Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco ISE
  3. API Docs
  4. networkaccess
  5. AuthorizationGlobalExceptionRule
Cisco ISE v0.1.10 published on Tuesday, Nov 19, 2024 by Pulumi
pulumi/pulumi-ise

ise.networkaccess.AuthorizationGlobalExceptionRule

Explore with Pulumi AI

ise logo
Cisco ISE v0.1.10 published on Tuesday, Nov 19, 2024 by Pulumi
pulumi/pulumi-ise

    This resource can manage a Network Access Authorization Global Exception Rule.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = new ise.networkaccess.AuthorizationGlobalExceptionRule("example", {
    name: "Rule1",
    rank: 0,
    state: "enabled",
    conditionType: "ConditionAttributes",
    conditionIsNegate: false,
    conditionAttributeName: "Location",
    conditionAttributeValue: "All Locations",
    conditionDictionaryName: "DEVICE",
    conditionOperator: "equals",
    profiles: ["PermitAccess"],
    securityGroup: "BYOD",
});

    import pulumi
import pulumi_ise as ise

example = ise.networkaccess.AuthorizationGlobalExceptionRule("example",
    name="Rule1",
    rank=0,
    state="enabled",
    condition_type="ConditionAttributes",
    condition_is_negate=False,
    condition_attribute_name="Location",
    condition_attribute_value="All Locations",
    condition_dictionary_name="DEVICE",
    condition_operator="equals",
    profiles=["PermitAccess"],
    security_group="BYOD")

    package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/networkaccess"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := networkaccess.NewAuthorizationGlobalExceptionRule(ctx, "example", &networkaccess.AuthorizationGlobalExceptionRuleArgs{
			Name:                    pulumi.String("Rule1"),
			Rank:                    pulumi.Int(0),
			State:                   pulumi.String("enabled"),
			ConditionType:           pulumi.String("ConditionAttributes"),
			ConditionIsNegate:       pulumi.Bool(false),
			ConditionAttributeName:  pulumi.String("Location"),
			ConditionAttributeValue: pulumi.String("All Locations"),
			ConditionDictionaryName: pulumi.String("DEVICE"),
			ConditionOperator:       pulumi.String("equals"),
			Profiles: pulumi.StringArray{
				pulumi.String("PermitAccess"),
			},
			SecurityGroup: pulumi.String("BYOD"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = new Ise.NetworkAccess.AuthorizationGlobalExceptionRule("example", new()
    {
        Name = "Rule1",
        Rank = 0,
        State = "enabled",
        ConditionType = "ConditionAttributes",
        ConditionIsNegate = false,
        ConditionAttributeName = "Location",
        ConditionAttributeValue = "All Locations",
        ConditionDictionaryName = "DEVICE",
        ConditionOperator = "equals",
        Profiles = new[]
        {
            "PermitAccess",
        },
        SecurityGroup = "BYOD",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.networkaccess.AuthorizationGlobalExceptionRule;
import com.pulumi.ise.networkaccess.AuthorizationGlobalExceptionRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new AuthorizationGlobalExceptionRule("example", AuthorizationGlobalExceptionRuleArgs.builder()
            .name("Rule1")
            .rank(0)
            .state("enabled")
            .conditionType("ConditionAttributes")
            .conditionIsNegate(false)
            .conditionAttributeName("Location")
            .conditionAttributeValue("All Locations")
            .conditionDictionaryName("DEVICE")
            .conditionOperator("equals")
            .profiles("PermitAccess")
            .securityGroup("BYOD")
            .build());

    }
}

    resources:
  example:
    type: ise:networkaccess:AuthorizationGlobalExceptionRule
    properties:
      name: Rule1
      rank: 0
      state: enabled
      conditionType: ConditionAttributes
      conditionIsNegate: false
      conditionAttributeName: Location
      conditionAttributeValue: All Locations
      conditionDictionaryName: DEVICE
      conditionOperator: equals
      profiles:
        - PermitAccess
      securityGroup: BYOD

    Create AuthorizationGlobalExceptionRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthorizationGlobalExceptionRule(name: string, args?: AuthorizationGlobalExceptionRuleArgs, opts?: CustomResourceOptions);
    @overload
def AuthorizationGlobalExceptionRule(resource_name: str,
                                     args: Optional[AuthorizationGlobalExceptionRuleArgs] = None,
                                     opts: Optional[ResourceOptions] = None)

@overload
def AuthorizationGlobalExceptionRule(resource_name: str,
                                     opts: Optional[ResourceOptions] = None,
                                     childrens: Optional[Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]] = None,
                                     condition_attribute_name: Optional[str] = None,
                                     condition_attribute_value: Optional[str] = None,
                                     condition_dictionary_name: Optional[str] = None,
                                     condition_dictionary_value: Optional[str] = None,
                                     condition_id: Optional[str] = None,
                                     condition_is_negate: Optional[bool] = None,
                                     condition_operator: Optional[str] = None,
                                     condition_type: Optional[str] = None,
                                     name: Optional[str] = None,
                                     profiles: Optional[Sequence[str]] = None,
                                     rank: Optional[int] = None,
                                     security_group: Optional[str] = None,
                                     state: Optional[str] = None)
    func NewAuthorizationGlobalExceptionRule(ctx *Context, name string, args *AuthorizationGlobalExceptionRuleArgs, opts ...ResourceOption) (*AuthorizationGlobalExceptionRule, error)
    public AuthorizationGlobalExceptionRule(string name, AuthorizationGlobalExceptionRuleArgs? args = null, CustomResourceOptions? opts = null)
    public AuthorizationGlobalExceptionRule(String name, AuthorizationGlobalExceptionRuleArgs args)
public AuthorizationGlobalExceptionRule(String name, AuthorizationGlobalExceptionRuleArgs args, CustomResourceOptions options)

    type: ise:networkaccess:AuthorizationGlobalExceptionRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iseAuthorizationGlobalExceptionRuleResource = new Ise.NetworkAccess.AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource", new()
{
    Childrens = new[]
    {
        new Ise.NetworkAccess.Inputs.AuthorizationGlobalExceptionRuleChildrenArgs
        {
            ConditionType = "string",
            AttributeName = "string",
            AttributeValue = "string",
            Childrens = new[]
            {
                new Ise.NetworkAccess.Inputs.AuthorizationGlobalExceptionRuleChildrenChildrenArgs
                {
                    ConditionType = "string",
                    AttributeName = "string",
                    AttributeValue = "string",
                    DictionaryName = "string",
                    DictionaryValue = "string",
                    Id = "string",
                    IsNegate = false,
                    Operator = "string",
                },
            },
            DictionaryName = "string",
            DictionaryValue = "string",
            Id = "string",
            IsNegate = false,
            Operator = "string",
        },
    },
    ConditionAttributeName = "string",
    ConditionAttributeValue = "string",
    ConditionDictionaryName = "string",
    ConditionDictionaryValue = "string",
    ConditionId = "string",
    ConditionIsNegate = false,
    ConditionOperator = "string",
    ConditionType = "string",
    Name = "string",
    Profiles = new[]
    {
        "string",
    },
    Rank = 0,
    SecurityGroup = "string",
    State = "string",
});

    example, err := networkaccess.NewAuthorizationGlobalExceptionRule(ctx, "iseAuthorizationGlobalExceptionRuleResource", &networkaccess.AuthorizationGlobalExceptionRuleArgs{
	Childrens: networkaccess.AuthorizationGlobalExceptionRuleChildrenArray{
		&networkaccess.AuthorizationGlobalExceptionRuleChildrenArgs{
			ConditionType:  pulumi.String("string"),
			AttributeName:  pulumi.String("string"),
			AttributeValue: pulumi.String("string"),
			Childrens: networkaccess.AuthorizationGlobalExceptionRuleChildrenChildrenArray{
				&networkaccess.AuthorizationGlobalExceptionRuleChildrenChildrenArgs{
					ConditionType:   pulumi.String("string"),
					AttributeName:   pulumi.String("string"),
					AttributeValue:  pulumi.String("string"),
					DictionaryName:  pulumi.String("string"),
					DictionaryValue: pulumi.String("string"),
					Id:              pulumi.String("string"),
					IsNegate:        pulumi.Bool(false),
					Operator:        pulumi.String("string"),
				},
			},
			DictionaryName:  pulumi.String("string"),
			DictionaryValue: pulumi.String("string"),
			Id:              pulumi.String("string"),
			IsNegate:        pulumi.Bool(false),
			Operator:        pulumi.String("string"),
		},
	},
	ConditionAttributeName:   pulumi.String("string"),
	ConditionAttributeValue:  pulumi.String("string"),
	ConditionDictionaryName:  pulumi.String("string"),
	ConditionDictionaryValue: pulumi.String("string"),
	ConditionId:              pulumi.String("string"),
	ConditionIsNegate:        pulumi.Bool(false),
	ConditionOperator:        pulumi.String("string"),
	ConditionType:            pulumi.String("string"),
	Name:                     pulumi.String("string"),
	Profiles: pulumi.StringArray{
		pulumi.String("string"),
	},
	Rank:          pulumi.Int(0),
	SecurityGroup: pulumi.String("string"),
	State:         pulumi.String("string"),
})

    var iseAuthorizationGlobalExceptionRuleResource = new AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource", AuthorizationGlobalExceptionRuleArgs.builder()
    .childrens(AuthorizationGlobalExceptionRuleChildrenArgs.builder()
        .conditionType("string")
        .attributeName("string")
        .attributeValue("string")
        .childrens(AuthorizationGlobalExceptionRuleChildrenChildrenArgs.builder()
            .conditionType("string")
            .attributeName("string")
            .attributeValue("string")
            .dictionaryName("string")
            .dictionaryValue("string")
            .id("string")
            .isNegate(false)
            .operator("string")
            .build())
        .dictionaryName("string")
        .dictionaryValue("string")
        .id("string")
        .isNegate(false)
        .operator("string")
        .build())
    .conditionAttributeName("string")
    .conditionAttributeValue("string")
    .conditionDictionaryName("string")
    .conditionDictionaryValue("string")
    .conditionId("string")
    .conditionIsNegate(false)
    .conditionOperator("string")
    .conditionType("string")
    .name("string")
    .profiles("string")
    .rank(0)
    .securityGroup("string")
    .state("string")
    .build());

    ise_authorization_global_exception_rule_resource = ise.networkaccess.AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource",
    childrens=[{
        "condition_type": "string",
        "attribute_name": "string",
        "attribute_value": "string",
        "childrens": [{
            "condition_type": "string",
            "attribute_name": "string",
            "attribute_value": "string",
            "dictionary_name": "string",
            "dictionary_value": "string",
            "id": "string",
            "is_negate": False,
            "operator": "string",
        }],
        "dictionary_name": "string",
        "dictionary_value": "string",
        "id": "string",
        "is_negate": False,
        "operator": "string",
    }],
    condition_attribute_name="string",
    condition_attribute_value="string",
    condition_dictionary_name="string",
    condition_dictionary_value="string",
    condition_id="string",
    condition_is_negate=False,
    condition_operator="string",
    condition_type="string",
    name="string",
    profiles=["string"],
    rank=0,
    security_group="string",
    state="string")

    const iseAuthorizationGlobalExceptionRuleResource = new ise.networkaccess.AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource", {
    childrens: [{
        conditionType: "string",
        attributeName: "string",
        attributeValue: "string",
        childrens: [{
            conditionType: "string",
            attributeName: "string",
            attributeValue: "string",
            dictionaryName: "string",
            dictionaryValue: "string",
            id: "string",
            isNegate: false,
            operator: "string",
        }],
        dictionaryName: "string",
        dictionaryValue: "string",
        id: "string",
        isNegate: false,
        operator: "string",
    }],
    conditionAttributeName: "string",
    conditionAttributeValue: "string",
    conditionDictionaryName: "string",
    conditionDictionaryValue: "string",
    conditionId: "string",
    conditionIsNegate: false,
    conditionOperator: "string",
    conditionType: "string",
    name: "string",
    profiles: ["string"],
    rank: 0,
    securityGroup: "string",
    state: "string",
});

    type: ise:networkaccess:AuthorizationGlobalExceptionRule
properties:
    childrens:
        - attributeName: string
          attributeValue: string
          childrens:
            - attributeName: string
              attributeValue: string
              conditionType: string
              dictionaryName: string
              dictionaryValue: string
              id: string
              isNegate: false
              operator: string
          conditionType: string
          dictionaryName: string
          dictionaryValue: string
          id: string
          isNegate: false
          operator: string
    conditionAttributeName: string
    conditionAttributeValue: string
    conditionDictionaryName: string
    conditionDictionaryValue: string
    conditionId: string
    conditionIsNegate: false
    conditionOperator: string
    conditionType: string
    name: string
    profiles:
        - string
    rank: 0
    securityGroup: string
    state: string

    AuthorizationGlobalExceptionRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthorizationGlobalExceptionRule resource accepts the following input properties:

    Childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles List<string>
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    Childrens []AuthorizationGlobalExceptionRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles []string
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens AuthorizationGlobalExceptionRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles string[]
    The authorization profile(s)
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup string
    Security group used in authorization policies
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles Sequence[str]
    The authorization profile(s)
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    security_group str
    Security group used in authorization policies
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthorizationGlobalExceptionRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AuthorizationGlobalExceptionRule Resource

    Get an existing AuthorizationGlobalExceptionRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthorizationGlobalExceptionRuleState, opts?: CustomResourceOptions): AuthorizationGlobalExceptionRule
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        childrens: Optional[Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]] = None,
        condition_attribute_name: Optional[str] = None,
        condition_attribute_value: Optional[str] = None,
        condition_dictionary_name: Optional[str] = None,
        condition_dictionary_value: Optional[str] = None,
        condition_id: Optional[str] = None,
        condition_is_negate: Optional[bool] = None,
        condition_operator: Optional[str] = None,
        condition_type: Optional[str] = None,
        name: Optional[str] = None,
        profiles: Optional[Sequence[str]] = None,
        rank: Optional[int] = None,
        security_group: Optional[str] = None,
        state: Optional[str] = None) -> AuthorizationGlobalExceptionRule
    func GetAuthorizationGlobalExceptionRule(ctx *Context, name string, id IDInput, state *AuthorizationGlobalExceptionRuleState, opts ...ResourceOption) (*AuthorizationGlobalExceptionRule, error)
    public static AuthorizationGlobalExceptionRule Get(string name, Input<string> id, AuthorizationGlobalExceptionRuleState? state, CustomResourceOptions? opts = null)
    public static AuthorizationGlobalExceptionRule get(String name, Output<String> id, AuthorizationGlobalExceptionRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles List<string>
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    Childrens []AuthorizationGlobalExceptionRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles []string
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens AuthorizationGlobalExceptionRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles string[]
    The authorization profile(s)
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup string
    Security group used in authorization policies
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles Sequence[str]
    The authorization profile(s)
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    security_group str
    Security group used in authorization policies
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Supporting Types

    AuthorizationGlobalExceptionRuleChildren, AuthorizationGlobalExceptionRuleChildrenArgs

    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens List<AuthorizationGlobalExceptionRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens []AuthorizationGlobalExceptionRuleChildrenChildren
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<AuthorizationGlobalExceptionRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    childrens AuthorizationGlobalExceptionRuleChildrenChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    childrens Sequence[AuthorizationGlobalExceptionRuleChildrenChildren]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    AuthorizationGlobalExceptionRuleChildrenChildren, AuthorizationGlobalExceptionRuleChildrenChildrenArgs

    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    Import

    $ pulumi import ise:networkaccess/authorizationGlobalExceptionRule:AuthorizationGlobalExceptionRule example "76d24097-41c4-4558-a4d0-a8c07ac08470"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Cisco ISE v0.1.10 published on Tuesday, Nov 19, 2024 by Pulumi
    pulumi/pulumi-ise