-
Notifications
You must be signed in to change notification settings - Fork 8
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update terraform-provider-azuread to v2.26.0 (#288)
- Loading branch information
1 parent
e856b01
commit 16c1f4c
Showing
12 changed files
with
648 additions
and
524 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -20,79 +20,6 @@ namespace Pulumi.AzureAD | |
/// | ||
/// When authenticated with a user principal, this resource requires one of the following directory roles: `Privileged Role Administrator` or `Global Administrator` | ||
/// | ||
/// ## Example Usage | ||
/// | ||
/// *Assignment for a built-in role* | ||
/// | ||
/// ```csharp | ||
/// using Pulumi; | ||
/// using AzureAD = Pulumi.AzureAD; | ||
/// | ||
/// class MyStack : Stack | ||
/// { | ||
/// public MyStack() | ||
/// { | ||
/// var exampleUser = Output.Create(AzureAD.GetUser.InvokeAsync(new AzureAD.GetUserArgs | ||
/// { | ||
/// UserPrincipalName = "[email protected]", | ||
/// })); | ||
/// var exampleDirectoryRole = new AzureAD.DirectoryRole("exampleDirectoryRole", new AzureAD.DirectoryRoleArgs | ||
/// { | ||
/// DisplayName = "Security administrator", | ||
/// }); | ||
/// var exampleDirectoryRoleAssignment = new AzureAD.DirectoryRoleAssignment("exampleDirectoryRoleAssignment", new AzureAD.DirectoryRoleAssignmentArgs | ||
/// { | ||
/// RoleId = exampleDirectoryRole.TemplateId, | ||
/// PrincipalObjectId = exampleUser.Apply(exampleUser => exampleUser.ObjectId), | ||
/// }); | ||
/// } | ||
/// | ||
/// } | ||
/// ``` | ||
/// | ||
/// > Note the use of the `template_id` attribute when referencing built-in roles. | ||
/// | ||
/// *Assignment for a custom role* | ||
/// | ||
/// ```csharp | ||
/// using Pulumi; | ||
/// using AzureAD = Pulumi.AzureAD; | ||
/// | ||
/// class MyStack : Stack | ||
/// { | ||
/// public MyStack() | ||
/// { | ||
/// var exampleUser = Output.Create(AzureAD.GetUser.InvokeAsync(new AzureAD.GetUserArgs | ||
/// { | ||
/// UserPrincipalName = "[email protected]", | ||
/// })); | ||
/// var exampleCustomDirectoryRole = new AzureAD.CustomDirectoryRole("exampleCustomDirectoryRole", new AzureAD.CustomDirectoryRoleArgs | ||
/// { | ||
/// DisplayName = "My Custom Role", | ||
/// Enabled = true, | ||
/// Version = "1.0", | ||
/// Permissions = | ||
/// { | ||
/// new AzureAD.Inputs.CustomDirectoryRolePermissionArgs | ||
/// { | ||
/// AllowedResourceActions = | ||
/// { | ||
/// "microsoft.directory/applications/basic/update", | ||
/// "microsoft.directory/applications/standard/read", | ||
/// }, | ||
/// }, | ||
/// }, | ||
/// }); | ||
/// var exampleDirectoryRoleAssignment = new AzureAD.DirectoryRoleAssignment("exampleDirectoryRoleAssignment", new AzureAD.DirectoryRoleAssignmentArgs | ||
/// { | ||
/// RoleId = exampleCustomDirectoryRole.ObjectId, | ||
/// PrincipalObjectId = exampleUser.Apply(exampleUser => exampleUser.ObjectId), | ||
/// }); | ||
/// } | ||
/// | ||
/// } | ||
/// ``` | ||
/// | ||
/// ## Import | ||
/// | ||
/// Directory role assignments can be imported using the ID of the assignment, e.g. | ||
|
@@ -105,28 +32,40 @@ namespace Pulumi.AzureAD | |
public partial class DirectoryRoleAssignment : Pulumi.CustomResource | ||
{ | ||
/// <summary> | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directory_scope_object_id`. Changing this forces a new resource to be created. | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directory_scope_id`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Output("appScopeId")] | ||
public Output<string> AppScopeId { get; private set; } = null!; | ||
|
||
/// <summary> | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific | ||
/// </summary> | ||
[Output("appScopeObjectId")] | ||
public Output<string?> AppScopeObjectId { get; private set; } = null!; | ||
public Output<string> AppScopeObjectId { get; private set; } = null!; | ||
|
||
/// <summary> | ||
/// Identifier of the directory object representing the scope of the assignment. Cannot be used with `app_scope_id`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Output("directoryScopeId")] | ||
public Output<string> DirectoryScopeId { get; private set; } = null!; | ||
|
||
/// <summary> | ||
/// The object ID of a directory object representing the scope of the assignment. Cannot be used with `app_scope_object_id`. Changing this forces a new resource to be created. | ||
/// Identifier of the directory object representing the scope of the assignment | ||
/// </summary> | ||
[Output("directoryScopeObjectId")] | ||
public Output<string?> DirectoryScopeObjectId { get; private set; } = null!; | ||
public Output<string> DirectoryScopeObjectId { get; private set; } = null!; | ||
|
||
/// <summary> | ||
/// The object ID of the principal for you want to create a role assignment. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Output("principalObjectId")] | ||
public Output<string?> PrincipalObjectId { get; private set; } = null!; | ||
public Output<string> PrincipalObjectId { get; private set; } = null!; | ||
|
||
/// <summary> | ||
/// The template ID (in the case of built-in roles) or object ID (in the case of custom roles) of the directory role you want to assign. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Output("roleId")] | ||
public Output<string?> RoleId { get; private set; } = null!; | ||
public Output<string> RoleId { get; private set; } = null!; | ||
|
||
|
||
/// <summary> | ||
|
@@ -136,7 +75,7 @@ public partial class DirectoryRoleAssignment : Pulumi.CustomResource | |
/// <param name="name">The unique name of the resource</param> | ||
/// <param name="args">The arguments used to populate this resource's properties</param> | ||
/// <param name="options">A bag of options that control this resource's behavior</param> | ||
public DirectoryRoleAssignment(string name, DirectoryRoleAssignmentArgs? args = null, CustomResourceOptions? options = null) | ||
public DirectoryRoleAssignment(string name, DirectoryRoleAssignmentArgs args, CustomResourceOptions? options = null) | ||
: base("azuread:index/directoryRoleAssignment:DirectoryRoleAssignment", name, args ?? new DirectoryRoleAssignmentArgs(), MakeResourceOptions(options, "")) | ||
{ | ||
} | ||
|
@@ -175,28 +114,40 @@ public static DirectoryRoleAssignment Get(string name, Input<string> id, Directo | |
public sealed class DirectoryRoleAssignmentArgs : Pulumi.ResourceArgs | ||
{ | ||
/// <summary> | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directory_scope_object_id`. Changing this forces a new resource to be created. | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directory_scope_id`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Input("appScopeId")] | ||
public Input<string>? AppScopeId { get; set; } | ||
|
||
/// <summary> | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific | ||
/// </summary> | ||
[Input("appScopeObjectId")] | ||
public Input<string>? AppScopeObjectId { get; set; } | ||
|
||
/// <summary> | ||
/// The object ID of a directory object representing the scope of the assignment. Cannot be used with `app_scope_object_id`. Changing this forces a new resource to be created. | ||
/// Identifier of the directory object representing the scope of the assignment. Cannot be used with `app_scope_id`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Input("directoryScopeId")] | ||
public Input<string>? DirectoryScopeId { get; set; } | ||
|
||
/// <summary> | ||
/// Identifier of the directory object representing the scope of the assignment | ||
/// </summary> | ||
[Input("directoryScopeObjectId")] | ||
public Input<string>? DirectoryScopeObjectId { get; set; } | ||
|
||
/// <summary> | ||
/// The object ID of the principal for you want to create a role assignment. Supported object types are Users, Groups or Service Principals. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Input("principalObjectId")] | ||
public Input<string>? PrincipalObjectId { get; set; } | ||
[Input("principalObjectId", required: true)] | ||
public Input<string> PrincipalObjectId { get; set; } = null!; | ||
|
||
/// <summary> | ||
/// The template ID (in the case of built-in roles) or object ID (in the case of custom roles) of the directory role you want to assign. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Input("roleId")] | ||
public Input<string>? RoleId { get; set; } | ||
[Input("roleId", required: true)] | ||
public Input<string> RoleId { get; set; } = null!; | ||
|
||
public DirectoryRoleAssignmentArgs() | ||
{ | ||
|
@@ -206,13 +157,25 @@ public DirectoryRoleAssignmentArgs() | |
public sealed class DirectoryRoleAssignmentState : Pulumi.ResourceArgs | ||
{ | ||
/// <summary> | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directory_scope_object_id`. Changing this forces a new resource to be created. | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific. Cannot be used with `directory_scope_id`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Input("appScopeId")] | ||
public Input<string>? AppScopeId { get; set; } | ||
|
||
/// <summary> | ||
/// Identifier of the app-specific scope when the assignment scope is app-specific | ||
/// </summary> | ||
[Input("appScopeObjectId")] | ||
public Input<string>? AppScopeObjectId { get; set; } | ||
|
||
/// <summary> | ||
/// The object ID of a directory object representing the scope of the assignment. Cannot be used with `app_scope_object_id`. Changing this forces a new resource to be created. | ||
/// Identifier of the directory object representing the scope of the assignment. Cannot be used with `app_scope_id`. See [official documentation](https://docs.microsoft.com/en-us/graph/api/rbacapplication-post-roleassignments?view=graph-rest-1.0&tabs=http) for example usage. Changing this forces a new resource to be created. | ||
/// </summary> | ||
[Input("directoryScopeId")] | ||
public Input<string>? DirectoryScopeId { get; set; } | ||
|
||
/// <summary> | ||
/// Identifier of the directory object representing the scope of the assignment | ||
/// </summary> | ||
[Input("directoryScopeObjectId")] | ||
public Input<string>? DirectoryScopeObjectId { get; set; } | ||
|
Oops, something went wrong.