Google Cloud Classic v8.9.3 published on Monday, Nov 18, 2024 by Pulumi
gcp.privilegedaccessmanager.getEntitlement
Explore with Pulumi AI
Use this data source to get information about a Google Cloud Privileged Access Manager Entitlement.
To get more information about Privileged Access Manager, see:
- API Documentation
- How-to guides
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const my-entitlement = gcp.privilegedaccessmanager.getEntitlement({
parent: "projects/my-project",
location: "global",
entitlementId: "my-entitlement",
});
import pulumi
import pulumi_gcp as gcp
my_entitlement = gcp.privilegedaccessmanager.get_entitlement(parent="projects/my-project",
location="global",
entitlement_id="my-entitlement")
package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/privilegedaccessmanager"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := privilegedaccessmanager.LookupEntitlement(ctx, &privilegedaccessmanager.LookupEntitlementArgs{
Parent: pulumi.StringRef("projects/my-project"),
Location: pulumi.StringRef("global"),
EntitlementId: pulumi.StringRef("my-entitlement"),
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() =>
{
var my_entitlement = Gcp.PrivilegedAccessManager.GetEntitlement.Invoke(new()
{
Parent = "projects/my-project",
Location = "global",
EntitlementId = "my-entitlement",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.privilegedaccessmanager.PrivilegedaccessmanagerFunctions;
import com.pulumi.gcp.privilegedaccessmanager.inputs.GetEntitlementArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var my-entitlement = PrivilegedaccessmanagerFunctions.getEntitlement(GetEntitlementArgs.builder()
.parent("projects/my-project")
.location("global")
.entitlementId("my-entitlement")
.build());
}
}
variables:
my-entitlement:
fn::invoke:
Function: gcp:privilegedaccessmanager:getEntitlement
Arguments:
parent: projects/my-project
location: global
entitlementId: my-entitlement
Using getEntitlement
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEntitlement(args: GetEntitlementArgs, opts?: InvokeOptions): Promise<GetEntitlementResult>
function getEntitlementOutput(args: GetEntitlementOutputArgs, opts?: InvokeOptions): Output<GetEntitlementResult>
def get_entitlement(entitlement_id: Optional[str] = None,
location: Optional[str] = None,
parent: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetEntitlementResult
def get_entitlement_output(entitlement_id: Optional[pulumi.Input[str]] = None,
location: Optional[pulumi.Input[str]] = None,
parent: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetEntitlementResult]
func LookupEntitlement(ctx *Context, args *LookupEntitlementArgs, opts ...InvokeOption) (*LookupEntitlementResult, error)
func LookupEntitlementOutput(ctx *Context, args *LookupEntitlementOutputArgs, opts ...InvokeOption) LookupEntitlementResultOutput
> Note: This function is named LookupEntitlement
in the Go SDK.
public static class GetEntitlement
{
public static Task<GetEntitlementResult> InvokeAsync(GetEntitlementArgs args, InvokeOptions? opts = null)
public static Output<GetEntitlementResult> Invoke(GetEntitlementInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetEntitlementResult> getEntitlement(GetEntitlementArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
function: gcp:privilegedaccessmanager/getEntitlement:getEntitlement
arguments:
# arguments dictionary
The following arguments are supported:
- Entitlement
Id string - ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format
{parent}/locations/{location}/entitlements/{entitlement_id}
. - Location string
- The region of the Entitlement resource.
- Parent string
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- Entitlement
Id string - ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format
{parent}/locations/{location}/entitlements/{entitlement_id}
. - Location string
- The region of the Entitlement resource.
- Parent string
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlement
Id String - ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format
{parent}/locations/{location}/entitlements/{entitlement_id}
. - location String
- The region of the Entitlement resource.
- parent String
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlement
Id string - ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format
{parent}/locations/{location}/entitlements/{entitlement_id}
. - location string
- The region of the Entitlement resource.
- parent string
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlement_
id str - ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format
{parent}/locations/{location}/entitlements/{entitlement_id}
. - location str
- The region of the Entitlement resource.
- parent str
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlement
Id String - ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format
{parent}/locations/{location}/entitlements/{entitlement_id}
. - location String
- The region of the Entitlement resource.
- parent String
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
getEntitlement Result
The following output properties are available:
- Additional
Notification List<GetTargets Entitlement Additional Notification Target> - Approval
Workflows List<GetEntitlement Approval Workflow> - Create
Time string - Eligible
Users List<GetEntitlement Eligible User> - Etag string
- Id string
- The provider-assigned unique ID for this managed resource.
- Max
Request stringDuration - Name string
- Privileged
Accesses List<GetEntitlement Privileged Access> - Requester
Justification List<GetConfigs Entitlement Requester Justification Config> - State string
- Update
Time string - Entitlement
Id string - Location string
- Parent string
- Additional
Notification []GetTargets Entitlement Additional Notification Target - Approval
Workflows []GetEntitlement Approval Workflow - Create
Time string - Eligible
Users []GetEntitlement Eligible User - Etag string
- Id string
- The provider-assigned unique ID for this managed resource.
- Max
Request stringDuration - Name string
- Privileged
Accesses []GetEntitlement Privileged Access - Requester
Justification []GetConfigs Entitlement Requester Justification Config - State string
- Update
Time string - Entitlement
Id string - Location string
- Parent string
- additional
Notification List<GetTargets Entitlement Additional Notification Target> - approval
Workflows List<GetEntitlement Approval Workflow> - create
Time String - eligible
Users List<GetEntitlement Eligible User> - etag String
- id String
- The provider-assigned unique ID for this managed resource.
- max
Request StringDuration - name String
- privileged
Accesses List<GetEntitlement Privileged Access> - requester
Justification List<GetConfigs Entitlement Requester Justification Config> - state String
- update
Time String - entitlement
Id String - location String
- parent String
- additional
Notification GetTargets Entitlement Additional Notification Target[] - approval
Workflows GetEntitlement Approval Workflow[] - create
Time string - eligible
Users GetEntitlement Eligible User[] - etag string
- id string
- The provider-assigned unique ID for this managed resource.
- max
Request stringDuration - name string
- privileged
Accesses GetEntitlement Privileged Access[] - requester
Justification GetConfigs Entitlement Requester Justification Config[] - state string
- update
Time string - entitlement
Id string - location string
- parent string
- additional_
notification_ Sequence[Gettargets Entitlement Additional Notification Target] - approval_
workflows Sequence[GetEntitlement Approval Workflow] - create_
time str - eligible_
users Sequence[GetEntitlement Eligible User] - etag str
- id str
- The provider-assigned unique ID for this managed resource.
- max_
request_ strduration - name str
- privileged_
accesses Sequence[GetEntitlement Privileged Access] - requester_
justification_ Sequence[Getconfigs Entitlement Requester Justification Config] - state str
- update_
time str - entitlement_
id str - location str
- parent str
- additional
Notification List<Property Map>Targets - approval
Workflows List<Property Map> - create
Time String - eligible
Users List<Property Map> - etag String
- id String
- The provider-assigned unique ID for this managed resource.
- max
Request StringDuration - name String
- privileged
Accesses List<Property Map> - requester
Justification List<Property Map>Configs - state String
- update
Time String - entitlement
Id String - location String
- parent String
Supporting Types
GetEntitlementAdditionalNotificationTarget
- Admin
Email List<string>Recipients - Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- Requester
Email List<string>Recipients - Optional. Additional email address to be notified about an eligible entitlement.
- Admin
Email []stringRecipients - Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- Requester
Email []stringRecipients - Optional. Additional email address to be notified about an eligible entitlement.
- admin
Email List<String>Recipients - Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requester
Email List<String>Recipients - Optional. Additional email address to be notified about an eligible entitlement.
- admin
Email string[]Recipients - Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requester
Email string[]Recipients - Optional. Additional email address to be notified about an eligible entitlement.
- admin_
email_ Sequence[str]recipients - Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requester_
email_ Sequence[str]recipients - Optional. Additional email address to be notified about an eligible entitlement.
- admin
Email List<String>Recipients - Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requester
Email List<String>Recipients - Optional. Additional email address to be notified about an eligible entitlement.
GetEntitlementApprovalWorkflow
- Manual
Approvals List<GetEntitlement Approval Workflow Manual Approval> - A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as
- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
- Manual
Approvals []GetEntitlement Approval Workflow Manual Approval - A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as
- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
- manual
Approvals List<GetEntitlement Approval Workflow Manual Approval> - A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as
- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
- manual
Approvals GetEntitlement Approval Workflow Manual Approval[] - A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as
- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
- manual_
approvals Sequence[GetEntitlement Approval Workflow Manual Approval] - A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as
- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
- manual
Approvals List<Property Map> - A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as
- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
GetEntitlementApprovalWorkflowManualApproval
- Require
Approver boolJustification - Optional. Do the approvers need to provide a justification for their actions?
- Steps
List<Get
Entitlement Approval Workflow Manual Approval Step> - List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- Require
Approver boolJustification - Optional. Do the approvers need to provide a justification for their actions?
- Steps
[]Get
Entitlement Approval Workflow Manual Approval Step - List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- require
Approver BooleanJustification - Optional. Do the approvers need to provide a justification for their actions?
- steps
List<Get
Entitlement Approval Workflow Manual Approval Step> - List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- require
Approver booleanJustification - Optional. Do the approvers need to provide a justification for their actions?
- steps
Get
Entitlement Approval Workflow Manual Approval Step[] - List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- require_
approver_ booljustification - Optional. Do the approvers need to provide a justification for their actions?
- steps
Sequence[Get
Entitlement Approval Workflow Manual Approval Step] - List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- require
Approver BooleanJustification - Optional. Do the approvers need to provide a justification for their actions?
- steps List<Property Map>
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
GetEntitlementApprovalWorkflowManualApprovalStep
- Approvals
Needed int - How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- Approver
Email List<string>Recipients - Optional. Additional email addresses to be notified when a grant is pending approval.
- Approvers
List<Get
Entitlement Approval Workflow Manual Approval Step Approver> - The potential set of approvers in this step. This list should contain at only one entry.
- Approvals
Needed int - How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- Approver
Email []stringRecipients - Optional. Additional email addresses to be notified when a grant is pending approval.
- Approvers
[]Get
Entitlement Approval Workflow Manual Approval Step Approver - The potential set of approvers in this step. This list should contain at only one entry.
- approvals
Needed Integer - How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approver
Email List<String>Recipients - Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers
List<Get
Entitlement Approval Workflow Manual Approval Step Approver> - The potential set of approvers in this step. This list should contain at only one entry.
- approvals
Needed number - How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approver
Email string[]Recipients - Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers
Get
Entitlement Approval Workflow Manual Approval Step Approver[] - The potential set of approvers in this step. This list should contain at only one entry.
- approvals_
needed int - How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approver_
email_ Sequence[str]recipients - Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers
Sequence[Get
Entitlement Approval Workflow Manual Approval Step Approver] - The potential set of approvers in this step. This list should contain at only one entry.
- approvals
Needed Number - How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approver
Email List<String>Recipients - Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers List<Property Map>
- The potential set of approvers in this step. This list should contain at only one entry.
GetEntitlementApprovalWorkflowManualApprovalStepApprover
- Principals List<string>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- Principals []string
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals string[]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals Sequence[str]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
GetEntitlementEligibleUser
- Principals List<string>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- Principals []string
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals string[]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals Sequence[str]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
GetEntitlementPrivilegedAccess
- Gcp
Iam List<GetAccesses Entitlement Privileged Access Gcp Iam Access> - GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- Gcp
Iam []GetAccesses Entitlement Privileged Access Gcp Iam Access - GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcp
Iam List<GetAccesses Entitlement Privileged Access Gcp Iam Access> - GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcp
Iam GetAccesses Entitlement Privileged Access Gcp Iam Access[] - GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcp_
iam_ Sequence[Getaccesses Entitlement Privileged Access Gcp Iam Access] - GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcp
Iam List<Property Map>Accesses - GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
GetEntitlementPrivilegedAccessGcpIamAccess
- Resource string
- Name of the resource.
- Resource
Type string - The type of this resource.
- Role
Bindings List<GetEntitlement Privileged Access Gcp Iam Access Role Binding> - Role bindings to be created on successful grant.
- Resource string
- Name of the resource.
- Resource
Type string - The type of this resource.
- Role
Bindings []GetEntitlement Privileged Access Gcp Iam Access Role Binding - Role bindings to be created on successful grant.
- resource String
- Name of the resource.
- resource
Type String - The type of this resource.
- role
Bindings List<GetEntitlement Privileged Access Gcp Iam Access Role Binding> - Role bindings to be created on successful grant.
- resource string
- Name of the resource.
- resource
Type string - The type of this resource.
- role
Bindings GetEntitlement Privileged Access Gcp Iam Access Role Binding[] - Role bindings to be created on successful grant.
- resource str
- Name of the resource.
- resource_
type str - The type of this resource.
- role_
bindings Sequence[GetEntitlement Privileged Access Gcp Iam Access Role Binding] - Role bindings to be created on successful grant.
- resource String
- Name of the resource.
- resource
Type String - The type of this resource.
- role
Bindings List<Property Map> - Role bindings to be created on successful grant.
GetEntitlementPrivilegedAccessGcpIamAccessRoleBinding
- Condition
Expression string - The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- Role string
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- Condition
Expression string - The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- Role string
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- condition
Expression String - The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role String
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- condition
Expression string - The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role string
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- condition_
expression str - The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role str
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- condition
Expression String - The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role String
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
GetEntitlementRequesterJustificationConfig
- Not
Mandatories List<GetEntitlement Requester Justification Config Not Mandatory> - The justification is not mandatory but can be provided in any of the supported formats.
- Unstructureds
List<Get
Entitlement Requester Justification Config Unstructured> - The requester has to provide a justification in the form of free flowing text.
- Not
Mandatories []GetEntitlement Requester Justification Config Not Mandatory - The justification is not mandatory but can be provided in any of the supported formats.
- Unstructureds
[]Get
Entitlement Requester Justification Config Unstructured - The requester has to provide a justification in the form of free flowing text.
- not
Mandatories List<GetEntitlement Requester Justification Config Not Mandatory> - The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds
List<Get
Entitlement Requester Justification Config Unstructured> - The requester has to provide a justification in the form of free flowing text.
- not
Mandatories GetEntitlement Requester Justification Config Not Mandatory[] - The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds
Get
Entitlement Requester Justification Config Unstructured[] - The requester has to provide a justification in the form of free flowing text.
- not_
mandatories Sequence[GetEntitlement Requester Justification Config Not Mandatory] - The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds
Sequence[Get
Entitlement Requester Justification Config Unstructured] - The requester has to provide a justification in the form of free flowing text.
- not
Mandatories List<Property Map> - The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds List<Property Map>
- The requester has to provide a justification in the form of free flowing text.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
google-beta
Terraform Provider.