation`, `SharePointPublic`, `OrgIdAuthentication`, `Yammer` and `Intune`.

func (GetDomainsDomainOutput) ToGetDomainsDomainOutput 

func (o GetDomainsDomainOutput) ToGetDomainsDomainOutput() GetDomainsDomainOutput

func (GetDomainsDomainOutput) ToGetDomainsDomainOutputWithContext 

func (o GetDomainsDomainOutput) ToGetDomainsDomainOutputWithContext(ctx context.Context) GetDomainsDomainOutput

func (GetDomainsDomainOutput) Verified 

func (o GetDomainsDomainOutput) Verified() pulumi.BoolOutput

Whether the domain has completed domain ownership verification.

type GetDomainsOutputArgs added in v5.3.0 

type GetDomainsOutputArgs struct {
	// Set to `true` to only return domains whose DNS is managed by Microsoft 365. Defaults to `false`.
	AdminManaged pulumi.BoolPtrInput `pulumi:"adminManaged"`
	// Set to `true` if unverified Azure AD domains should be included. Defaults to `false`.
	IncludeUnverified pulumi.BoolPtrInput `pulumi:"includeUnverified"`
	// Set to `true` to only return the default domain.
	OnlyDefault pulumi.BoolPtrInput `pulumi:"onlyDefault"`
	// Set to `true` to only return the initial domain, which is your primary Azure Active Directory tenant domain. Defaults to `false`.
	OnlyInitial pulumi.BoolPtrInput `pulumi:"onlyInitial"`
	// Set to `true` to only return verified root domains. Excludes subdomains and unverified domains.
	OnlyRoot pulumi.BoolPtrInput `pulumi:"onlyRoot"`
	// A list of supported services that must be supported by a domain. Possible values include `Email`, `Sharepoint`, `EmailInternalRelayOnly`, `OfficeCommunicationsOnline`, `SharePointDefaultDomain`, `FullRedelegation`, `SharePointPublic`, `OrgIdAuthentication`, `Yammer` and `Intune`.
	SupportsServices pulumi.StringArrayInput `pulumi:"supportsServices"`
}

A collection of arguments for invoking getDomains.

func (GetDomainsOutputArgs) ElementType added in v5.3.0 

func (GetDomainsOutputArgs) ElementType() reflect.Type

type GetDomainsResult 

type GetDomainsResult struct {
	// Whether the DNS for the domain is managed by Microsoft 365.
	AdminManaged *bool `pulumi:"adminManaged"`
	// A list of tenant domains. Each `domain` object provides the attributes documented below.
	Domains []GetDomainsDomain `pulumi:"domains"`
	// The provider-assigned unique ID for this managed resource.
	Id                string   `pulumi:"id"`
	IncludeUnverified *bool    `pulumi:"includeUnverified"`
	OnlyDefault       *bool    `pulumi:"onlyDefault"`
	OnlyInitial       *bool    `pulumi:"onlyInitial"`
	OnlyRoot          *bool    `pulumi:"onlyRoot"`
	SupportsServices  []string `pulumi:"supportsServices"`
}

A collection of values returned by getDomains.

func GetDomains 

func GetDomains(ctx *pulumi.Context, args *GetDomainsArgs, opts ...pulumi.InvokeOption) (*GetDomainsResult, error)

Use this data source to access information about existing Domains within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `Domain.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

type GetDomainsResultOutput added in v5.3.0 

type GetDomainsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getDomains.

func GetDomainsOutput added in v5.3.0 

func GetDomainsOutput(ctx *pulumi.Context, args GetDomainsOutputArgs, opts ...pulumi.InvokeOption) GetDomainsResultOutput

func (GetDomainsResultOutput) AdminManaged added in v5.3.0 

func (o GetDomainsResultOutput) AdminManaged() pulumi.BoolPtrOutput

Whether the DNS for the domain is managed by Microsoft 365.

func (GetDomainsResultOutput) Domains added in v5.3.0 

func (o GetDomainsResultOutput) Domains() GetDomainsDomainArrayOutput

A list of tenant domains. Each `domain` object provides the attributes documented below.

func (GetDomainsResultOutput) ElementType added in v5.3.0 

func (GetDomainsResultOutput) ElementType() reflect.Type

func (GetDomainsResultOutput) Id added in v5.3.0 

func (o GetDomainsResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetDomainsResultOutput) IncludeUnverified added in v5.3.0 

func (o GetDomainsResultOutput) IncludeUnverified() pulumi.BoolPtrOutput

func (GetDomainsResultOutput) OnlyDefault added in v5.3.0 

func (o GetDomainsResultOutput) OnlyDefault() pulumi.BoolPtrOutput

func (GetDomainsResultOutput) OnlyInitial added in v5.3.0 

func (o GetDomainsResultOutput) OnlyInitial() pulumi.BoolPtrOutput

func (GetDomainsResultOutput) OnlyRoot added in v5.3.0 

func (o GetDomainsResultOutput) OnlyRoot() pulumi.BoolPtrOutput

func (GetDomainsResultOutput) SupportsServices added in v5.3.0 

func (o GetDomainsResultOutput) SupportsServices() pulumi.StringArrayOutput

func (GetDomainsResultOutput) ToGetDomainsResultOutput added in v5.3.0 

func (o GetDomainsResultOutput) ToGetDomainsResultOutput() GetDomainsResultOutput

func (GetDomainsResultOutput) ToGetDomainsResultOutputWithContext added in v5.3.0 

func (o GetDomainsResultOutput) ToGetDomainsResultOutputWithContext(ctx context.Context) GetDomainsResultOutput

type GetGroupDynamicMembership added in v5.12.0 

type GetGroupDynamicMembership struct {
	// Whether rule processing is "On" (true) or "Paused" (false).
	Enabled bool `pulumi:"enabled"`
	// The rule that determines membership of this group.
	Rule string `pulumi:"rule"`
}

type GetGroupDynamicMembershipArgs added in v5.12.0 

type GetGroupDynamicMembershipArgs struct {
	// Whether rule processing is "On" (true) or "Paused" (false).
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The rule that determines membership of this group.
	Rule pulumi.StringInput `pulumi:"rule"`
}

func (GetGroupDynamicMembershipArgs) ElementType added in v5.12.0 

func (GetGroupDynamicMembershipArgs) ElementType() reflect.Type

func (GetGroupDynamicMembershipArgs) ToGetGroupDynamicMembershipOutput added in v5.12.0 

func (i GetGroupDynamicMembershipArgs) ToGetGroupDynamicMembershipOutput() GetGroupDynamicMembershipOutput

func (GetGroupDynamicMembershipArgs) ToGetGroupDynamicMembershipOutputWithContext added in v5.12.0 

func (i GetGroupDynamicMembershipArgs) ToGetGroupDynamicMembershipOutputWithContext(ctx context.Context) GetGroupDynamicMembershipOutput

type GetGroupDynamicMembershipArray added in v5.12.0 

type GetGroupDynamicMembershipArray []GetGroupDynamicMembershipInput

func (GetGroupDynamicMembershipArray) ElementType added in v5.12.0 

func (GetGroupDynamicMembershipArray) ElementType() reflect.Type

func (GetGroupDynamicMembershipArray) ToGetGroupDynamicMembershipArrayOutput added in v5.12.0 

func (i GetGroupDynamicMembershipArray) ToGetGroupDynamicMembershipArrayOutput() GetGroupDynamicMembershipArrayOutput

func (GetGroupDynamicMembershipArray) ToGetGroupDynamicMembershipArrayOutputWithContext added in v5.12.0 

func (i GetGroupDynamicMembershipArray) ToGetGroupDynamicMembershipArrayOutputWithContext(ctx context.Context) GetGroupDynamicMembershipArrayOutput

type GetGroupDynamicMembershipArrayInput added in v5.12.0 

type GetGroupDynamicMembershipArrayInput interface {
	pulumi.Input

	ToGetGroupDynamicMembershipArrayOutput() GetGroupDynamicMembershipArrayOutput
	ToGetGroupDynamicMembershipArrayOutputWithContext(context.Context) GetGroupDynamicMembershipArrayOutput
}

GetGroupDynamicMembershipArrayInput is an input type that accepts GetGroupDynamicMembershipArray and GetGroupDynamicMembershipArrayOutput values. You can construct a concrete instance of `GetGroupDynamicMembershipArrayInput` via: 

GetGroupDynamicMembershipArray{ GetGroupDynamicMembershipArgs{...} }

type GetGroupDynamicMembershipArrayOutput added in v5.12.0 

type GetGroupDynamicMembershipArrayOutput struct{ *pulumi.OutputState }

func (GetGroupDynamicMembershipArrayOutput) ElementType added in v5.12.0 

func (GetGroupDynamicMembershipArrayOutput) ElementType() reflect.Type

func (GetGroupDynamicMembershipArrayOutput) Index added in v5.12.0 

func (o GetGroupDynamicMembershipArrayOutput) Index(i pulumi.IntInput) GetGroupDynamicMembershipOutput

func (GetGroupDynamicMembershipArrayOutput) ToGetGroupDynamicMembershipArrayOutput added in v5.12.0 

func (o GetGroupDynamicMembershipArrayOutput) ToGetGroupDynamicMembershipArrayOutput() GetGroupDynamicMembershipArrayOutput

func (GetGroupDynamicMembershipArrayOutput) ToGetGroupDynamicMembershipArrayOutputWithContext added in v5.12.0 

func (o GetGroupDynamicMembershipArrayOutput) ToGetGroupDynamicMembershipArrayOutputWithContext(ctx context.Context) GetGroupDynamicMembershipArrayOutput

type GetGroupDynamicMembershipInput added in v5.12.0 

type GetGroupDynamicMembershipInput interface {
	pulumi.Input

	ToGetGroupDynamicMembershipOutput() GetGroupDynamicMembershipOutput
	ToGetGroupDynamicMembershipOutputWithContext(context.Context) GetGroupDynamicMembershipOutput
}

GetGroupDynamicMembershipInput is an input type that accepts GetGroupDynamicMembershipArgs and GetGroupDynamicMembershipOutput values. You can construct a concrete instance of `GetGroupDynamicMembershipInput` via: 

GetGroupDynamicMembershipArgs{...}

type GetGroupDynamicMembershipOutput added in v5.12.0 

type GetGroupDynamicMembershipOutput struct{ *pulumi.OutputState }

func (GetGroupDynamicMembershipOutput) ElementType added in v5.12.0 

func (GetGroupDynamicMembershipOutput) ElementType() reflect.Type

func (GetGroupDynamicMembershipOutput) Enabled added in v5.12.0 

func (o GetGroupDynamicMembershipOutput) Enabled() pulumi.BoolOutput

Whether rule processing is "On" (true) or "Paused" (false).

func (GetGroupDynamicMembershipOutput) Rule added in v5.12.0 

func (o GetGroupDynamicMembershipOutput) Rule() pulumi.StringOutput

The rule that determines membership of this group.

func (GetGroupDynamicMembershipOutput) ToGetGroupDynamicMembershipOutput added in v5.12.0 

func (o GetGroupDynamicMembershipOutput) ToGetGroupDynamicMembershipOutput() GetGroupDynamicMembershipOutput

func (GetGroupDynamicMembershipOutput) ToGetGroupDynamicMembershipOutputWithContext added in v5.12.0 

func (o GetGroupDynamicMembershipOutput) ToGetGroupDynamicMembershipOutputWithContext(ctx context.Context) GetGroupDynamicMembershipOutput

type GetGroupsArgs 

type GetGroupsArgs struct {
	// A common display name prefix to match when returning groups.
	DisplayNamePrefix *string `pulumi:"displayNamePrefix"`
	// The display names of the groups.
	DisplayNames []string `pulumi:"displayNames"`
	// Ignore missing groups and return groups that were found. The data source will still fail if no groups are found. Cannot be specified with `returnAll`. Defaults to `false`.
	IgnoreMissing *bool `pulumi:"ignoreMissing"`
	// Whether the returned groups should be mail-enabled. By itself this does not exclude security-enabled groups. Setting this to `true` ensures all groups are mail-enabled, and setting to `false` ensures that all groups are _not_ mail-enabled. To ignore this filter, omit the property or set it to null. Cannot be specified together with `objectIds`.
	MailEnabled *bool `pulumi:"mailEnabled"`
	// The object IDs of the groups.
	ObjectIds []string `pulumi:"objectIds"`
	// A flag to denote if all groups should be fetched and returned. Cannot be specified wth `ignoreMissing`. Defaults to `false`.
	ReturnAll *bool `pulumi:"returnAll"`
	// Whether the returned groups should be security-enabled. By itself this does not exclude mail-enabled groups. Setting this to `true` ensures all groups are security-enabled, and setting to `false` ensures that all groups are _not_ security-enabled. To ignore this filter, omit the property or set it to null. Cannot be specified together with `objectIds`.
	SecurityEnabled *bool `pulumi:"securityEnabled"`
}

A collection of arguments for invoking getGroups.

type GetGroupsOutputArgs added in v5.3.0 

type GetGroupsOutputArgs struct {
	// A common display name prefix to match when returning groups.
	DisplayNamePrefix pulumi.StringPtrInput `pulumi:"displayNamePrefix"`
	// The display names of the groups.
	DisplayNames pulumi.StringArrayInput `pulumi:"displayNames"`
	// Ignore missing groups and return groups that were found. The data source will still fail if no groups are found. Cannot be specified with `returnAll`. Defaults to `false`.
	IgnoreMissing pulumi.BoolPtrInput `pulumi:"ignoreMissing"`
	// Whether the returned groups should be mail-enabled. By itself this does not exclude security-enabled groups. Setting this to `true` ensures all groups are mail-enabled, and setting to `false` ensures that all groups are _not_ mail-enabled. To ignore this filter, omit the property or set it to null. Cannot be specified together with `objectIds`.
	MailEnabled pulumi.BoolPtrInput `pulumi:"mailEnabled"`
	// The object IDs of the groups.
	ObjectIds pulumi.StringArrayInput `pulumi:"objectIds"`
	// A flag to denote if all groups should be fetched and returned. Cannot be specified wth `ignoreMissing`. Defaults to `false`.
	ReturnAll pulumi.BoolPtrInput `pulumi:"returnAll"`
	// Whether the returned groups should be security-enabled. By itself this does not exclude mail-enabled groups. Setting this to `true` ensures all groups are security-enabled, and setting to `false` ensures that all groups are _not_ security-enabled. To ignore this filter, omit the property or set it to null. Cannot be specified together with `objectIds`.
	SecurityEnabled pulumi.BoolPtrInput `pulumi:"securityEnabled"`
}

A collection of arguments for invoking getGroups.

func (GetGroupsOutputArgs) ElementType added in v5.3.0 

func (GetGroupsOutputArgs) ElementType() reflect.Type

type GetGroupsResult 

type GetGroupsResult struct {
	DisplayNamePrefix string `pulumi:"displayNamePrefix"`
	// The display names of the groups.
	DisplayNames []string `pulumi:"displayNames"`
	// The provider-assigned unique ID for this managed resource.
	Id            string `pulumi:"id"`
	IgnoreMissing *bool  `pulumi:"ignoreMissing"`
	MailEnabled   bool   `pulumi:"mailEnabled"`
	// The object IDs of the groups.
	ObjectIds       []string `pulumi:"objectIds"`
	ReturnAll       *bool    `pulumi:"returnAll"`
	SecurityEnabled bool     `pulumi:"securityEnabled"`
}

A collection of values returned by getGroups.

func GetGroups 

func GetGroups(ctx *pulumi.Context, args *GetGroupsArgs, opts ...pulumi.InvokeOption) (*GetGroupsResult, error)

Gets Object IDs or Display Names for multiple Azure Active Directory groups.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `Group.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

*Look up by group name* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetGroups(ctx, &GetGroupsArgs{
			DisplayNames: []string{
				"group-a",
				"group-b",
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up by display name prefix* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetGroups(ctx, &GetGroupsArgs{
			DisplayNamePrefix: pulumi.StringRef("sales-"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up all groups* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetGroups(ctx, &GetGroupsArgs{
			ReturnAll: pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up all mail-enabled groups* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetGroups(ctx, &GetGroupsArgs{
			MailEnabled: pulumi.BoolRef(true),
			ReturnAll:   pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up all security-enabled groups that are not mail-enabled* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetGroups(ctx, &GetGroupsArgs{
			MailEnabled:     pulumi.BoolRef(false),
			ReturnAll:       pulumi.BoolRef(true),
			SecurityEnabled: pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetGroupsResultOutput added in v5.3.0 

type GetGroupsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getGroups.

func GetGroupsOutput added in v5.3.0 

func GetGroupsOutput(ctx *pulumi.Context, args GetGroupsOutputArgs, opts ...pulumi.InvokeOption) GetGroupsResultOutput

func (GetGroupsResultOutput) DisplayNamePrefix added in v5.15.0 

func (o GetGroupsResultOutput) DisplayNamePrefix() pulumi.StringOutput

func (GetGroupsResultOutput) DisplayNames added in v5.3.0 

func (o GetGroupsResultOutput) DisplayNames() pulumi.StringArrayOutput

The display names of the groups.

func (GetGroupsResultOutput) ElementType added in v5.3.0 

func (GetGroupsResultOutput) ElementType() reflect.Type

func (GetGroupsResultOutput) Id added in v5.3.0 

func (o GetGroupsResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetGroupsResultOutput) IgnoreMissing added in v5.21.0 

func (o GetGroupsResultOutput) IgnoreMissing() pulumi.BoolPtrOutput

func (GetGroupsResultOutput) MailEnabled added in v5.4.0 

func (o GetGroupsResultOutput) MailEnabled() pulumi.BoolOutput

func (GetGroupsResultOutput) ObjectIds added in v5.3.0 

func (o GetGroupsResultOutput) ObjectIds() pulumi.StringArrayOutput

The object IDs of the groups.

func (GetGroupsResultOutput) ReturnAll added in v5.3.0 

func (o GetGroupsResultOutput) ReturnAll() pulumi.BoolPtrOutput

func (GetGroupsResultOutput) SecurityEnabled added in v5.4.0 

func (o GetGroupsResultOutput) SecurityEnabled() pulumi.BoolOutput

func (GetGroupsResultOutput) ToGetGroupsResultOutput added in v5.3.0 

func (o GetGroupsResultOutput) ToGetGroupsResultOutput() GetGroupsResultOutput

func (GetGroupsResultOutput) ToGetGroupsResultOutputWithContext added in v5.3.0 

func (o GetGroupsResultOutput) ToGetGroupsResultOutputWithContext(ctx context.Context) GetGroupsResultOutput

type GetServicePrincipalAppRole 

type GetServicePrincipalAppRole struct {
	// Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in daemon service scenarios). Possible values are: `User` and `Application`, or both.
	AllowedMemberTypes []string `pulumi:"allowedMemberTypes"`
	// Permission help text that appears in the admin app assignment and consent experiences.
	Description string `pulumi:"description"`
	// The display name of the application associated with this service principal.
	DisplayName string `pulumi:"displayName"`
	// Determines if the permission scope is enabled.
	Enabled bool `pulumi:"enabled"`
	// The unique identifier of the delegated permission. Must be a valid UUID.
	Id string `pulumi:"id"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value string `pulumi:"value"`
}

type GetServicePrincipalAppRoleArgs 

type GetServicePrincipalAppRoleArgs struct {
	// Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in daemon service scenarios). Possible values are: `User` and `Application`, or both.
	AllowedMemberTypes pulumi.StringArrayInput `pulumi:"allowedMemberTypes"`
	// Permission help text that appears in the admin app assignment and consent experiences.
	Description pulumi.StringInput `pulumi:"description"`
	// The display name of the application associated with this service principal.
	DisplayName pulumi.StringInput `pulumi:"displayName"`
	// Determines if the permission scope is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The unique identifier of the delegated permission. Must be a valid UUID.
	Id pulumi.StringInput `pulumi:"id"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value pulumi.StringInput `pulumi:"value"`
}

func (GetServicePrincipalAppRoleArgs) ElementType 

func (GetServicePrincipalAppRoleArgs) ElementType() reflect.Type

func (GetServicePrincipalAppRoleArgs) ToGetServicePrincipalAppRoleOutput 

func (i GetServicePrincipalAppRoleArgs) ToGetServicePrincipalAppRoleOutput() GetServicePrincipalAppRoleOutput

func (GetServicePrincipalAppRoleArgs) ToGetServicePrincipalAppRoleOutputWithContext 

func (i GetServicePrincipalAppRoleArgs) ToGetServicePrincipalAppRoleOutputWithContext(ctx context.Context) GetServicePrincipalAppRoleOutput

type GetServicePrincipalAppRoleArray 

type GetServicePrincipalAppRoleArray []GetServicePrincipalAppRoleInput

func (GetServicePrincipalAppRoleArray) ElementType 

func (GetServicePrincipalAppRoleArray) ElementType() reflect.Type

func (GetServicePrincipalAppRoleArray) ToGetServicePrincipalAppRoleArrayOutput 

func (i GetServicePrincipalAppRoleArray) ToGetServicePrincipalAppRoleArrayOutput() GetServicePrincipalAppRoleArrayOutput

func (GetServicePrincipalAppRoleArray) ToGetServicePrincipalAppRoleArrayOutputWithContext 

func (i GetServicePrincipalAppRoleArray) ToGetServicePrincipalAppRoleArrayOutputWithContext(ctx context.Context) GetServicePrincipalAppRoleArrayOutput

type GetServicePrincipalAppRoleArrayInput 

type GetServicePrincipalAppRoleArrayInput interface {
	pulumi.Input

	ToGetServicePrincipalAppRoleArrayOutput() GetServicePrincipalAppRoleArrayOutput
	ToGetServicePrincipalAppRoleArrayOutputWithContext(context.Context) GetServicePrincipalAppRoleArrayOutput
}

GetServicePrincipalAppRoleArrayInput is an input type that accepts GetServicePrincipalAppRoleArray and GetServicePrincipalAppRoleArrayOutput values. You can construct a concrete instance of `GetServicePrincipalAppRoleArrayInput` via: 

GetServicePrincipalAppRoleArray{ GetServicePrincipalAppRoleArgs{...} }

type GetServicePrincipalAppRoleArrayOutput 

type GetServicePrincipalAppRoleArrayOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalAppRoleArrayOutput) ElementType 

func (GetServicePrincipalAppRoleArrayOutput) ElementType() reflect.Type

func (GetServicePrincipalAppRoleArrayOutput) Index 

func (o GetServicePrincipalAppRoleArrayOutput) Index(i pulumi.IntInput) GetServicePrincipalAppRoleOutput

func (GetServicePrincipalAppRoleArrayOutput) ToGetServicePrincipalAppRoleArrayOutput 

func (o GetServicePrincipalAppRoleArrayOutput) ToGetServicePrincipalAppRoleArrayOutput() GetServicePrincipalAppRoleArrayOutput

func (GetServicePrincipalAppRoleArrayOutput) ToGetServicePrincipalAppRoleArrayOutputWithContext 

func (o GetServicePrincipalAppRoleArrayOutput) ToGetServicePrincipalAppRoleArrayOutputWithContext(ctx context.Context) GetServicePrincipalAppRoleArrayOutput

type GetServicePrincipalAppRoleInput 

type GetServicePrincipalAppRoleInput interface {
	pulumi.Input

	ToGetServicePrincipalAppRoleOutput() GetServicePrincipalAppRoleOutput
	ToGetServicePrincipalAppRoleOutputWithContext(context.Context) GetServicePrincipalAppRoleOutput
}

GetServicePrincipalAppRoleInput is an input type that accepts GetServicePrincipalAppRoleArgs and GetServicePrincipalAppRoleOutput values. You can construct a concrete instance of `GetServicePrincipalAppRoleInput` via: 

GetServicePrincipalAppRoleArgs{...}

type GetServicePrincipalAppRoleOutput 

type GetServicePrincipalAppRoleOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalAppRoleOutput) AllowedMemberTypes 

func (o GetServicePrincipalAppRoleOutput) AllowedMemberTypes() pulumi.StringArrayOutput

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in daemon service scenarios). Possible values are: `User` and `Application`, or both.

func (GetServicePrincipalAppRoleOutput) Description 

func (o GetServicePrincipalAppRoleOutput) Description() pulumi.StringOutput

Permission help text that appears in the admin app assignment and consent experiences.

func (GetServicePrincipalAppRoleOutput) DisplayName 

func (o GetServicePrincipalAppRoleOutput) DisplayName() pulumi.StringOutput

The display name of the application associated with this service principal.

func (GetServicePrincipalAppRoleOutput) ElementType 

func (GetServicePrincipalAppRoleOutput) ElementType() reflect.Type

func (GetServicePrincipalAppRoleOutput) Enabled 

func (o GetServicePrincipalAppRoleOutput) Enabled() pulumi.BoolOutput

Determines if the permission scope is enabled.

func (GetServicePrincipalAppRoleOutput) Id 

func (o GetServicePrincipalAppRoleOutput) Id() pulumi.StringOutput

The unique identifier of the delegated permission. Must be a valid UUID.

func (GetServicePrincipalAppRoleOutput) ToGetServicePrincipalAppRoleOutput 

func (o GetServicePrincipalAppRoleOutput) ToGetServicePrincipalAppRoleOutput() GetServicePrincipalAppRoleOutput

func (GetServicePrincipalAppRoleOutput) ToGetServicePrincipalAppRoleOutputWithContext 

func (o GetServicePrincipalAppRoleOutput) ToGetServicePrincipalAppRoleOutputWithContext(ctx context.Context) GetServicePrincipalAppRoleOutput

func (GetServicePrincipalAppRoleOutput) Value 

func (o GetServicePrincipalAppRoleOutput) Value() pulumi.StringOutput

The value that is used for the `scp` claim in OAuth 2.0 access tokens.

type GetServicePrincipalFeature added in v5.3.0 

type GetServicePrincipalFeature struct {
	// Whether this service principal represents a custom SAML application.
	CustomSingleSignOnApp bool `pulumi:"customSingleSignOnApp"`
	// Whether this service principal represents an Enterprise Application.
	EnterpriseApplication bool `pulumi:"enterpriseApplication"`
	// Whether this service principal represents a gallery application.
	GalleryApplication bool `pulumi:"galleryApplication"`
	// Whether this app is visible to users in My Apps and Office 365 Launcher.
	VisibleToUsers bool `pulumi:"visibleToUsers"`
}

type GetServicePrincipalFeatureArgs added in v5.3.0 

type GetServicePrincipalFeatureArgs struct {
	// Whether this service principal represents a custom SAML application.
	CustomSingleSignOnApp pulumi.BoolInput `pulumi:"customSingleSignOnApp"`
	// Whether this service principal represents an Enterprise Application.
	EnterpriseApplication pulumi.BoolInput `pulumi:"enterpriseApplication"`
	// Whether this service principal represents a gallery application.
	GalleryApplication pulumi.BoolInput `pulumi:"galleryApplication"`
	// Whether this app is visible to users in My Apps and Office 365 Launcher.
	VisibleToUsers pulumi.BoolInput `pulumi:"visibleToUsers"`
}

func (GetServicePrincipalFeatureArgs) ElementType added in v5.3.0 

func (GetServicePrincipalFeatureArgs) ElementType() reflect.Type

func (GetServicePrincipalFeatureArgs) ToGetServicePrincipalFeatureOutput added in v5.3.0 

func (i GetServicePrincipalFeatureArgs) ToGetServicePrincipalFeatureOutput() GetServicePrincipalFeatureOutput

func (GetServicePrincipalFeatureArgs) ToGetServicePrincipalFeatureOutputWithContext added in v5.3.0 

func (i GetServicePrincipalFeatureArgs) ToGetServicePrincipalFeatureOutputWithContext(ctx context.Context) GetServicePrincipalFeatureOutput

type GetServicePrincipalFeatureArray added in v5.3.0 

type GetServicePrincipalFeatureArray []GetServicePrincipalFeatureInput

func (GetServicePrincipalFeatureArray) ElementType added in v5.3.0 

func (GetServicePrincipalFeatureArray) ElementType() reflect.Type

func (GetServicePrincipalFeatureArray) ToGetServicePrincipalFeatureArrayOutput added in v5.3.0 

func (i GetServicePrincipalFeatureArray) ToGetServicePrincipalFeatureArrayOutput() GetServicePrincipalFeatureArrayOutput

func (GetServicePrincipalFeatureArray) ToGetServicePrincipalFeatureArrayOutputWithContext added in v5.3.0 

func (i GetServicePrincipalFeatureArray) ToGetServicePrincipalFeatureArrayOutputWithContext(ctx context.Context) GetServicePrincipalFeatureArrayOutput

type GetServicePrincipalFeatureArrayInput added in v5.3.0 

type GetServicePrincipalFeatureArrayInput interface {
	pulumi.Input

	ToGetServicePrincipalFeatureArrayOutput() GetServicePrincipalFeatureArrayOutput
	ToGetServicePrincipalFeatureArrayOutputWithContext(context.Context) GetServicePrincipalFeatureArrayOutput
}

GetServicePrincipalFeatureArrayInput is an input type that accepts GetServicePrincipalFeatureArray and GetServicePrincipalFeatureArrayOutput values. You can construct a concrete instance of `GetServicePrincipalFeatureArrayInput` via: 

GetServicePrincipalFeatureArray{ GetServicePrincipalFeatureArgs{...} }

type GetServicePrincipalFeatureArrayOutput added in v5.3.0 

type GetServicePrincipalFeatureArrayOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalFeatureArrayOutput) ElementType added in v5.3.0 

func (GetServicePrincipalFeatureArrayOutput) ElementType() reflect.Type

func (GetServicePrincipalFeatureArrayOutput) Index added in v5.3.0 

func (o GetServicePrincipalFeatureArrayOutput) Index(i pulumi.IntInput) GetServicePrincipalFeatureOutput

func (GetServicePrincipalFeatureArrayOutput) ToGetServicePrincipalFeatureArrayOutput added in v5.3.0 

func (o GetServicePrincipalFeatureArrayOutput) ToGetServicePrincipalFeatureArrayOutput() GetServicePrincipalFeatureArrayOutput

func (GetServicePrincipalFeatureArrayOutput) ToGetServicePrincipalFeatureArrayOutputWithContext added in v5.3.0 

func (o GetServicePrincipalFeatureArrayOutput) ToGetServicePrincipalFeatureArrayOutputWithContext(ctx context.Context) GetServicePrincipalFeatureArrayOutput

type GetServicePrincipalFeatureInput added in v5.3.0 

type GetServicePrincipalFeatureInput interface {
	pulumi.Input

	ToGetServicePrincipalFeatureOutput() GetServicePrincipalFeatureOutput
	ToGetServicePrincipalFeatureOutputWithContext(context.Context) GetServicePrincipalFeatureOutput
}

GetServicePrincipalFeatureInput is an input type that accepts GetServicePrincipalFeatureArgs and GetServicePrincipalFeatureOutput values. You can construct a concrete instance of `GetServicePrincipalFeatureInput` via: 

GetServicePrincipalFeatureArgs{...}

type GetServicePrincipalFeatureOutput added in v5.3.0 

type GetServicePrincipalFeatureOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalFeatureOutput) CustomSingleSignOnApp added in v5.3.0 

func (o GetServicePrincipalFeatureOutput) CustomSingleSignOnApp() pulumi.BoolOutput

Whether this service principal represents a custom SAML application.

func (GetServicePrincipalFeatureOutput) ElementType added in v5.3.0 

func (GetServicePrincipalFeatureOutput) ElementType() reflect.Type

func (GetServicePrincipalFeatureOutput) EnterpriseApplication added in v5.3.0 

func (o GetServicePrincipalFeatureOutput) EnterpriseApplication() pulumi.BoolOutput

Whether this service principal represents an Enterprise Application.

func (GetServicePrincipalFeatureOutput) GalleryApplication added in v5.3.0 

func (o GetServicePrincipalFeatureOutput) GalleryApplication() pulumi.BoolOutput

Whether this service principal represents a gallery application.

func (GetServicePrincipalFeatureOutput) ToGetServicePrincipalFeatureOutput added in v5.3.0 

func (o GetServicePrincipalFeatureOutput) ToGetServicePrincipalFeatureOutput() GetServicePrincipalFeatureOutput

func (GetServicePrincipalFeatureOutput) ToGetServicePrincipalFeatureOutputWithContext added in v5.3.0 

func (o GetServicePrincipalFeatureOutput) ToGetServicePrincipalFeatureOutputWithContext(ctx context.Context) GetServicePrincipalFeatureOutput

func (GetServicePrincipalFeatureOutput) VisibleToUsers added in v5.3.0 

func (o GetServicePrincipalFeatureOutput) VisibleToUsers() pulumi.BoolOutput

Whether this app is visible to users in My Apps and Office 365 Launcher.

type GetServicePrincipalFeatureTag added in v5.6.0 

type GetServicePrincipalFeatureTag struct {
	CustomSingleSignOn bool `pulumi:"customSingleSignOn"`
	Enterprise         bool `pulumi:"enterprise"`
	Gallery            bool `pulumi:"gallery"`
	Hide               bool `pulumi:"hide"`
}

type GetServicePrincipalFeatureTagArgs added in v5.6.0 

type GetServicePrincipalFeatureTagArgs struct {
	CustomSingleSignOn pulumi.BoolInput `pulumi:"customSingleSignOn"`
	Enterprise         pulumi.BoolInput `pulumi:"enterprise"`
	Gallery            pulumi.BoolInput `pulumi:"gallery"`
	Hide               pulumi.BoolInput `pulumi:"hide"`
}

func (GetServicePrincipalFeatureTagArgs) ElementType added in v5.6.0 

func (GetServicePrincipalFeatureTagArgs) ElementType() reflect.Type

func (GetServicePrincipalFeatureTagArgs) ToGetServicePrincipalFeatureTagOutput added in v5.6.0 

func (i GetServicePrincipalFeatureTagArgs) ToGetServicePrincipalFeatureTagOutput() GetServicePrincipalFeatureTagOutput

func (GetServicePrincipalFeatureTagArgs) ToGetServicePrincipalFeatureTagOutputWithContext added in v5.6.0 

func (i GetServicePrincipalFeatureTagArgs) ToGetServicePrincipalFeatureTagOutputWithContext(ctx context.Context) GetServicePrincipalFeatureTagOutput

type GetServicePrincipalFeatureTagArray added in v5.6.0 

type GetServicePrincipalFeatureTagArray []GetServicePrincipalFeatureTagInput

func (GetServicePrincipalFeatureTagArray) ElementType added in v5.6.0 

func (GetServicePrincipalFeatureTagArray) ElementType() reflect.Type

func (GetServicePrincipalFeatureTagArray) ToGetServicePrincipalFeatureTagArrayOutput added in v5.6.0 

func (i GetServicePrincipalFeatureTagArray) ToGetServicePrincipalFeatureTagArrayOutput() GetServicePrincipalFeatureTagArrayOutput

func (GetServicePrincipalFeatureTagArray) ToGetServicePrincipalFeatureTagArrayOutputWithContext added in v5.6.0 

func (i GetServicePrincipalFeatureTagArray) ToGetServicePrincipalFeatureTagArrayOutputWithContext(ctx context.Context) GetServicePrincipalFeatureTagArrayOutput

type GetServicePrincipalFeatureTagArrayInput added in v5.6.0 

type GetServicePrincipalFeatureTagArrayInput interface {
	pulumi.Input

	ToGetServicePrincipalFeatureTagArrayOutput() GetServicePrincipalFeatureTagArrayOutput
	ToGetServicePrincipalFeatureTagArrayOutputWithContext(context.Context) GetServicePrincipalFeatureTagArrayOutput
}

GetServicePrincipalFeatureTagArrayInput is an input type that accepts GetServicePrincipalFeatureTagArray and GetServicePrincipalFeatureTagArrayOutput values. You can construct a concrete instance of `GetServicePrincipalFeatureTagArrayInput` via: 

GetServicePrincipalFeatureTagArray{ GetServicePrincipalFeatureTagArgs{...} }

type GetServicePrincipalFeatureTagArrayOutput added in v5.6.0 

type GetServicePrincipalFeatureTagArrayOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalFeatureTagArrayOutput) ElementType added in v5.6.0 

func (GetServicePrincipalFeatureTagArrayOutput) ElementType() reflect.Type

func (GetServicePrincipalFeatureTagArrayOutput) Index added in v5.6.0 

func (o GetServicePrincipalFeatureTagArrayOutput) Index(i pulumi.IntInput) GetServicePrincipalFeatureTagOutput

func (GetServicePrincipalFeatureTagArrayOutput) ToGetServicePrincipalFeatureTagArrayOutput added in v5.6.0 

func (o GetServicePrincipalFeatureTagArrayOutput) ToGetServicePrincipalFeatureTagArrayOutput() GetServicePrincipalFeatureTagArrayOutput

func (GetServicePrincipalFeatureTagArrayOutput) ToGetServicePrincipalFeatureTagArrayOutputWithContext added in v5.6.0 

func (o GetServicePrincipalFeatureTagArrayOutput) ToGetServicePrincipalFeatureTagArrayOutputWithContext(ctx context.Context) GetServicePrincipalFeatureTagArrayOutput

type GetServicePrincipalFeatureTagInput added in v5.6.0 

type GetServicePrincipalFeatureTagInput interface {
	pulumi.Input

	ToGetServicePrincipalFeatureTagOutput() GetServicePrincipalFeatureTagOutput
	ToGetServicePrincipalFeatureTagOutputWithContext(context.Context) GetServicePrincipalFeatureTagOutput
}

GetServicePrincipalFeatureTagInput is an input type that accepts GetServicePrincipalFeatureTagArgs and GetServicePrincipalFeatureTagOutput values. You can construct a concrete instance of `GetServicePrincipalFeatureTagInput` via: 

GetServicePrincipalFeatureTagArgs{...}

type GetServicePrincipalFeatureTagOutput added in v5.6.0 

type GetServicePrincipalFeatureTagOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalFeatureTagOutput) CustomSingleSignOn added in v5.6.0 

func (o GetServicePrincipalFeatureTagOutput) CustomSingleSignOn() pulumi.BoolOutput

func (GetServicePrincipalFeatureTagOutput) ElementType added in v5.6.0 

func (GetServicePrincipalFeatureTagOutput) ElementType() reflect.Type

func (GetServicePrincipalFeatureTagOutput) Enterprise added in v5.6.0 

func (o GetServicePrincipalFeatureTagOutput) Enterprise() pulumi.BoolOutput

func (GetServicePrincipalFeatureTagOutput) Gallery added in v5.6.0 

func (o GetServicePrincipalFeatureTagOutput) Gallery() pulumi.BoolOutput

func (GetServicePrincipalFeatureTagOutput) Hide added in v5.6.0 

func (o GetServicePrincipalFeatureTagOutput) Hide() pulumi.BoolOutput

func (GetServicePrincipalFeatureTagOutput) ToGetServicePrincipalFeatureTagOutput added in v5.6.0 

func (o GetServicePrincipalFeatureTagOutput) ToGetServicePrincipalFeatureTagOutput() GetServicePrincipalFeatureTagOutput

func (GetServicePrincipalFeatureTagOutput) ToGetServicePrincipalFeatureTagOutputWithContext added in v5.6.0 

func (o GetServicePrincipalFeatureTagOutput) ToGetServicePrincipalFeatureTagOutputWithContext(ctx context.Context) GetServicePrincipalFeatureTagOutput

type GetServicePrincipalOauth2PermissionScope 

type GetServicePrincipalOauth2PermissionScope struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription string `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName string `pulumi:"adminConsentDisplayName"`
	// Determines if the permission scope is enabled.
	Enabled bool `pulumi:"enabled"`
	// The unique identifier of the delegated permission. Must be a valid UUID.
	Id string `pulumi:"id"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type string `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription string `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName string `pulumi:"userConsentDisplayName"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value string `pulumi:"value"`
}

type GetServicePrincipalOauth2PermissionScopeArgs 

type GetServicePrincipalOauth2PermissionScopeArgs struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription pulumi.StringInput `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName pulumi.StringInput `pulumi:"adminConsentDisplayName"`
	// Determines if the permission scope is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The unique identifier of the delegated permission. Must be a valid UUID.
	Id pulumi.StringInput `pulumi:"id"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type pulumi.StringInput `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription pulumi.StringInput `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName pulumi.StringInput `pulumi:"userConsentDisplayName"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value pulumi.StringInput `pulumi:"value"`
}

func (GetServicePrincipalOauth2PermissionScopeArgs) ElementType 

func (GetServicePrincipalOauth2PermissionScopeArgs) ElementType() reflect.Type

func (GetServicePrincipalOauth2PermissionScopeArgs) ToGetServicePrincipalOauth2PermissionScopeOutput 

func (i GetServicePrincipalOauth2PermissionScopeArgs) ToGetServicePrincipalOauth2PermissionScopeOutput() GetServicePrincipalOauth2PermissionScopeOutput

func (GetServicePrincipalOauth2PermissionScopeArgs) ToGetServicePrincipalOauth2PermissionScopeOutputWithContext 

func (i GetServicePrincipalOauth2PermissionScopeArgs) ToGetServicePrincipalOauth2PermissionScopeOutputWithContext(ctx context.Context) GetServicePrincipalOauth2PermissionScopeOutput

type GetServicePrincipalOauth2PermissionScopeArray 

type GetServicePrincipalOauth2PermissionScopeArray []GetServicePrincipalOauth2PermissionScopeInput

func (GetServicePrincipalOauth2PermissionScopeArray) ElementType 

func (GetServicePrincipalOauth2PermissionScopeArray) ElementType() reflect.Type

func (GetServicePrincipalOauth2PermissionScopeArray) ToGetServicePrincipalOauth2PermissionScopeArrayOutput 

func (i GetServicePrincipalOauth2PermissionScopeArray) ToGetServicePrincipalOauth2PermissionScopeArrayOutput() GetServicePrincipalOauth2PermissionScopeArrayOutput

func (GetServicePrincipalOauth2PermissionScopeArray) ToGetServicePrincipalOauth2PermissionScopeArrayOutputWithContext 

func (i GetServicePrincipalOauth2PermissionScopeArray) ToGetServicePrincipalOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) GetServicePrincipalOauth2PermissionScopeArrayOutput

type GetServicePrincipalOauth2PermissionScopeArrayInput 

type GetServicePrincipalOauth2PermissionScopeArrayInput interface {
	pulumi.Input

	ToGetServicePrincipalOauth2PermissionScopeArrayOutput() GetServicePrincipalOauth2PermissionScopeArrayOutput
	ToGetServicePrincipalOauth2PermissionScopeArrayOutputWithContext(context.Context) GetServicePrincipalOauth2PermissionScopeArrayOutput
}

GetServicePrincipalOauth2PermissionScopeArrayInput is an input type that accepts GetServicePrincipalOauth2PermissionScopeArray and GetServicePrincipalOauth2PermissionScopeArrayOutput values. You can construct a concrete instance of `GetServicePrincipalOauth2PermissionScopeArrayInput` via: 

GetServicePrincipalOauth2PermissionScopeArray{ GetServicePrincipalOauth2PermissionScopeArgs{...} }

type GetServicePrincipalOauth2PermissionScopeArrayOutput 

type GetServicePrincipalOauth2PermissionScopeArrayOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalOauth2PermissionScopeArrayOutput) ElementType 

func (GetServicePrincipalOauth2PermissionScopeArrayOutput) ElementType() reflect.Type

func (GetServicePrincipalOauth2PermissionScopeArrayOutput) Index 

func (o GetServicePrincipalOauth2PermissionScopeArrayOutput) Index(i pulumi.IntInput) GetServicePrincipalOauth2PermissionScopeOutput

func (GetServicePrincipalOauth2PermissionScopeArrayOutput) ToGetServicePrincipalOauth2PermissionScopeArrayOutput 

func (o GetServicePrincipalOauth2PermissionScopeArrayOutput) ToGetServicePrincipalOauth2PermissionScopeArrayOutput() GetServicePrincipalOauth2PermissionScopeArrayOutput

func (GetServicePrincipalOauth2PermissionScopeArrayOutput) ToGetServicePrincipalOauth2PermissionScopeArrayOutputWithContext 

func (o GetServicePrincipalOauth2PermissionScopeArrayOutput) ToGetServicePrincipalOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) GetServicePrincipalOauth2PermissionScopeArrayOutput

type GetServicePrincipalOauth2PermissionScopeInput 

type GetServicePrincipalOauth2PermissionScopeInput interface {
	pulumi.Input

	ToGetServicePrincipalOauth2PermissionScopeOutput() GetServicePrincipalOauth2PermissionScopeOutput
	ToGetServicePrincipalOauth2PermissionScopeOutputWithContext(context.Context) GetServicePrincipalOauth2PermissionScopeOutput
}

GetServicePrincipalOauth2PermissionScopeInput is an input type that accepts GetServicePrincipalOauth2PermissionScopeArgs and GetServicePrincipalOauth2PermissionScopeOutput values. You can construct a concrete instance of `GetServicePrincipalOauth2PermissionScopeInput` via: 

GetServicePrincipalOauth2PermissionScopeArgs{...}

type GetServicePrincipalOauth2PermissionScopeOutput 

type GetServicePrincipalOauth2PermissionScopeOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalOauth2PermissionScopeOutput) AdminConsentDescription 

func (o GetServicePrincipalOauth2PermissionScopeOutput) AdminConsentDescription() pulumi.StringOutput

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

func (GetServicePrincipalOauth2PermissionScopeOutput) AdminConsentDisplayName 

func (o GetServicePrincipalOauth2PermissionScopeOutput) AdminConsentDisplayName() pulumi.StringOutput

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

func (GetServicePrincipalOauth2PermissionScopeOutput) ElementType 

func (GetServicePrincipalOauth2PermissionScopeOutput) ElementType() reflect.Type

func (GetServicePrincipalOauth2PermissionScopeOutput) Enabled 

func (o GetServicePrincipalOauth2PermissionScopeOutput) Enabled() pulumi.BoolOutput

Determines if the permission scope is enabled.

func (GetServicePrincipalOauth2PermissionScopeOutput) Id 

func (o GetServicePrincipalOauth2PermissionScopeOutput) Id() pulumi.StringOutput

The unique identifier of the delegated permission. Must be a valid UUID.

func (GetServicePrincipalOauth2PermissionScopeOutput) ToGetServicePrincipalOauth2PermissionScopeOutput 

func (o GetServicePrincipalOauth2PermissionScopeOutput) ToGetServicePrincipalOauth2PermissionScopeOutput() GetServicePrincipalOauth2PermissionScopeOutput

func (GetServicePrincipalOauth2PermissionScopeOutput) ToGetServicePrincipalOauth2PermissionScopeOutputWithContext 

func (o GetServicePrincipalOauth2PermissionScopeOutput) ToGetServicePrincipalOauth2PermissionScopeOutputWithContext(ctx context.Context) GetServicePrincipalOauth2PermissionScopeOutput

func (GetServicePrincipalOauth2PermissionScopeOutput) Type 

func (o GetServicePrincipalOauth2PermissionScopeOutput) Type() pulumi.StringOutput

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.

func (GetServicePrincipalOauth2PermissionScopeOutput) UserConsentDescription 

func (o GetServicePrincipalOauth2PermissionScopeOutput) UserConsentDescription() pulumi.StringOutput

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

func (GetServicePrincipalOauth2PermissionScopeOutput) UserConsentDisplayName 

func (o GetServicePrincipalOauth2PermissionScopeOutput) UserConsentDisplayName() pulumi.StringOutput

Display name for the delegated permission that appears in the end user consent experience.

func (GetServicePrincipalOauth2PermissionScopeOutput) Value 

func (o GetServicePrincipalOauth2PermissionScopeOutput) Value() pulumi.StringOutput

The value that is used for the `scp` claim in OAuth 2.0 access tokens.

type GetServicePrincipalSamlSingleSignOn added in v5.2.0 

type GetServicePrincipalSamlSingleSignOn struct {
	// The relative URI the service provider would redirect to after completion of the single sign-on flow.
	RelayState string `pulumi:"relayState"`
}

type GetServicePrincipalSamlSingleSignOnArgs added in v5.2.0 

type GetServicePrincipalSamlSingleSignOnArgs struct {
	// The relative URI the service provider would redirect to after completion of the single sign-on flow.
	RelayState pulumi.StringInput `pulumi:"relayState"`
}

func (GetServicePrincipalSamlSingleSignOnArgs) ElementType added in v5.2.0 

func (GetServicePrincipalSamlSingleSignOnArgs) ElementType() reflect.Type

func (GetServicePrincipalSamlSingleSignOnArgs) ToGetServicePrincipalSamlSingleSignOnOutput added in v5.2.0 

func (i GetServicePrincipalSamlSingleSignOnArgs) ToGetServicePrincipalSamlSingleSignOnOutput() GetServicePrincipalSamlSingleSignOnOutput

func (GetServicePrincipalSamlSingleSignOnArgs) ToGetServicePrincipalSamlSingleSignOnOutputWithContext added in v5.2.0 

func (i GetServicePrincipalSamlSingleSignOnArgs) ToGetServicePrincipalSamlSingleSignOnOutputWithContext(ctx context.Context) GetServicePrincipalSamlSingleSignOnOutput

type GetServicePrincipalSamlSingleSignOnArray added in v5.2.0 

type GetServicePrincipalSamlSingleSignOnArray []GetServicePrincipalSamlSingleSignOnInput

func (GetServicePrincipalSamlSingleSignOnArray) ElementType added in v5.2.0 

func (GetServicePrincipalSamlSingleSignOnArray) ElementType() reflect.Type

func (GetServicePrincipalSamlSingleSignOnArray) ToGetServicePrincipalSamlSingleSignOnArrayOutput added in v5.2.0 

func (i GetServicePrincipalSamlSingleSignOnArray) ToGetServicePrincipalSamlSingleSignOnArrayOutput() GetServicePrincipalSamlSingleSignOnArrayOutput

func (GetServicePrincipalSamlSingleSignOnArray) ToGetServicePrincipalSamlSingleSignOnArrayOutputWithContext added in v5.2.0 

func (i GetServicePrincipalSamlSingleSignOnArray) ToGetServicePrincipalSamlSingleSignOnArrayOutputWithContext(ctx context.Context) GetServicePrincipalSamlSingleSignOnArrayOutput

type GetServicePrincipalSamlSingleSignOnArrayInput added in v5.2.0 

type GetServicePrincipalSamlSingleSignOnArrayInput interface {
	pulumi.Input

	ToGetServicePrincipalSamlSingleSignOnArrayOutput() GetServicePrincipalSamlSingleSignOnArrayOutput
	ToGetServicePrincipalSamlSingleSignOnArrayOutputWithContext(context.Context) GetServicePrincipalSamlSingleSignOnArrayOutput
}

GetServicePrincipalSamlSingleSignOnArrayInput is an input type that accepts GetServicePrincipalSamlSingleSignOnArray and GetServicePrincipalSamlSingleSignOnArrayOutput values. You can construct a concrete instance of `GetServicePrincipalSamlSingleSignOnArrayInput` via: 

GetServicePrincipalSamlSingleSignOnArray{ GetServicePrincipalSamlSingleSignOnArgs{...} }

type GetServicePrincipalSamlSingleSignOnArrayOutput added in v5.2.0 

type GetServicePrincipalSamlSingleSignOnArrayOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalSamlSingleSignOnArrayOutput) ElementType added in v5.2.0 

func (GetServicePrincipalSamlSingleSignOnArrayOutput) ElementType() reflect.Type

func (GetServicePrincipalSamlSingleSignOnArrayOutput) Index added in v5.2.0 

func (o GetServicePrincipalSamlSingleSignOnArrayOutput) Index(i pulumi.IntInput) GetServicePrincipalSamlSingleSignOnOutput

func (GetServicePrincipalSamlSingleSignOnArrayOutput) ToGetServicePrincipalSamlSingleSignOnArrayOutput added in v5.2.0 

func (o GetServicePrincipalSamlSingleSignOnArrayOutput) ToGetServicePrincipalSamlSingleSignOnArrayOutput() GetServicePrincipalSamlSingleSignOnArrayOutput

func (GetServicePrincipalSamlSingleSignOnArrayOutput) ToGetServicePrincipalSamlSingleSignOnArrayOutputWithContext added in v5.2.0 

func (o GetServicePrincipalSamlSingleSignOnArrayOutput) ToGetServicePrincipalSamlSingleSignOnArrayOutputWithContext(ctx context.Context) GetServicePrincipalSamlSingleSignOnArrayOutput

type GetServicePrincipalSamlSingleSignOnInput added in v5.2.0 

type GetServicePrincipalSamlSingleSignOnInput interface {
	pulumi.Input

	ToGetServicePrincipalSamlSingleSignOnOutput() GetServicePrincipalSamlSingleSignOnOutput
	ToGetServicePrincipalSamlSingleSignOnOutputWithContext(context.Context) GetServicePrincipalSamlSingleSignOnOutput
}

GetServicePrincipalSamlSingleSignOnInput is an input type that accepts GetServicePrincipalSamlSingleSignOnArgs and GetServicePrincipalSamlSingleSignOnOutput values. You can construct a concrete instance of `GetServicePrincipalSamlSingleSignOnInput` via: 

GetServicePrincipalSamlSingleSignOnArgs{...}

type GetServicePrincipalSamlSingleSignOnOutput added in v5.2.0 

type GetServicePrincipalSamlSingleSignOnOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalSamlSingleSignOnOutput) ElementType added in v5.2.0 

func (GetServicePrincipalSamlSingleSignOnOutput) ElementType() reflect.Type

func (GetServicePrincipalSamlSingleSignOnOutput) RelayState added in v5.2.0 

func (o GetServicePrincipalSamlSingleSignOnOutput) RelayState() pulumi.StringOutput

The relative URI the service provider would redirect to after completion of the single sign-on flow.

func (GetServicePrincipalSamlSingleSignOnOutput) ToGetServicePrincipalSamlSingleSignOnOutput added in v5.2.0 

func (o GetServicePrincipalSamlSingleSignOnOutput) ToGetServicePrincipalSamlSingleSignOnOutput() GetServicePrincipalSamlSingleSignOnOutput

func (GetServicePrincipalSamlSingleSignOnOutput) ToGetServicePrincipalSamlSingleSignOnOutputWithContext added in v5.2.0 

func (o GetServicePrincipalSamlSingleSignOnOutput) ToGetServicePrincipalSamlSingleSignOnOutputWithContext(ctx context.Context) GetServicePrincipalSamlSingleSignOnOutput

type GetServicePrincipalsArgs added in v5.2.0 

type GetServicePrincipalsArgs struct {
	// A list of application IDs (client IDs) of the applications associated with the service principals.
	ApplicationIds []string `pulumi:"applicationIds"`
	// A list of display names of the applications associated with the service principals.
	DisplayNames []string `pulumi:"displayNames"`
	// Ignore missing service principals and return all service principals that are found. The data source will still fail if no service principals are found. Defaults to false.
	IgnoreMissing *bool `pulumi:"ignoreMissing"`
	// The object IDs of the service principals.
	ObjectIds []string `pulumi:"objectIds"`
	// When `true`, the data source will return all service principals. Cannot be used with `ignoreMissing`. Defaults to false.
	ReturnAll *bool `pulumi:"returnAll"`
}

A collection of arguments for invoking getServicePrincipals.

type GetServicePrincipalsOutputArgs added in v5.3.0 

type GetServicePrincipalsOutputArgs struct {
	// A list of application IDs (client IDs) of the applications associated with the service principals.
	ApplicationIds pulumi.StringArrayInput `pulumi:"applicationIds"`
	// A list of display names of the applications associated with the service principals.
	DisplayNames pulumi.StringArrayInput `pulumi:"displayNames"`
	// Ignore missing service principals and return all service principals that are found. The data source will still fail if no service principals are found. Defaults to false.
	IgnoreMissing pulumi.BoolPtrInput `pulumi:"ignoreMissing"`
	// The object IDs of the service principals.
	ObjectIds pulumi.StringArrayInput `pulumi:"objectIds"`
	// When `true`, the data source will return all service principals. Cannot be used with `ignoreMissing`. Defaults to false.
	ReturnAll pulumi.BoolPtrInput `pulumi:"returnAll"`
}

A collection of arguments for invoking getServicePrincipals.

func (GetServicePrincipalsOutputArgs) ElementType added in v5.3.0 

func (GetServicePrincipalsOutputArgs) ElementType() reflect.Type

type GetServicePrincipalsResult added in v5.2.0 

type GetServicePrincipalsResult struct {
	// A list of application IDs (client IDs) of the applications associated with the service principals.
	ApplicationIds []string `pulumi:"applicationIds"`
	// A list of display names of the applications associated with the service principals.
	DisplayNames []string `pulumi:"displayNames"`
	// The provider-assigned unique ID for this managed resource.
	Id            string `pulumi:"id"`
	IgnoreMissing *bool  `pulumi:"ignoreMissing"`
	// The object IDs of the service principals.
	ObjectIds []string `pulumi:"objectIds"`
	ReturnAll *bool    `pulumi:"returnAll"`
	// A list of service principals. Each `servicePrincipal` object provides the attributes documented below.
	ServicePrincipals []GetServicePrincipalsServicePrincipal `pulumi:"servicePrincipals"`
}

A collection of values returned by getServicePrincipals.

func GetServicePrincipals added in v5.2.0 

func GetServicePrincipals(ctx *pulumi.Context, args *GetServicePrincipalsArgs, opts ...pulumi.InvokeOption) (*GetServicePrincipalsResult, error)

Gets basic information for multiple Azure Active Directory service principals.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `Application.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

*Look up by application display names*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetServicePrincipals(ctx, &GetServicePrincipalsArgs{
			DisplayNames: []string{
				"example-app",
				"another-app",
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up by application IDs (client IDs*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetServicePrincipals(ctx, &GetServicePrincipalsArgs{
			ApplicationIds: []string{
				"11111111-0000-0000-0000-000000000000",
				"22222222-0000-0000-0000-000000000000",
				"33333333-0000-0000-0000-000000000000",
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up by service principal object IDs*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetServicePrincipals(ctx, &GetServicePrincipalsArgs{
			ObjectIds: []string{
				"00000000-0000-0000-0000-000000000000",
				"00000000-0000-0000-0000-111111111111",
				"00000000-0000-0000-0000-222222222222",
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetServicePrincipalsResultOutput added in v5.3.0 

type GetServicePrincipalsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getServicePrincipals.

func GetServicePrincipalsOutput added in v5.3.0 

func GetServicePrincipalsOutput(ctx *pulumi.Context, args GetServicePrincipalsOutputArgs, opts ...pulumi.InvokeOption) GetServicePrincipalsResultOutput

func (GetServicePrincipalsResultOutput) ApplicationIds added in v5.3.0 

func (o GetServicePrincipalsResultOutput) ApplicationIds() pulumi.StringArrayOutput

A list of application IDs (client IDs) of the applications associated with the service principals.

func (GetServicePrincipalsResultOutput) DisplayNames added in v5.3.0 

func (o GetServicePrincipalsResultOutput) DisplayNames() pulumi.StringArrayOutput

A list of display names of the applications associated with the service principals.

func (GetServicePrincipalsResultOutput) ElementType added in v5.3.0 

func (GetServicePrincipalsResultOutput) ElementType() reflect.Type

func (GetServicePrincipalsResultOutput) Id added in v5.3.0 

func (o GetServicePrincipalsResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetServicePrincipalsResultOutput) IgnoreMissing added in v5.3.0 

func (o GetServicePrincipalsResultOutput) IgnoreMissing() pulumi.BoolPtrOutput

func (GetServicePrincipalsResultOutput) ObjectIds added in v5.3.0 

func (o GetServicePrincipalsResultOutput) ObjectIds() pulumi.StringArrayOutput

The object IDs of the service principals.

func (GetServicePrincipalsResultOutput) ReturnAll added in v5.3.0 

func (o GetServicePrincipalsResultOutput) ReturnAll() pulumi.BoolPtrOutput

func (GetServicePrincipalsResultOutput) ServicePrincipals added in v5.3.0 

func (o GetServicePrincipalsResultOutput) ServicePrincipals() GetServicePrincipalsServicePrincipalArrayOutput

A list of service principals. Each `servicePrincipal` object provides the attributes documented below.

func (GetServicePrincipalsResultOutput) ToGetServicePrincipalsResultOutput added in v5.3.0 

func (o GetServicePrincipalsResultOutput) ToGetServicePrincipalsResultOutput() GetServicePrincipalsResultOutput

func (GetServicePrincipalsResultOutput) ToGetServicePrincipalsResultOutputWithContext added in v5.3.0 

func (o GetServicePrincipalsResultOutput) ToGetServicePrincipalsResultOutputWithContext(ctx context.Context) GetServicePrincipalsResultOutput

type GetServicePrincipalsServicePrincipal added in v5.2.0 

type GetServicePrincipalsServicePrincipal struct {
	// Whether or not the service principal account is enabled.
	AccountEnabled bool `pulumi:"accountEnabled"`
	// Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application.
	AppRoleAssignmentRequired bool `pulumi:"appRoleAssignmentRequired"`
	// The application ID (client ID) of the application associated with this service principal.
	ApplicationId string `pulumi:"applicationId"`
	// The tenant ID where the associated application is registered.
	ApplicationTenantId string `pulumi:"applicationTenantId"`
	// The display name of the application associated with this service principal.
	DisplayName string `pulumi:"displayName"`
	// The object ID of the service principal.
	ObjectId string `pulumi:"objectId"`
	// The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps.
	PreferredSingleSignOnMode string `pulumi:"preferredSingleSignOnMode"`
	// The URL where the service exposes SAML metadata for federation.
	SamlMetadataUrl string `pulumi:"samlMetadataUrl"`
	// A list of identifier URI(s), copied over from the associated application.
	ServicePrincipalNames []string `pulumi:"servicePrincipalNames"`
	// The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.
	SignInAudience string `pulumi:"signInAudience"`
	// A list of tags applied to the service principal.
	Tags []string `pulumi:"tags"`
	// Identifies whether the service principal represents an application or a managed identity. Possible values include `Application` or `ManagedIdentity`.
	Type string `pulumi:"type"`
}

type GetServicePrincipalsServicePrincipalArgs added in v5.2.0 

type GetServicePrincipalsServicePrincipalArgs struct {
	// Whether or not the service principal account is enabled.
	AccountEnabled pulumi.BoolInput `pulumi:"accountEnabled"`
	// Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application.
	AppRoleAssignmentRequired pulumi.BoolInput `pulumi:"appRoleAssignmentRequired"`
	// The application ID (client ID) of the application associated with this service principal.
	ApplicationId pulumi.StringInput `pulumi:"applicationId"`
	// The tenant ID where the associated application is registered.
	ApplicationTenantId pulumi.StringInput `pulumi:"applicationTenantId"`
	// The display name of the application associated with this service principal.
	DisplayName pulumi.StringInput `pulumi:"displayName"`
	// The object ID of the service principal.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
	// The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps.
	PreferredSingleSignOnMode pulumi.StringInput `pulumi:"preferredSingleSignOnMode"`
	// The URL where the service exposes SAML metadata for federation.
	SamlMetadataUrl pulumi.StringInput `pulumi:"samlMetadataUrl"`
	// A list of identifier URI(s), copied over from the associated application.
	ServicePrincipalNames pulumi.StringArrayInput `pulumi:"servicePrincipalNames"`
	// The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.
	SignInAudience pulumi.StringInput `pulumi:"signInAudience"`
	// A list of tags applied to the service principal.
	Tags pulumi.StringArrayInput `pulumi:"tags"`
	// Identifies whether the service principal represents an application or a managed identity. Possible values include `Application` or `ManagedIdentity`.
	Type pulumi.StringInput `pulumi:"type"`
}

func (GetServicePrincipalsServicePrincipalArgs) ElementType added in v5.2.0 

func (GetServicePrincipalsServicePrincipalArgs) ElementType() reflect.Type

func (GetServicePrincipalsServicePrincipalArgs) ToGetServicePrincipalsServicePrincipalOutput added in v5.2.0 

func (i GetServicePrincipalsServicePrincipalArgs) ToGetServicePrincipalsServicePrincipalOutput() GetServicePrincipalsServicePrincipalOutput

func (GetServicePrincipalsServicePrincipalArgs) ToGetServicePrincipalsServicePrincipalOutputWithContext added in v5.2.0 

func (i GetServicePrincipalsServicePrincipalArgs) ToGetServicePrincipalsServicePrincipalOutputWithContext(ctx context.Context) GetServicePrincipalsServicePrincipalOutput

type GetServicePrincipalsServicePrincipalArray added in v5.2.0 

type GetServicePrincipalsServicePrincipalArray []GetServicePrincipalsServicePrincipalInput

func (GetServicePrincipalsServicePrincipalArray) ElementType added in v5.2.0 

func (GetServicePrincipalsServicePrincipalArray) ElementType() reflect.Type

func (GetServicePrincipalsServicePrincipalArray) ToGetServicePrincipalsServicePrincipalArrayOutput added in v5.2.0 

func (i GetServicePrincipalsServicePrincipalArray) ToGetServicePrincipalsServicePrincipalArrayOutput() GetServicePrincipalsServicePrincipalArrayOutput

func (GetServicePrincipalsServicePrincipalArray) ToGetServicePrincipalsServicePrincipalArrayOutputWithContext added in v5.2.0 

func (i GetServicePrincipalsServicePrincipalArray) ToGetServicePrincipalsServicePrincipalArrayOutputWithContext(ctx context.Context) GetServicePrincipalsServicePrincipalArrayOutput

type GetServicePrincipalsServicePrincipalArrayInput added in v5.2.0 

type GetServicePrincipalsServicePrincipalArrayInput interface {
	pulumi.Input

	ToGetServicePrincipalsServicePrincipalArrayOutput() GetServicePrincipalsServicePrincipalArrayOutput
	ToGetServicePrincipalsServicePrincipalArrayOutputWithContext(context.Context) GetServicePrincipalsServicePrincipalArrayOutput
}

GetServicePrincipalsServicePrincipalArrayInput is an input type that accepts GetServicePrincipalsServicePrincipalArray and GetServicePrincipalsServicePrincipalArrayOutput values. You can construct a concrete instance of `GetServicePrincipalsServicePrincipalArrayInput` via: 

GetServicePrincipalsServicePrincipalArray{ GetServicePrincipalsServicePrincipalArgs{...} }

type GetServicePrincipalsServicePrincipalArrayOutput added in v5.2.0 

type GetServicePrincipalsServicePrincipalArrayOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalsServicePrincipalArrayOutput) ElementType added in v5.2.0 

func (GetServicePrincipalsServicePrincipalArrayOutput) ElementType() reflect.Type

func (GetServicePrincipalsServicePrincipalArrayOutput) Index added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalArrayOutput) Index(i pulumi.IntInput) GetServicePrincipalsServicePrincipalOutput

func (GetServicePrincipalsServicePrincipalArrayOutput) ToGetServicePrincipalsServicePrincipalArrayOutput added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalArrayOutput) ToGetServicePrincipalsServicePrincipalArrayOutput() GetServicePrincipalsServicePrincipalArrayOutput

func (GetServicePrincipalsServicePrincipalArrayOutput) ToGetServicePrincipalsServicePrincipalArrayOutputWithContext added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalArrayOutput) ToGetServicePrincipalsServicePrincipalArrayOutputWithContext(ctx context.Context) GetServicePrincipalsServicePrincipalArrayOutput

type GetServicePrincipalsServicePrincipalInput added in v5.2.0 

type GetServicePrincipalsServicePrincipalInput interface {
	pulumi.Input

	ToGetServicePrincipalsServicePrincipalOutput() GetServicePrincipalsServicePrincipalOutput
	ToGetServicePrincipalsServicePrincipalOutputWithContext(context.Context) GetServicePrincipalsServicePrincipalOutput
}

GetServicePrincipalsServicePrincipalInput is an input type that accepts GetServicePrincipalsServicePrincipalArgs and GetServicePrincipalsServicePrincipalOutput values. You can construct a concrete instance of `GetServicePrincipalsServicePrincipalInput` via: 

GetServicePrincipalsServicePrincipalArgs{...}

type GetServicePrincipalsServicePrincipalOutput added in v5.2.0 

type GetServicePrincipalsServicePrincipalOutput struct{ *pulumi.OutputState }

func (GetServicePrincipalsServicePrincipalOutput) AccountEnabled added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) AccountEnabled() pulumi.BoolOutput

Whether or not the service principal account is enabled.

func (GetServicePrincipalsServicePrincipalOutput) AppRoleAssignmentRequired added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) AppRoleAssignmentRequired() pulumi.BoolOutput

Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application.

func (GetServicePrincipalsServicePrincipalOutput) ApplicationId added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) ApplicationId() pulumi.StringOutput

The application ID (client ID) of the application associated with this service principal.

func (GetServicePrincipalsServicePrincipalOutput) ApplicationTenantId added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) ApplicationTenantId() pulumi.StringOutput

The tenant ID where the associated application is registered.

func (GetServicePrincipalsServicePrincipalOutput) DisplayName added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) DisplayName() pulumi.StringOutput

The display name of the application associated with this service principal.

func (GetServicePrincipalsServicePrincipalOutput) ElementType added in v5.2.0 

func (GetServicePrincipalsServicePrincipalOutput) ElementType() reflect.Type

func (GetServicePrincipalsServicePrincipalOutput) ObjectId added in v5.19.0 

func (o GetServicePrincipalsServicePrincipalOutput) ObjectId() pulumi.StringOutput

The object ID of the service principal.

func (GetServicePrincipalsServicePrincipalOutput) PreferredSingleSignOnMode added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) PreferredSingleSignOnMode() pulumi.StringOutput

The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps.

func (GetServicePrincipalsServicePrincipalOutput) SamlMetadataUrl added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) SamlMetadataUrl() pulumi.StringOutput

The URL where the service exposes SAML metadata for federation.

func (GetServicePrincipalsServicePrincipalOutput) ServicePrincipalNames added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) ServicePrincipalNames() pulumi.StringArrayOutput

A list of identifier URI(s), copied over from the associated application.

func (GetServicePrincipalsServicePrincipalOutput) SignInAudience added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) SignInAudience() pulumi.StringOutput

The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.

func (GetServicePrincipalsServicePrincipalOutput) Tags added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) Tags() pulumi.StringArrayOutput

A list of tags applied to the service principal.

func (GetServicePrincipalsServicePrincipalOutput) ToGetServicePrincipalsServicePrincipalOutput added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) ToGetServicePrincipalsServicePrincipalOutput() GetServicePrincipalsServicePrincipalOutput

func (GetServicePrincipalsServicePrincipalOutput) ToGetServicePrincipalsServicePrincipalOutputWithContext added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) ToGetServicePrincipalsServicePrincipalOutputWithContext(ctx context.Context) GetServicePrincipalsServicePrincipalOutput

func (GetServicePrincipalsServicePrincipalOutput) Type added in v5.2.0 

func (o GetServicePrincipalsServicePrincipalOutput) Type() pulumi.StringOutput

Identifies whether the service principal represents an application or a managed identity. Possible values include `Application` or `ManagedIdentity`.

type GetUsersArgs 

type GetUsersArgs struct {
	// Ignore missing users and return users that were found. The data source will still fail if no users are found. Cannot be specified with `returnAll`. Defaults to `false`.
	IgnoreMissing *bool `pulumi:"ignoreMissing"`
	// The email aliases of the users.
	MailNicknames []string `pulumi:"mailNicknames"`
	// The object IDs of the users.
	ObjectIds []string `pulumi:"objectIds"`
	// When `true`, the data source will return all users. Cannot be used with `ignoreMissing`. Defaults to `false`.
	ReturnAll *bool `pulumi:"returnAll"`
	// The user principal names (UPNs) of the users.
	UserPrincipalNames []string `pulumi:"userPrincipalNames"`
}

A collection of arguments for invoking getUsers.

type GetUsersOutputArgs added in v5.3.0 

type GetUsersOutputArgs struct {
	// Ignore missing users and return users that were found. The data source will still fail if no users are found. Cannot be specified with `returnAll`. Defaults to `false`.
	IgnoreMissing pulumi.BoolPtrInput `pulumi:"ignoreMissing"`
	// The email aliases of the users.
	MailNicknames pulumi.StringArrayInput `pulumi:"mailNicknames"`
	// The object IDs of the users.
	ObjectIds pulumi.StringArrayInput `pulumi:"objectIds"`
	// When `true`, the data source will return all users. Cannot be used with `ignoreMissing`. Defaults to `false`.
	ReturnAll pulumi.BoolPtrInput `pulumi:"returnAll"`
	// The user principal names (UPNs) of the users.
	UserPrincipalNames pulumi.StringArrayInput `pulumi:"userPrincipalNames"`
}

A collection of arguments for invoking getUsers.

func (GetUsersOutputArgs) ElementType added in v5.3.0 

func (GetUsersOutputArgs) ElementType() reflect.Type

type GetUsersResult 

type GetUsersResult struct {
	// The provider-assigned unique ID for this managed resource.
	Id            string `pulumi:"id"`
	IgnoreMissing *bool  `pulumi:"ignoreMissing"`
	// The email aliases of the users.
	MailNicknames []string `pulumi:"mailNicknames"`
	// The object IDs of the users.
	ObjectIds []string `pulumi:"objectIds"`
	ReturnAll *bool    `pulumi:"returnAll"`
	// The user principal names (UPNs) of the users.
	UserPrincipalNames []string `pulumi:"userPrincipalNames"`
	// A list of users. Each `user` object provides the attributes documented below.
	Users []GetUsersUser `pulumi:"users"`
}

A collection of values returned by getUsers.

func GetUsers 

func GetUsers(ctx *pulumi.Context, args *GetUsersArgs, opts ...pulumi.InvokeOption) (*GetUsersResult, error)

Gets basic information for multiple Azure Active Directory users.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `User.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.GetUsers(ctx, &GetUsersArgs{
			UserPrincipalNames: []string{
				"kat@hashicorp.com",
				"byte@hashicorp.com",
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type GetUsersResultOutput added in v5.3.0 

type GetUsersResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getUsers.

func GetUsersOutput added in v5.3.0 

func GetUsersOutput(ctx *pulumi.Context, args GetUsersOutputArgs, opts ...pulumi.InvokeOption) GetUsersResultOutput

func (GetUsersResultOutput) ElementType added in v5.3.0 

func (GetUsersResultOutput) ElementType() reflect.Type

func (GetUsersResultOutput) Id added in v5.3.0 

func (o GetUsersResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (GetUsersResultOutput) IgnoreMissing added in v5.3.0 

func (o GetUsersResultOutput) IgnoreMissing() pulumi.BoolPtrOutput

func (GetUsersResultOutput) MailNicknames added in v5.3.0 

func (o GetUsersResultOutput) MailNicknames() pulumi.StringArrayOutput

The email aliases of the users.

func (GetUsersResultOutput) ObjectIds added in v5.3.0 

func (o GetUsersResultOutput) ObjectIds() pulumi.StringArrayOutput

The object IDs of the users.

func (GetUsersResultOutput) ReturnAll added in v5.3.0 

func (o GetUsersResultOutput) ReturnAll() pulumi.BoolPtrOutput

func (GetUsersResultOutput) ToGetUsersResultOutput added in v5.3.0 

func (o GetUsersResultOutput) ToGetUsersResultOutput() GetUsersResultOutput

func (GetUsersResultOutput) ToGetUsersResultOutputWithContext added in v5.3.0 

func (o GetUsersResultOutput) ToGetUsersResultOutputWithContext(ctx context.Context) GetUsersResultOutput

func (GetUsersResultOutput) UserPrincipalNames added in v5.3.0 

func (o GetUsersResultOutput) UserPrincipalNames() pulumi.StringArrayOutput

The user principal names (UPNs) of the users.

func (GetUsersResultOutput) Users added in v5.3.0 

func (o GetUsersResultOutput) Users() GetUsersUserArrayOutput

A list of users. Each `user` object provides the attributes documented below.

type GetUsersUser 

type GetUsersUser struct {
	// Whether or not the account is enabled.
	AccountEnabled bool `pulumi:"accountEnabled"`
	// The display name of the user.
	DisplayName string `pulumi:"displayName"`
	// The primary email address of the user.
	Mail string `pulumi:"mail"`
	// The email alias of the user.
	MailNickname string `pulumi:"mailNickname"`
	// The object ID of the user.
	ObjectId string `pulumi:"objectId"`
	// The value used to associate an on-premises Active Directory user account with their Azure AD user object.
	OnpremisesImmutableId string `pulumi:"onpremisesImmutableId"`
	// The on-premise SAM account name of the user.
	OnpremisesSamAccountName string `pulumi:"onpremisesSamAccountName"`
	// The on-premise user principal name of the user.
	OnpremisesUserPrincipalName string `pulumi:"onpremisesUserPrincipalName"`
	// The usage location of the user.
	UsageLocation string `pulumi:"usageLocation"`
	// The user principal name (UPN) of the user.
	UserPrincipalName string `pulumi:"userPrincipalName"`
}

type GetUsersUserArgs 

type GetUsersUserArgs struct {
	// Whether or not the account is enabled.
	AccountEnabled pulumi.BoolInput `pulumi:"accountEnabled"`
	// The display name of the user.
	DisplayName pulumi.StringInput `pulumi:"displayName"`
	// The primary email address of the user.
	Mail pulumi.StringInput `pulumi:"mail"`
	// The email alias of the user.
	MailNickname pulumi.StringInput `pulumi:"mailNickname"`
	// The object ID of the user.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
	// The value used to associate an on-premises Active Directory user account with their Azure AD user object.
	OnpremisesImmutableId pulumi.StringInput `pulumi:"onpremisesImmutableId"`
	// The on-premise SAM account name of the user.
	OnpremisesSamAccountName pulumi.StringInput `pulumi:"onpremisesSamAccountName"`
	// The on-premise user principal name of the user.
	OnpremisesUserPrincipalName pulumi.StringInput `pulumi:"onpremisesUserPrincipalName"`
	// The usage location of the user.
	UsageLocation pulumi.StringInput `pulumi:"usageLocation"`
	// The user principal name (UPN) of the user.
	UserPrincipalName pulumi.StringInput `pulumi:"userPrincipalName"`
}

func (GetUsersUserArgs) ElementType 

func (GetUsersUserArgs) ElementType() reflect.Type

func (GetUsersUserArgs) ToGetUsersUserOutput 

func (i GetUsersUserArgs) ToGetUsersUserOutput() GetUsersUserOutput

func (GetUsersUserArgs) ToGetUsersUserOutputWithContext 

func (i GetUsersUserArgs) ToGetUsersUserOutputWithContext(ctx context.Context) GetUsersUserOutput

type GetUsersUserArray 

type GetUsersUserArray []GetUsersUserInput

func (GetUsersUserArray) ElementType 

func (GetUsersUserArray) ElementType() reflect.Type

func (GetUsersUserArray) ToGetUsersUserArrayOutput 

func (i GetUsersUserArray) ToGetUsersUserArrayOutput() GetUsersUserArrayOutput

func (GetUsersUserArray) ToGetUsersUserArrayOutputWithContext 

func (i GetUsersUserArray) ToGetUsersUserArrayOutputWithContext(ctx context.Context) GetUsersUserArrayOutput

type GetUsersUserArrayInput 

type GetUsersUserArrayInput interface {
	pulumi.Input

	ToGetUsersUserArrayOutput() GetUsersUserArrayOutput
	ToGetUsersUserArrayOutputWithContext(context.Context) GetUsersUserArrayOutput
}

GetUsersUserArrayInput is an input type that accepts GetUsersUserArray and GetUsersUserArrayOutput values. You can construct a concrete instance of `GetUsersUserArrayInput` via: 

GetUsersUserArray{ GetUsersUserArgs{...} }

type GetUsersUserArrayOutput 

type GetUsersUserArrayOutput struct{ *pulumi.OutputState }

func (GetUsersUserArrayOutput) ElementType 

func (GetUsersUserArrayOutput) ElementType() reflect.Type

func (GetUsersUserArrayOutput) Index 

func (o GetUsersUserArrayOutput) Index(i pulumi.IntInput) GetUsersUserOutput

func (GetUsersUserArrayOutput) ToGetUsersUserArrayOutput 

func (o GetUsersUserArrayOutput) ToGetUsersUserArrayOutput() GetUsersUserArrayOutput

func (GetUsersUserArrayOutput) ToGetUsersUserArrayOutputWithContext 

func (o GetUsersUserArrayOutput) ToGetUsersUserArrayOutputWithContext(ctx context.Context) GetUsersUserArrayOutput

type GetUsersUserInput 

type GetUsersUserInput interface {
	pulumi.Input

	ToGetUsersUserOutput() GetUsersUserOutput
	ToGetUsersUserOutputWithContext(context.Context) GetUsersUserOutput
}

GetUsersUserInput is an input type that accepts GetUsersUserArgs and GetUsersUserOutput values. You can construct a concrete instance of `GetUsersUserInput` via: 

GetUsersUserArgs{...}

type GetUsersUserOutput 

type GetUsersUserOutput struct{ *pulumi.OutputState }

func (GetUsersUserOutput) AccountEnabled 

func (o GetUsersUserOutput) AccountEnabled() pulumi.BoolOutput

Whether or not the account is enabled.

func (GetUsersUserOutput) DisplayName 

func (o GetUsersUserOutput) DisplayName() pulumi.StringOutput

The display name of the user.

func (GetUsersUserOutput) ElementType 

func (GetUsersUserOutput) ElementType() reflect.Type

func (GetUsersUserOutput) Mail 

func (o GetUsersUserOutput) Mail() pulumi.StringOutput

The primary email address of the user.

func (GetUsersUserOutput) MailNickname 

func (o GetUsersUserOutput) MailNickname() pulumi.StringOutput

The email alias of the user.

func (GetUsersUserOutput) ObjectId 

func (o GetUsersUserOutput) ObjectId() pulumi.StringOutput

The object ID of the user.

func (GetUsersUserOutput) OnpremisesImmutableId 

func (o GetUsersUserOutput) OnpremisesImmutableId() pulumi.StringOutput

The value used to associate an on-premises Active Directory user account with their Azure AD user object.

func (GetUsersUserOutput) OnpremisesSamAccountName 

func (o GetUsersUserOutput) OnpremisesSamAccountName() pulumi.StringOutput

The on-premise SAM account name of the user.

func (GetUsersUserOutput) OnpremisesUserPrincipalName 

func (o GetUsersUserOutput) OnpremisesUserPrincipalName() pulumi.StringOutput

The on-premise user principal name of the user.

func (GetUsersUserOutput) ToGetUsersUserOutput 

func (o GetUsersUserOutput) ToGetUsersUserOutput() GetUsersUserOutput

func (GetUsersUserOutput) ToGetUsersUserOutputWithContext 

func (o GetUsersUserOutput) ToGetUsersUserOutputWithContext(ctx context.Context) GetUsersUserOutput

func (GetUsersUserOutput) UsageLocation 

func (o GetUsersUserOutput) UsageLocation() pulumi.StringOutput

The usage location of the user.

func (GetUsersUserOutput) UserPrincipalName 

func (o GetUsersUserOutput) UserPrincipalName() pulumi.StringOutput

The user principal name (UPN) of the user.

type Group 

type Group struct {
	pulumi.CustomResourceState

	// Indicates whether this group can be assigned to an Azure Active Directory role. Can only be `true` for security-enabled groups. Changing this forces a new resource to be created.
	AssignableToRole pulumi.BoolPtrOutput `pulumi:"assignableToRole"`
	// Indicates whether new members added to the group will be auto-subscribed to receive email notifications. Can only be set for Unified groups.
	AutoSubscribeNewMembers pulumi.BoolOutput `pulumi:"autoSubscribeNewMembers"`
	// A set of behaviors for a Microsoft 365 group. Possible values are `AllowOnlyMembersToPost`, `HideGroupInOutlook`, `SubscribeMembersToCalendarEventsDisabled`, `SubscribeNewGroupMembers` and `WelcomeEmailDisabled`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for more details. Changing this forces a new resource to be created.
	Behaviors pulumi.StringArrayOutput `pulumi:"behaviors"`
	// The description for the group.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The display name for the group.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// A `dynamicMembership` block as documented below. Required when `types` contains `DynamicMembership`. Cannot be used with the `members` property.
	DynamicMembership GroupDynamicMembershipPtrOutput `pulumi:"dynamicMembership"`
	// Indicates whether people external to the organization can send messages to the group. Can only be set for Unified groups.
	ExternalSendersAllowed pulumi.BoolOutput `pulumi:"externalSendersAllowed"`
	// Indicates whether the group is displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups. Can only be set for Unified groups.
	HideFromAddressLists pulumi.BoolOutput `pulumi:"hideFromAddressLists"`
	// Indicates whether the group is displayed in Outlook clients, such as Outlook for Windows and Outlook on the web. Can only be set for Unified groups.
	HideFromOutlookClients pulumi.BoolOutput `pulumi:"hideFromOutlookClients"`
	// The SMTP address for the group.
	Mail pulumi.StringOutput `pulumi:"mail"`
	// Whether the group is a mail enabled, with a shared group mailbox. At least one of `mailEnabled` or `securityEnabled` must be specified. Only Microsoft 365 groups can be mail enabled (see the `types` property).
	MailEnabled pulumi.BoolPtrOutput `pulumi:"mailEnabled"`
	// The mail alias for the group, unique in the organisation. Required for mail-enabled groups. Changing this forces a new resource to be created.
	MailNickname pulumi.StringOutput `pulumi:"mailNickname"`
	// A set of members who should be present in this group. Supported object types are Users, Groups or Service Principals. Cannot be used with the `dynamicMembership` block.
	Members pulumi.StringArrayOutput `pulumi:"members"`
	// The object ID of the group.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDomainName pulumi.StringOutput `pulumi:"onpremisesDomainName"`
	// The on-premises NetBIOS name, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesNetbiosName pulumi.StringOutput `pulumi:"onpremisesNetbiosName"`
	// The on-premises SAM account name, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSamAccountName pulumi.StringOutput `pulumi:"onpremisesSamAccountName"`
	// The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSecurityIdentifier pulumi.StringOutput `pulumi:"onpremisesSecurityIdentifier"`
	// Whether this group is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).
	OnpremisesSyncEnabled pulumi.BoolOutput `pulumi:"onpremisesSyncEnabled"`
	// A set of owners who own this group. Supported object types are Users or Service Principals
	Owners pulumi.StringArrayOutput `pulumi:"owners"`
	// The preferred language for a Microsoft 365 group, in ISO 639-1 notation.
	PreferredLanguage pulumi.StringOutput `pulumi:"preferredLanguage"`
	// If `true`, will return an error if an existing group is found with the same name. Defaults to `false`.
	PreventDuplicateNames pulumi.BoolPtrOutput `pulumi:"preventDuplicateNames"`
	// A set of provisioning options for a Microsoft 365 group. The only supported value is `Team`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for details. Changing this forces a new resource to be created.
	ProvisioningOptions pulumi.StringArrayOutput `pulumi:"provisioningOptions"`
	// List of email addresses for the group that direct to the same group mailbox.
	ProxyAddresses pulumi.StringArrayOutput `pulumi:"proxyAddresses"`
	// Whether the group is a security group for controlling access to in-app resources. At least one of `securityEnabled` or `mailEnabled` must be specified. A Microsoft 365 group can be security enabled _and_ mail enabled (see the `types` property).
	SecurityEnabled pulumi.BoolPtrOutput `pulumi:"securityEnabled"`
	// The colour theme for a Microsoft 365 group. Possible values are `Blue`, `Green`, `Orange`, `Pink`, `Purple`, `Red` or `Teal`. By default, no theme is set.
	Theme pulumi.StringPtrOutput `pulumi:"theme"`
	// A set of group types to configure for the group. Supported values are `DynamicMembership`, which denotes a group with dynamic membership, and `Unified`, which specifies a Microsoft 365 group. Required when `mailEnabled` is true. Changing this forces a new resource to be created.
	Types pulumi.StringArrayOutput `pulumi:"types"`
	// The group join policy and group content visibility. Possible values are `Private`, `Public`, or `Hiddenmembership`. Only Microsoft 365 groups can have `Hiddenmembership` visibility and this value must be set when the group is created. By default, security groups will receive `Private` visibility and Microsoft 365 groups will receive `Public` visibility.
	Visibility pulumi.StringOutput `pulumi:"visibility"`
}

Manages a group within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `Group.ReadWrite.All` or `Directory.ReadWrite.All`

If using the `assignableToRole` property, this resource additionally requires one of the following application roles: `RoleManagement.ReadWrite.Directory` or `Directory.ReadWrite.All`

If specifying owners for a group, which are user principals, this resource additionally requires one of the following application roles: `User.Read.All`, `User.ReadWrite.All`, `Directory.Read.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Groups Administrator`, `User Administrator` or `Global Administrator`

The `externalSendersAllowed`, `autoSubscribeNewMembers`, `hideFromAddressLists` and `hideFromOutlookClients` properties can only be configured when authenticating as a user and cannot be configured when authenticating as a service principal. Additionally, the user being used for authentication must be a Member of the tenant where the group is being managed and _not_ a Guest. This is a known API issue; please see the [Microsoft Graph Known Issues](https://docs.microsoft.com/en-us/graph/known-issues#groups) official documentation.

## Import

Groups can be imported using their object ID, e.g.

```sh 

$ pulumi import azuread:index/group:Group my_group 00000000-0000-0000-0000-000000000000

```

func GetGroup 

func GetGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GroupState, opts ...pulumi.ResourceOption) (*Group, error)

GetGroup gets an existing Group resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGroup 

func NewGroup(ctx *pulumi.Context,
	name string, args *GroupArgs, opts ...pulumi.ResourceOption) (*Group, error)

NewGroup registers a new resource with the given unique name, arguments, and options.

func (*Group) ElementType 

func (*Group) ElementType() reflect.Type

func (*Group) ToGroupOutput 

func (i *Group) ToGroupOutput() GroupOutput

func (*Group) ToGroupOutputWithContext 

func (i *Group) ToGroupOutputWithContext(ctx context.Context) GroupOutput

type GroupArgs 

type GroupArgs struct {
	// Indicates whether this group can be assigned to an Azure Active Directory role. Can only be `true` for security-enabled groups. Changing this forces a new resource to be created.
	AssignableToRole pulumi.BoolPtrInput
	// Indicates whether new members added to the group will be auto-subscribed to receive email notifications. Can only be set for Unified groups.
	AutoSubscribeNewMembers pulumi.BoolPtrInput
	// A set of behaviors for a Microsoft 365 group. Possible values are `AllowOnlyMembersToPost`, `HideGroupInOutlook`, `SubscribeMembersToCalendarEventsDisabled`, `SubscribeNewGroupMembers` and `WelcomeEmailDisabled`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for more details. Changing this forces a new resource to be created.
	Behaviors pulumi.StringArrayInput
	// The description for the group.
	Description pulumi.StringPtrInput
	// The display name for the group.
	DisplayName pulumi.StringInput
	// A `dynamicMembership` block as documented below. Required when `types` contains `DynamicMembership`. Cannot be used with the `members` property.
	DynamicMembership GroupDynamicMembershipPtrInput
	// Indicates whether people external to the organization can send messages to the group. Can only be set for Unified groups.
	ExternalSendersAllowed pulumi.BoolPtrInput
	// Indicates whether the group is displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups. Can only be set for Unified groups.
	HideFromAddressLists pulumi.BoolPtrInput
	// Indicates whether the group is displayed in Outlook clients, such as Outlook for Windows and Outlook on the web. Can only be set for Unified groups.
	HideFromOutlookClients pulumi.BoolPtrInput
	// Whether the group is a mail enabled, with a shared group mailbox. At least one of `mailEnabled` or `securityEnabled` must be specified. Only Microsoft 365 groups can be mail enabled (see the `types` property).
	MailEnabled pulumi.BoolPtrInput
	// The mail alias for the group, unique in the organisation. Required for mail-enabled groups. Changing this forces a new resource to be created.
	MailNickname pulumi.StringPtrInput
	// A set of members who should be present in this group. Supported object types are Users, Groups or Service Principals. Cannot be used with the `dynamicMembership` block.
	Members pulumi.StringArrayInput
	// A set of owners who own this group. Supported object types are Users or Service Principals
	Owners pulumi.StringArrayInput
	// If `true`, will return an error if an existing group is found with the same name. Defaults to `false`.
	PreventDuplicateNames pulumi.BoolPtrInput
	// A set of provisioning options for a Microsoft 365 group. The only supported value is `Team`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for details. Changing this forces a new resource to be created.
	ProvisioningOptions pulumi.StringArrayInput
	// Whether the group is a security group for controlling access to in-app resources. At least one of `securityEnabled` or `mailEnabled` must be specified. A Microsoft 365 group can be security enabled _and_ mail enabled (see the `types` property).
	SecurityEnabled pulumi.BoolPtrInput
	// The colour theme for a Microsoft 365 group. Possible values are `Blue`, `Green`, `Orange`, `Pink`, `Purple`, `Red` or `Teal`. By default, no theme is set.
	Theme pulumi.StringPtrInput
	// A set of group types to configure for the group. Supported values are `DynamicMembership`, which denotes a group with dynamic membership, and `Unified`, which specifies a Microsoft 365 group. Required when `mailEnabled` is true. Changing this forces a new resource to be created.
	Types pulumi.StringArrayInput
	// The group join policy and group content visibility. Possible values are `Private`, `Public`, or `Hiddenmembership`. Only Microsoft 365 groups can have `Hiddenmembership` visibility and this value must be set when the group is created. By default, security groups will receive `Private` visibility and Microsoft 365 groups will receive `Public` visibility.
	Visibility pulumi.StringPtrInput
}

The set of arguments for constructing a Group resource.

func (GroupArgs) ElementType 

func (GroupArgs) ElementType() reflect.Type

type GroupArray 

type GroupArray []GroupInput

func (GroupArray) ElementType 

func (GroupArray) ElementType() reflect.Type

func (GroupArray) ToGroupArrayOutput 

func (i GroupArray) ToGroupArrayOutput() GroupArrayOutput

func (GroupArray) ToGroupArrayOutputWithContext 

func (i GroupArray) ToGroupArrayOutputWithContext(ctx context.Context) GroupArrayOutput

type GroupArrayInput 

type GroupArrayInput interface {
	pulumi.Input

	ToGroupArrayOutput() GroupArrayOutput
	ToGroupArrayOutputWithContext(context.Context) GroupArrayOutput
}

GroupArrayInput is an input type that accepts GroupArray and GroupArrayOutput values. You can construct a concrete instance of `GroupArrayInput` via: 

GroupArray{ GroupArgs{...} }

type GroupArrayOutput 

type GroupArrayOutput struct{ *pulumi.OutputState }

func (GroupArrayOutput) ElementType 

func (GroupArrayOutput) ElementType() reflect.Type

func (GroupArrayOutput) Index 

func (o GroupArrayOutput) Index(i pulumi.IntInput) GroupOutput

func (GroupArrayOutput) ToGroupArrayOutput 

func (o GroupArrayOutput) ToGroupArrayOutput() GroupArrayOutput

func (GroupArrayOutput) ToGroupArrayOutputWithContext 

func (o GroupArrayOutput) ToGroupArrayOutputWithContext(ctx context.Context) GroupArrayOutput

type GroupDynamicMembership added in v5.12.0 

type GroupDynamicMembership struct {
	// Whether rule processing is "On" (true) or "Paused" (false).
	Enabled bool `pulumi:"enabled"`
	// The rule that determines membership of this group. For more information, see official documentation on [membership rules syntax](https://docs.microsoft.com/en-gb/azure/active-directory/enterprise-users/groups-dynamic-membership).
	Rule string `pulumi:"rule"`
}

type GroupDynamicMembershipArgs added in v5.12.0 

type GroupDynamicMembershipArgs struct {
	// Whether rule processing is "On" (true) or "Paused" (false).
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The rule that determines membership of this group. For more information, see official documentation on [membership rules syntax](https://docs.microsoft.com/en-gb/azure/active-directory/enterprise-users/groups-dynamic-membership).
	Rule pulumi.StringInput `pulumi:"rule"`
}

func (GroupDynamicMembershipArgs) ElementType added in v5.12.0 

func (GroupDynamicMembershipArgs) ElementType() reflect.Type

func (GroupDynamicMembershipArgs) ToGroupDynamicMembershipOutput added in v5.12.0 

func (i GroupDynamicMembershipArgs) ToGroupDynamicMembershipOutput() GroupDynamicMembershipOutput

func (GroupDynamicMembershipArgs) ToGroupDynamicMembershipOutputWithContext added in v5.12.0 

func (i GroupDynamicMembershipArgs) ToGroupDynamicMembershipOutputWithContext(ctx context.Context) GroupDynamicMembershipOutput

func (GroupDynamicMembershipArgs) ToGroupDynamicMembershipPtrOutput added in v5.12.0 

func (i GroupDynamicMembershipArgs) ToGroupDynamicMembershipPtrOutput() GroupDynamicMembershipPtrOutput

func (GroupDynamicMembershipArgs) ToGroupDynamicMembershipPtrOutputWithContext added in v5.12.0 

func (i GroupDynamicMembershipArgs) ToGroupDynamicMembershipPtrOutputWithContext(ctx context.Context) GroupDynamicMembershipPtrOutput

type GroupDynamicMembershipInput added in v5.12.0 

type GroupDynamicMembershipInput interface {
	pulumi.Input

	ToGroupDynamicMembershipOutput() GroupDynamicMembershipOutput
	ToGroupDynamicMembershipOutputWithContext(context.Context) GroupDynamicMembershipOutput
}

GroupDynamicMembershipInput is an input type that accepts GroupDynamicMembershipArgs and GroupDynamicMembershipOutput values. You can construct a concrete instance of `GroupDynamicMembershipInput` via: 

GroupDynamicMembershipArgs{...}

type GroupDynamicMembershipOutput added in v5.12.0 

type GroupDynamicMembershipOutput struct{ *pulumi.OutputState }

func (GroupDynamicMembershipOutput) ElementType added in v5.12.0 

func (GroupDynamicMembershipOutput) ElementType() reflect.Type

func (GroupDynamicMembershipOutput) Enabled added in v5.12.0 

func (o GroupDynamicMembershipOutput) Enabled() pulumi.BoolOutput

Whether rule processing is "On" (true) or "Paused" (false).

func (GroupDynamicMembershipOutput) Rule added in v5.12.0 

func (o GroupDynamicMembershipOutput) Rule() pulumi.StringOutput

The rule that determines membership of this group. For more information, see official documentation on [membership rules syntax](https://docs.microsoft.com/en-gb/azure/active-directory/enterprise-users/groups-dynamic-membership).

func (GroupDynamicMembershipOutput) ToGroupDynamicMembershipOutput added in v5.12.0 

func (o GroupDynamicMembershipOutput) ToGroupDynamicMembershipOutput() GroupDynamicMembershipOutput

func (GroupDynamicMembershipOutput) ToGroupDynamicMembershipOutputWithContext added in v5.12.0 

func (o GroupDynamicMembershipOutput) ToGroupDynamicMembershipOutputWithContext(ctx context.Context) GroupDynamicMembershipOutput

func (GroupDynamicMembershipOutput) ToGroupDynamicMembershipPtrOutput added in v5.12.0 

func (o GroupDynamicMembershipOutput) ToGroupDynamicMembershipPtrOutput() GroupDynamicMembershipPtrOutput

func (GroupDynamicMembershipOutput) ToGroupDynamicMembershipPtrOutputWithContext added in v5.12.0 

func (o GroupDynamicMembershipOutput) ToGroupDynamicMembershipPtrOutputWithContext(ctx context.Context) GroupDynamicMembershipPtrOutput

type GroupDynamicMembershipPtrInput added in v5.12.0 

type GroupDynamicMembershipPtrInput interface {
	pulumi.Input

	ToGroupDynamicMembershipPtrOutput() GroupDynamicMembershipPtrOutput
	ToGroupDynamicMembershipPtrOutputWithContext(context.Context) GroupDynamicMembershipPtrOutput
}

GroupDynamicMembershipPtrInput is an input type that accepts GroupDynamicMembershipArgs, GroupDynamicMembershipPtr and GroupDynamicMembershipPtrOutput values. You can construct a concrete instance of `GroupDynamicMembershipPtrInput` via: 

        GroupDynamicMembershipArgs{...}

or:

        nil

func GroupDynamicMembershipPtr added in v5.12.0 

func GroupDynamicMembershipPtr(v *GroupDynamicMembershipArgs) GroupDynamicMembershipPtrInput

type GroupDynamicMembershipPtrOutput added in v5.12.0 

type GroupDynamicMembershipPtrOutput struct{ *pulumi.OutputState }

func (GroupDynamicMembershipPtrOutput) Elem added in v5.12.0 

func (o GroupDynamicMembershipPtrOutput) Elem() GroupDynamicMembershipOutput

func (GroupDynamicMembershipPtrOutput) ElementType added in v5.12.0 

func (GroupDynamicMembershipPtrOutput) ElementType() reflect.Type

func (GroupDynamicMembershipPtrOutput) Enabled added in v5.12.0 

func (o GroupDynamicMembershipPtrOutput) Enabled() pulumi.BoolPtrOutput

Whether rule processing is "On" (true) or "Paused" (false).

func (GroupDynamicMembershipPtrOutput) Rule added in v5.12.0 

func (o GroupDynamicMembershipPtrOutput) Rule() pulumi.StringPtrOutput

The rule that determines membership of this group. For more information, see official documentation on [membership rules syntax](https://docs.microsoft.com/en-gb/azure/active-directory/enterprise-users/groups-dynamic-membership).

func (GroupDynamicMembershipPtrOutput) ToGroupDynamicMembershipPtrOutput added in v5.12.0 

func (o GroupDynamicMembershipPtrOutput) ToGroupDynamicMembershipPtrOutput() GroupDynamicMembershipPtrOutput

func (GroupDynamicMembershipPtrOutput) ToGroupDynamicMembershipPtrOutputWithContext added in v5.12.0 

func (o GroupDynamicMembershipPtrOutput) ToGroupDynamicMembershipPtrOutputWithContext(ctx context.Context) GroupDynamicMembershipPtrOutput

type GroupInput 

type GroupInput interface {
	pulumi.Input

	ToGroupOutput() GroupOutput
	ToGroupOutputWithContext(ctx context.Context) GroupOutput
}

type GroupMap 

type GroupMap map[string]GroupInput

func (GroupMap) ElementType 

func (GroupMap) ElementType() reflect.Type

func (GroupMap) ToGroupMapOutput 

func (i GroupMap) ToGroupMapOutput() GroupMapOutput

func (GroupMap) ToGroupMapOutputWithContext 

func (i GroupMap) ToGroupMapOutputWithContext(ctx context.Context) GroupMapOutput

type GroupMapInput 

type GroupMapInput interface {
	pulumi.Input

	ToGroupMapOutput() GroupMapOutput
	ToGroupMapOutputWithContext(context.Context) GroupMapOutput
}

GroupMapInput is an input type that accepts GroupMap and GroupMapOutput values. You can construct a concrete instance of `GroupMapInput` via: 

GroupMap{ "key": GroupArgs{...} }

type GroupMapOutput 

type GroupMapOutput struct{ *pulumi.OutputState }

func (GroupMapOutput) ElementType 

func (GroupMapOutput) ElementType() reflect.Type

func (GroupMapOutput) MapIndex 

func (o GroupMapOutput) MapIndex(k pulumi.StringInput) GroupOutput

func (GroupMapOutput) ToGroupMapOutput 

func (o GroupMapOutput) ToGroupMapOutput() GroupMapOutput

func (GroupMapOutput) ToGroupMapOutputWithContext 

func (o GroupMapOutput) ToGroupMapOutputWithContext(ctx context.Context) GroupMapOutput

type GroupMember 

type GroupMember struct {
	pulumi.CustomResourceState

	// The object ID of the group you want to add the member to. Changing this forces a new resource to be created.
	GroupObjectId pulumi.StringOutput `pulumi:"groupObjectId"`
	// The object ID of the principal you want to add as a member to the group. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringOutput `pulumi:"memberObjectId"`
}

Manages a single group membership within Azure Active Directory.

> **Warning** Do not use this resource at the same time as the `members` property of the `Group` resource for the same group. Doing so will cause a conflict and group members will be removed.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `Group.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Groups Administrator`, `User Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleUser, err := azuread.LookupUser(ctx, &GetUserArgs{
			UserPrincipalName: pulumi.StringRef("jdoe@hashicorp.com"),
		}, nil)
		if err != nil {
			return err
		}
		exampleGroup, err := azuread.NewGroup(ctx, "exampleGroup", &azuread.GroupArgs{
			DisplayName:     pulumi.String("my_group"),
			SecurityEnabled: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewGroupMember(ctx, "exampleGroupMember", &azuread.GroupMemberArgs{
			GroupObjectId:  exampleGroup.ID(),
			MemberObjectId: pulumi.String(exampleUser.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Group members can be imported using the object ID of the group and the object ID of the member, e.g.

```sh 

$ pulumi import azuread:index/groupMember:GroupMember test 00000000-0000-0000-0000-000000000000/member/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the Azure AD Group Object ID and the target Member Object ID in the format `{GroupObjectID}/member/{MemberObjectID}`.

func GetGroupMember 

func GetGroupMember(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *GroupMemberState, opts ...pulumi.ResourceOption) (*GroupMember, error)

GetGroupMember gets an existing GroupMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewGroupMember 

func NewGroupMember(ctx *pulumi.Context,
	name string, args *GroupMemberArgs, opts ...pulumi.ResourceOption) (*GroupMember, error)

NewGroupMember registers a new resource with the given unique name, arguments, and options.

func (*GroupMember) ElementType 

func (*GroupMember) ElementType() reflect.Type

func (*GroupMember) ToGroupMemberOutput 

func (i *GroupMember) ToGroupMemberOutput() GroupMemberOutput

func (*GroupMember) ToGroupMemberOutputWithContext 

func (i *GroupMember) ToGroupMemberOutputWithContext(ctx context.Context) GroupMemberOutput

type GroupMemberArgs 

type GroupMemberArgs struct {
	// The object ID of the group you want to add the member to. Changing this forces a new resource to be created.
	GroupObjectId pulumi.StringInput
	// The object ID of the principal you want to add as a member to the group. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringInput
}

The set of arguments for constructing a GroupMember resource.

func (GroupMemberArgs) ElementType 

func (GroupMemberArgs) ElementType() reflect.Type

type GroupMemberArray 

type GroupMemberArray []GroupMemberInput

func (GroupMemberArray) ElementType 

func (GroupMemberArray) ElementType() reflect.Type

func (GroupMemberArray) ToGroupMemberArrayOutput 

func (i GroupMemberArray) ToGroupMemberArrayOutput() GroupMemberArrayOutput

func (GroupMemberArray) ToGroupMemberArrayOutputWithContext 

func (i GroupMemberArray) ToGroupMemberArrayOutputWithContext(ctx context.Context) GroupMemberArrayOutput

type GroupMemberArrayInput 

type GroupMemberArrayInput interface {
	pulumi.Input

	ToGroupMemberArrayOutput() GroupMemberArrayOutput
	ToGroupMemberArrayOutputWithContext(context.Context) GroupMemberArrayOutput
}

GroupMemberArrayInput is an input type that accepts GroupMemberArray and GroupMemberArrayOutput values. You can construct a concrete instance of `GroupMemberArrayInput` via: 

GroupMemberArray{ GroupMemberArgs{...} }

type GroupMemberArrayOutput 

type GroupMemberArrayOutput struct{ *pulumi.OutputState }

func (GroupMemberArrayOutput) ElementType 

func (GroupMemberArrayOutput) ElementType() reflect.Type

func (GroupMemberArrayOutput) Index 

func (o GroupMemberArrayOutput) Index(i pulumi.IntInput) GroupMemberOutput

func (GroupMemberArrayOutput) ToGroupMemberArrayOutput 

func (o GroupMemberArrayOutput) ToGroupMemberArrayOutput() GroupMemberArrayOutput

func (GroupMemberArrayOutput) ToGroupMemberArrayOutputWithContext 

func (o GroupMemberArrayOutput) ToGroupMemberArrayOutputWithContext(ctx context.Context) GroupMemberArrayOutput

type GroupMemberInput 

type GroupMemberInput interface {
	pulumi.Input

	ToGroupMemberOutput() GroupMemberOutput
	ToGroupMemberOutputWithContext(ctx context.Context) GroupMemberOutput
}

type GroupMemberMap 

type GroupMemberMap map[string]GroupMemberInput

func (GroupMemberMap) ElementType 

func (GroupMemberMap) ElementType() reflect.Type

func (GroupMemberMap) ToGroupMemberMapOutput 

func (i GroupMemberMap) ToGroupMemberMapOutput() GroupMemberMapOutput

func (GroupMemberMap) ToGroupMemberMapOutputWithContext 

func (i GroupMemberMap) ToGroupMemberMapOutputWithContext(ctx context.Context) GroupMemberMapOutput

type GroupMemberMapInput 

type GroupMemberMapInput interface {
	pulumi.Input

	ToGroupMemberMapOutput() GroupMemberMapOutput
	ToGroupMemberMapOutputWithContext(context.Context) GroupMemberMapOutput
}

GroupMemberMapInput is an input type that accepts GroupMemberMap and GroupMemberMapOutput values. You can construct a concrete instance of `GroupMemberMapInput` via: 

GroupMemberMap{ "key": GroupMemberArgs{...} }

type GroupMemberMapOutput 

type GroupMemberMapOutput struct{ *pulumi.OutputState }

func (GroupMemberMapOutput) ElementType 

func (GroupMemberMapOutput) ElementType() reflect.Type

func (GroupMemberMapOutput) MapIndex 

func (o GroupMemberMapOutput) MapIndex(k pulumi.StringInput) GroupMemberOutput

func (GroupMemberMapOutput) ToGroupMemberMapOutput 

func (o GroupMemberMapOutput) ToGroupMemberMapOutput() GroupMemberMapOutput

func (GroupMemberMapOutput) ToGroupMemberMapOutputWithContext 

func (o GroupMemberMapOutput) ToGroupMemberMapOutputWithContext(ctx context.Context) GroupMemberMapOutput

type GroupMemberOutput 

type GroupMemberOutput struct{ *pulumi.OutputState }

func (GroupMemberOutput) ElementType 

func (GroupMemberOutput) ElementType() reflect.Type

func (GroupMemberOutput) GroupObjectId added in v5.22.0 

func (o GroupMemberOutput) GroupObjectId() pulumi.StringOutput

The object ID of the group you want to add the member to. Changing this forces a new resource to be created.

func (GroupMemberOutput) MemberObjectId added in v5.22.0 

func (o GroupMemberOutput) MemberObjectId() pulumi.StringOutput

The object ID of the principal you want to add as a member to the group. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.

func (GroupMemberOutput) ToGroupMemberOutput 

func (o GroupMemberOutput) ToGroupMemberOutput() GroupMemberOutput

func (GroupMemberOutput) ToGroupMemberOutputWithContext 

func (o GroupMemberOutput) ToGroupMemberOutputWithContext(ctx context.Context) GroupMemberOutput

type GroupMemberState 

type GroupMemberState struct {
	// The object ID of the group you want to add the member to. Changing this forces a new resource to be created.
	GroupObjectId pulumi.StringPtrInput
	// The object ID of the principal you want to add as a member to the group. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created.
	MemberObjectId pulumi.StringPtrInput
}

func (GroupMemberState) ElementType 

func (GroupMemberState) ElementType() reflect.Type

type GroupOutput 

type GroupOutput struct{ *pulumi.OutputState }

func (GroupOutput) AssignableToRole added in v5.22.0 

func (o GroupOutput) AssignableToRole() pulumi.BoolPtrOutput

Indicates whether this group can be assigned to an Azure Active Directory role. Can only be `true` for security-enabled groups. Changing this forces a new resource to be created.

func (GroupOutput) AutoSubscribeNewMembers added in v5.22.0 

func (o GroupOutput) AutoSubscribeNewMembers() pulumi.BoolOutput

Indicates whether new members added to the group will be auto-subscribed to receive email notifications. Can only be set for Unified groups.

func (GroupOutput) Behaviors added in v5.22.0 

func (o GroupOutput) Behaviors() pulumi.StringArrayOutput

A set of behaviors for a Microsoft 365 group. Possible values are `AllowOnlyMembersToPost`, `HideGroupInOutlook`, `SubscribeMembersToCalendarEventsDisabled`, `SubscribeNewGroupMembers` and `WelcomeEmailDisabled`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for more details. Changing this forces a new resource to be created.

func (GroupOutput) Description added in v5.22.0 

func (o GroupOutput) Description() pulumi.StringPtrOutput

The description for the group.

func (GroupOutput) DisplayName added in v5.22.0 

func (o GroupOutput) DisplayName() pulumi.StringOutput

The display name for the group.

func (GroupOutput) DynamicMembership added in v5.22.0 

func (o GroupOutput) DynamicMembership() GroupDynamicMembershipPtrOutput

A `dynamicMembership` block as documented below. Required when `types` contains `DynamicMembership`. Cannot be used with the `members` property.

func (GroupOutput) ElementType 

func (GroupOutput) ElementType() reflect.Type

func (GroupOutput) ExternalSendersAllowed added in v5.22.0 

func (o GroupOutput) ExternalSendersAllowed() pulumi.BoolOutput

Indicates whether people external to the organization can send messages to the group. Can only be set for Unified groups.

func (GroupOutput) HideFromAddressLists added in v5.22.0 

func (o GroupOutput) HideFromAddressLists() pulumi.BoolOutput

Indicates whether the group is displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups. Can only be set for Unified groups.

func (GroupOutput) HideFromOutlookClients added in v5.22.0 

func (o GroupOutput) HideFromOutlookClients() pulumi.BoolOutput

Indicates whether the group is displayed in Outlook clients, such as Outlook for Windows and Outlook on the web. Can only be set for Unified groups.

func (GroupOutput) Mail added in v5.22.0 

func (o GroupOutput) Mail() pulumi.StringOutput

The SMTP address for the group.

func (GroupOutput) MailEnabled added in v5.22.0 

func (o GroupOutput) MailEnabled() pulumi.BoolPtrOutput

Whether the group is a mail enabled, with a shared group mailbox. At least one of `mailEnabled` or `securityEnabled` must be specified. Only Microsoft 365 groups can be mail enabled (see the `types` property).

func (GroupOutput) MailNickname added in v5.22.0 

func (o GroupOutput) MailNickname() pulumi.StringOutput

The mail alias for the group, unique in the organisation. Required for mail-enabled groups. Changing this forces a new resource to be created.

func (GroupOutput) Members added in v5.22.0 

func (o GroupOutput) Members() pulumi.StringArrayOutput

A set of members who should be present in this group. Supported object types are Users, Groups or Service Principals. Cannot be used with the `dynamicMembership` block.

func (GroupOutput) ObjectId added in v5.22.0 

func (o GroupOutput) ObjectId() pulumi.StringOutput

The object ID of the group.

func (GroupOutput) OnpremisesDomainName added in v5.22.0 

func (o GroupOutput) OnpremisesDomainName() pulumi.StringOutput

The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.

func (GroupOutput) OnpremisesNetbiosName added in v5.22.0 

func (o GroupOutput) OnpremisesNetbiosName() pulumi.StringOutput

The on-premises NetBIOS name, synchronised from the on-premises directory when Azure AD Connect is used.

func (GroupOutput) OnpremisesSamAccountName added in v5.22.0 

func (o GroupOutput) OnpremisesSamAccountName() pulumi.StringOutput

The on-premises SAM account name, synchronised from the on-premises directory when Azure AD Connect is used.

func (GroupOutput) OnpremisesSecurityIdentifier added in v5.22.0 

func (o GroupOutput) OnpremisesSecurityIdentifier() pulumi.StringOutput

The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.

func (GroupOutput) OnpremisesSyncEnabled added in v5.22.0 

func (o GroupOutput) OnpremisesSyncEnabled() pulumi.BoolOutput

Whether this group is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).

func (GroupOutput) Owners added in v5.22.0 

func (o GroupOutput) Owners() pulumi.StringArrayOutput

A set of owners who own this group. Supported object types are Users or Service Principals

func (GroupOutput) PreferredLanguage added in v5.22.0 

func (o GroupOutput) PreferredLanguage() pulumi.StringOutput

The preferred language for a Microsoft 365 group, in ISO 639-1 notation.

func (GroupOutput) PreventDuplicateNames added in v5.22.0 

func (o GroupOutput) PreventDuplicateNames() pulumi.BoolPtrOutput

If `true`, will return an error if an existing group is found with the same name. Defaults to `false`.

func (GroupOutput) ProvisioningOptions added in v5.22.0 

func (o GroupOutput) ProvisioningOptions() pulumi.StringArrayOutput

A set of provisioning options for a Microsoft 365 group. The only supported value is `Team`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for details. Changing this forces a new resource to be created.

func (GroupOutput) ProxyAddresses added in v5.22.0 

func (o GroupOutput) ProxyAddresses() pulumi.StringArrayOutput

List of email addresses for the group that direct to the same group mailbox.

func (GroupOutput) SecurityEnabled added in v5.22.0 

func (o GroupOutput) SecurityEnabled() pulumi.BoolPtrOutput

Whether the group is a security group for controlling access to in-app resources. At least one of `securityEnabled` or `mailEnabled` must be specified. A Microsoft 365 group can be security enabled _and_ mail enabled (see the `types` property).

func (GroupOutput) Theme added in v5.22.0 

func (o GroupOutput) Theme() pulumi.StringPtrOutput

The colour theme for a Microsoft 365 group. Possible values are `Blue`, `Green`, `Orange`, `Pink`, `Purple`, `Red` or `Teal`. By default, no theme is set.

func (GroupOutput) ToGroupOutput 

func (o GroupOutput) ToGroupOutput() GroupOutput

func (GroupOutput) ToGroupOutputWithContext 

func (o GroupOutput) ToGroupOutputWithContext(ctx context.Context) GroupOutput

func (GroupOutput) Types added in v5.22.0 

func (o GroupOutput) Types() pulumi.StringArrayOutput

A set of group types to configure for the group. Supported values are `DynamicMembership`, which denotes a group with dynamic membership, and `Unified`, which specifies a Microsoft 365 group. Required when `mailEnabled` is true. Changing this forces a new resource to be created.

func (GroupOutput) Visibility added in v5.22.0 

func (o GroupOutput) Visibility() pulumi.StringOutput

The group join policy and group content visibility. Possible values are `Private`, `Public`, or `Hiddenmembership`. Only Microsoft 365 groups can have `Hiddenmembership` visibility and this value must be set when the group is created. By default, security groups will receive `Private` visibility and Microsoft 365 groups will receive `Public` visibility.

type GroupState 

type GroupState struct {
	// Indicates whether this group can be assigned to an Azure Active Directory role. Can only be `true` for security-enabled groups. Changing this forces a new resource to be created.
	AssignableToRole pulumi.BoolPtrInput
	// Indicates whether new members added to the group will be auto-subscribed to receive email notifications. Can only be set for Unified groups.
	AutoSubscribeNewMembers pulumi.BoolPtrInput
	// A set of behaviors for a Microsoft 365 group. Possible values are `AllowOnlyMembersToPost`, `HideGroupInOutlook`, `SubscribeMembersToCalendarEventsDisabled`, `SubscribeNewGroupMembers` and `WelcomeEmailDisabled`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for more details. Changing this forces a new resource to be created.
	Behaviors pulumi.StringArrayInput
	// The description for the group.
	Description pulumi.StringPtrInput
	// The display name for the group.
	DisplayName pulumi.StringPtrInput
	// A `dynamicMembership` block as documented below. Required when `types` contains `DynamicMembership`. Cannot be used with the `members` property.
	DynamicMembership GroupDynamicMembershipPtrInput
	// Indicates whether people external to the organization can send messages to the group. Can only be set for Unified groups.
	ExternalSendersAllowed pulumi.BoolPtrInput
	// Indicates whether the group is displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups. Can only be set for Unified groups.
	HideFromAddressLists pulumi.BoolPtrInput
	// Indicates whether the group is displayed in Outlook clients, such as Outlook for Windows and Outlook on the web. Can only be set for Unified groups.
	HideFromOutlookClients pulumi.BoolPtrInput
	// The SMTP address for the group.
	Mail pulumi.StringPtrInput
	// Whether the group is a mail enabled, with a shared group mailbox. At least one of `mailEnabled` or `securityEnabled` must be specified. Only Microsoft 365 groups can be mail enabled (see the `types` property).
	MailEnabled pulumi.BoolPtrInput
	// The mail alias for the group, unique in the organisation. Required for mail-enabled groups. Changing this forces a new resource to be created.
	MailNickname pulumi.StringPtrInput
	// A set of members who should be present in this group. Supported object types are Users, Groups or Service Principals. Cannot be used with the `dynamicMembership` block.
	Members pulumi.StringArrayInput
	// The object ID of the group.
	ObjectId pulumi.StringPtrInput
	// The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDomainName pulumi.StringPtrInput
	// The on-premises NetBIOS name, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesNetbiosName pulumi.StringPtrInput
	// The on-premises SAM account name, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSamAccountName pulumi.StringPtrInput
	// The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSecurityIdentifier pulumi.StringPtrInput
	// Whether this group is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).
	OnpremisesSyncEnabled pulumi.BoolPtrInput
	// A set of owners who own this group. Supported object types are Users or Service Principals
	Owners pulumi.StringArrayInput
	// The preferred language for a Microsoft 365 group, in ISO 639-1 notation.
	PreferredLanguage pulumi.StringPtrInput
	// If `true`, will return an error if an existing group is found with the same name. Defaults to `false`.
	PreventDuplicateNames pulumi.BoolPtrInput
	// A set of provisioning options for a Microsoft 365 group. The only supported value is `Team`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for details. Changing this forces a new resource to be created.
	ProvisioningOptions pulumi.StringArrayInput
	// List of email addresses for the group that direct to the same group mailbox.
	ProxyAddresses pulumi.StringArrayInput
	// Whether the group is a security group for controlling access to in-app resources. At least one of `securityEnabled` or `mailEnabled` must be specified. A Microsoft 365 group can be security enabled _and_ mail enabled (see the `types` property).
	SecurityEnabled pulumi.BoolPtrInput
	// The colour theme for a Microsoft 365 group. Possible values are `Blue`, `Green`, `Orange`, `Pink`, `Purple`, `Red` or `Teal`. By default, no theme is set.
	Theme pulumi.StringPtrInput
	// A set of group types to configure for the group. Supported values are `DynamicMembership`, which denotes a group with dynamic membership, and `Unified`, which specifies a Microsoft 365 group. Required when `mailEnabled` is true. Changing this forces a new resource to be created.
	Types pulumi.StringArrayInput
	// The group join policy and group content visibility. Possible values are `Private`, `Public`, or `Hiddenmembership`. Only Microsoft 365 groups can have `Hiddenmembership` visibility and this value must be set when the group is created. By default, security groups will receive `Private` visibility and Microsoft 365 groups will receive `Public` visibility.
	Visibility pulumi.StringPtrInput
}

func (GroupState) ElementType 

func (GroupState) ElementType() reflect.Type

type Invitation added in v5.1.0 

type Invitation struct {
	pulumi.CustomResourceState

	// A `message` block as documented below, which configures the message being sent to the invited user. If this block is omitted, no message will be sent.
	Message InvitationMessagePtrOutput `pulumi:"message"`
	// The URL the user can use to redeem their invitation.
	RedeemUrl pulumi.StringOutput `pulumi:"redeemUrl"`
	// The URL that the user should be redirected to once the invitation is redeemed.
	RedirectUrl pulumi.StringOutput `pulumi:"redirectUrl"`
	// The display name of the user being invited.
	UserDisplayName pulumi.StringPtrOutput `pulumi:"userDisplayName"`
	// The email address of the user being invited.
	UserEmailAddress pulumi.StringOutput `pulumi:"userEmailAddress"`
	// Object ID of the invited user.
	UserId pulumi.StringOutput `pulumi:"userId"`
	// The user type of the user being invited. Must be one of `Guest` or `Member`. Only Global Administrators can invite users as members. Defaults to `Guest`.
	UserType pulumi.StringPtrOutput `pulumi:"userType"`
}

Manages an invitation of a guest user within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `User.Invite.All`, `User.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Guest Inviter`, `User Administrator` or `Global Administrator`

## Example Usage

*Basic example*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewInvitation(ctx, "example", &azuread.InvitationArgs{
			RedirectUrl:      pulumi.String("https://portal.azure.com"),
			UserEmailAddress: pulumi.String("jdoe@hashicorp.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Invitation with standard message*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewInvitation(ctx, "example", &azuread.InvitationArgs{
			Message: &InvitationMessageArgs{
				Language: pulumi.String("en-US"),
			},
			RedirectUrl:      pulumi.String("https://portal.azure.com"),
			UserEmailAddress: pulumi.String("jdoe@hashicorp.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Invitation with custom message body and an additional recipient*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewInvitation(ctx, "example", &azuread.InvitationArgs{
			Message: &InvitationMessageArgs{
				AdditionalRecipients: pulumi.String("aaliceberg@hashicorp.com"),
				Body:                 pulumi.String("Hello there! You are invited to join my Azure tenant!"),
			},
			RedirectUrl:      pulumi.String("https://portal.azure.com"),
			UserDisplayName:  pulumi.String("Bob Bobson"),
			UserEmailAddress: pulumi.String("bbobson@hashicorp.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

This resource does not support importing.

func GetInvitation added in v5.1.0 

func GetInvitation(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *InvitationState, opts ...pulumi.ResourceOption) (*Invitation, error)

GetInvitation gets an existing Invitation resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewInvitation added in v5.1.0 

func NewInvitation(ctx *pulumi.Context,
	name string, args *InvitationArgs, opts ...pulumi.ResourceOption) (*Invitation, error)

NewInvitation registers a new resource with the given unique name, arguments, and options.

func (*Invitation) ElementType added in v5.1.0 

func (*Invitation) ElementType() reflect.Type

func (*Invitation) ToInvitationOutput added in v5.1.0 

func (i *Invitation) ToInvitationOutput() InvitationOutput

func (*Invitation) ToInvitationOutputWithContext added in v5.1.0 

func (i *Invitation) ToInvitationOutputWithContext(ctx context.Context) InvitationOutput

type InvitationArgs added in v5.1.0 

type InvitationArgs struct {
	// A `message` block as documented below, which configures the message being sent to the invited user. If this block is omitted, no message will be sent.
	Message InvitationMessagePtrInput
	// The URL that the user should be redirected to once the invitation is redeemed.
	RedirectUrl pulumi.StringInput
	// The display name of the user being invited.
	UserDisplayName pulumi.StringPtrInput
	// The email address of the user being invited.
	UserEmailAddress pulumi.StringInput
	// The user type of the user being invited. Must be one of `Guest` or `Member`. Only Global Administrators can invite users as members. Defaults to `Guest`.
	UserType pulumi.StringPtrInput
}

The set of arguments for constructing a Invitation resource.

func (InvitationArgs) ElementType added in v5.1.0 

func (InvitationArgs) ElementType() reflect.Type

type InvitationArray added in v5.1.0 

type InvitationArray []InvitationInput

func (InvitationArray) ElementType added in v5.1.0 

func (InvitationArray) ElementType() reflect.Type

func (InvitationArray) ToInvitationArrayOutput added in v5.1.0 

func (i InvitationArray) ToInvitationArrayOutput() InvitationArrayOutput

func (InvitationArray) ToInvitationArrayOutputWithContext added in v5.1.0 

func (i InvitationArray) ToInvitationArrayOutputWithContext(ctx context.Context) InvitationArrayOutput

type InvitationArrayInput added in v5.1.0 

type InvitationArrayInput interface {
	pulumi.Input

	ToInvitationArrayOutput() InvitationArrayOutput
	ToInvitationArrayOutputWithContext(context.Context) InvitationArrayOutput
}

InvitationArrayInput is an input type that accepts InvitationArray and InvitationArrayOutput values. You can construct a concrete instance of `InvitationArrayInput` via: 

InvitationArray{ InvitationArgs{...} }

type InvitationArrayOutput added in v5.1.0 

type InvitationArrayOutput struct{ *pulumi.OutputState }

func (InvitationArrayOutput) ElementType added in v5.1.0 

func (InvitationArrayOutput) ElementType() reflect.Type

func (InvitationArrayOutput) Index added in v5.1.0 

func (o InvitationArrayOutput) Index(i pulumi.IntInput) InvitationOutput

func (InvitationArrayOutput) ToInvitationArrayOutput added in v5.1.0 

func (o InvitationArrayOutput) ToInvitationArrayOutput() InvitationArrayOutput

func (InvitationArrayOutput) ToInvitationArrayOutputWithContext added in v5.1.0 

func (o InvitationArrayOutput) ToInvitationArrayOutputWithContext(ctx context.Context) InvitationArrayOutput

type InvitationInput added in v5.1.0 

type InvitationInput interface {
	pulumi.Input

	ToInvitationOutput() InvitationOutput
	ToInvitationOutputWithContext(ctx context.Context) InvitationOutput
}

type InvitationMap added in v5.1.0 

type InvitationMap map[string]InvitationInput

func (InvitationMap) ElementType added in v5.1.0 

func (InvitationMap) ElementType() reflect.Type

func (InvitationMap) ToInvitationMapOutput added in v5.1.0 

func (i InvitationMap) ToInvitationMapOutput() InvitationMapOutput

func (InvitationMap) ToInvitationMapOutputWithContext added in v5.1.0 

func (i InvitationMap) ToInvitationMapOutputWithContext(ctx context.Context) InvitationMapOutput

type InvitationMapInput added in v5.1.0 

type InvitationMapInput interface {
	pulumi.Input

	ToInvitationMapOutput() InvitationMapOutput
	ToInvitationMapOutputWithContext(context.Context) InvitationMapOutput
}

InvitationMapInput is an input type that accepts InvitationMap and InvitationMapOutput values. You can construct a concrete instance of `InvitationMapInput` via: 

InvitationMap{ "key": InvitationArgs{...} }

type InvitationMapOutput added in v5.1.0 

type InvitationMapOutput struct{ *pulumi.OutputState }

func (InvitationMapOutput) ElementType added in v5.1.0 

func (InvitationMapOutput) ElementType() reflect.Type

func (InvitationMapOutput) MapIndex added in v5.1.0 

func (o InvitationMapOutput) MapIndex(k pulumi.StringInput) InvitationOutput

func (InvitationMapOutput) ToInvitationMapOutput added in v5.1.0 

func (o InvitationMapOutput) ToInvitationMapOutput() InvitationMapOutput

func (InvitationMapOutput) ToInvitationMapOutputWithContext added in v5.1.0 

func (o InvitationMapOutput) ToInvitationMapOutputWithContext(ctx context.Context) InvitationMapOutput

type InvitationMessage added in v5.1.0 

type InvitationMessage struct {
	// Email addresses of additional recipients the invitation message should be sent to. Only 1 additional recipient is currently supported by Azure.
	AdditionalRecipients *string `pulumi:"additionalRecipients"`
	// Customized message body you want to send if you don't want to send the default message. Cannot be specified with `language`.
	Body *string `pulumi:"body"`
	// The language you want to send the default message in. The value specified must be in ISO 639 format. Defaults to `en-US`. Cannot be specified with `body`.
	Language *string `pulumi:"language"`
}

type InvitationMessageArgs added in v5.1.0 

type InvitationMessageArgs struct {
	// Email addresses of additional recipients the invitation message should be sent to. Only 1 additional recipient is currently supported by Azure.
	AdditionalRecipients pulumi.StringPtrInput `pulumi:"additionalRecipients"`
	// Customized message body you want to send if you don't want to send the default message. Cannot be specified with `language`.
	Body pulumi.StringPtrInput `pulumi:"body"`
	// The language you want to send the default message in. The value specified must be in ISO 639 format. Defaults to `en-US`. Cannot be specified with `body`.
	Language pulumi.StringPtrInput `pulumi:"language"`
}

func (InvitationMessageArgs) ElementType added in v5.1.0 

func (InvitationMessageArgs) ElementType() reflect.Type

func (InvitationMessageArgs) ToInvitationMessageOutput added in v5.1.0 

func (i InvitationMessageArgs) ToInvitationMessageOutput() InvitationMessageOutput

func (InvitationMessageArgs) ToInvitationMessageOutputWithContext added in v5.1.0 

func (i InvitationMessageArgs) ToInvitationMessageOutputWithContext(ctx context.Context) InvitationMessageOutput

func (InvitationMessageArgs) ToInvitationMessagePtrOutput added in v5.1.0 

func (i InvitationMessageArgs) ToInvitationMessagePtrOutput() InvitationMessagePtrOutput

func (InvitationMessageArgs) ToInvitationMessagePtrOutputWithContext added in v5.1.0 

func (i InvitationMessageArgs) ToInvitationMessagePtrOutputWithContext(ctx context.Context) InvitationMessagePtrOutput

type InvitationMessageInput added in v5.1.0 

type InvitationMessageInput interface {
	pulumi.Input

	ToInvitationMessageOutput() InvitationMessageOutput
	ToInvitationMessageOutputWithContext(context.Context) InvitationMessageOutput
}

InvitationMessageInput is an input type that accepts InvitationMessageArgs and InvitationMessageOutput values. You can construct a concrete instance of `InvitationMessageInput` via: 

InvitationMessageArgs{...}

type InvitationMessageOutput added in v5.1.0 

type InvitationMessageOutput struct{ *pulumi.OutputState }

func (InvitationMessageOutput) AdditionalRecipients added in v5.1.0 

func (o InvitationMessageOutput) AdditionalRecipients() pulumi.StringPtrOutput

Email addresses of additional recipients the invitation message should be sent to. Only 1 additional recipient is currently supported by Azure.

func (InvitationMessageOutput) Body added in v5.1.0 

func (o InvitationMessageOutput) Body() pulumi.StringPtrOutput

Customized message body you want to send if you don't want to send the default message. Cannot be specified with `language`.

func (InvitationMessageOutput) ElementType added in v5.1.0 

func (InvitationMessageOutput) ElementType() reflect.Type

func (InvitationMessageOutput) Language added in v5.1.0 

func (o InvitationMessageOutput) Language() pulumi.StringPtrOutput

The language you want to send the default message in. The value specified must be in ISO 639 format. Defaults to `en-US`. Cannot be specified with `body`.

func (InvitationMessageOutput) ToInvitationMessageOutput added in v5.1.0 

func (o InvitationMessageOutput) ToInvitationMessageOutput() InvitationMessageOutput

func (InvitationMessageOutput) ToInvitationMessageOutputWithContext added in v5.1.0 

func (o InvitationMessageOutput) ToInvitationMessageOutputWithContext(ctx context.Context) InvitationMessageOutput

func (InvitationMessageOutput) ToInvitationMessagePtrOutput added in v5.1.0 

func (o InvitationMessageOutput) ToInvitationMessagePtrOutput() InvitationMessagePtrOutput

func (InvitationMessageOutput) ToInvitationMessagePtrOutputWithContext added in v5.1.0 

func (o InvitationMessageOutput) ToInvitationMessagePtrOutputWithContext(ctx context.Context) InvitationMessagePtrOutput

type InvitationMessagePtrInput added in v5.1.0 

type InvitationMessagePtrInput interface {
	pulumi.Input

	ToInvitationMessagePtrOutput() InvitationMessagePtrOutput
	ToInvitationMessagePtrOutputWithContext(context.Context) InvitationMessagePtrOutput
}

InvitationMessagePtrInput is an input type that accepts InvitationMessageArgs, InvitationMessagePtr and InvitationMessagePtrOutput values. You can construct a concrete instance of `InvitationMessagePtrInput` via: 

        InvitationMessageArgs{...}

or:

        nil

func InvitationMessagePtr added in v5.1.0 

func InvitationMessagePtr(v *InvitationMessageArgs) InvitationMessagePtrInput

type InvitationMessagePtrOutput added in v5.1.0 

type InvitationMessagePtrOutput struct{ *pulumi.OutputState }

func (InvitationMessagePtrOutput) AdditionalRecipients added in v5.1.0 

func (o InvitationMessagePtrOutput) AdditionalRecipients() pulumi.StringPtrOutput

Email addresses of additional recipients the invitation message should be sent to. Only 1 additional recipient is currently supported by Azure.

func (InvitationMessagePtrOutput) Body added in v5.1.0 

func (o InvitationMessagePtrOutput) Body() pulumi.StringPtrOutput

Customized message body you want to send if you don't want to send the default message. Cannot be specified with `language`.

func (InvitationMessagePtrOutput) Elem added in v5.1.0 

func (o InvitationMessagePtrOutput) Elem() InvitationMessageOutput

func (InvitationMessagePtrOutput) ElementType added in v5.1.0 

func (InvitationMessagePtrOutput) ElementType() reflect.Type

func (InvitationMessagePtrOutput) Language added in v5.1.0 

func (o InvitationMessagePtrOutput) Language() pulumi.StringPtrOutput

The language you want to send the default message in. The value specified must be in ISO 639 format. Defaults to `en-US`. Cannot be specified with `body`.

func (InvitationMessagePtrOutput) ToInvitationMessagePtrOutput added in v5.1.0 

func (o InvitationMessagePtrOutput) ToInvitationMessagePtrOutput() InvitationMessagePtrOutput

func (InvitationMessagePtrOutput) ToInvitationMessagePtrOutputWithContext added in v5.1.0 

func (o InvitationMessagePtrOutput) ToInvitationMessagePtrOutputWithContext(ctx context.Context) InvitationMessagePtrOutput

type InvitationOutput added in v5.1.0 

type InvitationOutput struct{ *pulumi.OutputState }

func (InvitationOutput) ElementType added in v5.1.0 

func (InvitationOutput) ElementType() reflect.Type

func (InvitationOutput) Message added in v5.22.0 

func (o InvitationOutput) Message() InvitationMessagePtrOutput

A `message` block as documented below, which configures the message being sent to the invited user. If this block is omitted, no message will be sent.

func (InvitationOutput) RedeemUrl added in v5.22.0 

func (o InvitationOutput) RedeemUrl() pulumi.StringOutput

The URL the user can use to redeem their invitation.

func (InvitationOutput) RedirectUrl added in v5.22.0 

func (o InvitationOutput) RedirectUrl() pulumi.StringOutput

The URL that the user should be redirected to once the invitation is redeemed.

func (InvitationOutput) ToInvitationOutput added in v5.1.0 

func (o InvitationOutput) ToInvitationOutput() InvitationOutput

func (InvitationOutput) ToInvitationOutputWithContext added in v5.1.0 

func (o InvitationOutput) ToInvitationOutputWithContext(ctx context.Context) InvitationOutput

func (InvitationOutput) UserDisplayName added in v5.22.0 

func (o InvitationOutput) UserDisplayName() pulumi.StringPtrOutput

The display name of the user being invited.

func (InvitationOutput) UserEmailAddress added in v5.22.0 

func (o InvitationOutput) UserEmailAddress() pulumi.StringOutput

The email address of the user being invited.

func (InvitationOutput) UserId added in v5.22.0 

func (o InvitationOutput) UserId() pulumi.StringOutput

Object ID of the invited user.

func (InvitationOutput) UserType added in v5.22.0 

func (o InvitationOutput) UserType() pulumi.StringPtrOutput

The user type of the user being invited. Must be one of `Guest` or `Member`. Only Global Administrators can invite users as members. Defaults to `Guest`.

type InvitationState added in v5.1.0 

type InvitationState struct {
	// A `message` block as documented below, which configures the message being sent to the invited user. If this block is omitted, no message will be sent.
	Message InvitationMessagePtrInput
	// The URL the user can use to redeem their invitation.
	RedeemUrl pulumi.StringPtrInput
	// The URL that the user should be redirected to once the invitation is redeemed.
	RedirectUrl pulumi.StringPtrInput
	// The display name of the user being invited.
	UserDisplayName pulumi.StringPtrInput
	// The email address of the user being invited.
	UserEmailAddress pulumi.StringPtrInput
	// Object ID of the invited user.
	UserId pulumi.StringPtrInput
	// The user type of the user being invited. Must be one of `Guest` or `Member`. Only Global Administrators can invite users as members. Defaults to `Guest`.
	UserType pulumi.StringPtrInput
}

func (InvitationState) ElementType added in v5.1.0 

func (InvitationState) ElementType() reflect.Type

type LookupAdministrativeUnitArgs added in v5.10.0 

type LookupAdministrativeUnitArgs struct {
	// Specifies the display name of the administrative unit.
	DisplayName *string `pulumi:"displayName"`
	// Specifies the object ID of the administrative unit.
	ObjectId *string `pulumi:"objectId"`
}

A collection of arguments for invoking getAdministrativeUnit.

type LookupAdministrativeUnitOutputArgs added in v5.10.0 

type LookupAdministrativeUnitOutputArgs struct {
	// Specifies the display name of the administrative unit.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Specifies the object ID of the administrative unit.
	ObjectId pulumi.StringPtrInput `pulumi:"objectId"`
}

A collection of arguments for invoking getAdministrativeUnit.

func (LookupAdministrativeUnitOutputArgs) ElementType added in v5.10.0 

func (LookupAdministrativeUnitOutputArgs) ElementType() reflect.Type

type LookupAdministrativeUnitResult added in v5.10.0 

type LookupAdministrativeUnitResult struct {
	// The description of the administrative unit.
	Description string `pulumi:"description"`
	// The display name of the administrative unit.
	DisplayName string `pulumi:"displayName"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// A list of object IDs of members who are present in this administrative unit.
	Members []string `pulumi:"members"`
	// The object ID of the administrative unit.
	ObjectId string `pulumi:"objectId"`
	// Whether the administrative unit _and_ its members are hidden or publicly viewable in the directory. One of: `Hiddenmembership` or `Public`.
	Visibility string `pulumi:"visibility"`
}

A collection of values returned by getAdministrativeUnit.

func LookupAdministrativeUnit added in v5.10.0 

func LookupAdministrativeUnit(ctx *pulumi.Context, args *LookupAdministrativeUnitArgs, opts ...pulumi.InvokeOption) (*LookupAdministrativeUnitResult, error)

Gets information about an adminisrative unit in Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `AdministrativeUnit.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage ### By Group Display Name)

*Look up by display name* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupAdministrativeUnit(ctx, &GetAdministrativeUnitArgs{
			DisplayName: pulumi.StringRef("Example-AU"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up by object ID* ```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupAdministrativeUnit(ctx, &GetAdministrativeUnitArgs{
			ObjectId: pulumi.StringRef("00000000-0000-0000-0000-000000000000"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupAdministrativeUnitResultOutput added in v5.10.0 

type LookupAdministrativeUnitResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getAdministrativeUnit.

func LookupAdministrativeUnitOutput added in v5.10.0 

func LookupAdministrativeUnitOutput(ctx *pulumi.Context, args LookupAdministrativeUnitOutputArgs, opts ...pulumi.InvokeOption) LookupAdministrativeUnitResultOutput

func (LookupAdministrativeUnitResultOutput) Description added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) Description() pulumi.StringOutput

The description of the administrative unit.

func (LookupAdministrativeUnitResultOutput) DisplayName added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) DisplayName() pulumi.StringOutput

The display name of the administrative unit.

func (LookupAdministrativeUnitResultOutput) ElementType added in v5.10.0 

func (LookupAdministrativeUnitResultOutput) ElementType() reflect.Type

func (LookupAdministrativeUnitResultOutput) Id added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupAdministrativeUnitResultOutput) Members added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) Members() pulumi.StringArrayOutput

A list of object IDs of members who are present in this administrative unit.

func (LookupAdministrativeUnitResultOutput) ObjectId added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) ObjectId() pulumi.StringOutput

The object ID of the administrative unit.

func (LookupAdministrativeUnitResultOutput) ToLookupAdministrativeUnitResultOutput added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) ToLookupAdministrativeUnitResultOutput() LookupAdministrativeUnitResultOutput

func (LookupAdministrativeUnitResultOutput) ToLookupAdministrativeUnitResultOutputWithContext added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) ToLookupAdministrativeUnitResultOutputWithContext(ctx context.Context) LookupAdministrativeUnitResultOutput

func (LookupAdministrativeUnitResultOutput) Visibility added in v5.10.0 

func (o LookupAdministrativeUnitResultOutput) Visibility() pulumi.StringOutput

Whether the administrative unit _and_ its members are hidden or publicly viewable in the directory. One of: `Hiddenmembership` or `Public`.

type LookupApplicationArgs 

type LookupApplicationArgs struct {
	// Specifies the Application ID (also called Client ID).
	ApplicationId *string `pulumi:"applicationId"`
	// Specifies the display name of the application.
	DisplayName *string `pulumi:"displayName"`
	// Specifies the Object ID of the application.
	ObjectId *string `pulumi:"objectId"`
}

A collection of arguments for invoking getApplication.

type LookupApplicationOutputArgs added in v5.3.0 

type LookupApplicationOutputArgs struct {
	// Specifies the Application ID (also called Client ID).
	ApplicationId pulumi.StringPtrInput `pulumi:"applicationId"`
	// Specifies the display name of the application.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Specifies the Object ID of the application.
	ObjectId pulumi.StringPtrInput `pulumi:"objectId"`
}

A collection of arguments for invoking getApplication.

func (LookupApplicationOutputArgs) ElementType added in v5.3.0 

func (LookupApplicationOutputArgs) ElementType() reflect.Type

type LookupApplicationResult 

type LookupApplicationResult struct {
	// An `api` block as documented below.
	Apis []GetApplicationApi `pulumi:"apis"`
	// A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.
	AppRoleIds map[string]string `pulumi:"appRoleIds"`
	// A collection of `appRole` blocks as documented below. For more information see [official documentation on Application Roles](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles []GetApplicationAppRole `pulumi:"appRoles"`
	// The Application ID (also called Client ID).
	ApplicationId string `pulumi:"applicationId"`
	// Specifies whether this application supports device authentication without a user.
	DeviceOnlyAuthEnabled bool `pulumi:"deviceOnlyAuthEnabled"`
	// Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. `DisabledDueToViolationOfServicesAgreement`
	DisabledByMicrosoft string `pulumi:"disabledByMicrosoft"`
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName string `pulumi:"displayName"`
	// The fallback application type as public client, such as an installed application running on a mobile device.
	FallbackPublicClientEnabled bool `pulumi:"fallbackPublicClientEnabled"`
	// A `features` block as described below.
	FeatureTags []GetApplicationFeatureTag `pulumi:"featureTags"`
	// The `groups` claim issued in a user or OAuth 2.0 access token that the app expects.
	GroupMembershipClaims []string `pulumi:"groupMembershipClaims"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.
	IdentifierUris []string `pulumi:"identifierUris"`
	// CDN URL to the application's logo.
	LogoUrl string `pulumi:"logoUrl"`
	// URL of the application's marketing page.
	MarketingUrl string `pulumi:"marketingUrl"`
	// A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.
	Oauth2PermissionScopeIds map[string]string `pulumi:"oauth2PermissionScopeIds"`
	// Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When `false`, only GET requests are allowed.
	Oauth2PostResponseRequired bool `pulumi:"oauth2PostResponseRequired"`
	// The application's object ID.
	ObjectId string `pulumi:"objectId"`
	// An `optionalClaims` block as documented below.
	OptionalClaims []GetApplicationOptionalClaim `pulumi:"optionalClaims"`
	// A list of object IDs of principals that are assigned ownership of the application.
	Owners []string `pulumi:"owners"`
	// URL of the application's privacy statement.
	PrivacyStatementUrl string `pulumi:"privacyStatementUrl"`
	// A `publicClient` block as documented below.
	PublicClients []GetApplicationPublicClient `pulumi:"publicClients"`
	// The verified publisher domain for the application.
	PublisherDomain string `pulumi:"publisherDomain"`
	// A collection of `requiredResourceAccess` blocks as documented below.
	RequiredResourceAccesses []GetApplicationRequiredResourceAccess `pulumi:"requiredResourceAccesses"`
	// The Microsoft account types that are supported for the current application. One of `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.
	SignInAudience string `pulumi:"signInAudience"`
	// A `singlePageApplication` block as documented below.
	SinglePageApplications []GetApplicationSinglePageApplication `pulumi:"singlePageApplications"`
	// URL of the application's support page.
	SupportUrl string `pulumi:"supportUrl"`
	// A list of tags applied to the application.
	Tags []string `pulumi:"tags"`
	// URL of the application's terms of service statement.
	TermsOfServiceUrl string `pulumi:"termsOfServiceUrl"`
	// A `web` block as documented below.
	Webs []GetApplicationWeb `pulumi:"webs"`
}

A collection of values returned by getApplication.

func LookupApplication 

func LookupApplication(ctx *pulumi.Context, args *LookupApplicationArgs, opts ...pulumi.InvokeOption) (*LookupApplicationResult, error)

Use this data source to access information about an existing Application within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `Application.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := azuread.LookupApplication(ctx, &GetApplicationArgs{
			DisplayName: pulumi.StringRef("My First AzureAD Application"),
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("applicationObjectId", example.Id)
		return nil
	})
}

```

type LookupApplicationResultOutput added in v5.3.0 

type LookupApplicationResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getApplication.

func LookupApplicationOutput added in v5.3.0 

func LookupApplicationOutput(ctx *pulumi.Context, args LookupApplicationOutputArgs, opts ...pulumi.InvokeOption) LookupApplicationResultOutput

func (LookupApplicationResultOutput) Apis added in v5.3.0 

func (o LookupApplicationResultOutput) Apis() GetApplicationApiArrayOutput

An `api` block as documented below.

func (LookupApplicationResultOutput) AppRoleIds added in v5.3.0 

func (o LookupApplicationResultOutput) AppRoleIds() pulumi.StringMapOutput

A mapping of app role values to app role IDs, intended to be useful when referencing app roles in other resources in your configuration.

func (LookupApplicationResultOutput) AppRoles added in v5.3.0 

func (o LookupApplicationResultOutput) AppRoles() GetApplicationAppRoleArrayOutput

A collection of `appRole` blocks as documented below. For more information see [official documentation on Application Roles](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).

func (LookupApplicationResultOutput) ApplicationId added in v5.3.0 

func (o LookupApplicationResultOutput) ApplicationId() pulumi.StringOutput

The Application ID (also called Client ID).

func (LookupApplicationResultOutput) DeviceOnlyAuthEnabled added in v5.3.0 

func (o LookupApplicationResultOutput) DeviceOnlyAuthEnabled() pulumi.BoolOutput

Specifies whether this application supports device authentication without a user.

func (LookupApplicationResultOutput) DisabledByMicrosoft added in v5.3.0 

func (o LookupApplicationResultOutput) DisabledByMicrosoft() pulumi.StringOutput

Whether Microsoft has disabled the registered application. If the application is disabled, this will be a string indicating the status/reason, e.g. `DisabledDueToViolationOfServicesAgreement`

func (LookupApplicationResultOutput) DisplayName added in v5.3.0 

func (o LookupApplicationResultOutput) DisplayName() pulumi.StringOutput

Display name for the app role that appears during app role assignment and in consent experiences.

func (LookupApplicationResultOutput) ElementType added in v5.3.0 

func (LookupApplicationResultOutput) ElementType() reflect.Type

func (LookupApplicationResultOutput) FallbackPublicClientEnabled added in v5.3.0 

func (o LookupApplicationResultOutput) FallbackPublicClientEnabled() pulumi.BoolOutput

The fallback application type as public client, such as an installed application running on a mobile device.

func (LookupApplicationResultOutput) FeatureTags added in v5.6.0 

func (o LookupApplicationResultOutput) FeatureTags() GetApplicationFeatureTagArrayOutput

A `features` block as described below.

func (LookupApplicationResultOutput) GroupMembershipClaims added in v5.3.0 

func (o LookupApplicationResultOutput) GroupMembershipClaims() pulumi.StringArrayOutput

The `groups` claim issued in a user or OAuth 2.0 access token that the app expects.

func (LookupApplicationResultOutput) Id added in v5.3.0 

func (o LookupApplicationResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupApplicationResultOutput) IdentifierUris added in v5.3.0 

func (o LookupApplicationResultOutput) IdentifierUris() pulumi.StringArrayOutput

A list of user-defined URI(s) that uniquely identify a Web application within it's Azure AD tenant, or within a verified custom domain if the application is multi-tenant.

func (LookupApplicationResultOutput) LogoUrl added in v5.3.0 

func (o LookupApplicationResultOutput) LogoUrl() pulumi.StringOutput

CDN URL to the application's logo.

func (LookupApplicationResultOutput) MarketingUrl added in v5.3.0 

func (o LookupApplicationResultOutput) MarketingUrl() pulumi.StringOutput

URL of the application's marketing page.

func (LookupApplicationResultOutput) Oauth2PermissionScopeIds added in v5.3.0 

func (o LookupApplicationResultOutput) Oauth2PermissionScopeIds() pulumi.StringMapOutput

A mapping of OAuth2.0 permission scope values to scope IDs, intended to be useful when referencing permission scopes in other resources in your configuration.

func (LookupApplicationResultOutput) Oauth2PostResponseRequired added in v5.3.0 

func (o LookupApplicationResultOutput) Oauth2PostResponseRequired() pulumi.BoolOutput

Specifies whether, as part of OAuth 2.0 token requests, Azure AD allows POST requests, as opposed to GET requests. When `false`, only GET requests are allowed.

func (LookupApplicationResultOutput) ObjectId added in v5.3.0 

func (o LookupApplicationResultOutput) ObjectId() pulumi.StringOutput

The application's object ID.

func (LookupApplicationResultOutput) OptionalClaims added in v5.3.0 

func (o LookupApplicationResultOutput) OptionalClaims() GetApplicationOptionalClaimArrayOutput

An `optionalClaims` block as documented below.

func (LookupApplicationResultOutput) Owners added in v5.3.0 

func (o LookupApplicationResultOutput) Owners() pulumi.StringArrayOutput

A list of object IDs of principals that are assigned ownership of the application.

func (LookupApplicationResultOutput) PrivacyStatementUrl added in v5.3.0 

func (o LookupApplicationResultOutput) PrivacyStatementUrl() pulumi.StringOutput

URL of the application's privacy statement.

func (LookupApplicationResultOutput) PublicClients added in v5.3.0 

func (o LookupApplicationResultOutput) PublicClients() GetApplicationPublicClientArrayOutput

A `publicClient` block as documented below.

func (LookupApplicationResultOutput) PublisherDomain added in v5.3.0 

func (o LookupApplicationResultOutput) PublisherDomain() pulumi.StringOutput

The verified publisher domain for the application.

func (LookupApplicationResultOutput) RequiredResourceAccesses added in v5.3.0 

func (o LookupApplicationResultOutput) RequiredResourceAccesses() GetApplicationRequiredResourceAccessArrayOutput

A collection of `requiredResourceAccess` blocks as documented below.

func (LookupApplicationResultOutput) SignInAudience added in v5.3.0 

func (o LookupApplicationResultOutput) SignInAudience() pulumi.StringOutput

The Microsoft account types that are supported for the current application. One of `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.

func (LookupApplicationResultOutput) SinglePageApplications added in v5.3.0 

func (o LookupApplicationResultOutput) SinglePageApplications() GetApplicationSinglePageApplicationArrayOutput

A `singlePageApplication` block as documented below.

func (LookupApplicationResultOutput) SupportUrl added in v5.3.0 

func (o LookupApplicationResultOutput) SupportUrl() pulumi.StringOutput

URL of the application's support page.

func (LookupApplicationResultOutput) Tags added in v5.6.0 

func (o LookupApplicationResultOutput) Tags() pulumi.StringArrayOutput

A list of tags applied to the application.

func (LookupApplicationResultOutput) TermsOfServiceUrl added in v5.3.0 

func (o LookupApplicationResultOutput) TermsOfServiceUrl() pulumi.StringOutput

URL of the application's terms of service statement.

func (LookupApplicationResultOutput) ToLookupApplicationResultOutput added in v5.3.0 

func (o LookupApplicationResultOutput) ToLookupApplicationResultOutput() LookupApplicationResultOutput

func (LookupApplicationResultOutput) ToLookupApplicationResultOutputWithContext added in v5.3.0 

func (o LookupApplicationResultOutput) ToLookupApplicationResultOutputWithContext(ctx context.Context) LookupApplicationResultOutput

func (LookupApplicationResultOutput) Webs added in v5.3.0 

func (o LookupApplicationResultOutput) Webs() GetApplicationWebArrayOutput

A `web` block as documented below.

type LookupGroupArgs 

type LookupGroupArgs struct {
	// The display name for the group.
	DisplayName *string `pulumi:"displayName"`
	// Whether the group is mail-enabled.
	MailEnabled *bool `pulumi:"mailEnabled"`
	// Specifies the object ID of the group.
	ObjectId *string `pulumi:"objectId"`
	// Whether the group is a security group.
	SecurityEnabled *bool `pulumi:"securityEnabled"`
}

A collection of arguments for invoking getGroup.

type LookupGroupOutputArgs added in v5.3.0 

type LookupGroupOutputArgs struct {
	// The display name for the group.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Whether the group is mail-enabled.
	MailEnabled pulumi.BoolPtrInput `pulumi:"mailEnabled"`
	// Specifies the object ID of the group.
	ObjectId pulumi.StringPtrInput `pulumi:"objectId"`
	// Whether the group is a security group.
	SecurityEnabled pulumi.BoolPtrInput `pulumi:"securityEnabled"`
}

A collection of arguments for invoking getGroup.

func (LookupGroupOutputArgs) ElementType added in v5.3.0 

func (LookupGroupOutputArgs) ElementType() reflect.Type

type LookupGroupResult 

type LookupGroupResult struct {
	// Indicates whether this group can be assigned to an Azure Active Directory role.
	AssignableToRole bool `pulumi:"assignableToRole"`
	// Indicates whether new members added to the group will be auto-subscribed to receive email notifications. Only set for Unified groups.
	AutoSubscribeNewMembers bool `pulumi:"autoSubscribeNewMembers"`
	// A list of behaviors for a Microsoft 365 group, such as `AllowOnlyMembersToPost`, `HideGroupInOutlook`, `SubscribeNewGroupMembers` and `WelcomeEmailDisabled`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for more details.
	Behaviors []string `pulumi:"behaviors"`
	// The optional description of the group.
	Description string `pulumi:"description"`
	// The display name for the group.
	DisplayName string `pulumi:"displayName"`
	// A `dynamicMembership` block as documented below.
	DynamicMemberships []GetGroupDynamicMembership `pulumi:"dynamicMemberships"`
	// Indicates whether people external to the organization can send messages to the group. Only set for Unified groups.
	ExternalSendersAllowed bool `pulumi:"externalSendersAllowed"`
	// Indicates whether the group is displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups. Only set for Unified groups.
	HideFromAddressLists bool `pulumi:"hideFromAddressLists"`
	// Indicates whether the group is displayed in Outlook clients, such as Outlook for Windows and Outlook on the web. Only set for Unified groups.
	HideFromOutlookClients bool `pulumi:"hideFromOutlookClients"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// The SMTP address for the group.
	Mail string `pulumi:"mail"`
	// Whether the group is mail-enabled.
	MailEnabled bool `pulumi:"mailEnabled"`
	// The mail alias for the group, unique in the organisation.
	MailNickname string `pulumi:"mailNickname"`
	// List of object IDs of the group members.
	Members []string `pulumi:"members"`
	// The object ID of the group.
	ObjectId string `pulumi:"objectId"`
	// The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDomainName string `pulumi:"onpremisesDomainName"`
	// The on-premises NetBIOS name, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesNetbiosName string `pulumi:"onpremisesNetbiosName"`
	// The on-premises SAM account name, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSamAccountName string `pulumi:"onpremisesSamAccountName"`
	// The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSecurityIdentifier string `pulumi:"onpremisesSecurityIdentifier"`
	// Whether this group is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).
	OnpremisesSyncEnabled bool `pulumi:"onpremisesSyncEnabled"`
	// List of object IDs of the group owners.
	Owners []string `pulumi:"owners"`
	// The preferred language for a Microsoft 365 group, in ISO 639-1 notation.
	PreferredLanguage string `pulumi:"preferredLanguage"`
	// A list of provisioning options for a Microsoft 365 group, such as `Team`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for details.
	ProvisioningOptions []string `pulumi:"provisioningOptions"`
	// List of email addresses for the group that direct to the same group mailbox.
	ProxyAddresses []string `pulumi:"proxyAddresses"`
	// Whether the group is a security group.
	SecurityEnabled bool `pulumi:"securityEnabled"`
	// The colour theme for a Microsoft 365 group. Possible values are `Blue`, `Green`, `Orange`, `Pink`, `Purple`, `Red` or `Teal`. When no theme is set, the value is `null`.
	Theme string `pulumi:"theme"`
	// A list of group types configured for the group. Supported values are `DynamicMembership`, which denotes a group with dynamic membership, and `Unified`, which specifies a Microsoft 365 group.
	Types []string `pulumi:"types"`
	// The group join policy and group content visibility. Possible values are `Private`, `Public`, or `Hiddenmembership`. Only Microsoft 365 groups can have `Hiddenmembership` visibility.
	Visibility string `pulumi:"visibility"`
}

A collection of values returned by getGroup.

func LookupGroup 

func LookupGroup(ctx *pulumi.Context, args *LookupGroupArgs, opts ...pulumi.InvokeOption) (*LookupGroupResult, error)

Gets information about an Azure Active Directory group.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `Group.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage ### By Group Display Name)

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupGroup(ctx, &GetGroupArgs{
			DisplayName:     pulumi.StringRef("MyGroupName"),
			SecurityEnabled: pulumi.BoolRef(true),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupGroupResultOutput added in v5.3.0 

type LookupGroupResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getGroup.

func LookupGroupOutput added in v5.3.0 

func LookupGroupOutput(ctx *pulumi.Context, args LookupGroupOutputArgs, opts ...pulumi.InvokeOption) LookupGroupResultOutput

func (LookupGroupResultOutput) AssignableToRole added in v5.3.0 

func (o LookupGroupResultOutput) AssignableToRole() pulumi.BoolOutput

Indicates whether this group can be assigned to an Azure Active Directory role.

func (LookupGroupResultOutput) AutoSubscribeNewMembers added in v5.15.0 

func (o LookupGroupResultOutput) AutoSubscribeNewMembers() pulumi.BoolOutput

Indicates whether new members added to the group will be auto-subscribed to receive email notifications. Only set for Unified groups.

func (LookupGroupResultOutput) Behaviors added in v5.3.0 

func (o LookupGroupResultOutput) Behaviors() pulumi.StringArrayOutput

A list of behaviors for a Microsoft 365 group, such as `AllowOnlyMembersToPost`, `HideGroupInOutlook`, `SubscribeNewGroupMembers` and `WelcomeEmailDisabled`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for more details.

func (LookupGroupResultOutput) Description added in v5.3.0 

func (o LookupGroupResultOutput) Description() pulumi.StringOutput

The optional description of the group.

func (LookupGroupResultOutput) DisplayName added in v5.3.0 

func (o LookupGroupResultOutput) DisplayName() pulumi.StringOutput

The display name for the group.

func (LookupGroupResultOutput) DynamicMemberships added in v5.12.0 

func (o LookupGroupResultOutput) DynamicMemberships() GetGroupDynamicMembershipArrayOutput

A `dynamicMembership` block as documented below.

func (LookupGroupResultOutput) ElementType added in v5.3.0 

func (LookupGroupResultOutput) ElementType() reflect.Type

func (LookupGroupResultOutput) ExternalSendersAllowed added in v5.15.0 

func (o LookupGroupResultOutput) ExternalSendersAllowed() pulumi.BoolOutput

Indicates whether people external to the organization can send messages to the group. Only set for Unified groups.

func (LookupGroupResultOutput) HideFromAddressLists added in v5.15.0 

func (o LookupGroupResultOutput) HideFromAddressLists() pulumi.BoolOutput

Indicates whether the group is displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups. Only set for Unified groups.

func (LookupGroupResultOutput) HideFromOutlookClients added in v5.15.0 

func (o LookupGroupResultOutput) HideFromOutlookClients() pulumi.BoolOutput

Indicates whether the group is displayed in Outlook clients, such as Outlook for Windows and Outlook on the web. Only set for Unified groups.

func (LookupGroupResultOutput) Id added in v5.3.0 

func (o LookupGroupResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupGroupResultOutput) Mail added in v5.3.0 

func (o LookupGroupResultOutput) Mail() pulumi.StringOutput

The SMTP address for the group.

func (LookupGroupResultOutput) MailEnabled added in v5.3.0 

func (o LookupGroupResultOutput) MailEnabled() pulumi.BoolOutput

Whether the group is mail-enabled.

func (LookupGroupResultOutput) MailNickname added in v5.3.0 

func (o LookupGroupResultOutput) MailNickname() pulumi.StringOutput

The mail alias for the group, unique in the organisation.

func (LookupGroupResultOutput) Members added in v5.3.0 

func (o LookupGroupResultOutput) Members() pulumi.StringArrayOutput

List of object IDs of the group members.

func (LookupGroupResultOutput) ObjectId added in v5.3.0 

func (o LookupGroupResultOutput) ObjectId() pulumi.StringOutput

The object ID of the group.

func (LookupGroupResultOutput) OnpremisesDomainName added in v5.3.0 

func (o LookupGroupResultOutput) OnpremisesDomainName() pulumi.StringOutput

The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupGroupResultOutput) OnpremisesNetbiosName added in v5.3.0 

func (o LookupGroupResultOutput) OnpremisesNetbiosName() pulumi.StringOutput

The on-premises NetBIOS name, synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupGroupResultOutput) OnpremisesSamAccountName added in v5.3.0 

func (o LookupGroupResultOutput) OnpremisesSamAccountName() pulumi.StringOutput

The on-premises SAM account name, synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupGroupResultOutput) OnpremisesSecurityIdentifier added in v5.3.0 

func (o LookupGroupResultOutput) OnpremisesSecurityIdentifier() pulumi.StringOutput

The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupGroupResultOutput) OnpremisesSyncEnabled added in v5.3.0 

func (o LookupGroupResultOutput) OnpremisesSyncEnabled() pulumi.BoolOutput

Whether this group is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).

func (LookupGroupResultOutput) Owners added in v5.3.0 

func (o LookupGroupResultOutput) Owners() pulumi.StringArrayOutput

List of object IDs of the group owners.

func (LookupGroupResultOutput) PreferredLanguage added in v5.3.0 

func (o LookupGroupResultOutput) PreferredLanguage() pulumi.StringOutput

The preferred language for a Microsoft 365 group, in ISO 639-1 notation.

func (LookupGroupResultOutput) ProvisioningOptions added in v5.3.0 

func (o LookupGroupResultOutput) ProvisioningOptions() pulumi.StringArrayOutput

A list of provisioning options for a Microsoft 365 group, such as `Team`. See [official documentation](https://docs.microsoft.com/en-us/graph/group-set-options) for details.

func (LookupGroupResultOutput) ProxyAddresses added in v5.3.0 

func (o LookupGroupResultOutput) ProxyAddresses() pulumi.StringArrayOutput

List of email addresses for the group that direct to the same group mailbox.

func (LookupGroupResultOutput) SecurityEnabled added in v5.3.0 

func (o LookupGroupResultOutput) SecurityEnabled() pulumi.BoolOutput

Whether the group is a security group.

func (LookupGroupResultOutput) Theme added in v5.3.0 

func (o LookupGroupResultOutput) Theme() pulumi.StringOutput

The colour theme for a Microsoft 365 group. Possible values are `Blue`, `Green`, `Orange`, `Pink`, `Purple`, `Red` or `Teal`. When no theme is set, the value is `null`.

func (LookupGroupResultOutput) ToLookupGroupResultOutput added in v5.3.0 

func (o LookupGroupResultOutput) ToLookupGroupResultOutput() LookupGroupResultOutput

func (LookupGroupResultOutput) ToLookupGroupResultOutputWithContext added in v5.3.0 

func (o LookupGroupResultOutput) ToLookupGroupResultOutputWithContext(ctx context.Context) LookupGroupResultOutput

func (LookupGroupResultOutput) Types added in v5.3.0 

func (o LookupGroupResultOutput) Types() pulumi.StringArrayOutput

A list of group types configured for the group. Supported values are `DynamicMembership`, which denotes a group with dynamic membership, and `Unified`, which specifies a Microsoft 365 group.

func (LookupGroupResultOutput) Visibility added in v5.3.0 

func (o LookupGroupResultOutput) Visibility() pulumi.StringOutput

The group join policy and group content visibility. Possible values are `Private`, `Public`, or `Hiddenmembership`. Only Microsoft 365 groups can have `Hiddenmembership` visibility.

type LookupServicePrincipalArgs 

type LookupServicePrincipalArgs struct {
	// The application ID (client ID) of the application associated with this service principal.
	ApplicationId *string `pulumi:"applicationId"`
	// The display name of the application associated with this service principal.
	DisplayName *string `pulumi:"displayName"`
	// The object ID of the service principal.
	ObjectId *string `pulumi:"objectId"`
}

A collection of arguments for invoking getServicePrincipal.

type LookupServicePrincipalOutputArgs added in v5.3.0 

type LookupServicePrincipalOutputArgs struct {
	// The application ID (client ID) of the application associated with this service principal.
	ApplicationId pulumi.StringPtrInput `pulumi:"applicationId"`
	// The display name of the application associated with this service principal.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// The object ID of the service principal.
	ObjectId pulumi.StringPtrInput `pulumi:"objectId"`
}

A collection of arguments for invoking getServicePrincipal.

func (LookupServicePrincipalOutputArgs) ElementType added in v5.3.0 

func (LookupServicePrincipalOutputArgs) ElementType() reflect.Type

type LookupServicePrincipalResult 

type LookupServicePrincipalResult struct {
	// Whether or not the service principal account is enabled.
	AccountEnabled bool `pulumi:"accountEnabled"`
	// A list of alternative names, used to retrieve service principals by subscription, identify resource group and full resource ids for managed identities.
	AlternativeNames []string `pulumi:"alternativeNames"`
	// Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application.
	AppRoleAssignmentRequired bool `pulumi:"appRoleAssignmentRequired"`
	// A mapping of app role values to app role IDs, as published by the associated application, intended to be useful when referencing app roles in other resources in your configuration.
	AppRoleIds map[string]string `pulumi:"appRoleIds"`
	// A list of app roles published by the associated application, as documented below. For more information [official documentation](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles []GetServicePrincipalAppRole `pulumi:"appRoles"`
	// The application ID (client ID) of the application associated with this service principal.
	ApplicationId string `pulumi:"applicationId"`
	// The tenant ID where the associated application is registered.
	ApplicationTenantId string `pulumi:"applicationTenantId"`
	// Permission help text that appears in the admin app assignment and consent experiences.
	Description string `pulumi:"description"`
	// Display name for the permission that appears in the admin consent and app assignment experiences.
	DisplayName string                          `pulumi:"displayName"`
	FeatureTags []GetServicePrincipalFeatureTag `pulumi:"featureTags"`
	// A `features` block as described below.
	//
	// Deprecated: This block has been renamed to `feature_tags` and will be removed in version 3.0 of the provider
	Features []GetServicePrincipalFeature `pulumi:"features"`
	// Home page or landing page of the associated application.
	HomepageUrl string `pulumi:"homepageUrl"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// The URL where the service provider redirects the user to Azure AD to authenticate. Azure AD uses the URL to launch the application from Microsoft 365 or the Azure AD My Apps.
	LoginUrl string `pulumi:"loginUrl"`
	// The URL that will be used by Microsoft's authorization service to logout an user using OpenId Connect front-channel, back-channel or SAML logout protocols, taken from the associated application.
	LogoutUrl string `pulumi:"logoutUrl"`
	// A free text field to capture information about the service principal, typically used for operational purposes.
	Notes string `pulumi:"notes"`
	// A list of email addresses where Azure AD sends a notification when the active certificate is near the expiration date. This is only for the certificates used to sign the SAML token issued for Azure AD Gallery applications.
	NotificationEmailAddresses []string `pulumi:"notificationEmailAddresses"`
	// A mapping of OAuth2.0 permission scope values to scope IDs, as exposed by the associated application, intended to be useful when referencing permission scopes in other resources in your configuration.
	Oauth2PermissionScopeIds map[string]string `pulumi:"oauth2PermissionScopeIds"`
	// A collection of OAuth 2.0 delegated permissions exposed by the associated application. Each permission is covered by an `oauth2PermissionScopes` block as documented below.
	Oauth2PermissionScopes []GetServicePrincipalOauth2PermissionScope `pulumi:"oauth2PermissionScopes"`
	// The object ID of the service principal.
	ObjectId string `pulumi:"objectId"`
	// The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps.
	PreferredSingleSignOnMode string `pulumi:"preferredSingleSignOnMode"`
	// A list of URLs where user tokens are sent for sign-in with the associated application, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent for the associated application.
	RedirectUris []string `pulumi:"redirectUris"`
	// The URL where the service exposes SAML metadata for federation.
	SamlMetadataUrl string `pulumi:"samlMetadataUrl"`
	// A `samlSingleSignOn` block as documented below.
	SamlSingleSignOns []GetServicePrincipalSamlSingleSignOn `pulumi:"samlSingleSignOns"`
	// A list of identifier URI(s), copied over from the associated application.
	ServicePrincipalNames []string `pulumi:"servicePrincipalNames"`
	// The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.
	SignInAudience string `pulumi:"signInAudience"`
	// A list of tags applied to the service principal.
	Tags []string `pulumi:"tags"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type string `pulumi:"type"`
}

A collection of values returned by getServicePrincipal.

func LookupServicePrincipal 

func LookupServicePrincipal(ctx *pulumi.Context, args *LookupServicePrincipalArgs, opts ...pulumi.InvokeOption) (*LookupServicePrincipalResult, error)

Gets information about an existing service principal associated with an application within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `Application.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

*Look up by application display name*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupServicePrincipal(ctx, &GetServicePrincipalArgs{
			DisplayName: pulumi.StringRef("my-awesome-application"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up by application ID (client ID)*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupServicePrincipal(ctx, &GetServicePrincipalArgs{
			ApplicationId: pulumi.StringRef("00000000-0000-0000-0000-000000000000"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Look up by service principal object ID*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupServicePrincipal(ctx, &GetServicePrincipalArgs{
			ObjectId: pulumi.StringRef("00000000-0000-0000-0000-000000000000"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupServicePrincipalResultOutput added in v5.3.0 

type LookupServicePrincipalResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getServicePrincipal.

func LookupServicePrincipalOutput added in v5.3.0 

func LookupServicePrincipalOutput(ctx *pulumi.Context, args LookupServicePrincipalOutputArgs, opts ...pulumi.InvokeOption) LookupServicePrincipalResultOutput

func (LookupServicePrincipalResultOutput) AccountEnabled added in v5.3.0 

func (o LookupServicePrincipalResultOutput) AccountEnabled() pulumi.BoolOutput

Whether or not the service principal account is enabled.

func (LookupServicePrincipalResultOutput) AlternativeNames added in v5.3.0 

func (o LookupServicePrincipalResultOutput) AlternativeNames() pulumi.StringArrayOutput

A list of alternative names, used to retrieve service principals by subscription, identify resource group and full resource ids for managed identities.

func (LookupServicePrincipalResultOutput) AppRoleAssignmentRequired added in v5.3.0 

func (o LookupServicePrincipalResultOutput) AppRoleAssignmentRequired() pulumi.BoolOutput

Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application.

func (LookupServicePrincipalResultOutput) AppRoleIds added in v5.3.0 

func (o LookupServicePrincipalResultOutput) AppRoleIds() pulumi.StringMapOutput

A mapping of app role values to app role IDs, as published by the associated application, intended to be useful when referencing app roles in other resources in your configuration.

func (LookupServicePrincipalResultOutput) AppRoles added in v5.3.0 

func (o LookupServicePrincipalResultOutput) AppRoles() GetServicePrincipalAppRoleArrayOutput

A list of app roles published by the associated application, as documented below. For more information [official documentation](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).

func (LookupServicePrincipalResultOutput) ApplicationId added in v5.3.0 

func (o LookupServicePrincipalResultOutput) ApplicationId() pulumi.StringOutput

The application ID (client ID) of the application associated with this service principal.

func (LookupServicePrincipalResultOutput) ApplicationTenantId added in v5.3.0 

func (o LookupServicePrincipalResultOutput) ApplicationTenantId() pulumi.StringOutput

The tenant ID where the associated application is registered.

func (LookupServicePrincipalResultOutput) Description added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Description() pulumi.StringOutput

Permission help text that appears in the admin app assignment and consent experiences.

func (LookupServicePrincipalResultOutput) DisplayName added in v5.3.0 

func (o LookupServicePrincipalResultOutput) DisplayName() pulumi.StringOutput

Display name for the permission that appears in the admin consent and app assignment experiences.

func (LookupServicePrincipalResultOutput) ElementType added in v5.3.0 

func (LookupServicePrincipalResultOutput) ElementType() reflect.Type

func (LookupServicePrincipalResultOutput) FeatureTags added in v5.6.0 

func (o LookupServicePrincipalResultOutput) FeatureTags() GetServicePrincipalFeatureTagArrayOutput

func (LookupServicePrincipalResultOutput) Features deprecated added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Features() GetServicePrincipalFeatureArrayOutput

A `features` block as described below.

Deprecated: This block has been renamed to `feature_tags` and will be removed in version 3.0 of the provider

func (LookupServicePrincipalResultOutput) HomepageUrl added in v5.3.0 

func (o LookupServicePrincipalResultOutput) HomepageUrl() pulumi.StringOutput

Home page or landing page of the associated application.

func (LookupServicePrincipalResultOutput) Id added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupServicePrincipalResultOutput) LoginUrl added in v5.3.0 

func (o LookupServicePrincipalResultOutput) LoginUrl() pulumi.StringOutput

The URL where the service provider redirects the user to Azure AD to authenticate. Azure AD uses the URL to launch the application from Microsoft 365 or the Azure AD My Apps.

func (LookupServicePrincipalResultOutput) LogoutUrl added in v5.3.0 

func (o LookupServicePrincipalResultOutput) LogoutUrl() pulumi.StringOutput

The URL that will be used by Microsoft's authorization service to logout an user using OpenId Connect front-channel, back-channel or SAML logout protocols, taken from the associated application.

func (LookupServicePrincipalResultOutput) Notes added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Notes() pulumi.StringOutput

A free text field to capture information about the service principal, typically used for operational purposes.

func (LookupServicePrincipalResultOutput) NotificationEmailAddresses added in v5.3.0 

func (o LookupServicePrincipalResultOutput) NotificationEmailAddresses() pulumi.StringArrayOutput

A list of email addresses where Azure AD sends a notification when the active certificate is near the expiration date. This is only for the certificates used to sign the SAML token issued for Azure AD Gallery applications.

func (LookupServicePrincipalResultOutput) Oauth2PermissionScopeIds added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Oauth2PermissionScopeIds() pulumi.StringMapOutput

A mapping of OAuth2.0 permission scope values to scope IDs, as exposed by the associated application, intended to be useful when referencing permission scopes in other resources in your configuration.

func (LookupServicePrincipalResultOutput) Oauth2PermissionScopes added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Oauth2PermissionScopes() GetServicePrincipalOauth2PermissionScopeArrayOutput

A collection of OAuth 2.0 delegated permissions exposed by the associated application. Each permission is covered by an `oauth2PermissionScopes` block as documented below.

func (LookupServicePrincipalResultOutput) ObjectId added in v5.3.0 

func (o LookupServicePrincipalResultOutput) ObjectId() pulumi.StringOutput

The object ID of the service principal.

func (LookupServicePrincipalResultOutput) PreferredSingleSignOnMode added in v5.3.0 

func (o LookupServicePrincipalResultOutput) PreferredSingleSignOnMode() pulumi.StringOutput

The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps.

func (LookupServicePrincipalResultOutput) RedirectUris added in v5.3.0 

func (o LookupServicePrincipalResultOutput) RedirectUris() pulumi.StringArrayOutput

A list of URLs where user tokens are sent for sign-in with the associated application, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent for the associated application.

func (LookupServicePrincipalResultOutput) SamlMetadataUrl added in v5.3.0 

func (o LookupServicePrincipalResultOutput) SamlMetadataUrl() pulumi.StringOutput

The URL where the service exposes SAML metadata for federation.

func (LookupServicePrincipalResultOutput) SamlSingleSignOns added in v5.3.0 

func (o LookupServicePrincipalResultOutput) SamlSingleSignOns() GetServicePrincipalSamlSingleSignOnArrayOutput

A `samlSingleSignOn` block as documented below.

func (LookupServicePrincipalResultOutput) ServicePrincipalNames added in v5.3.0 

func (o LookupServicePrincipalResultOutput) ServicePrincipalNames() pulumi.StringArrayOutput

A list of identifier URI(s), copied over from the associated application.

func (LookupServicePrincipalResultOutput) SignInAudience added in v5.3.0 

func (o LookupServicePrincipalResultOutput) SignInAudience() pulumi.StringOutput

The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.

func (LookupServicePrincipalResultOutput) Tags added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Tags() pulumi.StringArrayOutput

A list of tags applied to the service principal.

func (LookupServicePrincipalResultOutput) ToLookupServicePrincipalResultOutput added in v5.3.0 

func (o LookupServicePrincipalResultOutput) ToLookupServicePrincipalResultOutput() LookupServicePrincipalResultOutput

func (LookupServicePrincipalResultOutput) ToLookupServicePrincipalResultOutputWithContext added in v5.3.0 

func (o LookupServicePrincipalResultOutput) ToLookupServicePrincipalResultOutputWithContext(ctx context.Context) LookupServicePrincipalResultOutput

func (LookupServicePrincipalResultOutput) Type added in v5.3.0 

func (o LookupServicePrincipalResultOutput) Type() pulumi.StringOutput

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.

type LookupUserArgs 

type LookupUserArgs struct {
	// The email alias of the user.
	MailNickname *string `pulumi:"mailNickname"`
	// The object ID of the user.
	ObjectId *string `pulumi:"objectId"`
	// The user principal name (UPN) of the user.
	UserPrincipalName *string `pulumi:"userPrincipalName"`
}

A collection of arguments for invoking getUser.

type LookupUserOutputArgs added in v5.3.0 

type LookupUserOutputArgs struct {
	// The email alias of the user.
	MailNickname pulumi.StringPtrInput `pulumi:"mailNickname"`
	// The object ID of the user.
	ObjectId pulumi.StringPtrInput `pulumi:"objectId"`
	// The user principal name (UPN) of the user.
	UserPrincipalName pulumi.StringPtrInput `pulumi:"userPrincipalName"`
}

A collection of arguments for invoking getUser.

func (LookupUserOutputArgs) ElementType added in v5.3.0 

func (LookupUserOutputArgs) ElementType() reflect.Type

type LookupUserResult 

type LookupUserResult struct {
	// Whether or not the account is enabled.
	AccountEnabled bool `pulumi:"accountEnabled"`
	// The age group of the user. Supported values are `Adult`, `NotAdult` and `Minor`.
	AgeGroup string `pulumi:"ageGroup"`
	// A list of telephone numbers for the user.
	BusinessPhones []string `pulumi:"businessPhones"`
	// The city in which the user is located.
	City string `pulumi:"city"`
	// The company name which the user is associated. This property can be useful for describing the company that an external user comes from.
	CompanyName string `pulumi:"companyName"`
	// Whether consent has been obtained for minors. Supported values are `Granted`, `Denied` and `NotRequired`.
	ConsentProvidedForMinor string `pulumi:"consentProvidedForMinor"`
	// The cost center associated with the user.
	CostCenter string `pulumi:"costCenter"`
	// The country/region in which the user is located, e.g. `US` or `UK`.
	Country string `pulumi:"country"`
	// Indicates whether the user account was created as a regular school or work account (`null`), an external account (`Invitation`), a local account for an Azure Active Directory B2C tenant (`LocalAccount`) or self-service sign-up using email verification (`EmailVerified`).
	CreationType string `pulumi:"creationType"`
	// The name for the department in which the user works.
	Department string `pulumi:"department"`
	// The display name of the user.
	DisplayName string `pulumi:"displayName"`
	// The name of the division in which the user works.
	Division string `pulumi:"division"`
	// The employee identifier assigned to the user by the organisation.
	EmployeeId string `pulumi:"employeeId"`
	// Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor.
	EmployeeType string `pulumi:"employeeType"`
	// For an external user invited to the tenant, this property represents the invited user's invitation status. Possible values are `PendingAcceptance` or `Accepted`.
	ExternalUserState string `pulumi:"externalUserState"`
	// The fax number of the user.
	FaxNumber string `pulumi:"faxNumber"`
	// The given name (first name) of the user.
	GivenName string `pulumi:"givenName"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// A list of instant message voice over IP (VOIP) session initiation protocol (SIP) addresses for the user.
	ImAddresses []string `pulumi:"imAddresses"`
	// The user’s job title.
	JobTitle string `pulumi:"jobTitle"`
	// The SMTP address for the user.
	Mail string `pulumi:"mail"`
	// The email alias of the user.
	MailNickname string `pulumi:"mailNickname"`
	// The object ID of the user's manager.
	ManagerId string `pulumi:"managerId"`
	// The primary cellular telephone number for the user.
	MobilePhone string `pulumi:"mobilePhone"`
	// The object ID of the user.
	ObjectId string `pulumi:"objectId"`
	// The office location in the user's place of business.
	OfficeLocation string `pulumi:"officeLocation"`
	// The on-premises distinguished name (DN) of the user, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDistinguishedName string `pulumi:"onpremisesDistinguishedName"`
	// The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDomainName string `pulumi:"onpremisesDomainName"`
	// The value used to associate an on-premise Active Directory user account with their Azure AD user object.
	OnpremisesImmutableId string `pulumi:"onpremisesImmutableId"`
	// The on-premise SAM account name of the user.
	OnpremisesSamAccountName string `pulumi:"onpremisesSamAccountName"`
	// The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSecurityIdentifier string `pulumi:"onpremisesSecurityIdentifier"`
	// Whether this user is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).
	OnpremisesSyncEnabled bool `pulumi:"onpremisesSyncEnabled"`
	// The on-premise user principal name of the user.
	OnpremisesUserPrincipalName string `pulumi:"onpremisesUserPrincipalName"`
	// A list of additional email addresses for the user.
	OtherMails []string `pulumi:"otherMails"`
	// The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code.
	PostalCode string `pulumi:"postalCode"`
	// The user's preferred language, in ISO 639-1 notation.
	PreferredLanguage string `pulumi:"preferredLanguage"`
	// List of email addresses for the user that direct to the same mailbox.
	ProxyAddresses []string `pulumi:"proxyAddresses"`
	// Whether or not the Outlook global address list should include this user.
	ShowInAddressList bool `pulumi:"showInAddressList"`
	// The state or province in the user's address.
	State string `pulumi:"state"`
	// The street address of the user's place of business.
	StreetAddress string `pulumi:"streetAddress"`
	// The user's surname (family name or last name).
	Surname string `pulumi:"surname"`
	// The usage location of the user.
	UsageLocation string `pulumi:"usageLocation"`
	// The user principal name (UPN) of the user.
	UserPrincipalName string `pulumi:"userPrincipalName"`
	// The user type in the directory. Possible values are `Guest` or `Member`.
	UserType string `pulumi:"userType"`
}

A collection of values returned by getUser.

func LookupUser 

func LookupUser(ctx *pulumi.Context, args *LookupUserArgs, opts ...pulumi.InvokeOption) (*LookupUserResult, error)

Gets information about an Azure Active Directory user.

## API Permissions

The following API permissions are required in order to use this data source.

When authenticated with a service principal, this data source requires one of the following application roles: `User.Read.All` or `Directory.Read.All`

When authenticated with a user principal, this data source does not require any additional roles.

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.LookupUser(ctx, &GetUserArgs{
			UserPrincipalName: pulumi.StringRef("user@hashicorp.com"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

```

type LookupUserResultOutput added in v5.3.0 

type LookupUserResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getUser.

func LookupUserOutput added in v5.3.0 

func LookupUserOutput(ctx *pulumi.Context, args LookupUserOutputArgs, opts ...pulumi.InvokeOption) LookupUserResultOutput

func (LookupUserResultOutput) AccountEnabled added in v5.3.0 

func (o LookupUserResultOutput) AccountEnabled() pulumi.BoolOutput

Whether or not the account is enabled.

func (LookupUserResultOutput) AgeGroup added in v5.3.0 

func (o LookupUserResultOutput) AgeGroup() pulumi.StringOutput

The age group of the user. Supported values are `Adult`, `NotAdult` and `Minor`.

func (LookupUserResultOutput) BusinessPhones added in v5.3.0 

func (o LookupUserResultOutput) BusinessPhones() pulumi.StringArrayOutput

A list of telephone numbers for the user.

func (LookupUserResultOutput) City added in v5.3.0 

func (o LookupUserResultOutput) City() pulumi.StringOutput

The city in which the user is located.

func (LookupUserResultOutput) CompanyName added in v5.3.0 

func (o LookupUserResultOutput) CompanyName() pulumi.StringOutput

The company name which the user is associated. This property can be useful for describing the company that an external user comes from.

func (LookupUserResultOutput) ConsentProvidedForMinor added in v5.3.0 

func (o LookupUserResultOutput) ConsentProvidedForMinor() pulumi.StringOutput

Whether consent has been obtained for minors. Supported values are `Granted`, `Denied` and `NotRequired`.

func (LookupUserResultOutput) CostCenter added in v5.4.0 

func (o LookupUserResultOutput) CostCenter() pulumi.StringOutput

The cost center associated with the user.

func (LookupUserResultOutput) Country added in v5.3.0 

func (o LookupUserResultOutput) Country() pulumi.StringOutput

The country/region in which the user is located, e.g. `US` or `UK`.

func (LookupUserResultOutput) CreationType added in v5.3.0 

func (o LookupUserResultOutput) CreationType() pulumi.StringOutput

Indicates whether the user account was created as a regular school or work account (`null`), an external account (`Invitation`), a local account for an Azure Active Directory B2C tenant (`LocalAccount`) or self-service sign-up using email verification (`EmailVerified`).

func (LookupUserResultOutput) Department added in v5.3.0 

func (o LookupUserResultOutput) Department() pulumi.StringOutput

The name for the department in which the user works.

func (LookupUserResultOutput) DisplayName added in v5.3.0 

func (o LookupUserResultOutput) DisplayName() pulumi.StringOutput

The display name of the user.

func (LookupUserResultOutput) Division added in v5.4.0 

func (o LookupUserResultOutput) Division() pulumi.StringOutput

The name of the division in which the user works.

func (LookupUserResultOutput) ElementType added in v5.3.0 

func (LookupUserResultOutput) ElementType() reflect.Type

func (LookupUserResultOutput) EmployeeId added in v5.3.0 

func (o LookupUserResultOutput) EmployeeId() pulumi.StringOutput

The employee identifier assigned to the user by the organisation.

func (LookupUserResultOutput) EmployeeType added in v5.4.0 

func (o LookupUserResultOutput) EmployeeType() pulumi.StringOutput

Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor.

func (LookupUserResultOutput) ExternalUserState added in v5.3.0 

func (o LookupUserResultOutput) ExternalUserState() pulumi.StringOutput

For an external user invited to the tenant, this property represents the invited user's invitation status. Possible values are `PendingAcceptance` or `Accepted`.

func (LookupUserResultOutput) FaxNumber added in v5.3.0 

func (o LookupUserResultOutput) FaxNumber() pulumi.StringOutput

The fax number of the user.

func (LookupUserResultOutput) GivenName added in v5.3.0 

func (o LookupUserResultOutput) GivenName() pulumi.StringOutput

The given name (first name) of the user.

func (LookupUserResultOutput) Id added in v5.3.0 

func (o LookupUserResultOutput) Id() pulumi.StringOutput

The provider-assigned unique ID for this managed resource.

func (LookupUserResultOutput) ImAddresses added in v5.3.0 

func (o LookupUserResultOutput) ImAddresses() pulumi.StringArrayOutput

A list of instant message voice over IP (VOIP) session initiation protocol (SIP) addresses for the user.

func (LookupUserResultOutput) JobTitle added in v5.3.0 

func (o LookupUserResultOutput) JobTitle() pulumi.StringOutput

The user’s job title.

func (LookupUserResultOutput) Mail added in v5.3.0 

func (o LookupUserResultOutput) Mail() pulumi.StringOutput

The SMTP address for the user.

func (LookupUserResultOutput) MailNickname added in v5.3.0 

func (o LookupUserResultOutput) MailNickname() pulumi.StringOutput

The email alias of the user.

func (LookupUserResultOutput) ManagerId added in v5.6.0 

func (o LookupUserResultOutput) ManagerId() pulumi.StringOutput

The object ID of the user's manager.

func (LookupUserResultOutput) MobilePhone added in v5.3.0 

func (o LookupUserResultOutput) MobilePhone() pulumi.StringOutput

The primary cellular telephone number for the user.

func (LookupUserResultOutput) ObjectId added in v5.3.0 

func (o LookupUserResultOutput) ObjectId() pulumi.StringOutput

The object ID of the user.

func (LookupUserResultOutput) OfficeLocation added in v5.3.0 

func (o LookupUserResultOutput) OfficeLocation() pulumi.StringOutput

The office location in the user's place of business.

func (LookupUserResultOutput) OnpremisesDistinguishedName added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesDistinguishedName() pulumi.StringOutput

The on-premises distinguished name (DN) of the user, synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupUserResultOutput) OnpremisesDomainName added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesDomainName() pulumi.StringOutput

The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupUserResultOutput) OnpremisesImmutableId added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesImmutableId() pulumi.StringOutput

The value used to associate an on-premise Active Directory user account with their Azure AD user object.

func (LookupUserResultOutput) OnpremisesSamAccountName added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesSamAccountName() pulumi.StringOutput

The on-premise SAM account name of the user.

func (LookupUserResultOutput) OnpremisesSecurityIdentifier added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesSecurityIdentifier() pulumi.StringOutput

The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.

func (LookupUserResultOutput) OnpremisesSyncEnabled added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesSyncEnabled() pulumi.BoolOutput

Whether this user is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).

func (LookupUserResultOutput) OnpremisesUserPrincipalName added in v5.3.0 

func (o LookupUserResultOutput) OnpremisesUserPrincipalName() pulumi.StringOutput

The on-premise user principal name of the user.

func (LookupUserResultOutput) OtherMails added in v5.3.0 

func (o LookupUserResultOutput) OtherMails() pulumi.StringArrayOutput

A list of additional email addresses for the user.

func (LookupUserResultOutput) PostalCode added in v5.3.0 

func (o LookupUserResultOutput) PostalCode() pulumi.StringOutput

The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code.

func (LookupUserResultOutput) PreferredLanguage added in v5.3.0 

func (o LookupUserResultOutput) PreferredLanguage() pulumi.StringOutput

The user's preferred language, in ISO 639-1 notation.

func (LookupUserResultOutput) ProxyAddresses added in v5.3.0 

func (o LookupUserResultOutput) ProxyAddresses() pulumi.StringArrayOutput

List of email addresses for the user that direct to the same mailbox.

func (LookupUserResultOutput) ShowInAddressList added in v5.3.0 

func (o LookupUserResultOutput) ShowInAddressList() pulumi.BoolOutput

Whether or not the Outlook global address list should include this user.

func (LookupUserResultOutput) State added in v5.3.0 

func (o LookupUserResultOutput) State() pulumi.StringOutput

The state or province in the user's address.

func (LookupUserResultOutput) StreetAddress added in v5.3.0 

func (o LookupUserResultOutput) StreetAddress() pulumi.StringOutput

The street address of the user's place of business.

func (LookupUserResultOutput) Surname added in v5.3.0 

func (o LookupUserResultOutput) Surname() pulumi.StringOutput

The user's surname (family name or last name).

func (LookupUserResultOutput) ToLookupUserResultOutput added in v5.3.0 

func (o LookupUserResultOutput) ToLookupUserResultOutput() LookupUserResultOutput

func (LookupUserResultOutput) ToLookupUserResultOutputWithContext added in v5.3.0 

func (o LookupUserResultOutput) ToLookupUserResultOutputWithContext(ctx context.Context) LookupUserResultOutput

func (LookupUserResultOutput) UsageLocation added in v5.3.0 

func (o LookupUserResultOutput) UsageLocation() pulumi.StringOutput

The usage location of the user.

func (LookupUserResultOutput) UserPrincipalName added in v5.3.0 

func (o LookupUserResultOutput) UserPrincipalName() pulumi.StringOutput

The user principal name (UPN) of the user.

func (LookupUserResultOutput) UserType added in v5.3.0 

func (o LookupUserResultOutput) UserType() pulumi.StringOutput

The user type in the directory. Possible values are `Guest` or `Member`.

type NamedLocation added in v5.2.0 

type NamedLocation struct {
	pulumi.CustomResourceState

	// A `country` block as documented below, which configures a country-based named location.
	Country NamedLocationCountryPtrOutput `pulumi:"country"`
	// The friendly name for this named location.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// An `ip` block as documented below, which configures an IP-based named location.
	Ip NamedLocationIpPtrOutput `pulumi:"ip"`
}

Manages a Named Location within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ConditionalAccess` and `Policy.Read.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Conditional Access Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewNamedLocation(ctx, "example-ip", &azuread.NamedLocationArgs{
			DisplayName: pulumi.String("IP Named Location"),
			Ip: &NamedLocationIpArgs{
				IpRanges: pulumi.StringArray{
					pulumi.String("1.1.1.1/32"),
					pulumi.String("2.2.2.2/32"),
				},
				Trusted: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewNamedLocation(ctx, "example-country", &azuread.NamedLocationArgs{
			Country: &NamedLocationCountryArgs{
				CountriesAndRegions: pulumi.StringArray{
					pulumi.String("GB"),
					pulumi.String("US"),
				},
				IncludeUnknownCountriesAndRegions: pulumi.Bool(false),
			},
			DisplayName: pulumi.String("Country Named Location"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Named Locations can be imported using the `id`, e.g.

```sh 

$ pulumi import azuread:index/namedLocation:NamedLocation my_location 00000000-0000-0000-0000-000000000000

```

func GetNamedLocation added in v5.2.0 

func GetNamedLocation(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *NamedLocationState, opts ...pulumi.ResourceOption) (*NamedLocation, error)

GetNamedLocation gets an existing NamedLocation resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewNamedLocation added in v5.2.0 

func NewNamedLocation(ctx *pulumi.Context,
	name string, args *NamedLocationArgs, opts ...pulumi.ResourceOption) (*NamedLocation, error)

NewNamedLocation registers a new resource with the given unique name, arguments, and options.

func (*NamedLocation) ElementType added in v5.2.0 

func (*NamedLocation) ElementType() reflect.Type

func (*NamedLocation) ToNamedLocationOutput added in v5.2.0 

func (i *NamedLocation) ToNamedLocationOutput() NamedLocationOutput

func (*NamedLocation) ToNamedLocationOutputWithContext added in v5.2.0 

func (i *NamedLocation) ToNamedLocationOutputWithContext(ctx context.Context) NamedLocationOutput

type NamedLocationArgs added in v5.2.0 

type NamedLocationArgs struct {
	// A `country` block as documented below, which configures a country-based named location.
	Country NamedLocationCountryPtrInput
	// The friendly name for this named location.
	DisplayName pulumi.StringInput
	// An `ip` block as documented below, which configures an IP-based named location.
	Ip NamedLocationIpPtrInput
}

The set of arguments for constructing a NamedLocation resource.

func (NamedLocationArgs) ElementType added in v5.2.0 

func (NamedLocationArgs) ElementType() reflect.Type

type NamedLocationArray added in v5.2.0 

type NamedLocationArray []NamedLocationInput

func (NamedLocationArray) ElementType added in v5.2.0 

func (NamedLocationArray) ElementType() reflect.Type

func (NamedLocationArray) ToNamedLocationArrayOutput added in v5.2.0 

func (i NamedLocationArray) ToNamedLocationArrayOutput() NamedLocationArrayOutput

func (NamedLocationArray) ToNamedLocationArrayOutputWithContext added in v5.2.0 

func (i NamedLocationArray) ToNamedLocationArrayOutputWithContext(ctx context.Context) NamedLocationArrayOutput

type NamedLocationArrayInput added in v5.2.0 

type NamedLocationArrayInput interface {
	pulumi.Input

	ToNamedLocationArrayOutput() NamedLocationArrayOutput
	ToNamedLocationArrayOutputWithContext(context.Context) NamedLocationArrayOutput
}

NamedLocationArrayInput is an input type that accepts NamedLocationArray and NamedLocationArrayOutput values. You can construct a concrete instance of `NamedLocationArrayInput` via: 

NamedLocationArray{ NamedLocationArgs{...} }

type NamedLocationArrayOutput added in v5.2.0 

type NamedLocationArrayOutput struct{ *pulumi.OutputState }

func (NamedLocationArrayOutput) ElementType added in v5.2.0 

func (NamedLocationArrayOutput) ElementType() reflect.Type

func (NamedLocationArrayOutput) Index added in v5.2.0 

func (o NamedLocationArrayOutput) Index(i pulumi.IntInput) NamedLocationOutput

func (NamedLocationArrayOutput) ToNamedLocationArrayOutput added in v5.2.0 

func (o NamedLocationArrayOutput) ToNamedLocationArrayOutput() NamedLocationArrayOutput

func (NamedLocationArrayOutput) ToNamedLocationArrayOutputWithContext added in v5.2.0 

func (o NamedLocationArrayOutput) ToNamedLocationArrayOutputWithContext(ctx context.Context) NamedLocationArrayOutput

type NamedLocationCountry added in v5.2.0 

type NamedLocationCountry struct {
	// List of countries and/or regions in two-letter format specified by ISO 3166-2.
	CountriesAndRegions []string `pulumi:"countriesAndRegions"`
	// Whether IP addresses that don't map to a country or region should be included in the named location. Defaults to `false`.
	IncludeUnknownCountriesAndRegions *bool `pulumi:"includeUnknownCountriesAndRegions"`
}

type NamedLocationCountryArgs added in v5.2.0 

type NamedLocationCountryArgs struct {
	// List of countries and/or regions in two-letter format specified by ISO 3166-2.
	CountriesAndRegions pulumi.StringArrayInput `pulumi:"countriesAndRegions"`
	// Whether IP addresses that don't map to a country or region should be included in the named location. Defaults to `false`.
	IncludeUnknownCountriesAndRegions pulumi.BoolPtrInput `pulumi:"includeUnknownCountriesAndRegions"`
}

func (NamedLocationCountryArgs) ElementType added in v5.2.0 

func (NamedLocationCountryArgs) ElementType() reflect.Type

func (NamedLocationCountryArgs) ToNamedLocationCountryOutput added in v5.2.0 

func (i NamedLocationCountryArgs) ToNamedLocationCountryOutput() NamedLocationCountryOutput

func (NamedLocationCountryArgs) ToNamedLocationCountryOutputWithContext added in v5.2.0 

func (i NamedLocationCountryArgs) ToNamedLocationCountryOutputWithContext(ctx context.Context) NamedLocationCountryOutput

func (NamedLocationCountryArgs) ToNamedLocationCountryPtrOutput added in v5.2.0 

func (i NamedLocationCountryArgs) ToNamedLocationCountryPtrOutput() NamedLocationCountryPtrOutput

func (NamedLocationCountryArgs) ToNamedLocationCountryPtrOutputWithContext added in v5.2.0 

func (i NamedLocationCountryArgs) ToNamedLocationCountryPtrOutputWithContext(ctx context.Context) NamedLocationCountryPtrOutput

type NamedLocationCountryInput added in v5.2.0 

type NamedLocationCountryInput interface {
	pulumi.Input

	ToNamedLocationCountryOutput() NamedLocationCountryOutput
	ToNamedLocationCountryOutputWithContext(context.Context) NamedLocationCountryOutput
}

NamedLocationCountryInput is an input type that accepts NamedLocationCountryArgs and NamedLocationCountryOutput values. You can construct a concrete instance of `NamedLocationCountryInput` via: 

NamedLocationCountryArgs{...}

type NamedLocationCountryOutput added in v5.2.0 

type NamedLocationCountryOutput struct{ *pulumi.OutputState }

func (NamedLocationCountryOutput) CountriesAndRegions added in v5.2.0 

func (o NamedLocationCountryOutput) CountriesAndRegions() pulumi.StringArrayOutput

List of countries and/or regions in two-letter format specified by ISO 3166-2.

func (NamedLocationCountryOutput) ElementType added in v5.2.0 

func (NamedLocationCountryOutput) ElementType() reflect.Type

func (NamedLocationCountryOutput) IncludeUnknownCountriesAndRegions added in v5.2.0 

func (o NamedLocationCountryOutput) IncludeUnknownCountriesAndRegions() pulumi.BoolPtrOutput

Whether IP addresses that don't map to a country or region should be included in the named location. Defaults to `false`.

func (NamedLocationCountryOutput) ToNamedLocationCountryOutput added in v5.2.0 

func (o NamedLocationCountryOutput) ToNamedLocationCountryOutput() NamedLocationCountryOutput

func (NamedLocationCountryOutput) ToNamedLocationCountryOutputWithContext added in v5.2.0 

func (o NamedLocationCountryOutput) ToNamedLocationCountryOutputWithContext(ctx context.Context) NamedLocationCountryOutput

func (NamedLocationCountryOutput) ToNamedLocationCountryPtrOutput added in v5.2.0 

func (o NamedLocationCountryOutput) ToNamedLocationCountryPtrOutput() NamedLocationCountryPtrOutput

func (NamedLocationCountryOutput) ToNamedLocationCountryPtrOutputWithContext added in v5.2.0 

func (o NamedLocationCountryOutput) ToNamedLocationCountryPtrOutputWithContext(ctx context.Context) NamedLocationCountryPtrOutput

type NamedLocationCountryPtrInput added in v5.2.0 

type NamedLocationCountryPtrInput interface {
	pulumi.Input

	ToNamedLocationCountryPtrOutput() NamedLocationCountryPtrOutput
	ToNamedLocationCountryPtrOutputWithContext(context.Context) NamedLocationCountryPtrOutput
}

NamedLocationCountryPtrInput is an input type that accepts NamedLocationCountryArgs, NamedLocationCountryPtr and NamedLocationCountryPtrOutput values. You can construct a concrete instance of `NamedLocationCountryPtrInput` via: 

        NamedLocationCountryArgs{...}

or:

        nil

func NamedLocationCountryPtr added in v5.2.0 

func NamedLocationCountryPtr(v *NamedLocationCountryArgs) NamedLocationCountryPtrInput

type NamedLocationCountryPtrOutput added in v5.2.0 

type NamedLocationCountryPtrOutput struct{ *pulumi.OutputState }

func (NamedLocationCountryPtrOutput) CountriesAndRegions added in v5.2.0 

func (o NamedLocationCountryPtrOutput) CountriesAndRegions() pulumi.StringArrayOutput

List of countries and/or regions in two-letter format specified by ISO 3166-2.

func (NamedLocationCountryPtrOutput) Elem added in v5.2.0 

func (o NamedLocationCountryPtrOutput) Elem() NamedLocationCountryOutput

func (NamedLocationCountryPtrOutput) ElementType added in v5.2.0 

func (NamedLocationCountryPtrOutput) ElementType() reflect.Type

func (NamedLocationCountryPtrOutput) IncludeUnknownCountriesAndRegions added in v5.2.0 

func (o NamedLocationCountryPtrOutput) IncludeUnknownCountriesAndRegions() pulumi.BoolPtrOutput

Whether IP addresses that don't map to a country or region should be included in the named location. Defaults to `false`.

func (NamedLocationCountryPtrOutput) ToNamedLocationCountryPtrOutput added in v5.2.0 

func (o NamedLocationCountryPtrOutput) ToNamedLocationCountryPtrOutput() NamedLocationCountryPtrOutput

func (NamedLocationCountryPtrOutput) ToNamedLocationCountryPtrOutputWithContext added in v5.2.0 

func (o NamedLocationCountryPtrOutput) ToNamedLocationCountryPtrOutputWithContext(ctx context.Context) NamedLocationCountryPtrOutput

type NamedLocationInput added in v5.2.0 

type NamedLocationInput interface {
	pulumi.Input

	ToNamedLocationOutput() NamedLocationOutput
	ToNamedLocationOutputWithContext(ctx context.Context) NamedLocationOutput
}

type NamedLocationIp added in v5.2.0 

type NamedLocationIp struct {
	// List of IP address ranges in IPv4 CIDR format (e.g. 1.2.3.4/32) or any allowable IPv6 format from IETF RFC596.
	IpRanges []string `pulumi:"ipRanges"`
	// Whether the named location is trusted. Defaults to `false`.
	Trusted *bool `pulumi:"trusted"`
}

type NamedLocationIpArgs added in v5.2.0 

type NamedLocationIpArgs struct {
	// List of IP address ranges in IPv4 CIDR format (e.g. 1.2.3.4/32) or any allowable IPv6 format from IETF RFC596.
	IpRanges pulumi.StringArrayInput `pulumi:"ipRanges"`
	// Whether the named location is trusted. Defaults to `false`.
	Trusted pulumi.BoolPtrInput `pulumi:"trusted"`
}

func (NamedLocationIpArgs) ElementType added in v5.2.0 

func (NamedLocationIpArgs) ElementType() reflect.Type

func (NamedLocationIpArgs) ToNamedLocationIpOutput added in v5.2.0 

func (i NamedLocationIpArgs) ToNamedLocationIpOutput() NamedLocationIpOutput

func (NamedLocationIpArgs) ToNamedLocationIpOutputWithContext added in v5.2.0 

func (i NamedLocationIpArgs) ToNamedLocationIpOutputWithContext(ctx context.Context) NamedLocationIpOutput

func (NamedLocationIpArgs) ToNamedLocationIpPtrOutput added in v5.2.0 

func (i NamedLocationIpArgs) ToNamedLocationIpPtrOutput() NamedLocationIpPtrOutput

func (NamedLocationIpArgs) ToNamedLocationIpPtrOutputWithContext added in v5.2.0 

func (i NamedLocationIpArgs) ToNamedLocationIpPtrOutputWithContext(ctx context.Context) NamedLocationIpPtrOutput

type NamedLocationIpInput added in v5.2.0 

type NamedLocationIpInput interface {
	pulumi.Input

	ToNamedLocationIpOutput() NamedLocationIpOutput
	ToNamedLocationIpOutputWithContext(context.Context) NamedLocationIpOutput
}

NamedLocationIpInput is an input type that accepts NamedLocationIpArgs and NamedLocationIpOutput values. You can construct a concrete instance of `NamedLocationIpInput` via: 

NamedLocationIpArgs{...}

type NamedLocationIpOutput added in v5.2.0 

type NamedLocationIpOutput struct{ *pulumi.OutputState }

func (NamedLocationIpOutput) ElementType added in v5.2.0 

func (NamedLocationIpOutput) ElementType() reflect.Type

func (NamedLocationIpOutput) IpRanges added in v5.2.0 

func (o NamedLocationIpOutput) IpRanges() pulumi.StringArrayOutput

List of IP address ranges in IPv4 CIDR format (e.g. 1.2.3.4/32) or any allowable IPv6 format from IETF RFC596.

func (NamedLocationIpOutput) ToNamedLocationIpOutput added in v5.2.0 

func (o NamedLocationIpOutput) ToNamedLocationIpOutput() NamedLocationIpOutput

func (NamedLocationIpOutput) ToNamedLocationIpOutputWithContext added in v5.2.0 

func (o NamedLocationIpOutput) ToNamedLocationIpOutputWithContext(ctx context.Context) NamedLocationIpOutput

func (NamedLocationIpOutput) ToNamedLocationIpPtrOutput added in v5.2.0 

func (o NamedLocationIpOutput) ToNamedLocationIpPtrOutput() NamedLocationIpPtrOutput

func (NamedLocationIpOutput) ToNamedLocationIpPtrOutputWithContext added in v5.2.0 

func (o NamedLocationIpOutput) ToNamedLocationIpPtrOutputWithContext(ctx context.Context) NamedLocationIpPtrOutput

func (NamedLocationIpOutput) Trusted added in v5.2.0 

func (o NamedLocationIpOutput) Trusted() pulumi.BoolPtrOutput

Whether the named location is trusted. Defaults to `false`.

type NamedLocationIpPtrInput added in v5.2.0 

type NamedLocationIpPtrInput interface {
	pulumi.Input

	ToNamedLocationIpPtrOutput() NamedLocationIpPtrOutput
	ToNamedLocationIpPtrOutputWithContext(context.Context) NamedLocationIpPtrOutput
}

NamedLocationIpPtrInput is an input type that accepts NamedLocationIpArgs, NamedLocationIpPtr and NamedLocationIpPtrOutput values. You can construct a concrete instance of `NamedLocationIpPtrInput` via: 

        NamedLocationIpArgs{...}

or:

        nil

func NamedLocationIpPtr added in v5.2.0 

func NamedLocationIpPtr(v *NamedLocationIpArgs) NamedLocationIpPtrInput

type NamedLocationIpPtrOutput added in v5.2.0 

type NamedLocationIpPtrOutput struct{ *pulumi.OutputState }

func (NamedLocationIpPtrOutput) Elem added in v5.2.0 

func (o NamedLocationIpPtrOutput) Elem() NamedLocationIpOutput

func (NamedLocationIpPtrOutput) ElementType added in v5.2.0 

func (NamedLocationIpPtrOutput) ElementType() reflect.Type

func (NamedLocationIpPtrOutput) IpRanges added in v5.2.0 

func (o NamedLocationIpPtrOutput) IpRanges() pulumi.StringArrayOutput

List of IP address ranges in IPv4 CIDR format (e.g. 1.2.3.4/32) or any allowable IPv6 format from IETF RFC596.

func (NamedLocationIpPtrOutput) ToNamedLocationIpPtrOutput added in v5.2.0 

func (o NamedLocationIpPtrOutput) ToNamedLocationIpPtrOutput() NamedLocationIpPtrOutput

func (NamedLocationIpPtrOutput) ToNamedLocationIpPtrOutputWithContext added in v5.2.0 

func (o NamedLocationIpPtrOutput) ToNamedLocationIpPtrOutputWithContext(ctx context.Context) NamedLocationIpPtrOutput

func (NamedLocationIpPtrOutput) Trusted added in v5.2.0 

func (o NamedLocationIpPtrOutput) Trusted() pulumi.BoolPtrOutput

Whether the named location is trusted. Defaults to `false`.

type NamedLocationMap added in v5.2.0 

type NamedLocationMap map[string]NamedLocationInput

func (NamedLocationMap) ElementType added in v5.2.0 

func (NamedLocationMap) ElementType() reflect.Type

func (NamedLocationMap) ToNamedLocationMapOutput added in v5.2.0 

func (i NamedLocationMap) ToNamedLocationMapOutput() NamedLocationMapOutput

func (NamedLocationMap) ToNamedLocationMapOutputWithContext added in v5.2.0 

func (i NamedLocationMap) ToNamedLocationMapOutputWithContext(ctx context.Context) NamedLocationMapOutput

type NamedLocationMapInput added in v5.2.0 

type NamedLocationMapInput interface {
	pulumi.Input

	ToNamedLocationMapOutput() NamedLocationMapOutput
	ToNamedLocationMapOutputWithContext(context.Context) NamedLocationMapOutput
}

NamedLocationMapInput is an input type that accepts NamedLocationMap and NamedLocationMapOutput values. You can construct a concrete instance of `NamedLocationMapInput` via: 

NamedLocationMap{ "key": NamedLocationArgs{...} }

type NamedLocationMapOutput added in v5.2.0 

type NamedLocationMapOutput struct{ *pulumi.OutputState }

func (NamedLocationMapOutput) ElementType added in v5.2.0 

func (NamedLocationMapOutput) ElementType() reflect.Type

func (NamedLocationMapOutput) MapIndex added in v5.2.0 

func (o NamedLocationMapOutput) MapIndex(k pulumi.StringInput) NamedLocationOutput

func (NamedLocationMapOutput) ToNamedLocationMapOutput added in v5.2.0 

func (o NamedLocationMapOutput) ToNamedLocationMapOutput() NamedLocationMapOutput

func (NamedLocationMapOutput) ToNamedLocationMapOutputWithContext added in v5.2.0 

func (o NamedLocationMapOutput) ToNamedLocationMapOutputWithContext(ctx context.Context) NamedLocationMapOutput

type NamedLocationOutput added in v5.2.0 

type NamedLocationOutput struct{ *pulumi.OutputState }

func (NamedLocationOutput) Country added in v5.22.0 

func (o NamedLocationOutput) Country() NamedLocationCountryPtrOutput

A `country` block as documented below, which configures a country-based named location.

func (NamedLocationOutput) DisplayName added in v5.22.0 

func (o NamedLocationOutput) DisplayName() pulumi.StringOutput

The friendly name for this named location.

func (NamedLocationOutput) ElementType added in v5.2.0 

func (NamedLocationOutput) ElementType() reflect.Type

func (NamedLocationOutput) Ip added in v5.22.0 

func (o NamedLocationOutput) Ip() NamedLocationIpPtrOutput

An `ip` block as documented below, which configures an IP-based named location.

func (NamedLocationOutput) ToNamedLocationOutput added in v5.2.0 

func (o NamedLocationOutput) ToNamedLocationOutput() NamedLocationOutput

func (NamedLocationOutput) ToNamedLocationOutputWithContext added in v5.2.0 

func (o NamedLocationOutput) ToNamedLocationOutputWithContext(ctx context.Context) NamedLocationOutput

type NamedLocationState added in v5.2.0 

type NamedLocationState struct {
	// A `country` block as documented below, which configures a country-based named location.
	Country NamedLocationCountryPtrInput
	// The friendly name for this named location.
	DisplayName pulumi.StringPtrInput
	// An `ip` block as documented below, which configures an IP-based named location.
	Ip NamedLocationIpPtrInput
}

func (NamedLocationState) ElementType added in v5.2.0 

func (NamedLocationState) ElementType() reflect.Type

type Provider 

type Provider struct {
	pulumi.ProviderResourceState

	// Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
	ClientCertificate pulumi.StringPtrOutput `pulumi:"clientCertificate"`
	// The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client
	// Certificate
	ClientCertificatePassword pulumi.StringPtrOutput `pulumi:"clientCertificatePassword"`
	// The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service
	// Principal using a Client Certificate
	ClientCertificatePath pulumi.StringPtrOutput `pulumi:"clientCertificatePath"`
	// The Client ID which should be used for service principal authentication
	ClientId pulumi.StringPtrOutput `pulumi:"clientId"`
	// The application password to use when authenticating as a Service Principal using a Client Secret
	ClientSecret pulumi.StringPtrOutput `pulumi:"clientSecret"`
	// The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also
	// `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`
	Environment pulumi.StringPtrOutput `pulumi:"environment"`
	// The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
	MsiEndpoint pulumi.StringPtrOutput `pulumi:"msiEndpoint"`
	// The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
	// Connect.
	OidcRequestToken pulumi.StringPtrOutput `pulumi:"oidcRequestToken"`
	// The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
	// using OpenID Connect.
	OidcRequestUrl pulumi.StringPtrOutput `pulumi:"oidcRequestUrl"`
	// The ID token for use when authenticating as a Service Principal using OpenID Connect.
	OidcToken pulumi.StringPtrOutput `pulumi:"oidcToken"`
	// A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
	PartnerId pulumi.StringPtrOutput `pulumi:"partnerId"`
	// The Tenant ID which should be used. Works with all authentication methods except Managed Identity
	TenantId pulumi.StringPtrOutput `pulumi:"tenantId"`
}

The provider type for the azuread package. By default, resources use package-wide configuration settings, however an explicit `Provider` instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.

func NewProvider 

func NewProvider(ctx *pulumi.Context,
	name string, args *ProviderArgs, opts ...pulumi.ResourceOption) (*Provider, error)

NewProvider registers a new resource with the given unique name, arguments, and options.

func (*Provider) ElementType 

func (*Provider) ElementType() reflect.Type

func (*Provider) ToProviderOutput 

func (i *Provider) ToProviderOutput() ProviderOutput

func (*Provider) ToProviderOutputWithContext 

func (i *Provider) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ProviderArgs 

type ProviderArgs struct {
	// Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate
	ClientCertificate pulumi.StringPtrInput
	// The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client
	// Certificate
	ClientCertificatePassword pulumi.StringPtrInput
	// The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service
	// Principal using a Client Certificate
	ClientCertificatePath pulumi.StringPtrInput
	// The Client ID which should be used for service principal authentication
	ClientId pulumi.StringPtrInput
	// The application password to use when authenticating as a Service Principal using a Client Secret
	ClientSecret pulumi.StringPtrInput
	// Disable the Terraform Partner ID, which is used if a custom `partner_id` isn't specified
	DisableTerraformPartnerId pulumi.BoolPtrInput
	// The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also
	// `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`
	Environment pulumi.StringPtrInput
	// The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically
	MsiEndpoint pulumi.StringPtrInput
	// The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID
	// Connect.
	OidcRequestToken pulumi.StringPtrInput
	// The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal
	// using OpenID Connect.
	OidcRequestUrl pulumi.StringPtrInput
	// The ID token for use when authenticating as a Service Principal using OpenID Connect.
	OidcToken pulumi.StringPtrInput
	// A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution
	PartnerId pulumi.StringPtrInput
	// The Tenant ID which should be used. Works with all authentication methods except Managed Identity
	TenantId pulumi.StringPtrInput
	// Allow Azure CLI to be used for Authentication
	UseCli pulumi.BoolPtrInput
	// Allow Managed Identity to be used for Authentication
	UseMsi pulumi.BoolPtrInput
	// Allow OpenID Connect to be used for authentication
	UseOidc pulumi.BoolPtrInput
}

The set of arguments for constructing a Provider resource.

func (ProviderArgs) ElementType 

func (ProviderArgs) ElementType() reflect.Type

type ProviderInput 

type ProviderInput interface {
	pulumi.Input

	ToProviderOutput() ProviderOutput
	ToProviderOutputWithContext(ctx context.Context) ProviderOutput
}

type ProviderOutput 

type ProviderOutput struct{ *pulumi.OutputState }

func (ProviderOutput) ClientCertificate added in v5.22.0 

func (o ProviderOutput) ClientCertificate() pulumi.StringPtrOutput

Base64 encoded PKCS#12 certificate bundle to use when authenticating as a Service Principal using a Client Certificate

func (ProviderOutput) ClientCertificatePassword added in v5.22.0 

func (o ProviderOutput) ClientCertificatePassword() pulumi.StringPtrOutput

The password to decrypt the Client Certificate. For use when authenticating as a Service Principal using a Client Certificate

func (ProviderOutput) ClientCertificatePath added in v5.22.0 

func (o ProviderOutput) ClientCertificatePath() pulumi.StringPtrOutput

The path to the Client Certificate associated with the Service Principal for use when authenticating as a Service Principal using a Client Certificate

func (ProviderOutput) ClientId added in v5.22.0 

func (o ProviderOutput) ClientId() pulumi.StringPtrOutput

The Client ID which should be used for service principal authentication

func (ProviderOutput) ClientSecret added in v5.22.0 

func (o ProviderOutput) ClientSecret() pulumi.StringPtrOutput

The application password to use when authenticating as a Service Principal using a Client Secret

func (ProviderOutput) ElementType 

func (ProviderOutput) ElementType() reflect.Type

func (ProviderOutput) Environment added in v5.22.0 

func (o ProviderOutput) Environment() pulumi.StringPtrOutput

The cloud environment which should be used. Possible values are: `global` (also `public`), `usgovernmentl4` (also `usgovernment`), `usgovernmentl5` (also `dod`), and `china`. Defaults to `global`

func (ProviderOutput) MsiEndpoint added in v5.22.0 

func (o ProviderOutput) MsiEndpoint() pulumi.StringPtrOutput

The path to a custom endpoint for Managed Identity - in most circumstances this should be detected automatically

func (ProviderOutput) OidcRequestToken added in v5.23.0 

func (o ProviderOutput) OidcRequestToken() pulumi.StringPtrOutput

The bearer token for the request to the OIDC provider. For use when authenticating as a Service Principal using OpenID Connect.

func (ProviderOutput) OidcRequestUrl added in v5.23.0 

func (o ProviderOutput) OidcRequestUrl() pulumi.StringPtrOutput

The URL for the OIDC provider from which to request an ID token. For use when authenticating as a Service Principal using OpenID Connect.

func (ProviderOutput) OidcToken added in v5.28.0 

func (o ProviderOutput) OidcToken() pulumi.StringPtrOutput

The ID token for use when authenticating as a Service Principal using OpenID Connect.

func (ProviderOutput) PartnerId added in v5.22.0 

func (o ProviderOutput) PartnerId() pulumi.StringPtrOutput

A GUID/UUID that is registered with Microsoft to facilitate partner resource usage attribution

func (ProviderOutput) TenantId added in v5.22.0 

func (o ProviderOutput) TenantId() pulumi.StringPtrOutput

The Tenant ID which should be used. Works with all authentication methods except Managed Identity

func (ProviderOutput) ToProviderOutput 

func (o ProviderOutput) ToProviderOutput() ProviderOutput

func (ProviderOutput) ToProviderOutputWithContext 

func (o ProviderOutput) ToProviderOutputWithContext(ctx context.Context) ProviderOutput

type ServicePrincipal 

type ServicePrincipal struct {
	pulumi.CustomResourceState

	// Whether or not the service principal account is enabled. Defaults to `true`.
	AccountEnabled pulumi.BoolPtrOutput `pulumi:"accountEnabled"`
	// A set of alternative names, used to retrieve service principals by subscription, identify resource group and full resource ids for managed identities.
	AlternativeNames pulumi.StringArrayOutput `pulumi:"alternativeNames"`
	// Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application. Defaults to `false`.
	AppRoleAssignmentRequired pulumi.BoolPtrOutput `pulumi:"appRoleAssignmentRequired"`
	// A mapping of app role values to app role IDs, as published by the associated application, intended to be useful when referencing app roles in other resources in your configuration.
	AppRoleIds pulumi.StringMapOutput `pulumi:"appRoleIds"`
	// A list of app roles published by the associated application, as documented below. For more information [official documentation](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles ServicePrincipalAppRoleArrayOutput `pulumi:"appRoles"`
	// The application ID (client ID) of the application for which to create a service principal.
	ApplicationId pulumi.StringOutput `pulumi:"applicationId"`
	// The tenant ID where the associated application is registered.
	ApplicationTenantId pulumi.StringOutput `pulumi:"applicationTenantId"`
	// A description of the service principal provided for internal end-users.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// A `featureTags` block as described below. Cannot be used together with the `tags` property.
	FeatureTags ServicePrincipalFeatureTagArrayOutput `pulumi:"featureTags"`
	// Block of features to configure for this service principal using tags
	//
	// Deprecated: This block has been renamed to `feature_tags` and will be removed in version 3.0 of the provider
	Features ServicePrincipalFeatureArrayOutput `pulumi:"features"`
	// Home page or landing page of the associated application.
	HomepageUrl pulumi.StringOutput `pulumi:"homepageUrl"`
	// The URL where the service provider redirects the user to Azure AD to authenticate. Azure AD uses the URL to launch the application from Microsoft 365 or the Azure AD My Apps. When blank, Azure AD performs IdP-initiated sign-on for applications configured with SAML-based single sign-on.
	LoginUrl pulumi.StringPtrOutput `pulumi:"loginUrl"`
	// The URL that will be used by Microsoft's authorization service to log out an user using OpenId Connect front-channel, back-channel or SAML logout protocols, taken from the associated application.
	LogoutUrl pulumi.StringOutput `pulumi:"logoutUrl"`
	// A free text field to capture information about the service principal, typically used for operational purposes.
	Notes pulumi.StringPtrOutput `pulumi:"notes"`
	// A set of email addresses where Azure AD sends a notification when the active certificate is near the expiration date. This is only for the certificates used to sign the SAML token issued for Azure AD Gallery applications.
	NotificationEmailAddresses pulumi.StringArrayOutput `pulumi:"notificationEmailAddresses"`
	// A mapping of OAuth2.0 permission scope values to scope IDs, as exposed by the associated application, intended to be useful when referencing permission scopes in other resources in your configuration.
	Oauth2PermissionScopeIds pulumi.StringMapOutput `pulumi:"oauth2PermissionScopeIds"`
	// A list of OAuth 2.0 delegated permission scopes exposed by the associated application, as documented below.
	Oauth2PermissionScopes ServicePrincipalOauth2PermissionScopeArrayOutput `pulumi:"oauth2PermissionScopes"`
	// The object ID of the service principal.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// A set of object IDs of principals that will be granted ownership of the service principal. Supported object types are users or service principals. By default, no owners are assigned.
	Owners pulumi.StringArrayOutput `pulumi:"owners"`
	// The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps. Supported values are `oidc`, `password`, `saml` or `notSupported`. Omit this property or specify a blank string to unset.
	PreferredSingleSignOnMode pulumi.StringPtrOutput `pulumi:"preferredSingleSignOnMode"`
	// A list of URLs where user tokens are sent for sign-in with the associated application, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent for the associated application.
	RedirectUris pulumi.StringArrayOutput `pulumi:"redirectUris"`
	// The URL where the service exposes SAML metadata for federation.
	SamlMetadataUrl pulumi.StringOutput `pulumi:"samlMetadataUrl"`
	// A `samlSingleSignOn` block as documented below.
	SamlSingleSignOn ServicePrincipalSamlSingleSignOnPtrOutput `pulumi:"samlSingleSignOn"`
	// A list of identifier URI(s), copied over from the associated application.
	ServicePrincipalNames pulumi.StringArrayOutput `pulumi:"servicePrincipalNames"`
	// The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.
	SignInAudience pulumi.StringOutput `pulumi:"signInAudience"`
	// A set of tags to apply to the service principal. Cannot be used together with the `featureTags` block.
	Tags pulumi.StringArrayOutput `pulumi:"tags"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type pulumi.StringOutput `pulumi:"type"`
	// When true, any existing service principal linked to the same application will be automatically imported. When false, an import error will be raised for any pre-existing service principal.
	UseExisting pulumi.BoolPtrOutput `pulumi:"useExisting"`
}

Manages a service principal associated with an application within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `Application.ReadWrite.All` or `Directory.ReadWrite.All`

It is not currently possible to manage service principals whilst having only the `Application.ReadWrite.OwnedBy` role granted.

When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`

## Example Usage

*Create a service principal for an application*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := azuread.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			Owners: pulumi.StringArray{
				pulumi.String(current.ObjectId),
			},
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId:             exampleApplication.ApplicationId,
			AppRoleAssignmentRequired: pulumi.Bool(false),
			Owners: pulumi.StringArray{
				pulumi.String(current.ObjectId),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Create a service principal for an enterprise application*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := azuread.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			Owners: pulumi.StringArray{
				pulumi.String(current.ObjectId),
			},
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId:             exampleApplication.ApplicationId,
			AppRoleAssignmentRequired: pulumi.Bool(false),
			Owners: pulumi.StringArray{
				pulumi.String(current.ObjectId),
			},
			FeatureTags: ServicePrincipalFeatureTagArray{
				&ServicePrincipalFeatureTagArgs{
					Enterprise: pulumi.Bool(true),
					Gallery:    pulumi.Bool(true),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Manage a service principal for a first-party Microsoft application*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		wellKnown, err := azuread.GetApplicationPublishedAppIds(ctx, nil, nil)
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "msgraph", &azuread.ServicePrincipalArgs{
			ApplicationId: pulumi.String(wellKnown.Result.MicrosoftGraph),
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Create a service principal for an application created from a gallery template*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleApplicationTemplate, err := azuread.GetApplicationTemplate(ctx, &GetApplicationTemplateArgs{
			DisplayName: pulumi.StringRef("Marketo"),
		}, nil)
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			TemplateId:  pulumi.String(exampleApplicationTemplate.TemplateId),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Service principals can be imported using their object ID, e.g.

```sh 

$ pulumi import azuread:index/servicePrincipal:ServicePrincipal test 00000000-0000-0000-0000-000000000000

```

func GetServicePrincipal 

func GetServicePrincipal(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePrincipalState, opts ...pulumi.ResourceOption) (*ServicePrincipal, error)

GetServicePrincipal gets an existing ServicePrincipal resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePrincipal 

func NewServicePrincipal(ctx *pulumi.Context,
	name string, args *ServicePrincipalArgs, opts ...pulumi.ResourceOption) (*ServicePrincipal, error)

NewServicePrincipal registers a new resource with the given unique name, arguments, and options.

func (*ServicePrincipal) ElementType 

func (*ServicePrincipal) ElementType() reflect.Type

func (*ServicePrincipal) ToServicePrincipalOutput 

func (i *ServicePrincipal) ToServicePrincipalOutput() ServicePrincipalOutput

func (*ServicePrincipal) ToServicePrincipalOutputWithContext 

func (i *ServicePrincipal) ToServicePrincipalOutputWithContext(ctx context.Context) ServicePrincipalOutput

type ServicePrincipalAppRole 

type ServicePrincipalAppRole struct {
	// Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are: `User` and `Application`, or both.
	AllowedMemberTypes []string `pulumi:"allowedMemberTypes"`
	// A description of the service principal provided for internal end-users.
	Description *string `pulumi:"description"`
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName *string `pulumi:"displayName"`
	// Specifies whether the permission scope is enabled.
	Enabled *bool `pulumi:"enabled"`
	// The unique identifier of the delegated permission.
	Id *string `pulumi:"id"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value *string `pulumi:"value"`
}

type ServicePrincipalAppRoleArgs 

type ServicePrincipalAppRoleArgs struct {
	// Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are: `User` and `Application`, or both.
	AllowedMemberTypes pulumi.StringArrayInput `pulumi:"allowedMemberTypes"`
	// A description of the service principal provided for internal end-users.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName pulumi.StringPtrInput `pulumi:"displayName"`
	// Specifies whether the permission scope is enabled.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The unique identifier of the delegated permission.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (ServicePrincipalAppRoleArgs) ElementType 

func (ServicePrincipalAppRoleArgs) ElementType() reflect.Type

func (ServicePrincipalAppRoleArgs) ToServicePrincipalAppRoleOutput 

func (i ServicePrincipalAppRoleArgs) ToServicePrincipalAppRoleOutput() ServicePrincipalAppRoleOutput

func (ServicePrincipalAppRoleArgs) ToServicePrincipalAppRoleOutputWithContext 

func (i ServicePrincipalAppRoleArgs) ToServicePrincipalAppRoleOutputWithContext(ctx context.Context) ServicePrincipalAppRoleOutput

type ServicePrincipalAppRoleArray 

type ServicePrincipalAppRoleArray []ServicePrincipalAppRoleInput

func (ServicePrincipalAppRoleArray) ElementType 

func (ServicePrincipalAppRoleArray) ElementType() reflect.Type

func (ServicePrincipalAppRoleArray) ToServicePrincipalAppRoleArrayOutput 

func (i ServicePrincipalAppRoleArray) ToServicePrincipalAppRoleArrayOutput() ServicePrincipalAppRoleArrayOutput

func (ServicePrincipalAppRoleArray) ToServicePrincipalAppRoleArrayOutputWithContext 

func (i ServicePrincipalAppRoleArray) ToServicePrincipalAppRoleArrayOutputWithContext(ctx context.Context) ServicePrincipalAppRoleArrayOutput

type ServicePrincipalAppRoleArrayInput 

type ServicePrincipalAppRoleArrayInput interface {
	pulumi.Input

	ToServicePrincipalAppRoleArrayOutput() ServicePrincipalAppRoleArrayOutput
	ToServicePrincipalAppRoleArrayOutputWithContext(context.Context) ServicePrincipalAppRoleArrayOutput
}

ServicePrincipalAppRoleArrayInput is an input type that accepts ServicePrincipalAppRoleArray and ServicePrincipalAppRoleArrayOutput values. You can construct a concrete instance of `ServicePrincipalAppRoleArrayInput` via: 

ServicePrincipalAppRoleArray{ ServicePrincipalAppRoleArgs{...} }

type ServicePrincipalAppRoleArrayOutput 

type ServicePrincipalAppRoleArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalAppRoleArrayOutput) ElementType 

func (ServicePrincipalAppRoleArrayOutput) ElementType() reflect.Type

func (ServicePrincipalAppRoleArrayOutput) Index 

func (o ServicePrincipalAppRoleArrayOutput) Index(i pulumi.IntInput) ServicePrincipalAppRoleOutput

func (ServicePrincipalAppRoleArrayOutput) ToServicePrincipalAppRoleArrayOutput 

func (o ServicePrincipalAppRoleArrayOutput) ToServicePrincipalAppRoleArrayOutput() ServicePrincipalAppRoleArrayOutput

func (ServicePrincipalAppRoleArrayOutput) ToServicePrincipalAppRoleArrayOutputWithContext 

func (o ServicePrincipalAppRoleArrayOutput) ToServicePrincipalAppRoleArrayOutputWithContext(ctx context.Context) ServicePrincipalAppRoleArrayOutput

type ServicePrincipalAppRoleInput 

type ServicePrincipalAppRoleInput interface {
	pulumi.Input

	ToServicePrincipalAppRoleOutput() ServicePrincipalAppRoleOutput
	ToServicePrincipalAppRoleOutputWithContext(context.Context) ServicePrincipalAppRoleOutput
}

ServicePrincipalAppRoleInput is an input type that accepts ServicePrincipalAppRoleArgs and ServicePrincipalAppRoleOutput values. You can construct a concrete instance of `ServicePrincipalAppRoleInput` via: 

ServicePrincipalAppRoleArgs{...}

type ServicePrincipalAppRoleOutput 

type ServicePrincipalAppRoleOutput struct{ *pulumi.OutputState }

func (ServicePrincipalAppRoleOutput) AllowedMemberTypes 

func (o ServicePrincipalAppRoleOutput) AllowedMemberTypes() pulumi.StringArrayOutput

Specifies whether this app role definition can be assigned to users and groups, or to other applications (that are accessing this application in a standalone scenario). Possible values are: `User` and `Application`, or both.

func (ServicePrincipalAppRoleOutput) Description 

func (o ServicePrincipalAppRoleOutput) Description() pulumi.StringPtrOutput

A description of the service principal provided for internal end-users.

func (ServicePrincipalAppRoleOutput) DisplayName 

func (o ServicePrincipalAppRoleOutput) DisplayName() pulumi.StringPtrOutput

Display name for the app role that appears during app role assignment and in consent experiences.

func (ServicePrincipalAppRoleOutput) ElementType 

func (ServicePrincipalAppRoleOutput) ElementType() reflect.Type

func (ServicePrincipalAppRoleOutput) Enabled 

func (o ServicePrincipalAppRoleOutput) Enabled() pulumi.BoolPtrOutput

Specifies whether the permission scope is enabled.

func (ServicePrincipalAppRoleOutput) Id 

func (o ServicePrincipalAppRoleOutput) Id() pulumi.StringPtrOutput

The unique identifier of the delegated permission.

func (ServicePrincipalAppRoleOutput) ToServicePrincipalAppRoleOutput 

func (o ServicePrincipalAppRoleOutput) ToServicePrincipalAppRoleOutput() ServicePrincipalAppRoleOutput

func (ServicePrincipalAppRoleOutput) ToServicePrincipalAppRoleOutputWithContext 

func (o ServicePrincipalAppRoleOutput) ToServicePrincipalAppRoleOutputWithContext(ctx context.Context) ServicePrincipalAppRoleOutput

func (ServicePrincipalAppRoleOutput) Value 

func (o ServicePrincipalAppRoleOutput) Value() pulumi.StringPtrOutput

The value that is used for the `scp` claim in OAuth 2.0 access tokens.

type ServicePrincipalArgs 

type ServicePrincipalArgs struct {
	// Whether or not the service principal account is enabled. Defaults to `true`.
	AccountEnabled pulumi.BoolPtrInput
	// A set of alternative names, used to retrieve service principals by subscription, identify resource group and full resource ids for managed identities.
	AlternativeNames pulumi.StringArrayInput
	// Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application. Defaults to `false`.
	AppRoleAssignmentRequired pulumi.BoolPtrInput
	// The application ID (client ID) of the application for which to create a service principal.
	ApplicationId pulumi.StringInput
	// A description of the service principal provided for internal end-users.
	Description pulumi.StringPtrInput
	// A `featureTags` block as described below. Cannot be used together with the `tags` property.
	FeatureTags ServicePrincipalFeatureTagArrayInput
	// Block of features to configure for this service principal using tags
	//
	// Deprecated: This block has been renamed to `feature_tags` and will be removed in version 3.0 of the provider
	Features ServicePrincipalFeatureArrayInput
	// The URL where the service provider redirects the user to Azure AD to authenticate. Azure AD uses the URL to launch the application from Microsoft 365 or the Azure AD My Apps. When blank, Azure AD performs IdP-initiated sign-on for applications configured with SAML-based single sign-on.
	LoginUrl pulumi.StringPtrInput
	// A free text field to capture information about the service principal, typically used for operational purposes.
	Notes pulumi.StringPtrInput
	// A set of email addresses where Azure AD sends a notification when the active certificate is near the expiration date. This is only for the certificates used to sign the SAML token issued for Azure AD Gallery applications.
	NotificationEmailAddresses pulumi.StringArrayInput
	// A set of object IDs of principals that will be granted ownership of the service principal. Supported object types are users or service principals. By default, no owners are assigned.
	Owners pulumi.StringArrayInput
	// The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps. Supported values are `oidc`, `password`, `saml` or `notSupported`. Omit this property or specify a blank string to unset.
	PreferredSingleSignOnMode pulumi.StringPtrInput
	// A `samlSingleSignOn` block as documented below.
	SamlSingleSignOn ServicePrincipalSamlSingleSignOnPtrInput
	// A set of tags to apply to the service principal. Cannot be used together with the `featureTags` block.
	Tags pulumi.StringArrayInput
	// When true, any existing service principal linked to the same application will be automatically imported. When false, an import error will be raised for any pre-existing service principal.
	UseExisting pulumi.BoolPtrInput
}

The set of arguments for constructing a ServicePrincipal resource.

func (ServicePrincipalArgs) ElementType 

func (ServicePrincipalArgs) ElementType() reflect.Type

type ServicePrincipalArray 

type ServicePrincipalArray []ServicePrincipalInput

func (ServicePrincipalArray) ElementType 

func (ServicePrincipalArray) ElementType() reflect.Type

func (ServicePrincipalArray) ToServicePrincipalArrayOutput 

func (i ServicePrincipalArray) ToServicePrincipalArrayOutput() ServicePrincipalArrayOutput

func (ServicePrincipalArray) ToServicePrincipalArrayOutputWithContext 

func (i ServicePrincipalArray) ToServicePrincipalArrayOutputWithContext(ctx context.Context) ServicePrincipalArrayOutput

type ServicePrincipalArrayInput 

type ServicePrincipalArrayInput interface {
	pulumi.Input

	ToServicePrincipalArrayOutput() ServicePrincipalArrayOutput
	ToServicePrincipalArrayOutputWithContext(context.Context) ServicePrincipalArrayOutput
}

ServicePrincipalArrayInput is an input type that accepts ServicePrincipalArray and ServicePrincipalArrayOutput values. You can construct a concrete instance of `ServicePrincipalArrayInput` via: 

ServicePrincipalArray{ ServicePrincipalArgs{...} }

type ServicePrincipalArrayOutput 

type ServicePrincipalArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalArrayOutput) ElementType 

func (ServicePrincipalArrayOutput) ElementType() reflect.Type

func (ServicePrincipalArrayOutput) Index 

func (o ServicePrincipalArrayOutput) Index(i pulumi.IntInput) ServicePrincipalOutput

func (ServicePrincipalArrayOutput) ToServicePrincipalArrayOutput 

func (o ServicePrincipalArrayOutput) ToServicePrincipalArrayOutput() ServicePrincipalArrayOutput

func (ServicePrincipalArrayOutput) ToServicePrincipalArrayOutputWithContext 

func (o ServicePrincipalArrayOutput) ToServicePrincipalArrayOutputWithContext(ctx context.Context) ServicePrincipalArrayOutput

type ServicePrincipalCertificate 

type ServicePrincipalCertificate struct {
	pulumi.CustomResourceState

	// Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.
	Encoding pulumi.StringPtrOutput `pulumi:"encoding"`
	// The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringOutput `pulumi:"endDate"`
	// A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrOutput `pulumi:"endDateRelative"`
	// A UUID used to uniquely identify this certificate. If not specified a UUID will be automatically generated. Changing this field forces a new resource to be created.
	KeyId pulumi.StringOutput `pulumi:"keyId"`
	// The object ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
	ServicePrincipalId pulumi.StringOutput `pulumi:"servicePrincipalId"`
	// The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringOutput `pulumi:"startDate"`
	// The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.
	Type pulumi.StringPtrOutput `pulumi:"type"`
	// The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.
	Value pulumi.StringOutput `pulumi:"value"`
}

Manages a certificate associated with a service principal within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `Application.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`

## Import

Certificates can be imported using the object ID of the associated service principal and the key ID of the certificate credential, e.g.

```sh 

$ pulumi import azuread:index/servicePrincipalCertificate:ServicePrincipalCertificate test 00000000-0000-0000-0000-000000000000/certificate/11111111-1111-1111-1111-111111111111

``` 

-> This ID format is unique to Terraform and is composed of the service principal's object ID, the string "certificate" and the certificate's key ID in the format `{ServicePrincipalObjectId}/certificate/{CertificateKeyId}`.

func GetServicePrincipalCertificate 

func GetServicePrincipalCertificate(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePrincipalCertificateState, opts ...pulumi.ResourceOption) (*ServicePrincipalCertificate, error)

GetServicePrincipalCertificate gets an existing ServicePrincipalCertificate resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePrincipalCertificate 

func NewServicePrincipalCertificate(ctx *pulumi.Context,
	name string, args *ServicePrincipalCertificateArgs, opts ...pulumi.ResourceOption) (*ServicePrincipalCertificate, error)

NewServicePrincipalCertificate registers a new resource with the given unique name, arguments, and options.

func (*ServicePrincipalCertificate) ElementType 

func (*ServicePrincipalCertificate) ElementType() reflect.Type

func (*ServicePrincipalCertificate) ToServicePrincipalCertificateOutput 

func (i *ServicePrincipalCertificate) ToServicePrincipalCertificateOutput() ServicePrincipalCertificateOutput

func (*ServicePrincipalCertificate) ToServicePrincipalCertificateOutputWithContext 

func (i *ServicePrincipalCertificate) ToServicePrincipalCertificateOutputWithContext(ctx context.Context) ServicePrincipalCertificateOutput

type ServicePrincipalCertificateArgs 

type ServicePrincipalCertificateArgs struct {
	// Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.
	Encoding pulumi.StringPtrInput
	// The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A UUID used to uniquely identify this certificate. If not specified a UUID will be automatically generated. Changing this field forces a new resource to be created.
	KeyId pulumi.StringPtrInput
	// The object ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
	ServicePrincipalId pulumi.StringInput
	// The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
	// The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.
	Type pulumi.StringPtrInput
	// The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.
	Value pulumi.StringInput
}

The set of arguments for constructing a ServicePrincipalCertificate resource.

func (ServicePrincipalCertificateArgs) ElementType 

func (ServicePrincipalCertificateArgs) ElementType() reflect.Type

type ServicePrincipalCertificateArray 

type ServicePrincipalCertificateArray []ServicePrincipalCertificateInput

func (ServicePrincipalCertificateArray) ElementType 

func (ServicePrincipalCertificateArray) ElementType() reflect.Type

func (ServicePrincipalCertificateArray) ToServicePrincipalCertificateArrayOutput 

func (i ServicePrincipalCertificateArray) ToServicePrincipalCertificateArrayOutput() ServicePrincipalCertificateArrayOutput

func (ServicePrincipalCertificateArray) ToServicePrincipalCertificateArrayOutputWithContext 

func (i ServicePrincipalCertificateArray) ToServicePrincipalCertificateArrayOutputWithContext(ctx context.Context) ServicePrincipalCertificateArrayOutput

type ServicePrincipalCertificateArrayInput 

type ServicePrincipalCertificateArrayInput interface {
	pulumi.Input

	ToServicePrincipalCertificateArrayOutput() ServicePrincipalCertificateArrayOutput
	ToServicePrincipalCertificateArrayOutputWithContext(context.Context) ServicePrincipalCertificateArrayOutput
}

ServicePrincipalCertificateArrayInput is an input type that accepts ServicePrincipalCertificateArray and ServicePrincipalCertificateArrayOutput values. You can construct a concrete instance of `ServicePrincipalCertificateArrayInput` via: 

ServicePrincipalCertificateArray{ ServicePrincipalCertificateArgs{...} }

type ServicePrincipalCertificateArrayOutput 

type ServicePrincipalCertificateArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalCertificateArrayOutput) ElementType 

func (ServicePrincipalCertificateArrayOutput) ElementType() reflect.Type

func (ServicePrincipalCertificateArrayOutput) Index 

func (o ServicePrincipalCertificateArrayOutput) Index(i pulumi.IntInput) ServicePrincipalCertificateOutput

func (ServicePrincipalCertificateArrayOutput) ToServicePrincipalCertificateArrayOutput 

func (o ServicePrincipalCertificateArrayOutput) ToServicePrincipalCertificateArrayOutput() ServicePrincipalCertificateArrayOutput

func (ServicePrincipalCertificateArrayOutput) ToServicePrincipalCertificateArrayOutputWithContext 

func (o ServicePrincipalCertificateArrayOutput) ToServicePrincipalCertificateArrayOutputWithContext(ctx context.Context) ServicePrincipalCertificateArrayOutput

type ServicePrincipalCertificateInput 

type ServicePrincipalCertificateInput interface {
	pulumi.Input

	ToServicePrincipalCertificateOutput() ServicePrincipalCertificateOutput
	ToServicePrincipalCertificateOutputWithContext(ctx context.Context) ServicePrincipalCertificateOutput
}

type ServicePrincipalCertificateMap 

type ServicePrincipalCertificateMap map[string]ServicePrincipalCertificateInput

func (ServicePrincipalCertificateMap) ElementType 

func (ServicePrincipalCertificateMap) ElementType() reflect.Type

func (ServicePrincipalCertificateMap) ToServicePrincipalCertificateMapOutput 

func (i ServicePrincipalCertificateMap) ToServicePrincipalCertificateMapOutput() ServicePrincipalCertificateMapOutput

func (ServicePrincipalCertificateMap) ToServicePrincipalCertificateMapOutputWithContext 

func (i ServicePrincipalCertificateMap) ToServicePrincipalCertificateMapOutputWithContext(ctx context.Context) ServicePrincipalCertificateMapOutput

type ServicePrincipalCertificateMapInput 

type ServicePrincipalCertificateMapInput interface {
	pulumi.Input

	ToServicePrincipalCertificateMapOutput() ServicePrincipalCertificateMapOutput
	ToServicePrincipalCertificateMapOutputWithContext(context.Context) ServicePrincipalCertificateMapOutput
}

ServicePrincipalCertificateMapInput is an input type that accepts ServicePrincipalCertificateMap and ServicePrincipalCertificateMapOutput values. You can construct a concrete instance of `ServicePrincipalCertificateMapInput` via: 

ServicePrincipalCertificateMap{ "key": ServicePrincipalCertificateArgs{...} }

type ServicePrincipalCertificateMapOutput 

type ServicePrincipalCertificateMapOutput struct{ *pulumi.OutputState }

func (ServicePrincipalCertificateMapOutput) ElementType 

func (ServicePrincipalCertificateMapOutput) ElementType() reflect.Type

func (ServicePrincipalCertificateMapOutput) MapIndex 

func (o ServicePrincipalCertificateMapOutput) MapIndex(k pulumi.StringInput) ServicePrincipalCertificateOutput

func (ServicePrincipalCertificateMapOutput) ToServicePrincipalCertificateMapOutput 

func (o ServicePrincipalCertificateMapOutput) ToServicePrincipalCertificateMapOutput() ServicePrincipalCertificateMapOutput

func (ServicePrincipalCertificateMapOutput) ToServicePrincipalCertificateMapOutputWithContext 

func (o ServicePrincipalCertificateMapOutput) ToServicePrincipalCertificateMapOutputWithContext(ctx context.Context) ServicePrincipalCertificateMapOutput

type ServicePrincipalCertificateOutput 

type ServicePrincipalCertificateOutput struct{ *pulumi.OutputState }

func (ServicePrincipalCertificateOutput) ElementType 

func (ServicePrincipalCertificateOutput) ElementType() reflect.Type

func (ServicePrincipalCertificateOutput) Encoding added in v5.22.0 

func (o ServicePrincipalCertificateOutput) Encoding() pulumi.StringPtrOutput

Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.

func (ServicePrincipalCertificateOutput) EndDate added in v5.22.0 

func (o ServicePrincipalCertificateOutput) EndDate() pulumi.StringOutput

The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.

func (ServicePrincipalCertificateOutput) EndDateRelative added in v5.22.0 

func (o ServicePrincipalCertificateOutput) EndDateRelative() pulumi.StringPtrOutput

A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". Changing this field forces a new resource to be created.

func (ServicePrincipalCertificateOutput) KeyId added in v5.22.0 

func (o ServicePrincipalCertificateOutput) KeyId() pulumi.StringOutput

A UUID used to uniquely identify this certificate. If not specified a UUID will be automatically generated. Changing this field forces a new resource to be created.

func (ServicePrincipalCertificateOutput) ServicePrincipalId added in v5.22.0 

func (o ServicePrincipalCertificateOutput) ServicePrincipalId() pulumi.StringOutput

The object ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.

func (ServicePrincipalCertificateOutput) StartDate added in v5.22.0 

func (o ServicePrincipalCertificateOutput) StartDate() pulumi.StringOutput

The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.

func (ServicePrincipalCertificateOutput) ToServicePrincipalCertificateOutput 

func (o ServicePrincipalCertificateOutput) ToServicePrincipalCertificateOutput() ServicePrincipalCertificateOutput

func (ServicePrincipalCertificateOutput) ToServicePrincipalCertificateOutputWithContext 

func (o ServicePrincipalCertificateOutput) ToServicePrincipalCertificateOutputWithContext(ctx context.Context) ServicePrincipalCertificateOutput

func (ServicePrincipalCertificateOutput) Type added in v5.22.0 

func (o ServicePrincipalCertificateOutput) Type() pulumi.StringPtrOutput

The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.

func (ServicePrincipalCertificateOutput) Value added in v5.22.0 

func (o ServicePrincipalCertificateOutput) Value() pulumi.StringOutput

The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.

type ServicePrincipalCertificateState 

type ServicePrincipalCertificateState struct {
	// Specifies the encoding used for the supplied certificate data. Must be one of `pem`, `base64` or `hex`. Defaults to `pem`.
	Encoding pulumi.StringPtrInput
	// The end date until which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the certificate is valid until, for example `240h` (10 days) or `2400h30m`. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A UUID used to uniquely identify this certificate. If not specified a UUID will be automatically generated. Changing this field forces a new resource to be created.
	KeyId pulumi.StringPtrInput
	// The object ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
	ServicePrincipalId pulumi.StringPtrInput
	// The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
	// The type of key/certificate. Must be one of `AsymmetricX509Cert` or `Symmetric`. Changing this fields forces a new resource to be created.
	Type pulumi.StringPtrInput
	// The certificate data, which can be PEM encoded, base64 encoded DER or hexadecimal encoded DER. See also the `encoding` argument.
	Value pulumi.StringPtrInput
}

func (ServicePrincipalCertificateState) ElementType 

func (ServicePrincipalCertificateState) ElementType() reflect.Type

type ServicePrincipalClaimsMappingPolicyAssignment added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignment struct {
	pulumi.CustomResourceState

	// The ID of the claims mapping policy to assign.
	ClaimsMappingPolicyId pulumi.StringOutput `pulumi:"claimsMappingPolicyId"`
	// The object ID of the service principal for the policy assignment.
	ServicePrincipalId pulumi.StringOutput `pulumi:"servicePrincipalId"`
}

Manages a Claims Mapping Policy Assignment within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires the following application roles: `Policy.ReadWrite.ApplicationConfiguration`

When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewServicePrincipalClaimsMappingPolicyAssignment(ctx, "app", &azuread.ServicePrincipalClaimsMappingPolicyAssignmentArgs{
			ClaimsMappingPolicyId: pulumi.Any(azuread_claims_mapping_policy.My_policy.Id),
			ServicePrincipalId:    pulumi.Any(azuread_service_principal.My_principal.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Claims Mapping Policy can be imported using the `id`, in the form `service-principal-uuid/claimsMappingPolicy/claims-mapping-policy-uuid`, e.g

```sh 

$ pulumi import azuread:index/servicePrincipalClaimsMappingPolicyAssignment:ServicePrincipalClaimsMappingPolicyAssignment app 00000000-0000-0000-0000-000000000000/claimsMappingPolicy/11111111-0000-0000-0000-000000000000

```

func GetServicePrincipalClaimsMappingPolicyAssignment added in v5.19.0 

func GetServicePrincipalClaimsMappingPolicyAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePrincipalClaimsMappingPolicyAssignmentState, opts ...pulumi.ResourceOption) (*ServicePrincipalClaimsMappingPolicyAssignment, error)

GetServicePrincipalClaimsMappingPolicyAssignment gets an existing ServicePrincipalClaimsMappingPolicyAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePrincipalClaimsMappingPolicyAssignment added in v5.19.0 

func NewServicePrincipalClaimsMappingPolicyAssignment(ctx *pulumi.Context,
	name string, args *ServicePrincipalClaimsMappingPolicyAssignmentArgs, opts ...pulumi.ResourceOption) (*ServicePrincipalClaimsMappingPolicyAssignment, error)

NewServicePrincipalClaimsMappingPolicyAssignment registers a new resource with the given unique name, arguments, and options.

func (*ServicePrincipalClaimsMappingPolicyAssignment) ElementType added in v5.19.0 

func (*ServicePrincipalClaimsMappingPolicyAssignment) ElementType() reflect.Type

func (*ServicePrincipalClaimsMappingPolicyAssignment) ToServicePrincipalClaimsMappingPolicyAssignmentOutput added in v5.19.0 

func (i *ServicePrincipalClaimsMappingPolicyAssignment) ToServicePrincipalClaimsMappingPolicyAssignmentOutput() ServicePrincipalClaimsMappingPolicyAssignmentOutput

func (*ServicePrincipalClaimsMappingPolicyAssignment) ToServicePrincipalClaimsMappingPolicyAssignmentOutputWithContext added in v5.19.0 

func (i *ServicePrincipalClaimsMappingPolicyAssignment) ToServicePrincipalClaimsMappingPolicyAssignmentOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentOutput

type ServicePrincipalClaimsMappingPolicyAssignmentArgs added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentArgs struct {
	// The ID of the claims mapping policy to assign.
	ClaimsMappingPolicyId pulumi.StringInput
	// The object ID of the service principal for the policy assignment.
	ServicePrincipalId pulumi.StringInput
}

The set of arguments for constructing a ServicePrincipalClaimsMappingPolicyAssignment resource.

func (ServicePrincipalClaimsMappingPolicyAssignmentArgs) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentArgs) ElementType() reflect.Type

type ServicePrincipalClaimsMappingPolicyAssignmentArray added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentArray []ServicePrincipalClaimsMappingPolicyAssignmentInput

func (ServicePrincipalClaimsMappingPolicyAssignmentArray) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentArray) ElementType() reflect.Type

func (ServicePrincipalClaimsMappingPolicyAssignmentArray) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutput added in v5.19.0 

func (i ServicePrincipalClaimsMappingPolicyAssignmentArray) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutput() ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentArray) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutputWithContext added in v5.19.0 

func (i ServicePrincipalClaimsMappingPolicyAssignmentArray) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput

type ServicePrincipalClaimsMappingPolicyAssignmentArrayInput added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentArrayInput interface {
	pulumi.Input

	ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutput() ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput
	ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutputWithContext(context.Context) ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput
}

ServicePrincipalClaimsMappingPolicyAssignmentArrayInput is an input type that accepts ServicePrincipalClaimsMappingPolicyAssignmentArray and ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput values. You can construct a concrete instance of `ServicePrincipalClaimsMappingPolicyAssignmentArrayInput` via: 

ServicePrincipalClaimsMappingPolicyAssignmentArray{ ServicePrincipalClaimsMappingPolicyAssignmentArgs{...} }

type ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) ElementType() reflect.Type

func (ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) Index added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) Index(i pulumi.IntInput) ServicePrincipalClaimsMappingPolicyAssignmentOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutput added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutput() ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutputWithContext added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput) ToServicePrincipalClaimsMappingPolicyAssignmentArrayOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentArrayOutput

type ServicePrincipalClaimsMappingPolicyAssignmentInput added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentInput interface {
	pulumi.Input

	ToServicePrincipalClaimsMappingPolicyAssignmentOutput() ServicePrincipalClaimsMappingPolicyAssignmentOutput
	ToServicePrincipalClaimsMappingPolicyAssignmentOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentOutput
}

type ServicePrincipalClaimsMappingPolicyAssignmentMap added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentMap map[string]ServicePrincipalClaimsMappingPolicyAssignmentInput

func (ServicePrincipalClaimsMappingPolicyAssignmentMap) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentMap) ElementType() reflect.Type

func (ServicePrincipalClaimsMappingPolicyAssignmentMap) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutput added in v5.19.0 

func (i ServicePrincipalClaimsMappingPolicyAssignmentMap) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutput() ServicePrincipalClaimsMappingPolicyAssignmentMapOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentMap) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutputWithContext added in v5.19.0 

func (i ServicePrincipalClaimsMappingPolicyAssignmentMap) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentMapOutput

type ServicePrincipalClaimsMappingPolicyAssignmentMapInput added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentMapInput interface {
	pulumi.Input

	ToServicePrincipalClaimsMappingPolicyAssignmentMapOutput() ServicePrincipalClaimsMappingPolicyAssignmentMapOutput
	ToServicePrincipalClaimsMappingPolicyAssignmentMapOutputWithContext(context.Context) ServicePrincipalClaimsMappingPolicyAssignmentMapOutput
}

ServicePrincipalClaimsMappingPolicyAssignmentMapInput is an input type that accepts ServicePrincipalClaimsMappingPolicyAssignmentMap and ServicePrincipalClaimsMappingPolicyAssignmentMapOutput values. You can construct a concrete instance of `ServicePrincipalClaimsMappingPolicyAssignmentMapInput` via: 

ServicePrincipalClaimsMappingPolicyAssignmentMap{ "key": ServicePrincipalClaimsMappingPolicyAssignmentArgs{...} }

type ServicePrincipalClaimsMappingPolicyAssignmentMapOutput added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentMapOutput struct{ *pulumi.OutputState }

func (ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) ElementType() reflect.Type

func (ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) MapIndex added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) MapIndex(k pulumi.StringInput) ServicePrincipalClaimsMappingPolicyAssignmentOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutput added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutput() ServicePrincipalClaimsMappingPolicyAssignmentMapOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutputWithContext added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentMapOutput) ToServicePrincipalClaimsMappingPolicyAssignmentMapOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentMapOutput

type ServicePrincipalClaimsMappingPolicyAssignmentOutput added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentOutput struct{ *pulumi.OutputState }

func (ServicePrincipalClaimsMappingPolicyAssignmentOutput) ClaimsMappingPolicyId added in v5.22.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentOutput) ClaimsMappingPolicyId() pulumi.StringOutput

The ID of the claims mapping policy to assign.

func (ServicePrincipalClaimsMappingPolicyAssignmentOutput) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentOutput) ElementType() reflect.Type

func (ServicePrincipalClaimsMappingPolicyAssignmentOutput) ServicePrincipalId added in v5.22.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentOutput) ServicePrincipalId() pulumi.StringOutput

The object ID of the service principal for the policy assignment.

func (ServicePrincipalClaimsMappingPolicyAssignmentOutput) ToServicePrincipalClaimsMappingPolicyAssignmentOutput added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentOutput) ToServicePrincipalClaimsMappingPolicyAssignmentOutput() ServicePrincipalClaimsMappingPolicyAssignmentOutput

func (ServicePrincipalClaimsMappingPolicyAssignmentOutput) ToServicePrincipalClaimsMappingPolicyAssignmentOutputWithContext added in v5.19.0 

func (o ServicePrincipalClaimsMappingPolicyAssignmentOutput) ToServicePrincipalClaimsMappingPolicyAssignmentOutputWithContext(ctx context.Context) ServicePrincipalClaimsMappingPolicyAssignmentOutput

type ServicePrincipalClaimsMappingPolicyAssignmentState added in v5.19.0 

type ServicePrincipalClaimsMappingPolicyAssignmentState struct {
	// The ID of the claims mapping policy to assign.
	ClaimsMappingPolicyId pulumi.StringPtrInput
	// The object ID of the service principal for the policy assignment.
	ServicePrincipalId pulumi.StringPtrInput
}

func (ServicePrincipalClaimsMappingPolicyAssignmentState) ElementType added in v5.19.0 

func (ServicePrincipalClaimsMappingPolicyAssignmentState) ElementType() reflect.Type

type ServicePrincipalDelegatedPermissionGrant added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrant struct {
	pulumi.CustomResourceState

	// - A set of claim values for delegated permission scopes which should be included in access tokens for the resource.
	ClaimValues pulumi.StringArrayOutput `pulumi:"claimValues"`
	// The object ID of the service principal representing the resource to be accessed. Changing this forces a new resource to be created.
	ResourceServicePrincipalObjectId pulumi.StringOutput `pulumi:"resourceServicePrincipalObjectId"`
	// The object ID of the service principal for which this delegated permission grant should be created. Changing this forces a new resource to be created.
	ServicePrincipalObjectId pulumi.StringOutput `pulumi:"servicePrincipalObjectId"`
	// - The object ID of the user on behalf of whom the service principal is authorized to access the resource. When omitted, the delegated permission grant will be consented for all users. Changing this forces a new resource to be created.
	UserObjectId pulumi.StringPtrOutput `pulumi:"userObjectId"`
}

Manages a delegated permission grant for a service principal, on behalf of a single user, or all users.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires the following application role: `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one the following directory role: `Global Administrator`

## Example Usage

*Delegated permission grant for all users*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		wellKnown, err := azuread.GetApplicationPublishedAppIds(ctx, nil, nil)
		if err != nil {
			return err
		}
		msgraph, err := azuread.NewServicePrincipal(ctx, "msgraph", &azuread.ServicePrincipalArgs{
			ApplicationId: pulumi.String(wellKnown.Result.MicrosoftGraph),
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			RequiredResourceAccesses: ApplicationRequiredResourceAccessArray{
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String(wellKnown.Result.MicrosoftGraph),
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.Oauth2PermissionScopeIds.ApplyT(func(oauth2PermissionScopeIds map[string]string) (string, error) {
								return oauth2PermissionScopeIds.Openid, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Scope"),
						},
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.Oauth2PermissionScopeIds.ApplyT(func(oauth2PermissionScopeIds map[string]string) (string, error) {
								return oauth2PermissionScopeIds.User.Read, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Scope"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		exampleServicePrincipal, err := azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipalDelegatedPermissionGrant(ctx, "exampleServicePrincipalDelegatedPermissionGrant", &azuread.ServicePrincipalDelegatedPermissionGrantArgs{
			ServicePrincipalObjectId:         exampleServicePrincipal.ObjectId,
			ResourceServicePrincipalObjectId: msgraph.ObjectId,
			ClaimValues: pulumi.StringArray{
				pulumi.String("openid"),
				pulumi.String("User.Read.All"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

*Delegated permission grant for a single user*

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		wellKnown, err := azuread.GetApplicationPublishedAppIds(ctx, nil, nil)
		if err != nil {
			return err
		}
		msgraph, err := azuread.NewServicePrincipal(ctx, "msgraph", &azuread.ServicePrincipalArgs{
			ApplicationId: pulumi.String(wellKnown.Result.MicrosoftGraph),
			UseExisting:   pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		exampleApplication, err := azuread.NewApplication(ctx, "exampleApplication", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
			RequiredResourceAccesses: ApplicationRequiredResourceAccessArray{
				&ApplicationRequiredResourceAccessArgs{
					ResourceAppId: pulumi.String(wellKnown.Result.MicrosoftGraph),
					ResourceAccesses: ApplicationRequiredResourceAccessResourceAccessArray{
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.Oauth2PermissionScopeIds.ApplyT(func(oauth2PermissionScopeIds map[string]string) (string, error) {
								return oauth2PermissionScopeIds.Openid, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Scope"),
						},
						&ApplicationRequiredResourceAccessResourceAccessArgs{
							Id: msgraph.Oauth2PermissionScopeIds.ApplyT(func(oauth2PermissionScopeIds map[string]string) (string, error) {
								return oauth2PermissionScopeIds.User.Read, nil
							}).(pulumi.StringOutput),
							Type: pulumi.String("Scope"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		exampleServicePrincipal, err := azuread.NewServicePrincipal(ctx, "exampleServicePrincipal", &azuread.ServicePrincipalArgs{
			ApplicationId: exampleApplication.ApplicationId,
		})
		if err != nil {
			return err
		}
		exampleUser, err := azuread.NewUser(ctx, "exampleUser", &azuread.UserArgs{
			DisplayName:       pulumi.String("J. Doe"),
			UserPrincipalName: pulumi.String("jdoe@hashicorp.com"),
			MailNickname:      pulumi.String("jdoe"),
			Password:          pulumi.String("SecretP@sswd99!"),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipalDelegatedPermissionGrant(ctx, "exampleServicePrincipalDelegatedPermissionGrant", &azuread.ServicePrincipalDelegatedPermissionGrantArgs{
			ServicePrincipalObjectId:         exampleServicePrincipal.ObjectId,
			ResourceServicePrincipalObjectId: msgraph.ObjectId,
			ClaimValues: pulumi.StringArray{
				pulumi.String("openid"),
				pulumi.String("User.Read.All"),
			},
			UserObjectId: exampleUser.ObjectId,
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Delegated permission grants can be imported using their ID, e.g.

```sh 

$ pulumi import azuread:index/servicePrincipalDelegatedPermissionGrant:ServicePrincipalDelegatedPermissionGrant example aaBBcDDeFG6h5JKLMN2PQrrssTTUUvWWxxxxxyyyzzz

```

func GetServicePrincipalDelegatedPermissionGrant added in v5.10.0 

func GetServicePrincipalDelegatedPermissionGrant(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePrincipalDelegatedPermissionGrantState, opts ...pulumi.ResourceOption) (*ServicePrincipalDelegatedPermissionGrant, error)

GetServicePrincipalDelegatedPermissionGrant gets an existing ServicePrincipalDelegatedPermissionGrant resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePrincipalDelegatedPermissionGrant added in v5.10.0 

func NewServicePrincipalDelegatedPermissionGrant(ctx *pulumi.Context,
	name string, args *ServicePrincipalDelegatedPermissionGrantArgs, opts ...pulumi.ResourceOption) (*ServicePrincipalDelegatedPermissionGrant, error)

NewServicePrincipalDelegatedPermissionGrant registers a new resource with the given unique name, arguments, and options.

func (*ServicePrincipalDelegatedPermissionGrant) ElementType added in v5.10.0 

func (*ServicePrincipalDelegatedPermissionGrant) ElementType() reflect.Type

func (*ServicePrincipalDelegatedPermissionGrant) ToServicePrincipalDelegatedPermissionGrantOutput added in v5.10.0 

func (i *ServicePrincipalDelegatedPermissionGrant) ToServicePrincipalDelegatedPermissionGrantOutput() ServicePrincipalDelegatedPermissionGrantOutput

func (*ServicePrincipalDelegatedPermissionGrant) ToServicePrincipalDelegatedPermissionGrantOutputWithContext added in v5.10.0 

func (i *ServicePrincipalDelegatedPermissionGrant) ToServicePrincipalDelegatedPermissionGrantOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantOutput

type ServicePrincipalDelegatedPermissionGrantArgs added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantArgs struct {
	// - A set of claim values for delegated permission scopes which should be included in access tokens for the resource.
	ClaimValues pulumi.StringArrayInput
	// The object ID of the service principal representing the resource to be accessed. Changing this forces a new resource to be created.
	ResourceServicePrincipalObjectId pulumi.StringInput
	// The object ID of the service principal for which this delegated permission grant should be created. Changing this forces a new resource to be created.
	ServicePrincipalObjectId pulumi.StringInput
	// - The object ID of the user on behalf of whom the service principal is authorized to access the resource. When omitted, the delegated permission grant will be consented for all users. Changing this forces a new resource to be created.
	UserObjectId pulumi.StringPtrInput
}

The set of arguments for constructing a ServicePrincipalDelegatedPermissionGrant resource.

func (ServicePrincipalDelegatedPermissionGrantArgs) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantArgs) ElementType() reflect.Type

type ServicePrincipalDelegatedPermissionGrantArray added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantArray []ServicePrincipalDelegatedPermissionGrantInput

func (ServicePrincipalDelegatedPermissionGrantArray) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantArray) ElementType() reflect.Type

func (ServicePrincipalDelegatedPermissionGrantArray) ToServicePrincipalDelegatedPermissionGrantArrayOutput added in v5.10.0 

func (i ServicePrincipalDelegatedPermissionGrantArray) ToServicePrincipalDelegatedPermissionGrantArrayOutput() ServicePrincipalDelegatedPermissionGrantArrayOutput

func (ServicePrincipalDelegatedPermissionGrantArray) ToServicePrincipalDelegatedPermissionGrantArrayOutputWithContext added in v5.10.0 

func (i ServicePrincipalDelegatedPermissionGrantArray) ToServicePrincipalDelegatedPermissionGrantArrayOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantArrayOutput

type ServicePrincipalDelegatedPermissionGrantArrayInput added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantArrayInput interface {
	pulumi.Input

	ToServicePrincipalDelegatedPermissionGrantArrayOutput() ServicePrincipalDelegatedPermissionGrantArrayOutput
	ToServicePrincipalDelegatedPermissionGrantArrayOutputWithContext(context.Context) ServicePrincipalDelegatedPermissionGrantArrayOutput
}

ServicePrincipalDelegatedPermissionGrantArrayInput is an input type that accepts ServicePrincipalDelegatedPermissionGrantArray and ServicePrincipalDelegatedPermissionGrantArrayOutput values. You can construct a concrete instance of `ServicePrincipalDelegatedPermissionGrantArrayInput` via: 

ServicePrincipalDelegatedPermissionGrantArray{ ServicePrincipalDelegatedPermissionGrantArgs{...} }

type ServicePrincipalDelegatedPermissionGrantArrayOutput added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalDelegatedPermissionGrantArrayOutput) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantArrayOutput) ElementType() reflect.Type

func (ServicePrincipalDelegatedPermissionGrantArrayOutput) Index added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantArrayOutput) Index(i pulumi.IntInput) ServicePrincipalDelegatedPermissionGrantOutput

func (ServicePrincipalDelegatedPermissionGrantArrayOutput) ToServicePrincipalDelegatedPermissionGrantArrayOutput added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantArrayOutput) ToServicePrincipalDelegatedPermissionGrantArrayOutput() ServicePrincipalDelegatedPermissionGrantArrayOutput

func (ServicePrincipalDelegatedPermissionGrantArrayOutput) ToServicePrincipalDelegatedPermissionGrantArrayOutputWithContext added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantArrayOutput) ToServicePrincipalDelegatedPermissionGrantArrayOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantArrayOutput

type ServicePrincipalDelegatedPermissionGrantInput added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantInput interface {
	pulumi.Input

	ToServicePrincipalDelegatedPermissionGrantOutput() ServicePrincipalDelegatedPermissionGrantOutput
	ToServicePrincipalDelegatedPermissionGrantOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantOutput
}

type ServicePrincipalDelegatedPermissionGrantMap added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantMap map[string]ServicePrincipalDelegatedPermissionGrantInput

func (ServicePrincipalDelegatedPermissionGrantMap) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantMap) ElementType() reflect.Type

func (ServicePrincipalDelegatedPermissionGrantMap) ToServicePrincipalDelegatedPermissionGrantMapOutput added in v5.10.0 

func (i ServicePrincipalDelegatedPermissionGrantMap) ToServicePrincipalDelegatedPermissionGrantMapOutput() ServicePrincipalDelegatedPermissionGrantMapOutput

func (ServicePrincipalDelegatedPermissionGrantMap) ToServicePrincipalDelegatedPermissionGrantMapOutputWithContext added in v5.10.0 

func (i ServicePrincipalDelegatedPermissionGrantMap) ToServicePrincipalDelegatedPermissionGrantMapOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantMapOutput

type ServicePrincipalDelegatedPermissionGrantMapInput added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantMapInput interface {
	pulumi.Input

	ToServicePrincipalDelegatedPermissionGrantMapOutput() ServicePrincipalDelegatedPermissionGrantMapOutput
	ToServicePrincipalDelegatedPermissionGrantMapOutputWithContext(context.Context) ServicePrincipalDelegatedPermissionGrantMapOutput
}

ServicePrincipalDelegatedPermissionGrantMapInput is an input type that accepts ServicePrincipalDelegatedPermissionGrantMap and ServicePrincipalDelegatedPermissionGrantMapOutput values. You can construct a concrete instance of `ServicePrincipalDelegatedPermissionGrantMapInput` via: 

ServicePrincipalDelegatedPermissionGrantMap{ "key": ServicePrincipalDelegatedPermissionGrantArgs{...} }

type ServicePrincipalDelegatedPermissionGrantMapOutput added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantMapOutput struct{ *pulumi.OutputState }

func (ServicePrincipalDelegatedPermissionGrantMapOutput) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantMapOutput) ElementType() reflect.Type

func (ServicePrincipalDelegatedPermissionGrantMapOutput) MapIndex added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantMapOutput) MapIndex(k pulumi.StringInput) ServicePrincipalDelegatedPermissionGrantOutput

func (ServicePrincipalDelegatedPermissionGrantMapOutput) ToServicePrincipalDelegatedPermissionGrantMapOutput added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantMapOutput) ToServicePrincipalDelegatedPermissionGrantMapOutput() ServicePrincipalDelegatedPermissionGrantMapOutput

func (ServicePrincipalDelegatedPermissionGrantMapOutput) ToServicePrincipalDelegatedPermissionGrantMapOutputWithContext added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantMapOutput) ToServicePrincipalDelegatedPermissionGrantMapOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantMapOutput

type ServicePrincipalDelegatedPermissionGrantOutput added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantOutput struct{ *pulumi.OutputState }

func (ServicePrincipalDelegatedPermissionGrantOutput) ClaimValues added in v5.22.0 

func (o ServicePrincipalDelegatedPermissionGrantOutput) ClaimValues() pulumi.StringArrayOutput

- A set of claim values for delegated permission scopes which should be included in access tokens for the resource.

func (ServicePrincipalDelegatedPermissionGrantOutput) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantOutput) ElementType() reflect.Type

func (ServicePrincipalDelegatedPermissionGrantOutput) ResourceServicePrincipalObjectId added in v5.22.0 

func (o ServicePrincipalDelegatedPermissionGrantOutput) ResourceServicePrincipalObjectId() pulumi.StringOutput

The object ID of the service principal representing the resource to be accessed. Changing this forces a new resource to be created.

func (ServicePrincipalDelegatedPermissionGrantOutput) ServicePrincipalObjectId added in v5.22.0 

func (o ServicePrincipalDelegatedPermissionGrantOutput) ServicePrincipalObjectId() pulumi.StringOutput

The object ID of the service principal for which this delegated permission grant should be created. Changing this forces a new resource to be created.

func (ServicePrincipalDelegatedPermissionGrantOutput) ToServicePrincipalDelegatedPermissionGrantOutput added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantOutput) ToServicePrincipalDelegatedPermissionGrantOutput() ServicePrincipalDelegatedPermissionGrantOutput

func (ServicePrincipalDelegatedPermissionGrantOutput) ToServicePrincipalDelegatedPermissionGrantOutputWithContext added in v5.10.0 

func (o ServicePrincipalDelegatedPermissionGrantOutput) ToServicePrincipalDelegatedPermissionGrantOutputWithContext(ctx context.Context) ServicePrincipalDelegatedPermissionGrantOutput

func (ServicePrincipalDelegatedPermissionGrantOutput) UserObjectId added in v5.22.0 

func (o ServicePrincipalDelegatedPermissionGrantOutput) UserObjectId() pulumi.StringPtrOutput

- The object ID of the user on behalf of whom the service principal is authorized to access the resource. When omitted, the delegated permission grant will be consented for all users. Changing this forces a new resource to be created.

type ServicePrincipalDelegatedPermissionGrantState added in v5.10.0 

type ServicePrincipalDelegatedPermissionGrantState struct {
	// - A set of claim values for delegated permission scopes which should be included in access tokens for the resource.
	ClaimValues pulumi.StringArrayInput
	// The object ID of the service principal representing the resource to be accessed. Changing this forces a new resource to be created.
	ResourceServicePrincipalObjectId pulumi.StringPtrInput
	// The object ID of the service principal for which this delegated permission grant should be created. Changing this forces a new resource to be created.
	ServicePrincipalObjectId pulumi.StringPtrInput
	// - The object ID of the user on behalf of whom the service principal is authorized to access the resource. When omitted, the delegated permission grant will be consented for all users. Changing this forces a new resource to be created.
	UserObjectId pulumi.StringPtrInput
}

func (ServicePrincipalDelegatedPermissionGrantState) ElementType added in v5.10.0 

func (ServicePrincipalDelegatedPermissionGrantState) ElementType() reflect.Type

type ServicePrincipalFeature added in v5.3.0 

type ServicePrincipalFeature struct {
	CustomSingleSignOnApp *bool `pulumi:"customSingleSignOnApp"`
	EnterpriseApplication *bool `pulumi:"enterpriseApplication"`
	GalleryApplication    *bool `pulumi:"galleryApplication"`
	VisibleToUsers        *bool `pulumi:"visibleToUsers"`
}

type ServicePrincipalFeatureArgs added in v5.3.0 

type ServicePrincipalFeatureArgs struct {
	CustomSingleSignOnApp pulumi.BoolPtrInput `pulumi:"customSingleSignOnApp"`
	EnterpriseApplication pulumi.BoolPtrInput `pulumi:"enterpriseApplication"`
	GalleryApplication    pulumi.BoolPtrInput `pulumi:"galleryApplication"`
	VisibleToUsers        pulumi.BoolPtrInput `pulumi:"visibleToUsers"`
}

func (ServicePrincipalFeatureArgs) ElementType added in v5.3.0 

func (ServicePrincipalFeatureArgs) ElementType() reflect.Type

func (ServicePrincipalFeatureArgs) ToServicePrincipalFeatureOutput added in v5.3.0 

func (i ServicePrincipalFeatureArgs) ToServicePrincipalFeatureOutput() ServicePrincipalFeatureOutput

func (ServicePrincipalFeatureArgs) ToServicePrincipalFeatureOutputWithContext added in v5.3.0 

func (i ServicePrincipalFeatureArgs) ToServicePrincipalFeatureOutputWithContext(ctx context.Context) ServicePrincipalFeatureOutput

type ServicePrincipalFeatureArray added in v5.3.0 

type ServicePrincipalFeatureArray []ServicePrincipalFeatureInput

func (ServicePrincipalFeatureArray) ElementType added in v5.3.0 

func (ServicePrincipalFeatureArray) ElementType() reflect.Type

func (ServicePrincipalFeatureArray) ToServicePrincipalFeatureArrayOutput added in v5.3.0 

func (i ServicePrincipalFeatureArray) ToServicePrincipalFeatureArrayOutput() ServicePrincipalFeatureArrayOutput

func (ServicePrincipalFeatureArray) ToServicePrincipalFeatureArrayOutputWithContext added in v5.3.0 

func (i ServicePrincipalFeatureArray) ToServicePrincipalFeatureArrayOutputWithContext(ctx context.Context) ServicePrincipalFeatureArrayOutput

type ServicePrincipalFeatureArrayInput added in v5.3.0 

type ServicePrincipalFeatureArrayInput interface {
	pulumi.Input

	ToServicePrincipalFeatureArrayOutput() ServicePrincipalFeatureArrayOutput
	ToServicePrincipalFeatureArrayOutputWithContext(context.Context) ServicePrincipalFeatureArrayOutput
}

ServicePrincipalFeatureArrayInput is an input type that accepts ServicePrincipalFeatureArray and ServicePrincipalFeatureArrayOutput values. You can construct a concrete instance of `ServicePrincipalFeatureArrayInput` via: 

ServicePrincipalFeatureArray{ ServicePrincipalFeatureArgs{...} }

type ServicePrincipalFeatureArrayOutput added in v5.3.0 

type ServicePrincipalFeatureArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalFeatureArrayOutput) ElementType added in v5.3.0 

func (ServicePrincipalFeatureArrayOutput) ElementType() reflect.Type

func (ServicePrincipalFeatureArrayOutput) Index added in v5.3.0 

func (o ServicePrincipalFeatureArrayOutput) Index(i pulumi.IntInput) ServicePrincipalFeatureOutput

func (ServicePrincipalFeatureArrayOutput) ToServicePrincipalFeatureArrayOutput added in v5.3.0 

func (o ServicePrincipalFeatureArrayOutput) ToServicePrincipalFeatureArrayOutput() ServicePrincipalFeatureArrayOutput

func (ServicePrincipalFeatureArrayOutput) ToServicePrincipalFeatureArrayOutputWithContext added in v5.3.0 

func (o ServicePrincipalFeatureArrayOutput) ToServicePrincipalFeatureArrayOutputWithContext(ctx context.Context) ServicePrincipalFeatureArrayOutput

type ServicePrincipalFeatureInput added in v5.3.0 

type ServicePrincipalFeatureInput interface {
	pulumi.Input

	ToServicePrincipalFeatureOutput() ServicePrincipalFeatureOutput
	ToServicePrincipalFeatureOutputWithContext(context.Context) ServicePrincipalFeatureOutput
}

ServicePrincipalFeatureInput is an input type that accepts ServicePrincipalFeatureArgs and ServicePrincipalFeatureOutput values. You can construct a concrete instance of `ServicePrincipalFeatureInput` via: 

ServicePrincipalFeatureArgs{...}

type ServicePrincipalFeatureOutput added in v5.3.0 

type ServicePrincipalFeatureOutput struct{ *pulumi.OutputState }

func (ServicePrincipalFeatureOutput) CustomSingleSignOnApp added in v5.3.0 

func (o ServicePrincipalFeatureOutput) CustomSingleSignOnApp() pulumi.BoolPtrOutput

func (ServicePrincipalFeatureOutput) ElementType added in v5.3.0 

func (ServicePrincipalFeatureOutput) ElementType() reflect.Type

func (ServicePrincipalFeatureOutput) EnterpriseApplication added in v5.3.0 

func (o ServicePrincipalFeatureOutput) EnterpriseApplication() pulumi.BoolPtrOutput

func (ServicePrincipalFeatureOutput) GalleryApplication added in v5.3.0 

func (o ServicePrincipalFeatureOutput) GalleryApplication() pulumi.BoolPtrOutput

func (ServicePrincipalFeatureOutput) ToServicePrincipalFeatureOutput added in v5.3.0 

func (o ServicePrincipalFeatureOutput) ToServicePrincipalFeatureOutput() ServicePrincipalFeatureOutput

func (ServicePrincipalFeatureOutput) ToServicePrincipalFeatureOutputWithContext added in v5.3.0 

func (o ServicePrincipalFeatureOutput) ToServicePrincipalFeatureOutputWithContext(ctx context.Context) ServicePrincipalFeatureOutput

func (ServicePrincipalFeatureOutput) VisibleToUsers added in v5.3.0 

func (o ServicePrincipalFeatureOutput) VisibleToUsers() pulumi.BoolPtrOutput

type ServicePrincipalFeatureTag added in v5.6.0 

type ServicePrincipalFeatureTag struct {
	// Whether this service principal represents a custom SAML application. Enabling this will assign the `WindowsAzureActiveDirectoryCustomSingleSignOnApplication` tag. Defaults to `false`.
	CustomSingleSignOn *bool `pulumi:"customSingleSignOn"`
	// Whether this service principal represents an Enterprise Application. Enabling this will assign the `WindowsAzureActiveDirectoryIntegratedApp` tag. Defaults to `false`.
	Enterprise *bool `pulumi:"enterprise"`
	// Whether this service principal represents a gallery application. Enabling this will assign the `WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1` tag. Defaults to `false`.
	Gallery *bool `pulumi:"gallery"`
	// Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the `HideApp` tag. Defaults to `false`.
	Hide *bool `pulumi:"hide"`
}

type ServicePrincipalFeatureTagArgs added in v5.6.0 

type ServicePrincipalFeatureTagArgs struct {
	// Whether this service principal represents a custom SAML application. Enabling this will assign the `WindowsAzureActiveDirectoryCustomSingleSignOnApplication` tag. Defaults to `false`.
	CustomSingleSignOn pulumi.BoolPtrInput `pulumi:"customSingleSignOn"`
	// Whether this service principal represents an Enterprise Application. Enabling this will assign the `WindowsAzureActiveDirectoryIntegratedApp` tag. Defaults to `false`.
	Enterprise pulumi.BoolPtrInput `pulumi:"enterprise"`
	// Whether this service principal represents a gallery application. Enabling this will assign the `WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1` tag. Defaults to `false`.
	Gallery pulumi.BoolPtrInput `pulumi:"gallery"`
	// Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the `HideApp` tag. Defaults to `false`.
	Hide pulumi.BoolPtrInput `pulumi:"hide"`
}

func (ServicePrincipalFeatureTagArgs) ElementType added in v5.6.0 

func (ServicePrincipalFeatureTagArgs) ElementType() reflect.Type

func (ServicePrincipalFeatureTagArgs) ToServicePrincipalFeatureTagOutput added in v5.6.0 

func (i ServicePrincipalFeatureTagArgs) ToServicePrincipalFeatureTagOutput() ServicePrincipalFeatureTagOutput

func (ServicePrincipalFeatureTagArgs) ToServicePrincipalFeatureTagOutputWithContext added in v5.6.0 

func (i ServicePrincipalFeatureTagArgs) ToServicePrincipalFeatureTagOutputWithContext(ctx context.Context) ServicePrincipalFeatureTagOutput

type ServicePrincipalFeatureTagArray added in v5.6.0 

type ServicePrincipalFeatureTagArray []ServicePrincipalFeatureTagInput

func (ServicePrincipalFeatureTagArray) ElementType added in v5.6.0 

func (ServicePrincipalFeatureTagArray) ElementType() reflect.Type

func (ServicePrincipalFeatureTagArray) ToServicePrincipalFeatureTagArrayOutput added in v5.6.0 

func (i ServicePrincipalFeatureTagArray) ToServicePrincipalFeatureTagArrayOutput() ServicePrincipalFeatureTagArrayOutput

func (ServicePrincipalFeatureTagArray) ToServicePrincipalFeatureTagArrayOutputWithContext added in v5.6.0 

func (i ServicePrincipalFeatureTagArray) ToServicePrincipalFeatureTagArrayOutputWithContext(ctx context.Context) ServicePrincipalFeatureTagArrayOutput

type ServicePrincipalFeatureTagArrayInput added in v5.6.0 

type ServicePrincipalFeatureTagArrayInput interface {
	pulumi.Input

	ToServicePrincipalFeatureTagArrayOutput() ServicePrincipalFeatureTagArrayOutput
	ToServicePrincipalFeatureTagArrayOutputWithContext(context.Context) ServicePrincipalFeatureTagArrayOutput
}

ServicePrincipalFeatureTagArrayInput is an input type that accepts ServicePrincipalFeatureTagArray and ServicePrincipalFeatureTagArrayOutput values. You can construct a concrete instance of `ServicePrincipalFeatureTagArrayInput` via: 

ServicePrincipalFeatureTagArray{ ServicePrincipalFeatureTagArgs{...} }

type ServicePrincipalFeatureTagArrayOutput added in v5.6.0 

type ServicePrincipalFeatureTagArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalFeatureTagArrayOutput) ElementType added in v5.6.0 

func (ServicePrincipalFeatureTagArrayOutput) ElementType() reflect.Type

func (ServicePrincipalFeatureTagArrayOutput) Index added in v5.6.0 

func (o ServicePrincipalFeatureTagArrayOutput) Index(i pulumi.IntInput) ServicePrincipalFeatureTagOutput

func (ServicePrincipalFeatureTagArrayOutput) ToServicePrincipalFeatureTagArrayOutput added in v5.6.0 

func (o ServicePrincipalFeatureTagArrayOutput) ToServicePrincipalFeatureTagArrayOutput() ServicePrincipalFeatureTagArrayOutput

func (ServicePrincipalFeatureTagArrayOutput) ToServicePrincipalFeatureTagArrayOutputWithContext added in v5.6.0 

func (o ServicePrincipalFeatureTagArrayOutput) ToServicePrincipalFeatureTagArrayOutputWithContext(ctx context.Context) ServicePrincipalFeatureTagArrayOutput

type ServicePrincipalFeatureTagInput added in v5.6.0 

type ServicePrincipalFeatureTagInput interface {
	pulumi.Input

	ToServicePrincipalFeatureTagOutput() ServicePrincipalFeatureTagOutput
	ToServicePrincipalFeatureTagOutputWithContext(context.Context) ServicePrincipalFeatureTagOutput
}

ServicePrincipalFeatureTagInput is an input type that accepts ServicePrincipalFeatureTagArgs and ServicePrincipalFeatureTagOutput values. You can construct a concrete instance of `ServicePrincipalFeatureTagInput` via: 

ServicePrincipalFeatureTagArgs{...}

type ServicePrincipalFeatureTagOutput added in v5.6.0 

type ServicePrincipalFeatureTagOutput struct{ *pulumi.OutputState }

func (ServicePrincipalFeatureTagOutput) CustomSingleSignOn added in v5.6.0 

func (o ServicePrincipalFeatureTagOutput) CustomSingleSignOn() pulumi.BoolPtrOutput

Whether this service principal represents a custom SAML application. Enabling this will assign the `WindowsAzureActiveDirectoryCustomSingleSignOnApplication` tag. Defaults to `false`.

func (ServicePrincipalFeatureTagOutput) ElementType added in v5.6.0 

func (ServicePrincipalFeatureTagOutput) ElementType() reflect.Type

func (ServicePrincipalFeatureTagOutput) Enterprise added in v5.6.0 

func (o ServicePrincipalFeatureTagOutput) Enterprise() pulumi.BoolPtrOutput

Whether this service principal represents an Enterprise Application. Enabling this will assign the `WindowsAzureActiveDirectoryIntegratedApp` tag. Defaults to `false`.

func (ServicePrincipalFeatureTagOutput) Gallery added in v5.6.0 

func (o ServicePrincipalFeatureTagOutput) Gallery() pulumi.BoolPtrOutput

Whether this service principal represents a gallery application. Enabling this will assign the `WindowsAzureActiveDirectoryGalleryApplicationNonPrimaryV1` tag. Defaults to `false`.

func (ServicePrincipalFeatureTagOutput) Hide added in v5.6.0 

func (o ServicePrincipalFeatureTagOutput) Hide() pulumi.BoolPtrOutput

Whether this app is invisible to users in My Apps and Office 365 Launcher. Enabling this will assign the `HideApp` tag. Defaults to `false`.

func (ServicePrincipalFeatureTagOutput) ToServicePrincipalFeatureTagOutput added in v5.6.0 

func (o ServicePrincipalFeatureTagOutput) ToServicePrincipalFeatureTagOutput() ServicePrincipalFeatureTagOutput

func (ServicePrincipalFeatureTagOutput) ToServicePrincipalFeatureTagOutputWithContext added in v5.6.0 

func (o ServicePrincipalFeatureTagOutput) ToServicePrincipalFeatureTagOutputWithContext(ctx context.Context) ServicePrincipalFeatureTagOutput

type ServicePrincipalInput 

type ServicePrincipalInput interface {
	pulumi.Input

	ToServicePrincipalOutput() ServicePrincipalOutput
	ToServicePrincipalOutputWithContext(ctx context.Context) ServicePrincipalOutput
}

type ServicePrincipalMap 

type ServicePrincipalMap map[string]ServicePrincipalInput

func (ServicePrincipalMap) ElementType 

func (ServicePrincipalMap) ElementType() reflect.Type

func (ServicePrincipalMap) ToServicePrincipalMapOutput 

func (i ServicePrincipalMap) ToServicePrincipalMapOutput() ServicePrincipalMapOutput

func (ServicePrincipalMap) ToServicePrincipalMapOutputWithContext 

func (i ServicePrincipalMap) ToServicePrincipalMapOutputWithContext(ctx context.Context) ServicePrincipalMapOutput

type ServicePrincipalMapInput 

type ServicePrincipalMapInput interface {
	pulumi.Input

	ToServicePrincipalMapOutput() ServicePrincipalMapOutput
	ToServicePrincipalMapOutputWithContext(context.Context) ServicePrincipalMapOutput
}

ServicePrincipalMapInput is an input type that accepts ServicePrincipalMap and ServicePrincipalMapOutput values. You can construct a concrete instance of `ServicePrincipalMapInput` via: 

ServicePrincipalMap{ "key": ServicePrincipalArgs{...} }

type ServicePrincipalMapOutput 

type ServicePrincipalMapOutput struct{ *pulumi.OutputState }

func (ServicePrincipalMapOutput) ElementType 

func (ServicePrincipalMapOutput) ElementType() reflect.Type

func (ServicePrincipalMapOutput) MapIndex 

func (o ServicePrincipalMapOutput) MapIndex(k pulumi.StringInput) ServicePrincipalOutput

func (ServicePrincipalMapOutput) ToServicePrincipalMapOutput 

func (o ServicePrincipalMapOutput) ToServicePrincipalMapOutput() ServicePrincipalMapOutput

func (ServicePrincipalMapOutput) ToServicePrincipalMapOutputWithContext 

func (o ServicePrincipalMapOutput) ToServicePrincipalMapOutputWithContext(ctx context.Context) ServicePrincipalMapOutput

type ServicePrincipalOauth2PermissionScope 

type ServicePrincipalOauth2PermissionScope struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription *string `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName *string `pulumi:"adminConsentDisplayName"`
	// Specifies whether the permission scope is enabled.
	Enabled *bool `pulumi:"enabled"`
	// The unique identifier of the delegated permission.
	Id *string `pulumi:"id"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type *string `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription *string `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName *string `pulumi:"userConsentDisplayName"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value *string `pulumi:"value"`
}

type ServicePrincipalOauth2PermissionScopeArgs 

type ServicePrincipalOauth2PermissionScopeArgs struct {
	// Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDescription pulumi.StringPtrInput `pulumi:"adminConsentDescription"`
	// Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.
	AdminConsentDisplayName pulumi.StringPtrInput `pulumi:"adminConsentDisplayName"`
	// Specifies whether the permission scope is enabled.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The unique identifier of the delegated permission.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type pulumi.StringPtrInput `pulumi:"type"`
	// Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.
	UserConsentDescription pulumi.StringPtrInput `pulumi:"userConsentDescription"`
	// Display name for the delegated permission that appears in the end user consent experience.
	UserConsentDisplayName pulumi.StringPtrInput `pulumi:"userConsentDisplayName"`
	// The value that is used for the `scp` claim in OAuth 2.0 access tokens.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (ServicePrincipalOauth2PermissionScopeArgs) ElementType 

func (ServicePrincipalOauth2PermissionScopeArgs) ElementType() reflect.Type

func (ServicePrincipalOauth2PermissionScopeArgs) ToServicePrincipalOauth2PermissionScopeOutput 

func (i ServicePrincipalOauth2PermissionScopeArgs) ToServicePrincipalOauth2PermissionScopeOutput() ServicePrincipalOauth2PermissionScopeOutput

func (ServicePrincipalOauth2PermissionScopeArgs) ToServicePrincipalOauth2PermissionScopeOutputWithContext 

func (i ServicePrincipalOauth2PermissionScopeArgs) ToServicePrincipalOauth2PermissionScopeOutputWithContext(ctx context.Context) ServicePrincipalOauth2PermissionScopeOutput

type ServicePrincipalOauth2PermissionScopeArray 

type ServicePrincipalOauth2PermissionScopeArray []ServicePrincipalOauth2PermissionScopeInput

func (ServicePrincipalOauth2PermissionScopeArray) ElementType 

func (ServicePrincipalOauth2PermissionScopeArray) ElementType() reflect.Type

func (ServicePrincipalOauth2PermissionScopeArray) ToServicePrincipalOauth2PermissionScopeArrayOutput 

func (i ServicePrincipalOauth2PermissionScopeArray) ToServicePrincipalOauth2PermissionScopeArrayOutput() ServicePrincipalOauth2PermissionScopeArrayOutput

func (ServicePrincipalOauth2PermissionScopeArray) ToServicePrincipalOauth2PermissionScopeArrayOutputWithContext 

func (i ServicePrincipalOauth2PermissionScopeArray) ToServicePrincipalOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) ServicePrincipalOauth2PermissionScopeArrayOutput

type ServicePrincipalOauth2PermissionScopeArrayInput 

type ServicePrincipalOauth2PermissionScopeArrayInput interface {
	pulumi.Input

	ToServicePrincipalOauth2PermissionScopeArrayOutput() ServicePrincipalOauth2PermissionScopeArrayOutput
	ToServicePrincipalOauth2PermissionScopeArrayOutputWithContext(context.Context) ServicePrincipalOauth2PermissionScopeArrayOutput
}

ServicePrincipalOauth2PermissionScopeArrayInput is an input type that accepts ServicePrincipalOauth2PermissionScopeArray and ServicePrincipalOauth2PermissionScopeArrayOutput values. You can construct a concrete instance of `ServicePrincipalOauth2PermissionScopeArrayInput` via: 

ServicePrincipalOauth2PermissionScopeArray{ ServicePrincipalOauth2PermissionScopeArgs{...} }

type ServicePrincipalOauth2PermissionScopeArrayOutput 

type ServicePrincipalOauth2PermissionScopeArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalOauth2PermissionScopeArrayOutput) ElementType 

func (ServicePrincipalOauth2PermissionScopeArrayOutput) ElementType() reflect.Type

func (ServicePrincipalOauth2PermissionScopeArrayOutput) Index 

func (o ServicePrincipalOauth2PermissionScopeArrayOutput) Index(i pulumi.IntInput) ServicePrincipalOauth2PermissionScopeOutput

func (ServicePrincipalOauth2PermissionScopeArrayOutput) ToServicePrincipalOauth2PermissionScopeArrayOutput 

func (o ServicePrincipalOauth2PermissionScopeArrayOutput) ToServicePrincipalOauth2PermissionScopeArrayOutput() ServicePrincipalOauth2PermissionScopeArrayOutput

func (ServicePrincipalOauth2PermissionScopeArrayOutput) ToServicePrincipalOauth2PermissionScopeArrayOutputWithContext 

func (o ServicePrincipalOauth2PermissionScopeArrayOutput) ToServicePrincipalOauth2PermissionScopeArrayOutputWithContext(ctx context.Context) ServicePrincipalOauth2PermissionScopeArrayOutput

type ServicePrincipalOauth2PermissionScopeInput 

type ServicePrincipalOauth2PermissionScopeInput interface {
	pulumi.Input

	ToServicePrincipalOauth2PermissionScopeOutput() ServicePrincipalOauth2PermissionScopeOutput
	ToServicePrincipalOauth2PermissionScopeOutputWithContext(context.Context) ServicePrincipalOauth2PermissionScopeOutput
}

ServicePrincipalOauth2PermissionScopeInput is an input type that accepts ServicePrincipalOauth2PermissionScopeArgs and ServicePrincipalOauth2PermissionScopeOutput values. You can construct a concrete instance of `ServicePrincipalOauth2PermissionScopeInput` via: 

ServicePrincipalOauth2PermissionScopeArgs{...}

type ServicePrincipalOauth2PermissionScopeOutput 

type ServicePrincipalOauth2PermissionScopeOutput struct{ *pulumi.OutputState }

func (ServicePrincipalOauth2PermissionScopeOutput) AdminConsentDescription 

func (o ServicePrincipalOauth2PermissionScopeOutput) AdminConsentDescription() pulumi.StringPtrOutput

Delegated permission description that appears in all tenant-wide admin consent experiences, intended to be read by an administrator granting the permission on behalf of all users.

func (ServicePrincipalOauth2PermissionScopeOutput) AdminConsentDisplayName 

func (o ServicePrincipalOauth2PermissionScopeOutput) AdminConsentDisplayName() pulumi.StringPtrOutput

Display name for the delegated permission, intended to be read by an administrator granting the permission on behalf of all users.

func (ServicePrincipalOauth2PermissionScopeOutput) ElementType 

func (ServicePrincipalOauth2PermissionScopeOutput) ElementType() reflect.Type

func (ServicePrincipalOauth2PermissionScopeOutput) Enabled 

func (o ServicePrincipalOauth2PermissionScopeOutput) Enabled() pulumi.BoolPtrOutput

Specifies whether the permission scope is enabled.

func (ServicePrincipalOauth2PermissionScopeOutput) Id 

func (o ServicePrincipalOauth2PermissionScopeOutput) Id() pulumi.StringPtrOutput

The unique identifier of the delegated permission.

func (ServicePrincipalOauth2PermissionScopeOutput) ToServicePrincipalOauth2PermissionScopeOutput 

func (o ServicePrincipalOauth2PermissionScopeOutput) ToServicePrincipalOauth2PermissionScopeOutput() ServicePrincipalOauth2PermissionScopeOutput

func (ServicePrincipalOauth2PermissionScopeOutput) ToServicePrincipalOauth2PermissionScopeOutputWithContext 

func (o ServicePrincipalOauth2PermissionScopeOutput) ToServicePrincipalOauth2PermissionScopeOutputWithContext(ctx context.Context) ServicePrincipalOauth2PermissionScopeOutput

func (ServicePrincipalOauth2PermissionScopeOutput) Type 

func (o ServicePrincipalOauth2PermissionScopeOutput) Type() pulumi.StringPtrOutput

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.

func (ServicePrincipalOauth2PermissionScopeOutput) UserConsentDescription 

func (o ServicePrincipalOauth2PermissionScopeOutput) UserConsentDescription() pulumi.StringPtrOutput

Delegated permission description that appears in the end user consent experience, intended to be read by a user consenting on their own behalf.

func (ServicePrincipalOauth2PermissionScopeOutput) UserConsentDisplayName 

func (o ServicePrincipalOauth2PermissionScopeOutput) UserConsentDisplayName() pulumi.StringPtrOutput

Display name for the delegated permission that appears in the end user consent experience.

func (ServicePrincipalOauth2PermissionScopeOutput) Value 

func (o ServicePrincipalOauth2PermissionScopeOutput) Value() pulumi.StringPtrOutput

The value that is used for the `scp` claim in OAuth 2.0 access tokens.

type ServicePrincipalOutput 

type ServicePrincipalOutput struct{ *pulumi.OutputState }

func (ServicePrincipalOutput) AccountEnabled added in v5.22.0 

func (o ServicePrincipalOutput) AccountEnabled() pulumi.BoolPtrOutput

Whether or not the service principal account is enabled. Defaults to `true`.

func (ServicePrincipalOutput) AlternativeNames added in v5.22.0 

func (o ServicePrincipalOutput) AlternativeNames() pulumi.StringArrayOutput

A set of alternative names, used to retrieve service principals by subscription, identify resource group and full resource ids for managed identities.

func (ServicePrincipalOutput) AppRoleAssignmentRequired added in v5.22.0 

func (o ServicePrincipalOutput) AppRoleAssignmentRequired() pulumi.BoolPtrOutput

Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application. Defaults to `false`.

func (ServicePrincipalOutput) AppRoleIds added in v5.22.0 

func (o ServicePrincipalOutput) AppRoleIds() pulumi.StringMapOutput

A mapping of app role values to app role IDs, as published by the associated application, intended to be useful when referencing app roles in other resources in your configuration.

func (ServicePrincipalOutput) AppRoles added in v5.22.0 

func (o ServicePrincipalOutput) AppRoles() ServicePrincipalAppRoleArrayOutput

A list of app roles published by the associated application, as documented below. For more information [official documentation](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).

func (ServicePrincipalOutput) ApplicationId added in v5.22.0 

func (o ServicePrincipalOutput) ApplicationId() pulumi.StringOutput

The application ID (client ID) of the application for which to create a service principal.

func (ServicePrincipalOutput) ApplicationTenantId added in v5.22.0 

func (o ServicePrincipalOutput) ApplicationTenantId() pulumi.StringOutput

The tenant ID where the associated application is registered.

func (ServicePrincipalOutput) Description added in v5.22.0 

func (o ServicePrincipalOutput) Description() pulumi.StringPtrOutput

A description of the service principal provided for internal end-users.

func (ServicePrincipalOutput) DisplayName added in v5.22.0 

func (o ServicePrincipalOutput) DisplayName() pulumi.StringOutput

Display name for the app role that appears during app role assignment and in consent experiences.

func (ServicePrincipalOutput) ElementType 

func (ServicePrincipalOutput) ElementType() reflect.Type

func (ServicePrincipalOutput) FeatureTags added in v5.22.0 

func (o ServicePrincipalOutput) FeatureTags() ServicePrincipalFeatureTagArrayOutput

A `featureTags` block as described below. Cannot be used together with the `tags` property.

func (ServicePrincipalOutput) Features deprecated added in v5.22.0 

func (o ServicePrincipalOutput) Features() ServicePrincipalFeatureArrayOutput

Block of features to configure for this service principal using tags

Deprecated: This block has been renamed to `feature_tags` and will be removed in version 3.0 of the provider

func (ServicePrincipalOutput) HomepageUrl added in v5.22.0 

func (o ServicePrincipalOutput) HomepageUrl() pulumi.StringOutput

Home page or landing page of the associated application.

func (ServicePrincipalOutput) LoginUrl added in v5.22.0 

func (o ServicePrincipalOutput) LoginUrl() pulumi.StringPtrOutput

The URL where the service provider redirects the user to Azure AD to authenticate. Azure AD uses the URL to launch the application from Microsoft 365 or the Azure AD My Apps. When blank, Azure AD performs IdP-initiated sign-on for applications configured with SAML-based single sign-on.

func (ServicePrincipalOutput) LogoutUrl added in v5.22.0 

func (o ServicePrincipalOutput) LogoutUrl() pulumi.StringOutput

The URL that will be used by Microsoft's authorization service to log out an user using OpenId Connect front-channel, back-channel or SAML logout protocols, taken from the associated application.

func (ServicePrincipalOutput) Notes added in v5.22.0 

func (o ServicePrincipalOutput) Notes() pulumi.StringPtrOutput

A free text field to capture information about the service principal, typically used for operational purposes.

func (ServicePrincipalOutput) NotificationEmailAddresses added in v5.22.0 

func (o ServicePrincipalOutput) NotificationEmailAddresses() pulumi.StringArrayOutput

A set of email addresses where Azure AD sends a notification when the active certificate is near the expiration date. This is only for the certificates used to sign the SAML token issued for Azure AD Gallery applications.

func (ServicePrincipalOutput) Oauth2PermissionScopeIds added in v5.22.0 

func (o ServicePrincipalOutput) Oauth2PermissionScopeIds() pulumi.StringMapOutput

A mapping of OAuth2.0 permission scope values to scope IDs, as exposed by the associated application, intended to be useful when referencing permission scopes in other resources in your configuration.

func (ServicePrincipalOutput) Oauth2PermissionScopes added in v5.22.0 

func (o ServicePrincipalOutput) Oauth2PermissionScopes() ServicePrincipalOauth2PermissionScopeArrayOutput

A list of OAuth 2.0 delegated permission scopes exposed by the associated application, as documented below.

func (ServicePrincipalOutput) ObjectId added in v5.22.0 

func (o ServicePrincipalOutput) ObjectId() pulumi.StringOutput

The object ID of the service principal.

func (ServicePrincipalOutput) Owners added in v5.22.0 

func (o ServicePrincipalOutput) Owners() pulumi.StringArrayOutput

A set of object IDs of principals that will be granted ownership of the service principal. Supported object types are users or service principals. By default, no owners are assigned.

func (ServicePrincipalOutput) PreferredSingleSignOnMode added in v5.22.0 

func (o ServicePrincipalOutput) PreferredSingleSignOnMode() pulumi.StringPtrOutput

The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps. Supported values are `oidc`, `password`, `saml` or `notSupported`. Omit this property or specify a blank string to unset.

func (ServicePrincipalOutput) RedirectUris added in v5.22.0 

func (o ServicePrincipalOutput) RedirectUris() pulumi.StringArrayOutput

A list of URLs where user tokens are sent for sign-in with the associated application, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent for the associated application.

func (ServicePrincipalOutput) SamlMetadataUrl added in v5.22.0 

func (o ServicePrincipalOutput) SamlMetadataUrl() pulumi.StringOutput

The URL where the service exposes SAML metadata for federation.

func (ServicePrincipalOutput) SamlSingleSignOn added in v5.22.0 

func (o ServicePrincipalOutput) SamlSingleSignOn() ServicePrincipalSamlSingleSignOnPtrOutput

A `samlSingleSignOn` block as documented below.

func (ServicePrincipalOutput) ServicePrincipalNames added in v5.22.0 

func (o ServicePrincipalOutput) ServicePrincipalNames() pulumi.StringArrayOutput

A list of identifier URI(s), copied over from the associated application.

func (ServicePrincipalOutput) SignInAudience added in v5.22.0 

func (o ServicePrincipalOutput) SignInAudience() pulumi.StringOutput

The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.

func (ServicePrincipalOutput) Tags added in v5.22.0 

func (o ServicePrincipalOutput) Tags() pulumi.StringArrayOutput

A set of tags to apply to the service principal. Cannot be used together with the `featureTags` block.

func (ServicePrincipalOutput) ToServicePrincipalOutput 

func (o ServicePrincipalOutput) ToServicePrincipalOutput() ServicePrincipalOutput

func (ServicePrincipalOutput) ToServicePrincipalOutputWithContext 

func (o ServicePrincipalOutput) ToServicePrincipalOutputWithContext(ctx context.Context) ServicePrincipalOutput

func (ServicePrincipalOutput) Type added in v5.22.0 

func (o ServicePrincipalOutput) Type() pulumi.StringOutput

Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.

func (ServicePrincipalOutput) UseExisting added in v5.22.0 

func (o ServicePrincipalOutput) UseExisting() pulumi.BoolPtrOutput

When true, any existing service principal linked to the same application will be automatically imported. When false, an import error will be raised for any pre-existing service principal.

type ServicePrincipalPassword 

type ServicePrincipalPassword struct {
	pulumi.CustomResourceState

	// A display name for the password.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringOutput `pulumi:"endDate"`
	// A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrOutput `pulumi:"endDateRelative"`
	// A UUID used to uniquely identify this password credential.
	KeyId pulumi.StringOutput `pulumi:"keyId"`
	// A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
	RotateWhenChanged pulumi.StringMapOutput `pulumi:"rotateWhenChanged"`
	// The object ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
	ServicePrincipalId pulumi.StringOutput `pulumi:"servicePrincipalId"`
	// The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringOutput `pulumi:"startDate"`
	// The password for this service principal, which is generated by Azure Active Directory.
	Value pulumi.StringOutput `pulumi:"value"`
}

Manages a password credential associated with a service principal within Azure Active Directory. See also the ApplicationPassword resource.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `Application.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `Application Administrator` or `Global Administrator`

## Import

This resource does not support importing.

func GetServicePrincipalPassword 

func GetServicePrincipalPassword(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ServicePrincipalPasswordState, opts ...pulumi.ResourceOption) (*ServicePrincipalPassword, error)

GetServicePrincipalPassword gets an existing ServicePrincipalPassword resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewServicePrincipalPassword 

func NewServicePrincipalPassword(ctx *pulumi.Context,
	name string, args *ServicePrincipalPasswordArgs, opts ...pulumi.ResourceOption) (*ServicePrincipalPassword, error)

NewServicePrincipalPassword registers a new resource with the given unique name, arguments, and options.

func (*ServicePrincipalPassword) ElementType 

func (*ServicePrincipalPassword) ElementType() reflect.Type

func (*ServicePrincipalPassword) ToServicePrincipalPasswordOutput 

func (i *ServicePrincipalPassword) ToServicePrincipalPasswordOutput() ServicePrincipalPasswordOutput

func (*ServicePrincipalPassword) ToServicePrincipalPasswordOutputWithContext 

func (i *ServicePrincipalPassword) ToServicePrincipalPasswordOutputWithContext(ctx context.Context) ServicePrincipalPasswordOutput

type ServicePrincipalPasswordArgs 

type ServicePrincipalPasswordArgs struct {
	// A display name for the password.
	DisplayName pulumi.StringPtrInput
	// The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
	RotateWhenChanged pulumi.StringMapInput
	// The object ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
	ServicePrincipalId pulumi.StringInput
	// The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
}

The set of arguments for constructing a ServicePrincipalPassword resource.

func (ServicePrincipalPasswordArgs) ElementType 

func (ServicePrincipalPasswordArgs) ElementType() reflect.Type

type ServicePrincipalPasswordArray 

type ServicePrincipalPasswordArray []ServicePrincipalPasswordInput

func (ServicePrincipalPasswordArray) ElementType 

func (ServicePrincipalPasswordArray) ElementType() reflect.Type

func (ServicePrincipalPasswordArray) ToServicePrincipalPasswordArrayOutput 

func (i ServicePrincipalPasswordArray) ToServicePrincipalPasswordArrayOutput() ServicePrincipalPasswordArrayOutput

func (ServicePrincipalPasswordArray) ToServicePrincipalPasswordArrayOutputWithContext 

func (i ServicePrincipalPasswordArray) ToServicePrincipalPasswordArrayOutputWithContext(ctx context.Context) ServicePrincipalPasswordArrayOutput

type ServicePrincipalPasswordArrayInput 

type ServicePrincipalPasswordArrayInput interface {
	pulumi.Input

	ToServicePrincipalPasswordArrayOutput() ServicePrincipalPasswordArrayOutput
	ToServicePrincipalPasswordArrayOutputWithContext(context.Context) ServicePrincipalPasswordArrayOutput
}

ServicePrincipalPasswordArrayInput is an input type that accepts ServicePrincipalPasswordArray and ServicePrincipalPasswordArrayOutput values. You can construct a concrete instance of `ServicePrincipalPasswordArrayInput` via: 

ServicePrincipalPasswordArray{ ServicePrincipalPasswordArgs{...} }

type ServicePrincipalPasswordArrayOutput 

type ServicePrincipalPasswordArrayOutput struct{ *pulumi.OutputState }

func (ServicePrincipalPasswordArrayOutput) ElementType 

func (ServicePrincipalPasswordArrayOutput) ElementType() reflect.Type

func (ServicePrincipalPasswordArrayOutput) Index 

func (o ServicePrincipalPasswordArrayOutput) Index(i pulumi.IntInput) ServicePrincipalPasswordOutput

func (ServicePrincipalPasswordArrayOutput) ToServicePrincipalPasswordArrayOutput 

func (o ServicePrincipalPasswordArrayOutput) ToServicePrincipalPasswordArrayOutput() ServicePrincipalPasswordArrayOutput

func (ServicePrincipalPasswordArrayOutput) ToServicePrincipalPasswordArrayOutputWithContext 

func (o ServicePrincipalPasswordArrayOutput) ToServicePrincipalPasswordArrayOutputWithContext(ctx context.Context) ServicePrincipalPasswordArrayOutput

type ServicePrincipalPasswordInput 

type ServicePrincipalPasswordInput interface {
	pulumi.Input

	ToServicePrincipalPasswordOutput() ServicePrincipalPasswordOutput
	ToServicePrincipalPasswordOutputWithContext(ctx context.Context) ServicePrincipalPasswordOutput
}

type ServicePrincipalPasswordMap 

type ServicePrincipalPasswordMap map[string]ServicePrincipalPasswordInput

func (ServicePrincipalPasswordMap) ElementType 

func (ServicePrincipalPasswordMap) ElementType() reflect.Type

func (ServicePrincipalPasswordMap) ToServicePrincipalPasswordMapOutput 

func (i ServicePrincipalPasswordMap) ToServicePrincipalPasswordMapOutput() ServicePrincipalPasswordMapOutput

func (ServicePrincipalPasswordMap) ToServicePrincipalPasswordMapOutputWithContext 

func (i ServicePrincipalPasswordMap) ToServicePrincipalPasswordMapOutputWithContext(ctx context.Context) ServicePrincipalPasswordMapOutput

type ServicePrincipalPasswordMapInput 

type ServicePrincipalPasswordMapInput interface {
	pulumi.Input

	ToServicePrincipalPasswordMapOutput() ServicePrincipalPasswordMapOutput
	ToServicePrincipalPasswordMapOutputWithContext(context.Context) ServicePrincipalPasswordMapOutput
}

ServicePrincipalPasswordMapInput is an input type that accepts ServicePrincipalPasswordMap and ServicePrincipalPasswordMapOutput values. You can construct a concrete instance of `ServicePrincipalPasswordMapInput` via: 

ServicePrincipalPasswordMap{ "key": ServicePrincipalPasswordArgs{...} }

type ServicePrincipalPasswordMapOutput 

type ServicePrincipalPasswordMapOutput struct{ *pulumi.OutputState }

func (ServicePrincipalPasswordMapOutput) ElementType 

func (ServicePrincipalPasswordMapOutput) ElementType() reflect.Type

func (ServicePrincipalPasswordMapOutput) MapIndex 

func (o ServicePrincipalPasswordMapOutput) MapIndex(k pulumi.StringInput) ServicePrincipalPasswordOutput

func (ServicePrincipalPasswordMapOutput) ToServicePrincipalPasswordMapOutput 

func (o ServicePrincipalPasswordMapOutput) ToServicePrincipalPasswordMapOutput() ServicePrincipalPasswordMapOutput

func (ServicePrincipalPasswordMapOutput) ToServicePrincipalPasswordMapOutputWithContext 

func (o ServicePrincipalPasswordMapOutput) ToServicePrincipalPasswordMapOutputWithContext(ctx context.Context) ServicePrincipalPasswordMapOutput

type ServicePrincipalPasswordOutput 

type ServicePrincipalPasswordOutput struct{ *pulumi.OutputState }

func (ServicePrincipalPasswordOutput) DisplayName added in v5.22.0 

func (o ServicePrincipalPasswordOutput) DisplayName() pulumi.StringOutput

A display name for the password.

func (ServicePrincipalPasswordOutput) ElementType 

func (ServicePrincipalPasswordOutput) ElementType() reflect.Type

func (ServicePrincipalPasswordOutput) EndDate added in v5.22.0 

func (o ServicePrincipalPasswordOutput) EndDate() pulumi.StringOutput

The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.

func (ServicePrincipalPasswordOutput) EndDateRelative added in v5.22.0 

func (o ServicePrincipalPasswordOutput) EndDateRelative() pulumi.StringPtrOutput

A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.

func (ServicePrincipalPasswordOutput) KeyId added in v5.22.0 

func (o ServicePrincipalPasswordOutput) KeyId() pulumi.StringOutput

A UUID used to uniquely identify this password credential.

func (ServicePrincipalPasswordOutput) RotateWhenChanged added in v5.22.0 

func (o ServicePrincipalPasswordOutput) RotateWhenChanged() pulumi.StringMapOutput

A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.

func (ServicePrincipalPasswordOutput) ServicePrincipalId added in v5.22.0 

func (o ServicePrincipalPasswordOutput) ServicePrincipalId() pulumi.StringOutput

The object ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.

func (ServicePrincipalPasswordOutput) StartDate added in v5.22.0 

func (o ServicePrincipalPasswordOutput) StartDate() pulumi.StringOutput

The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.

func (ServicePrincipalPasswordOutput) ToServicePrincipalPasswordOutput 

func (o ServicePrincipalPasswordOutput) ToServicePrincipalPasswordOutput() ServicePrincipalPasswordOutput

func (ServicePrincipalPasswordOutput) ToServicePrincipalPasswordOutputWithContext 

func (o ServicePrincipalPasswordOutput) ToServicePrincipalPasswordOutputWithContext(ctx context.Context) ServicePrincipalPasswordOutput

func (ServicePrincipalPasswordOutput) Value added in v5.22.0 

func (o ServicePrincipalPasswordOutput) Value() pulumi.StringOutput

The password for this service principal, which is generated by Azure Active Directory.

type ServicePrincipalPasswordState 

type ServicePrincipalPasswordState struct {
	// A display name for the password.
	DisplayName pulumi.StringPtrInput
	// The end date until which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
	EndDate pulumi.StringPtrInput
	// A relative duration for which the password is valid until, for example `240h` (10 days) or `2400h30m`. Changing this field forces a new resource to be created.
	EndDateRelative pulumi.StringPtrInput
	// A UUID used to uniquely identify this password credential.
	KeyId pulumi.StringPtrInput
	// A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
	RotateWhenChanged pulumi.StringMapInput
	// The object ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
	ServicePrincipalId pulumi.StringPtrInput
	// The start date from which the password is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). If this isn't specified, the current date is used.  Changing this field forces a new resource to be created.
	StartDate pulumi.StringPtrInput
	// The password for this service principal, which is generated by Azure Active Directory.
	Value pulumi.StringPtrInput
}

func (ServicePrincipalPasswordState) ElementType 

func (ServicePrincipalPasswordState) ElementType() reflect.Type

type ServicePrincipalSamlSingleSignOn added in v5.2.0 

type ServicePrincipalSamlSingleSignOn struct {
	// The relative URI the service provider would redirect to after completion of the single sign-on flow.
	RelayState *string `pulumi:"relayState"`
}

type ServicePrincipalSamlSingleSignOnArgs added in v5.2.0 

type ServicePrincipalSamlSingleSignOnArgs struct {
	// The relative URI the service provider would redirect to after completion of the single sign-on flow.
	RelayState pulumi.StringPtrInput `pulumi:"relayState"`
}

func (ServicePrincipalSamlSingleSignOnArgs) ElementType added in v5.2.0 

func (ServicePrincipalSamlSingleSignOnArgs) ElementType() reflect.Type

func (ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnOutput added in v5.2.0 

func (i ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnOutput() ServicePrincipalSamlSingleSignOnOutput

func (ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnOutputWithContext added in v5.2.0 

func (i ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnOutputWithContext(ctx context.Context) ServicePrincipalSamlSingleSignOnOutput

func (ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnPtrOutput added in v5.2.0 

func (i ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnPtrOutput() ServicePrincipalSamlSingleSignOnPtrOutput

func (ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnPtrOutputWithContext added in v5.2.0 

func (i ServicePrincipalSamlSingleSignOnArgs) ToServicePrincipalSamlSingleSignOnPtrOutputWithContext(ctx context.Context) ServicePrincipalSamlSingleSignOnPtrOutput

type ServicePrincipalSamlSingleSignOnInput added in v5.2.0 

type ServicePrincipalSamlSingleSignOnInput interface {
	pulumi.Input

	ToServicePrincipalSamlSingleSignOnOutput() ServicePrincipalSamlSingleSignOnOutput
	ToServicePrincipalSamlSingleSignOnOutputWithContext(context.Context) ServicePrincipalSamlSingleSignOnOutput
}

ServicePrincipalSamlSingleSignOnInput is an input type that accepts ServicePrincipalSamlSingleSignOnArgs and ServicePrincipalSamlSingleSignOnOutput values. You can construct a concrete instance of `ServicePrincipalSamlSingleSignOnInput` via: 

ServicePrincipalSamlSingleSignOnArgs{...}

type ServicePrincipalSamlSingleSignOnOutput added in v5.2.0 

type ServicePrincipalSamlSingleSignOnOutput struct{ *pulumi.OutputState }

func (ServicePrincipalSamlSingleSignOnOutput) ElementType added in v5.2.0 

func (ServicePrincipalSamlSingleSignOnOutput) ElementType() reflect.Type

func (ServicePrincipalSamlSingleSignOnOutput) RelayState added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnOutput) RelayState() pulumi.StringPtrOutput

The relative URI the service provider would redirect to after completion of the single sign-on flow.

func (ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnOutput added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnOutput() ServicePrincipalSamlSingleSignOnOutput

func (ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnOutputWithContext added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnOutputWithContext(ctx context.Context) ServicePrincipalSamlSingleSignOnOutput

func (ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnPtrOutput added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnPtrOutput() ServicePrincipalSamlSingleSignOnPtrOutput

func (ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnPtrOutputWithContext added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnOutput) ToServicePrincipalSamlSingleSignOnPtrOutputWithContext(ctx context.Context) ServicePrincipalSamlSingleSignOnPtrOutput

type ServicePrincipalSamlSingleSignOnPtrInput added in v5.2.0 

type ServicePrincipalSamlSingleSignOnPtrInput interface {
	pulumi.Input

	ToServicePrincipalSamlSingleSignOnPtrOutput() ServicePrincipalSamlSingleSignOnPtrOutput
	ToServicePrincipalSamlSingleSignOnPtrOutputWithContext(context.Context) ServicePrincipalSamlSingleSignOnPtrOutput
}

ServicePrincipalSamlSingleSignOnPtrInput is an input type that accepts ServicePrincipalSamlSingleSignOnArgs, ServicePrincipalSamlSingleSignOnPtr and ServicePrincipalSamlSingleSignOnPtrOutput values. You can construct a concrete instance of `ServicePrincipalSamlSingleSignOnPtrInput` via: 

        ServicePrincipalSamlSingleSignOnArgs{...}

or:

        nil

func ServicePrincipalSamlSingleSignOnPtr added in v5.2.0 

func ServicePrincipalSamlSingleSignOnPtr(v *ServicePrincipalSamlSingleSignOnArgs) ServicePrincipalSamlSingleSignOnPtrInput

type ServicePrincipalSamlSingleSignOnPtrOutput added in v5.2.0 

type ServicePrincipalSamlSingleSignOnPtrOutput struct{ *pulumi.OutputState }

func (ServicePrincipalSamlSingleSignOnPtrOutput) Elem added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnPtrOutput) Elem() ServicePrincipalSamlSingleSignOnOutput

func (ServicePrincipalSamlSingleSignOnPtrOutput) ElementType added in v5.2.0 

func (ServicePrincipalSamlSingleSignOnPtrOutput) ElementType() reflect.Type

func (ServicePrincipalSamlSingleSignOnPtrOutput) RelayState added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnPtrOutput) RelayState() pulumi.StringPtrOutput

The relative URI the service provider would redirect to after completion of the single sign-on flow.

func (ServicePrincipalSamlSingleSignOnPtrOutput) ToServicePrincipalSamlSingleSignOnPtrOutput added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnPtrOutput) ToServicePrincipalSamlSingleSignOnPtrOutput() ServicePrincipalSamlSingleSignOnPtrOutput

func (ServicePrincipalSamlSingleSignOnPtrOutput) ToServicePrincipalSamlSingleSignOnPtrOutputWithContext added in v5.2.0 

func (o ServicePrincipalSamlSingleSignOnPtrOutput) ToServicePrincipalSamlSingleSignOnPtrOutputWithContext(ctx context.Context) ServicePrincipalSamlSingleSignOnPtrOutput

type ServicePrincipalState 

type ServicePrincipalState struct {
	// Whether or not the service principal account is enabled. Defaults to `true`.
	AccountEnabled pulumi.BoolPtrInput
	// A set of alternative names, used to retrieve service principals by subscription, identify resource group and full resource ids for managed identities.
	AlternativeNames pulumi.StringArrayInput
	// Whether this service principal requires an app role assignment to a user or group before Azure AD will issue a user or access token to the application. Defaults to `false`.
	AppRoleAssignmentRequired pulumi.BoolPtrInput
	// A mapping of app role values to app role IDs, as published by the associated application, intended to be useful when referencing app roles in other resources in your configuration.
	AppRoleIds pulumi.StringMapInput
	// A list of app roles published by the associated application, as documented below. For more information [official documentation](https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/app-roles).
	AppRoles ServicePrincipalAppRoleArrayInput
	// The application ID (client ID) of the application for which to create a service principal.
	ApplicationId pulumi.StringPtrInput
	// The tenant ID where the associated application is registered.
	ApplicationTenantId pulumi.StringPtrInput
	// A description of the service principal provided for internal end-users.
	Description pulumi.StringPtrInput
	// Display name for the app role that appears during app role assignment and in consent experiences.
	DisplayName pulumi.StringPtrInput
	// A `featureTags` block as described below. Cannot be used together with the `tags` property.
	FeatureTags ServicePrincipalFeatureTagArrayInput
	// Block of features to configure for this service principal using tags
	//
	// Deprecated: This block has been renamed to `feature_tags` and will be removed in version 3.0 of the provider
	Features ServicePrincipalFeatureArrayInput
	// Home page or landing page of the associated application.
	HomepageUrl pulumi.StringPtrInput
	// The URL where the service provider redirects the user to Azure AD to authenticate. Azure AD uses the URL to launch the application from Microsoft 365 or the Azure AD My Apps. When blank, Azure AD performs IdP-initiated sign-on for applications configured with SAML-based single sign-on.
	LoginUrl pulumi.StringPtrInput
	// The URL that will be used by Microsoft's authorization service to log out an user using OpenId Connect front-channel, back-channel or SAML logout protocols, taken from the associated application.
	LogoutUrl pulumi.StringPtrInput
	// A free text field to capture information about the service principal, typically used for operational purposes.
	Notes pulumi.StringPtrInput
	// A set of email addresses where Azure AD sends a notification when the active certificate is near the expiration date. This is only for the certificates used to sign the SAML token issued for Azure AD Gallery applications.
	NotificationEmailAddresses pulumi.StringArrayInput
	// A mapping of OAuth2.0 permission scope values to scope IDs, as exposed by the associated application, intended to be useful when referencing permission scopes in other resources in your configuration.
	Oauth2PermissionScopeIds pulumi.StringMapInput
	// A list of OAuth 2.0 delegated permission scopes exposed by the associated application, as documented below.
	Oauth2PermissionScopes ServicePrincipalOauth2PermissionScopeArrayInput
	// The object ID of the service principal.
	ObjectId pulumi.StringPtrInput
	// A set of object IDs of principals that will be granted ownership of the service principal. Supported object types are users or service principals. By default, no owners are assigned.
	Owners pulumi.StringArrayInput
	// The single sign-on mode configured for this application. Azure AD uses the preferred single sign-on mode to launch the application from Microsoft 365 or the Azure AD My Apps. Supported values are `oidc`, `password`, `saml` or `notSupported`. Omit this property or specify a blank string to unset.
	PreferredSingleSignOnMode pulumi.StringPtrInput
	// A list of URLs where user tokens are sent for sign-in with the associated application, or the redirect URIs where OAuth 2.0 authorization codes and access tokens are sent for the associated application.
	RedirectUris pulumi.StringArrayInput
	// The URL where the service exposes SAML metadata for federation.
	SamlMetadataUrl pulumi.StringPtrInput
	// A `samlSingleSignOn` block as documented below.
	SamlSingleSignOn ServicePrincipalSamlSingleSignOnPtrInput
	// A list of identifier URI(s), copied over from the associated application.
	ServicePrincipalNames pulumi.StringArrayInput
	// The Microsoft account types that are supported for the associated application. Possible values include `AzureADMyOrg`, `AzureADMultipleOrgs`, `AzureADandPersonalMicrosoftAccount` or `PersonalMicrosoftAccount`.
	SignInAudience pulumi.StringPtrInput
	// A set of tags to apply to the service principal. Cannot be used together with the `featureTags` block.
	Tags pulumi.StringArrayInput
	// Whether this delegated permission should be considered safe for non-admin users to consent to on behalf of themselves, or whether an administrator should be required for consent to the permissions. Possible values are `User` or `Admin`.
	Type pulumi.StringPtrInput
	// When true, any existing service principal linked to the same application will be automatically imported. When false, an import error will be raised for any pre-existing service principal.
	UseExisting pulumi.BoolPtrInput
}

func (ServicePrincipalState) ElementType 

func (ServicePrincipalState) ElementType() reflect.Type

type User 

type User struct {
	pulumi.CustomResourceState

	// A freeform field for the user to describe themselves
	AboutMe pulumi.StringOutput `pulumi:"aboutMe"`
	// Whether or not the account should be enabled.
	AccountEnabled pulumi.BoolPtrOutput `pulumi:"accountEnabled"`
	// The age group of the user. Supported values are `Adult`, `NotAdult` and `Minor`. Omit this property or specify a blank string to unset.
	AgeGroup pulumi.StringPtrOutput `pulumi:"ageGroup"`
	// A list of telephone numbers for the user. Only one number can be set for this property. Read-only for users synced with Azure AD Connect.
	BusinessPhones pulumi.StringArrayOutput `pulumi:"businessPhones"`
	// The city in which the user is located.
	City pulumi.StringPtrOutput `pulumi:"city"`
	// The company name which the user is associated. This property can be useful for describing the company that an external user comes from.
	CompanyName pulumi.StringPtrOutput `pulumi:"companyName"`
	// Whether consent has been obtained for minors. Supported values are `Granted`, `Denied` and `NotRequired`. Omit this property or specify a blank string to unset.
	ConsentProvidedForMinor pulumi.StringPtrOutput `pulumi:"consentProvidedForMinor"`
	// The cost center associated with the user.
	CostCenter pulumi.StringPtrOutput `pulumi:"costCenter"`
	// The country/region in which the user is located, e.g. `US` or `UK`.
	Country pulumi.StringPtrOutput `pulumi:"country"`
	// Indicates whether the user account was created as a regular school or work account (`null`), an external account (`Invitation`), a local account for an Azure Active Directory B2C tenant (`LocalAccount`) or self-service sign-up using email verification (`EmailVerified`).
	CreationType pulumi.StringOutput `pulumi:"creationType"`
	// The name for the department in which the user works.
	Department pulumi.StringPtrOutput `pulumi:"department"`
	// Whether the user's password is exempt from expiring. Defaults to `false`.
	DisablePasswordExpiration pulumi.BoolPtrOutput `pulumi:"disablePasswordExpiration"`
	// Whether the user is allowed weaker passwords than the default policy to be specified. Defaults to `false`.
	DisableStrongPassword pulumi.BoolPtrOutput `pulumi:"disableStrongPassword"`
	// The name to display in the address book for the user.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// The name of the division in which the user works.
	Division pulumi.StringPtrOutput `pulumi:"division"`
	// The employee identifier assigned to the user by the organisation.
	EmployeeId pulumi.StringPtrOutput `pulumi:"employeeId"`
	// Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor.
	EmployeeType pulumi.StringPtrOutput `pulumi:"employeeType"`
	// For an external user invited to the tenant, this property represents the invited user's invitation status. Possible values are `PendingAcceptance` or `Accepted`.
	ExternalUserState pulumi.StringOutput `pulumi:"externalUserState"`
	// The fax number of the user.
	FaxNumber pulumi.StringPtrOutput `pulumi:"faxNumber"`
	// Whether the user is forced to change the password during the next sign-in. Only takes effect when also changing the password. Defaults to `false`.
	ForcePasswordChange pulumi.BoolPtrOutput `pulumi:"forcePasswordChange"`
	// The given name (first name) of the user.
	GivenName pulumi.StringPtrOutput `pulumi:"givenName"`
	// A list of instant message voice over IP (VOIP) session initiation protocol (SIP) addresses for the user.
	ImAddresses pulumi.StringArrayOutput `pulumi:"imAddresses"`
	// The user’s job title.
	JobTitle pulumi.StringPtrOutput `pulumi:"jobTitle"`
	// The SMTP address for the user. This property cannot be unset once specified.
	Mail pulumi.StringOutput `pulumi:"mail"`
	// The mail alias for the user. Defaults to the user name part of the user principal name (UPN).
	MailNickname pulumi.StringOutput `pulumi:"mailNickname"`
	// The object ID of the user's manager.
	ManagerId pulumi.StringPtrOutput `pulumi:"managerId"`
	// The primary cellular telephone number for the user.
	MobilePhone pulumi.StringPtrOutput `pulumi:"mobilePhone"`
	// The object ID of the user.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// The office location in the user's place of business.
	OfficeLocation pulumi.StringPtrOutput `pulumi:"officeLocation"`
	// The on-premises distinguished name (DN) of the user, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDistinguishedName pulumi.StringOutput `pulumi:"onpremisesDistinguishedName"`
	// The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDomainName pulumi.StringOutput `pulumi:"onpremisesDomainName"`
	// The value used to associate an on-premise Active Directory user account with their Azure AD user object. This must be specified if you are using a federated domain for the user's `userPrincipalName` property when creating a new user account.
	OnpremisesImmutableId pulumi.StringOutput `pulumi:"onpremisesImmutableId"`
	// The on-premise SAM account name of the user.
	OnpremisesSamAccountName pulumi.StringOutput `pulumi:"onpremisesSamAccountName"`
	// The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSecurityIdentifier pulumi.StringOutput `pulumi:"onpremisesSecurityIdentifier"`
	// Whether this user is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).
	OnpremisesSyncEnabled pulumi.BoolOutput `pulumi:"onpremisesSyncEnabled"`
	// The on-premise user principal name of the user.
	OnpremisesUserPrincipalName pulumi.StringOutput `pulumi:"onpremisesUserPrincipalName"`
	// A list of additional email addresses for the user.
	OtherMails pulumi.StringArrayOutput `pulumi:"otherMails"`
	// The password for the user. The password must satisfy minimum requirements as specified by the password policy. The maximum length is 256 characters. This property is required when creating a new user.
	Password pulumi.StringOutput `pulumi:"password"`
	// The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code.
	PostalCode pulumi.StringPtrOutput `pulumi:"postalCode"`
	// The user's preferred language, in ISO 639-1 notation.
	PreferredLanguage pulumi.StringPtrOutput `pulumi:"preferredLanguage"`
	// List of email addresses for the user that direct to the same mailbox.
	ProxyAddresses pulumi.StringArrayOutput `pulumi:"proxyAddresses"`
	// Whether or not the Outlook global address list should include this user. Defaults to `true`.
	ShowInAddressList pulumi.BoolPtrOutput `pulumi:"showInAddressList"`
	// The state or province in the user's address.
	State pulumi.StringPtrOutput `pulumi:"state"`
	// The street address of the user's place of business.
	StreetAddress pulumi.StringPtrOutput `pulumi:"streetAddress"`
	// The user's surname (family name or last name).
	Surname pulumi.StringPtrOutput `pulumi:"surname"`
	// The usage location of the user. Required for users that will be assigned licenses due to legal requirement to check for availability of services in countries. The usage location is a two letter country code (ISO standard 3166). Examples include: `NO`, `JP`, and `GB`. Cannot be reset to null once set.
	UsageLocation pulumi.StringPtrOutput `pulumi:"usageLocation"`
	// The user principal name (UPN) of the user.
	UserPrincipalName pulumi.StringOutput `pulumi:"userPrincipalName"`
	// The user type in the directory. Possible values are `Guest` or `Member`.
	UserType pulumi.StringOutput `pulumi:"userType"`
}

Manages a user within Azure Active Directory.

## API Permissions

The following API permissions are required in order to use this resource.

When authenticated with a service principal, this resource requires one of the following application roles: `User.ReadWrite.All` or `Directory.ReadWrite.All`

When authenticated with a user principal, this resource requires one of the following directory roles: `User Administrator` or `Global Administrator`

## Example Usage

```go package main

import ( 

"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

) 

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := azuread.NewUser(ctx, "example", &azuread.UserArgs{
			DisplayName:       pulumi.String("J. Doe"),
			MailNickname:      pulumi.String("jdoe"),
			Password:          pulumi.String("SecretP@sswd99!"),
			UserPrincipalName: pulumi.String("jdoe@hashicorp.com"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Users can be imported using their object ID, e.g.

```sh 

$ pulumi import azuread:index/user:User my_user 00000000-0000-0000-0000-000000000000

```

func GetUser 

func GetUser(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserState, opts ...pulumi.ResourceOption) (*User, error)

GetUser gets an existing User resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUser 

func NewUser(ctx *pulumi.Context,
	name string, args *UserArgs, opts ...pulumi.ResourceOption) (*User, error)

NewUser registers a new resource with the given unique name, arguments, and options.

func (*User) ElementType 

func (*User) ElementType() reflect.Type

func (*User) ToUserOutput 

func (i *User) ToUserOutput() UserOutput

func (*User) ToUserOutputWithContext 

func (i *User) ToUserOutputWithContext(ctx context.Context) UserOutput

type UserArgs 

type UserArgs struct {
	// Whether or not the account should be enabled.
	AccountEnabled pulumi.BoolPtrInput
	// The age group of the user. Supported values are `Adult`, `NotAdult` and `Minor`. Omit this property or specify a blank string to unset.
	AgeGroup pulumi.StringPtrInput
	// A list of telephone numbers for the user. Only one number can be set for this property. Read-only for users synced with Azure AD Connect.
	BusinessPhones pulumi.StringArrayInput
	// The city in which the user is located.
	City pulumi.StringPtrInput
	// The company name which the user is associated. This property can be useful for describing the company that an external user comes from.
	CompanyName pulumi.StringPtrInput
	// Whether consent has been obtained for minors. Supported values are `Granted`, `Denied` and `NotRequired`. Omit this property or specify a blank string to unset.
	ConsentProvidedForMinor pulumi.StringPtrInput
	// The cost center associated with the user.
	CostCenter pulumi.StringPtrInput
	// The country/region in which the user is located, e.g. `US` or `UK`.
	Country pulumi.StringPtrInput
	// The name for the department in which the user works.
	Department pulumi.StringPtrInput
	// Whether the user's password is exempt from expiring. Defaults to `false`.
	DisablePasswordExpiration pulumi.BoolPtrInput
	// Whether the user is allowed weaker passwords than the default policy to be specified. Defaults to `false`.
	DisableStrongPassword pulumi.BoolPtrInput
	// The name to display in the address book for the user.
	DisplayName pulumi.StringInput
	// The name of the division in which the user works.
	Division pulumi.StringPtrInput
	// The employee identifier assigned to the user by the organisation.
	EmployeeId pulumi.StringPtrInput
	// Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor.
	EmployeeType pulumi.StringPtrInput
	// The fax number of the user.
	FaxNumber pulumi.StringPtrInput
	// Whether the user is forced to change the password during the next sign-in. Only takes effect when also changing the password. Defaults to `false`.
	ForcePasswordChange pulumi.BoolPtrInput
	// The given name (first name) of the user.
	GivenName pulumi.StringPtrInput
	// The user’s job title.
	JobTitle pulumi.StringPtrInput
	// The SMTP address for the user. This property cannot be unset once specified.
	Mail pulumi.StringPtrInput
	// The mail alias for the user. Defaults to the user name part of the user principal name (UPN).
	MailNickname pulumi.StringPtrInput
	// The object ID of the user's manager.
	ManagerId pulumi.StringPtrInput
	// The primary cellular telephone number for the user.
	MobilePhone pulumi.StringPtrInput
	// The office location in the user's place of business.
	OfficeLocation pulumi.StringPtrInput
	// The value used to associate an on-premise Active Directory user account with their Azure AD user object. This must be specified if you are using a federated domain for the user's `userPrincipalName` property when creating a new user account.
	OnpremisesImmutableId pulumi.StringPtrInput
	// A list of additional email addresses for the user.
	OtherMails pulumi.StringArrayInput
	// The password for the user. The password must satisfy minimum requirements as specified by the password policy. The maximum length is 256 characters. This property is required when creating a new user.
	Password pulumi.StringPtrInput
	// The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code.
	PostalCode pulumi.StringPtrInput
	// The user's preferred language, in ISO 639-1 notation.
	PreferredLanguage pulumi.StringPtrInput
	// Whether or not the Outlook global address list should include this user. Defaults to `true`.
	ShowInAddressList pulumi.BoolPtrInput
	// The state or province in the user's address.
	State pulumi.StringPtrInput
	// The street address of the user's place of business.
	StreetAddress pulumi.StringPtrInput
	// The user's surname (family name or last name).
	Surname pulumi.StringPtrInput
	// The usage location of the user. Required for users that will be assigned licenses due to legal requirement to check for availability of services in countries. The usage location is a two letter country code (ISO standard 3166). Examples include: `NO`, `JP`, and `GB`. Cannot be reset to null once set.
	UsageLocation pulumi.StringPtrInput
	// The user principal name (UPN) of the user.
	UserPrincipalName pulumi.StringInput
}

The set of arguments for constructing a User resource.

func (UserArgs) ElementType 

func (UserArgs) ElementType() reflect.Type

type UserArray 

type UserArray []UserInput

func (UserArray) ElementType 

func (UserArray) ElementType() reflect.Type

func (UserArray) ToUserArrayOutput 

func (i UserArray) ToUserArrayOutput() UserArrayOutput

func (UserArray) ToUserArrayOutputWithContext 

func (i UserArray) ToUserArrayOutputWithContext(ctx context.Context) UserArrayOutput

type UserArrayInput 

type UserArrayInput interface {
	pulumi.Input

	ToUserArrayOutput() UserArrayOutput
	ToUserArrayOutputWithContext(context.Context) UserArrayOutput
}

UserArrayInput is an input type that accepts UserArray and UserArrayOutput values. You can construct a concrete instance of `UserArrayInput` via: 

UserArray{ UserArgs{...} }

type UserArrayOutput 

type UserArrayOutput struct{ *pulumi.OutputState }

func (UserArrayOutput) ElementType 

func (UserArrayOutput) ElementType() reflect.Type

func (UserArrayOutput) Index 

func (o UserArrayOutput) Index(i pulumi.IntInput) UserOutput

func (UserArrayOutput) ToUserArrayOutput 

func (o UserArrayOutput) ToUserArrayOutput() UserArrayOutput

func (UserArrayOutput) ToUserArrayOutputWithContext 

func (o UserArrayOutput) ToUserArrayOutputWithContext(ctx context.Context) UserArrayOutput

type UserInput 

type UserInput interface {
	pulumi.Input

	ToUserOutput() UserOutput
	ToUserOutputWithContext(ctx context.Context) UserOutput
}

type UserMap 

type UserMap map[string]UserInput

func (UserMap) ElementType 

func (UserMap) ElementType() reflect.Type

func (UserMap) ToUserMapOutput 

func (i UserMap) ToUserMapOutput() UserMapOutput

func (UserMap) ToUserMapOutputWithContext 

func (i UserMap) ToUserMapOutputWithContext(ctx context.Context) UserMapOutput

type UserMapInput 

type UserMapInput interface {
	pulumi.Input

	ToUserMapOutput() UserMapOutput
	ToUserMapOutputWithContext(context.Context) UserMapOutput
}

UserMapInput is an input type that accepts UserMap and UserMapOutput values. You can construct a concrete instance of `UserMapInput` via: 

UserMap{ "key": UserArgs{...} }

type UserMapOutput 

type UserMapOutput struct{ *pulumi.OutputState }

func (UserMapOutput) ElementType 

func (UserMapOutput) ElementType() reflect.Type

func (UserMapOutput) MapIndex 

func (o UserMapOutput) MapIndex(k pulumi.StringInput) UserOutput

func (UserMapOutput) ToUserMapOutput 

func (o UserMapOutput) ToUserMapOutput() UserMapOutput

func (UserMapOutput) ToUserMapOutputWithContext 

func (o UserMapOutput) ToUserMapOutputWithContext(ctx context.Context) UserMapOutput

type UserOutput 

type UserOutput struct{ *pulumi.OutputState }

func (UserOutput) AboutMe added in v5.22.0 

func (o UserOutput) AboutMe() pulumi.StringOutput

A freeform field for the user to describe themselves

func (UserOutput) AccountEnabled added in v5.22.0 

func (o UserOutput) AccountEnabled() pulumi.BoolPtrOutput

Whether or not the account should be enabled.

func (UserOutput) AgeGroup added in v5.22.0 

func (o UserOutput) AgeGroup() pulumi.StringPtrOutput

The age group of the user. Supported values are `Adult`, `NotAdult` and `Minor`. Omit this property or specify a blank string to unset.

func (UserOutput) BusinessPhones added in v5.22.0 

func (o UserOutput) BusinessPhones() pulumi.StringArrayOutput

A list of telephone numbers for the user. Only one number can be set for this property. Read-only for users synced with Azure AD Connect.

func (UserOutput) City added in v5.22.0 

func (o UserOutput) City() pulumi.StringPtrOutput

The city in which the user is located.

func (UserOutput) CompanyName added in v5.22.0 

func (o UserOutput) CompanyName() pulumi.StringPtrOutput

The company name which the user is associated. This property can be useful for describing the company that an external user comes from.

func (UserOutput) ConsentProvidedForMinor added in v5.22.0 

func (o UserOutput) ConsentProvidedForMinor() pulumi.StringPtrOutput

Whether consent has been obtained for minors. Supported values are `Granted`, `Denied` and `NotRequired`. Omit this property or specify a blank string to unset.

func (UserOutput) CostCenter added in v5.22.0 

func (o UserOutput) CostCenter() pulumi.StringPtrOutput

The cost center associated with the user.

func (UserOutput) Country added in v5.22.0 

func (o UserOutput) Country() pulumi.StringPtrOutput

The country/region in which the user is located, e.g. `US` or `UK`.

func (UserOutput) CreationType added in v5.22.0 

func (o UserOutput) CreationType() pulumi.StringOutput

Indicates whether the user account was created as a regular school or work account (`null`), an external account (`Invitation`), a local account for an Azure Active Directory B2C tenant (`LocalAccount`) or self-service sign-up using email verification (`EmailVerified`).

func (UserOutput) Department added in v5.22.0 

func (o UserOutput) Department() pulumi.StringPtrOutput

The name for the department in which the user works.

func (UserOutput) DisablePasswordExpiration added in v5.22.0 

func (o UserOutput) DisablePasswordExpiration() pulumi.BoolPtrOutput

Whether the user's password is exempt from expiring. Defaults to `false`.

func (UserOutput) DisableStrongPassword added in v5.22.0 

func (o UserOutput) DisableStrongPassword() pulumi.BoolPtrOutput

Whether the user is allowed weaker passwords than the default policy to be specified. Defaults to `false`.

func (UserOutput) DisplayName added in v5.22.0 

func (o UserOutput) DisplayName() pulumi.StringOutput

The name to display in the address book for the user.

func (UserOutput) Division added in v5.22.0 

func (o UserOutput) Division() pulumi.StringPtrOutput

The name of the division in which the user works.

func (UserOutput) ElementType 

func (UserOutput) ElementType() reflect.Type

func (UserOutput) EmployeeId added in v5.22.0 

func (o UserOutput) EmployeeId() pulumi.StringPtrOutput

The employee identifier assigned to the user by the organisation.

func (UserOutput) EmployeeType added in v5.22.0 

func (o UserOutput) EmployeeType() pulumi.StringPtrOutput

Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor.

func (UserOutput) ExternalUserState added in v5.22.0 

func (o UserOutput) ExternalUserState() pulumi.StringOutput

For an external user invited to the tenant, this property represents the invited user's invitation status. Possible values are `PendingAcceptance` or `Accepted`.

func (UserOutput) FaxNumber added in v5.22.0 

func (o UserOutput) FaxNumber() pulumi.StringPtrOutput

The fax number of the user.

func (UserOutput) ForcePasswordChange added in v5.22.0 

func (o UserOutput) ForcePasswordChange() pulumi.BoolPtrOutput

Whether the user is forced to change the password during the next sign-in. Only takes effect when also changing the password. Defaults to `false`.

func (UserOutput) GivenName added in v5.22.0 

func (o UserOutput) GivenName() pulumi.StringPtrOutput

The given name (first name) of the user.

func (UserOutput) ImAddresses added in v5.22.0 

func (o UserOutput) ImAddresses() pulumi.StringArrayOutput

A list of instant message voice over IP (VOIP) session initiation protocol (SIP) addresses for the user.

func (UserOutput) JobTitle added in v5.22.0 

func (o UserOutput) JobTitle() pulumi.StringPtrOutput

The user’s job title.

func (UserOutput) Mail added in v5.22.0 

func (o UserOutput) Mail() pulumi.StringOutput

The SMTP address for the user. This property cannot be unset once specified.

func (UserOutput) MailNickname added in v5.22.0 

func (o UserOutput) MailNickname() pulumi.StringOutput

The mail alias for the user. Defaults to the user name part of the user principal name (UPN).

func (UserOutput) ManagerId added in v5.22.0 

func (o UserOutput) ManagerId() pulumi.StringPtrOutput

The object ID of the user's manager.

func (UserOutput) MobilePhone added in v5.22.0 

func (o UserOutput) MobilePhone() pulumi.StringPtrOutput

The primary cellular telephone number for the user.

func (UserOutput) ObjectId added in v5.22.0 

func (o UserOutput) ObjectId() pulumi.StringOutput

The object ID of the user.

func (UserOutput) OfficeLocation added in v5.22.0 

func (o UserOutput) OfficeLocation() pulumi.StringPtrOutput

The office location in the user's place of business.

func (UserOutput) OnpremisesDistinguishedName added in v5.22.0 

func (o UserOutput) OnpremisesDistinguishedName() pulumi.StringOutput

The on-premises distinguished name (DN) of the user, synchronised from the on-premises directory when Azure AD Connect is used.

func (UserOutput) OnpremisesDomainName added in v5.22.0 

func (o UserOutput) OnpremisesDomainName() pulumi.StringOutput

The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.

func (UserOutput) OnpremisesImmutableId added in v5.22.0 

func (o UserOutput) OnpremisesImmutableId() pulumi.StringOutput

The value used to associate an on-premise Active Directory user account with their Azure AD user object. This must be specified if you are using a federated domain for the user's `userPrincipalName` property when creating a new user account.

func (UserOutput) OnpremisesSamAccountName added in v5.22.0 

func (o UserOutput) OnpremisesSamAccountName() pulumi.StringOutput

The on-premise SAM account name of the user.

func (UserOutput) OnpremisesSecurityIdentifier added in v5.22.0 

func (o UserOutput) OnpremisesSecurityIdentifier() pulumi.StringOutput

The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.

func (UserOutput) OnpremisesSyncEnabled added in v5.22.0 

func (o UserOutput) OnpremisesSyncEnabled() pulumi.BoolOutput

Whether this user is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).

func (UserOutput) OnpremisesUserPrincipalName added in v5.22.0 

func (o UserOutput) OnpremisesUserPrincipalName() pulumi.StringOutput

The on-premise user principal name of the user.

func (UserOutput) OtherMails added in v5.22.0 

func (o UserOutput) OtherMails() pulumi.StringArrayOutput

A list of additional email addresses for the user.

func (UserOutput) Password added in v5.22.0 

func (o UserOutput) Password() pulumi.StringOutput

The password for the user. The password must satisfy minimum requirements as specified by the password policy. The maximum length is 256 characters. This property is required when creating a new user.

func (UserOutput) PostalCode added in v5.22.0 

func (o UserOutput) PostalCode() pulumi.StringPtrOutput

The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code.

func (UserOutput) PreferredLanguage added in v5.22.0 

func (o UserOutput) PreferredLanguage() pulumi.StringPtrOutput

The user's preferred language, in ISO 639-1 notation.

func (UserOutput) ProxyAddresses added in v5.22.0 

func (o UserOutput) ProxyAddresses() pulumi.StringArrayOutput

List of email addresses for the user that direct to the same mailbox.

func (UserOutput) ShowInAddressList added in v5.22.0 

func (o UserOutput) ShowInAddressList() pulumi.BoolPtrOutput

Whether or not the Outlook global address list should include this user. Defaults to `true`.

func (UserOutput) State added in v5.22.0 

func (o UserOutput) State() pulumi.StringPtrOutput

The state or province in the user's address.

func (UserOutput) StreetAddress added in v5.22.0 

func (o UserOutput) StreetAddress() pulumi.StringPtrOutput

The street address of the user's place of business.

func (UserOutput) Surname added in v5.22.0 

func (o UserOutput) Surname() pulumi.StringPtrOutput

The user's surname (family name or last name).

func (UserOutput) ToUserOutput 

func (o UserOutput) ToUserOutput() UserOutput

func (UserOutput) ToUserOutputWithContext 

func (o UserOutput) ToUserOutputWithContext(ctx context.Context) UserOutput

func (UserOutput) UsageLocation added in v5.22.0 

func (o UserOutput) UsageLocation() pulumi.StringPtrOutput

The usage location of the user. Required for users that will be assigned licenses due to legal requirement to check for availability of services in countries. The usage location is a two letter country code (ISO standard 3166). Examples include: `NO`, `JP`, and `GB`. Cannot be reset to null once set.

func (UserOutput) UserPrincipalName added in v5.22.0 

func (o UserOutput) UserPrincipalName() pulumi.StringOutput

The user principal name (UPN) of the user.

func (UserOutput) UserType added in v5.22.0 

func (o UserOutput) UserType() pulumi.StringOutput

The user type in the directory. Possible values are `Guest` or `Member`.

type UserState 

type UserState struct {
	// A freeform field for the user to describe themselves
	AboutMe pulumi.StringPtrInput
	// Whether or not the account should be enabled.
	AccountEnabled pulumi.BoolPtrInput
	// The age group of the user. Supported values are `Adult`, `NotAdult` and `Minor`. Omit this property or specify a blank string to unset.
	AgeGroup pulumi.StringPtrInput
	// A list of telephone numbers for the user. Only one number can be set for this property. Read-only for users synced with Azure AD Connect.
	BusinessPhones pulumi.StringArrayInput
	// The city in which the user is located.
	City pulumi.StringPtrInput
	// The company name which the user is associated. This property can be useful for describing the company that an external user comes from.
	CompanyName pulumi.StringPtrInput
	// Whether consent has been obtained for minors. Supported values are `Granted`, `Denied` and `NotRequired`. Omit this property or specify a blank string to unset.
	ConsentProvidedForMinor pulumi.StringPtrInput
	// The cost center associated with the user.
	CostCenter pulumi.StringPtrInput
	// The country/region in which the user is located, e.g. `US` or `UK`.
	Country pulumi.StringPtrInput
	// Indicates whether the user account was created as a regular school or work account (`null`), an external account (`Invitation`), a local account for an Azure Active Directory B2C tenant (`LocalAccount`) or self-service sign-up using email verification (`EmailVerified`).
	CreationType pulumi.StringPtrInput
	// The name for the department in which the user works.
	Department pulumi.StringPtrInput
	// Whether the user's password is exempt from expiring. Defaults to `false`.
	DisablePasswordExpiration pulumi.BoolPtrInput
	// Whether the user is allowed weaker passwords than the default policy to be specified. Defaults to `false`.
	DisableStrongPassword pulumi.BoolPtrInput
	// The name to display in the address book for the user.
	DisplayName pulumi.StringPtrInput
	// The name of the division in which the user works.
	Division pulumi.StringPtrInput
	// The employee identifier assigned to the user by the organisation.
	EmployeeId pulumi.StringPtrInput
	// Captures enterprise worker type. For example, Employee, Contractor, Consultant, or Vendor.
	EmployeeType pulumi.StringPtrInput
	// For an external user invited to the tenant, this property represents the invited user's invitation status. Possible values are `PendingAcceptance` or `Accepted`.
	ExternalUserState pulumi.StringPtrInput
	// The fax number of the user.
	FaxNumber pulumi.StringPtrInput
	// Whether the user is forced to change the password during the next sign-in. Only takes effect when also changing the password. Defaults to `false`.
	ForcePasswordChange pulumi.BoolPtrInput
	// The given name (first name) of the user.
	GivenName pulumi.StringPtrInput
	// A list of instant message voice over IP (VOIP) session initiation protocol (SIP) addresses for the user.
	ImAddresses pulumi.StringArrayInput
	// The user’s job title.
	JobTitle pulumi.StringPtrInput
	// The SMTP address for the user. This property cannot be unset once specified.
	Mail pulumi.StringPtrInput
	// The mail alias for the user. Defaults to the user name part of the user principal name (UPN).
	MailNickname pulumi.StringPtrInput
	// The object ID of the user's manager.
	ManagerId pulumi.StringPtrInput
	// The primary cellular telephone number for the user.
	MobilePhone pulumi.StringPtrInput
	// The object ID of the user.
	ObjectId pulumi.StringPtrInput
	// The office location in the user's place of business.
	OfficeLocation pulumi.StringPtrInput
	// The on-premises distinguished name (DN) of the user, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDistinguishedName pulumi.StringPtrInput
	// The on-premises FQDN, also called dnsDomainName, synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesDomainName pulumi.StringPtrInput
	// The value used to associate an on-premise Active Directory user account with their Azure AD user object. This must be specified if you are using a federated domain for the user's `userPrincipalName` property when creating a new user account.
	OnpremisesImmutableId pulumi.StringPtrInput
	// The on-premise SAM account name of the user.
	OnpremisesSamAccountName pulumi.StringPtrInput
	// The on-premises security identifier (SID), synchronised from the on-premises directory when Azure AD Connect is used.
	OnpremisesSecurityIdentifier pulumi.StringPtrInput
	// Whether this user is synchronised from an on-premises directory (`true`), no longer synchronised (`false`), or has never been synchronised (`null`).
	OnpremisesSyncEnabled pulumi.BoolPtrInput
	// The on-premise user principal name of the user.
	OnpremisesUserPrincipalName pulumi.StringPtrInput
	// A list of additional email addresses for the user.
	OtherMails pulumi.StringArrayInput
	// The password for the user. The password must satisfy minimum requirements as specified by the password policy. The maximum length is 256 characters. This property is required when creating a new user.
	Password pulumi.StringPtrInput
	// The postal code for the user's postal address. The postal code is specific to the user's country/region. In the United States of America, this attribute contains the ZIP code.
	PostalCode pulumi.StringPtrInput
	// The user's preferred language, in ISO 639-1 notation.
	PreferredLanguage pulumi.StringPtrInput
	// List of email addresses for the user that direct to the same mailbox.
	ProxyAddresses pulumi.StringArrayInput
	// Whether or not the Outlook global address list should include this user. Defaults to `true`.
	ShowInAddressList pulumi.BoolPtrInput
	// The state or province in the user's address.
	State pulumi.StringPtrInput
	// The street address of the user's place of business.
	StreetAddress pulumi.StringPtrInput
	// The user's surname (family name or last name).
	Surname pulumi.StringPtrInput
	// The usage location of the user. Required for users that will be assigned licenses due to legal requirement to check for availability of services in countries. The usage location is a two letter country code (ISO standard 3166). Examples include: `NO`, `JP`, and `GB`. Cannot be reset to null once set.
	UsageLocation pulumi.StringPtrInput
	// The user principal name (UPN) of the user.
	UserPrincipalName pulumi.StringPtrInput
	// The user type in the directory. Possible values are `Guest` or `Member`.
	UserType pulumi.StringPtrInput
}

func (UserState) ElementType 

func (UserState) ElementType() reflect.Type

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.