Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. AccessGroup
Cloudflare v6.1.1 published on Monday, Apr 21, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.AccessGroup

Explore with Pulumi AI

Cloudflare v6.1.1 published on Monday, Apr 21, 2025 by Pulumi
pulumi/pulumi-cloudflare
Deprecated: cloudflare.index/accessgroup.AccessGroup has been deprecated in favor of cloudflare.index/zerotrustaccessgroup.ZeroTrustAccessGroup

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessGroup = new cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group", {
    includes: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    name: "Allow devs",
    zoneId: "zone_id",
    excludes: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    isDefault: true,
    requires: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
});
Copy
import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_group = cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group",
    includes=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    name="Allow devs",
    zone_id="zone_id",
    excludes=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    is_default=True,
    requires=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }])
Copy
package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustAccessGroup(ctx, "example_zero_trust_access_group", &cloudflare.ZeroTrustAccessGroupArgs{
			Includes: cloudflare.ZeroTrustAccessGroupIncludeArray{
				&cloudflare.ZeroTrustAccessGroupIncludeArgs{
					Group: &cloudflare.ZeroTrustAccessGroupIncludeGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
			Name:   pulumi.String("Allow devs"),
			ZoneId: pulumi.String("zone_id"),
			Excludes: cloudflare.ZeroTrustAccessGroupExcludeArray{
				&cloudflare.ZeroTrustAccessGroupExcludeArgs{
					Group: &cloudflare.ZeroTrustAccessGroupExcludeGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
			IsDefault: pulumi.Bool(true),
			Requires: cloudflare.ZeroTrustAccessGroupRequireArray{
				&cloudflare.ZeroTrustAccessGroupRequireArgs{
					Group: &cloudflare.ZeroTrustAccessGroupRequireGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessGroup = new Cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group", new()
    {
        Includes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
        Name = "Allow devs",
        ZoneId = "zone_id",
        Excludes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
        IsDefault = true,
        Requires = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupRequireArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustAccessGroup;
import com.pulumi.cloudflare.ZeroTrustAccessGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupIncludeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupIncludeGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupExcludeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupExcludeGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupRequireArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupRequireGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustAccessGroup = new ZeroTrustAccessGroup("exampleZeroTrustAccessGroup", ZeroTrustAccessGroupArgs.builder()
            .includes(ZeroTrustAccessGroupIncludeArgs.builder()
                .group(ZeroTrustAccessGroupIncludeGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .name("Allow devs")
            .zoneId("zone_id")
            .excludes(ZeroTrustAccessGroupExcludeArgs.builder()
                .group(ZeroTrustAccessGroupExcludeGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .isDefault(true)
            .requires(ZeroTrustAccessGroupRequireArgs.builder()
                .group(ZeroTrustAccessGroupRequireGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .build());

    }
}
Copy
resources:
  exampleZeroTrustAccessGroup:
    type: cloudflare:ZeroTrustAccessGroup
    name: example_zero_trust_access_group
    properties:
      includes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      name: Allow devs
      zoneId: zone_id
      excludes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      isDefault: true
      requires:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
Copy

Create AccessGroup Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AccessGroup(name: string, args: AccessGroupArgs, opts?: CustomResourceOptions);
@overload
def AccessGroup(resource_name: str,
                args: AccessGroupArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def AccessGroup(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                account_id: Optional[str] = None,
                excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
                includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
                is_default: Optional[bool] = None,
                name: Optional[str] = None,
                requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
                zone_id: Optional[str] = None)
func NewAccessGroup(ctx *Context, name string, args AccessGroupArgs, opts ...ResourceOption) (*AccessGroup, error)
public AccessGroup(string name, AccessGroupArgs args, CustomResourceOptions? opts = null)
public AccessGroup(String name, AccessGroupArgs args)
public AccessGroup(String name, AccessGroupArgs args, CustomResourceOptions options)

type: cloudflare:AccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AccessGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AccessGroupArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AccessGroupArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AccessGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AccessGroupArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

AccessGroup Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AccessGroup resource accepts the following input properties:

Includes This property is required. List<AccessGroupInclude>
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
Name This property is required. string
The name of the Access group.
AccountId string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
Excludes List<AccessGroupExclude>
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
IsDefault bool
Whether this is the default group
Requires List<AccessGroupRequire>
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
ZoneId string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
Includes This property is required. []AccessGroupIncludeArgs
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
Name This property is required. string
The name of the Access group.
AccountId string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
Excludes []AccessGroupExcludeArgs
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
IsDefault bool
Whether this is the default group
Requires []AccessGroupRequireArgs
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
ZoneId string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
includes This property is required. List<AccessGroupInclude>
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
name This property is required. String
The name of the Access group.
accountId String
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
excludes List<AccessGroupExclude>
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
isDefault Boolean
Whether this is the default group
requires List<AccessGroupRequire>
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
zoneId String
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
includes This property is required. AccessGroupInclude[]
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
name This property is required. string
The name of the Access group.
accountId string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
excludes AccessGroupExclude[]
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
isDefault boolean
Whether this is the default group
requires AccessGroupRequire[]
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
zoneId string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
includes This property is required. Sequence[AccessGroupIncludeArgs]
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
name This property is required. str
The name of the Access group.
account_id str
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
excludes Sequence[AccessGroupExcludeArgs]
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
is_default bool
Whether this is the default group
requires Sequence[AccessGroupRequireArgs]
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
zone_id str
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
includes This property is required. List<Property Map>
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
name This property is required. String
The name of the Access group.
accountId String
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
excludes List<Property Map>
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
isDefault Boolean
Whether this is the default group
requires List<Property Map>
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
zoneId String
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

Outputs

All input properties are implicitly available as output properties. Additionally, the AccessGroup resource produces the following output properties:

CreatedAt string
Id string
The provider-assigned unique ID for this managed resource.
UpdatedAt string
CreatedAt string
Id string
The provider-assigned unique ID for this managed resource.
UpdatedAt string
createdAt String
id String
The provider-assigned unique ID for this managed resource.
updatedAt String
createdAt string
id string
The provider-assigned unique ID for this managed resource.
updatedAt string
created_at str
id str
The provider-assigned unique ID for this managed resource.
updated_at str
createdAt String
id String
The provider-assigned unique ID for this managed resource.
updatedAt String

Look up Existing AccessGroup Resource

Get an existing AccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AccessGroupState, opts?: CustomResourceOptions): AccessGroup
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        created_at: Optional[str] = None,
        excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
        includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
        is_default: Optional[bool] = None,
        name: Optional[str] = None,
        requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
        updated_at: Optional[str] = None,
        zone_id: Optional[str] = None) -> AccessGroup
func GetAccessGroup(ctx *Context, name string, id IDInput, state *AccessGroupState, opts ...ResourceOption) (*AccessGroup, error)
public static AccessGroup Get(string name, Input<string> id, AccessGroupState? state, CustomResourceOptions? opts = null)
public static AccessGroup get(String name, Output<String> id, AccessGroupState state, CustomResourceOptions options)
resources:  _:    type: cloudflare:AccessGroup    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AccountId string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
CreatedAt string
Excludes List<AccessGroupExclude>
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
Includes List<AccessGroupInclude>
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
IsDefault bool
Whether this is the default group
Name string
The name of the Access group.
Requires List<AccessGroupRequire>
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
UpdatedAt string
ZoneId string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
AccountId string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
CreatedAt string
Excludes []AccessGroupExcludeArgs
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
Includes []AccessGroupIncludeArgs
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
IsDefault bool
Whether this is the default group
Name string
The name of the Access group.
Requires []AccessGroupRequireArgs
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
UpdatedAt string
ZoneId string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
accountId String
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
createdAt String
excludes List<AccessGroupExclude>
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
includes List<AccessGroupInclude>
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
isDefault Boolean
Whether this is the default group
name String
The name of the Access group.
requires List<AccessGroupRequire>
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
updatedAt String
zoneId String
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
accountId string
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
createdAt string
excludes AccessGroupExclude[]
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
includes AccessGroupInclude[]
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
isDefault boolean
Whether this is the default group
name string
The name of the Access group.
requires AccessGroupRequire[]
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
updatedAt string
zoneId string
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
account_id str
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
created_at str
excludes Sequence[AccessGroupExcludeArgs]
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
includes Sequence[AccessGroupIncludeArgs]
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
is_default bool
Whether this is the default group
name str
The name of the Access group.
requires Sequence[AccessGroupRequireArgs]
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
updated_at str
zone_id str
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
accountId String
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
createdAt String
excludes List<Property Map>
Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
includes List<Property Map>
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
isDefault Boolean
Whether this is the default group
name String
The name of the Access group.
requires List<Property Map>
Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
updatedAt String
zoneId String
The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

Supporting Types

AccessGroupExclude
, AccessGroupExcludeArgs

AnyValidServiceToken AccessGroupExcludeAnyValidServiceToken
An empty object which matches on all service tokens.
AuthContext AccessGroupExcludeAuthContext
AuthMethod AccessGroupExcludeAuthMethod
AzureAd AccessGroupExcludeAzureAd
Certificate AccessGroupExcludeCertificate
CommonName AccessGroupExcludeCommonName
DevicePosture AccessGroupExcludeDevicePosture
Email AccessGroupExcludeEmail
EmailDomain AccessGroupExcludeEmailDomain
EmailList AccessGroupExcludeEmailList
Everyone AccessGroupExcludeEveryone
An empty object which matches on all users.
ExternalEvaluation AccessGroupExcludeExternalEvaluation
Geo AccessGroupExcludeGeo
GithubOrganization AccessGroupExcludeGithubOrganization
Group AccessGroupExcludeGroup
Gsuite AccessGroupExcludeGsuite
Ip AccessGroupExcludeIp
IpList AccessGroupExcludeIpList
LoginMethod AccessGroupExcludeLoginMethod
Okta AccessGroupExcludeOkta
Saml AccessGroupExcludeSaml
ServiceToken AccessGroupExcludeServiceToken
AnyValidServiceToken AccessGroupExcludeAnyValidServiceToken
An empty object which matches on all service tokens.
AuthContext AccessGroupExcludeAuthContext
AuthMethod AccessGroupExcludeAuthMethod
AzureAd AccessGroupExcludeAzureAd
Certificate AccessGroupExcludeCertificate
CommonName AccessGroupExcludeCommonName
DevicePosture AccessGroupExcludeDevicePosture
Email AccessGroupExcludeEmail
EmailDomain AccessGroupExcludeEmailDomain
EmailList AccessGroupExcludeEmailList
Everyone AccessGroupExcludeEveryone
An empty object which matches on all users.
ExternalEvaluation AccessGroupExcludeExternalEvaluation
Geo AccessGroupExcludeGeo
GithubOrganization AccessGroupExcludeGithubOrganization
Group AccessGroupExcludeGroup
Gsuite AccessGroupExcludeGsuite
Ip AccessGroupExcludeIp
IpList AccessGroupExcludeIpList
LoginMethod AccessGroupExcludeLoginMethod
Okta AccessGroupExcludeOkta
Saml AccessGroupExcludeSaml
ServiceToken AccessGroupExcludeServiceToken
anyValidServiceToken AccessGroupExcludeAnyValidServiceToken
An empty object which matches on all service tokens.
authContext AccessGroupExcludeAuthContext
authMethod AccessGroupExcludeAuthMethod
azureAd AccessGroupExcludeAzureAd
certificate AccessGroupExcludeCertificate
commonName AccessGroupExcludeCommonName
devicePosture AccessGroupExcludeDevicePosture
email AccessGroupExcludeEmail
emailDomain AccessGroupExcludeEmailDomain
emailList AccessGroupExcludeEmailList
everyone AccessGroupExcludeEveryone
An empty object which matches on all users.
externalEvaluation AccessGroupExcludeExternalEvaluation
geo AccessGroupExcludeGeo
githubOrganization AccessGroupExcludeGithubOrganization
group AccessGroupExcludeGroup
gsuite AccessGroupExcludeGsuite
ip AccessGroupExcludeIp
ipList AccessGroupExcludeIpList
loginMethod AccessGroupExcludeLoginMethod
okta AccessGroupExcludeOkta
saml AccessGroupExcludeSaml
serviceToken AccessGroupExcludeServiceToken
anyValidServiceToken AccessGroupExcludeAnyValidServiceToken
An empty object which matches on all service tokens.
authContext AccessGroupExcludeAuthContext
authMethod AccessGroupExcludeAuthMethod
azureAd AccessGroupExcludeAzureAd
certificate AccessGroupExcludeCertificate
commonName AccessGroupExcludeCommonName
devicePosture AccessGroupExcludeDevicePosture
email AccessGroupExcludeEmail
emailDomain AccessGroupExcludeEmailDomain
emailList AccessGroupExcludeEmailList
everyone AccessGroupExcludeEveryone
An empty object which matches on all users.
externalEvaluation AccessGroupExcludeExternalEvaluation
geo AccessGroupExcludeGeo
githubOrganization AccessGroupExcludeGithubOrganization
group AccessGroupExcludeGroup
gsuite AccessGroupExcludeGsuite
ip AccessGroupExcludeIp
ipList AccessGroupExcludeIpList
loginMethod AccessGroupExcludeLoginMethod
okta AccessGroupExcludeOkta
saml AccessGroupExcludeSaml
serviceToken AccessGroupExcludeServiceToken
any_valid_service_token AccessGroupExcludeAnyValidServiceToken
An empty object which matches on all service tokens.
auth_context AccessGroupExcludeAuthContext
auth_method AccessGroupExcludeAuthMethod
azure_ad AccessGroupExcludeAzureAd
certificate AccessGroupExcludeCertificate
common_name AccessGroupExcludeCommonName
device_posture AccessGroupExcludeDevicePosture
email AccessGroupExcludeEmail
email_domain AccessGroupExcludeEmailDomain
email_list AccessGroupExcludeEmailList
everyone AccessGroupExcludeEveryone
An empty object which matches on all users.
external_evaluation AccessGroupExcludeExternalEvaluation
geo AccessGroupExcludeGeo
github_organization AccessGroupExcludeGithubOrganization
group AccessGroupExcludeGroup
gsuite AccessGroupExcludeGsuite
ip AccessGroupExcludeIp
ip_list AccessGroupExcludeIpList
login_method AccessGroupExcludeLoginMethod
okta AccessGroupExcludeOkta
saml AccessGroupExcludeSaml
service_token AccessGroupExcludeServiceToken

AccessGroupExcludeAuthContext
, AccessGroupExcludeAuthContextArgs

AcId This property is required. string
The ACID of an Authentication context.
Id This property is required. string
The ID of an Authentication context.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
AcId This property is required. string
The ACID of an Authentication context.
Id This property is required. string
The ID of an Authentication context.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
acId This property is required. String
The ACID of an Authentication context.
id This property is required. String
The ID of an Authentication context.
identityProviderId This property is required. String
The ID of your Azure identity provider.
acId This property is required. string
The ACID of an Authentication context.
id This property is required. string
The ID of an Authentication context.
identityProviderId This property is required. string
The ID of your Azure identity provider.
ac_id This property is required. str
The ACID of an Authentication context.
id This property is required. str
The ID of an Authentication context.
identity_provider_id This property is required. str
The ID of your Azure identity provider.
acId This property is required. String
The ACID of an Authentication context.
id This property is required. String
The ID of an Authentication context.
identityProviderId This property is required. String
The ID of your Azure identity provider.

AccessGroupExcludeAuthMethod
, AccessGroupExcludeAuthMethodArgs

AuthMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
AuthMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. String
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
auth_method This property is required. str
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. String
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

AccessGroupExcludeAzureAd
, AccessGroupExcludeAzureAdArgs

Id This property is required. string
The ID of an Azure group.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
Id This property is required. string
The ID of an Azure group.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
id This property is required. String
The ID of an Azure group.
identityProviderId This property is required. String
The ID of your Azure identity provider.
id This property is required. string
The ID of an Azure group.
identityProviderId This property is required. string
The ID of your Azure identity provider.
id This property is required. str
The ID of an Azure group.
identity_provider_id This property is required. str
The ID of your Azure identity provider.
id This property is required. String
The ID of an Azure group.
identityProviderId This property is required. String
The ID of your Azure identity provider.

AccessGroupExcludeCommonName
, AccessGroupExcludeCommonNameArgs

CommonName This property is required. string
The common name to match.
CommonName This property is required. string
The common name to match.
commonName This property is required. String
The common name to match.
commonName This property is required. string
The common name to match.
common_name This property is required. str
The common name to match.
commonName This property is required. String
The common name to match.

AccessGroupExcludeDevicePosture
, AccessGroupExcludeDevicePostureArgs

IntegrationUid This property is required. string
The ID of a device posture integration.
IntegrationUid This property is required. string
The ID of a device posture integration.
integrationUid This property is required. String
The ID of a device posture integration.
integrationUid This property is required. string
The ID of a device posture integration.
integration_uid This property is required. str
The ID of a device posture integration.
integrationUid This property is required. String
The ID of a device posture integration.

AccessGroupExcludeEmail
, AccessGroupExcludeEmailArgs

Email This property is required. string
The email of the user.
Email This property is required. string
The email of the user.
email This property is required. String
The email of the user.
email This property is required. string
The email of the user.
email This property is required. str
The email of the user.
email This property is required. String
The email of the user.

AccessGroupExcludeEmailDomain
, AccessGroupExcludeEmailDomainArgs

Domain This property is required. string
The email domain to match.
Domain This property is required. string
The email domain to match.
domain This property is required. String
The email domain to match.
domain This property is required. string
The email domain to match.
domain This property is required. str
The email domain to match.
domain This property is required. String
The email domain to match.

AccessGroupExcludeEmailList
, AccessGroupExcludeEmailListArgs

Id This property is required. string
The ID of a previously created email list.
Id This property is required. string
The ID of a previously created email list.
id This property is required. String
The ID of a previously created email list.
id This property is required. string
The ID of a previously created email list.
id This property is required. str
The ID of a previously created email list.
id This property is required. String
The ID of a previously created email list.

AccessGroupExcludeExternalEvaluation
, AccessGroupExcludeExternalEvaluationArgs

EvaluateUrl This property is required. string
The API endpoint containing your business logic.
KeysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
EvaluateUrl This property is required. string
The API endpoint containing your business logic.
KeysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. String
The API endpoint containing your business logic.
keysUrl This property is required. String
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. string
The API endpoint containing your business logic.
keysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluate_url This property is required. str
The API endpoint containing your business logic.
keys_url This property is required. str
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. String
The API endpoint containing your business logic.
keysUrl This property is required. String
The API endpoint containing the key that Access uses to verify that the response came from your API.

AccessGroupExcludeGeo
, AccessGroupExcludeGeoArgs

CountryCode This property is required. string
The country code that should be matched.
CountryCode This property is required. string
The country code that should be matched.
countryCode This property is required. String
The country code that should be matched.
countryCode This property is required. string
The country code that should be matched.
country_code This property is required. str
The country code that should be matched.
countryCode This property is required. String
The country code that should be matched.

AccessGroupExcludeGithubOrganization
, AccessGroupExcludeGithubOrganizationArgs

IdentityProviderId This property is required. string
The ID of your Github identity provider.
Name This property is required. string
The name of the organization.
Team string
The name of the team
IdentityProviderId This property is required. string
The ID of your Github identity provider.
Name This property is required. string
The name of the organization.
Team string
The name of the team
identityProviderId This property is required. String
The ID of your Github identity provider.
name This property is required. String
The name of the organization.
team String
The name of the team
identityProviderId This property is required. string
The ID of your Github identity provider.
name This property is required. string
The name of the organization.
team string
The name of the team
identity_provider_id This property is required. str
The ID of your Github identity provider.
name This property is required. str
The name of the organization.
team str
The name of the team
identityProviderId This property is required. String
The ID of your Github identity provider.
name This property is required. String
The name of the organization.
team String
The name of the team

AccessGroupExcludeGroup
, AccessGroupExcludeGroupArgs

Id This property is required. string
The ID of a previously created Access group.
Id This property is required. string
The ID of a previously created Access group.
id This property is required. String
The ID of a previously created Access group.
id This property is required. string
The ID of a previously created Access group.
id This property is required. str
The ID of a previously created Access group.
id This property is required. String
The ID of a previously created Access group.

AccessGroupExcludeGsuite
, AccessGroupExcludeGsuiteArgs

Email This property is required. string
The email of the Google Workspace group.
IdentityProviderId This property is required. string
The ID of your Google Workspace identity provider.
Email This property is required. string
The email of the Google Workspace group.
IdentityProviderId This property is required. string
The ID of your Google Workspace identity provider.
email This property is required. String
The email of the Google Workspace group.
identityProviderId This property is required. String
The ID of your Google Workspace identity provider.
email This property is required. string
The email of the Google Workspace group.
identityProviderId This property is required. string
The ID of your Google Workspace identity provider.
email This property is required. str
The email of the Google Workspace group.
identity_provider_id This property is required. str
The ID of your Google Workspace identity provider.
email This property is required. String
The email of the Google Workspace group.
identityProviderId This property is required. String
The ID of your Google Workspace identity provider.

AccessGroupExcludeIp
, AccessGroupExcludeIpArgs

Ip This property is required. string
An IPv4 or IPv6 CIDR block.
Ip This property is required. string
An IPv4 or IPv6 CIDR block.
ip This property is required. String
An IPv4 or IPv6 CIDR block.
ip This property is required. string
An IPv4 or IPv6 CIDR block.
ip This property is required. str
An IPv4 or IPv6 CIDR block.
ip This property is required. String
An IPv4 or IPv6 CIDR block.

AccessGroupExcludeIpList
, AccessGroupExcludeIpListArgs

Id This property is required. string
The ID of a previously created IP list.
Id This property is required. string
The ID of a previously created IP list.
id This property is required. String
The ID of a previously created IP list.
id This property is required. string
The ID of a previously created IP list.
id This property is required. str
The ID of a previously created IP list.
id This property is required. String
The ID of a previously created IP list.

AccessGroupExcludeLoginMethod
, AccessGroupExcludeLoginMethodArgs

Id This property is required. string
The ID of an identity provider.
Id This property is required. string
The ID of an identity provider.
id This property is required. String
The ID of an identity provider.
id This property is required. string
The ID of an identity provider.
id This property is required. str
The ID of an identity provider.
id This property is required. String
The ID of an identity provider.

AccessGroupExcludeOkta
, AccessGroupExcludeOktaArgs

IdentityProviderId This property is required. string
The ID of your Okta identity provider.
Name This property is required. string
The name of the Okta group.
IdentityProviderId This property is required. string
The ID of your Okta identity provider.
Name This property is required. string
The name of the Okta group.
identityProviderId This property is required. String
The ID of your Okta identity provider.
name This property is required. String
The name of the Okta group.
identityProviderId This property is required. string
The ID of your Okta identity provider.
name This property is required. string
The name of the Okta group.
identity_provider_id This property is required. str
The ID of your Okta identity provider.
name This property is required. str
The name of the Okta group.
identityProviderId This property is required. String
The ID of your Okta identity provider.
name This property is required. String
The name of the Okta group.

AccessGroupExcludeSaml
, AccessGroupExcludeSamlArgs

AttributeName This property is required. string
The name of the SAML attribute.
AttributeValue This property is required. string
The SAML attribute value to look for.
IdentityProviderId This property is required. string
The ID of your SAML identity provider.
AttributeName This property is required. string
The name of the SAML attribute.
AttributeValue This property is required. string
The SAML attribute value to look for.
IdentityProviderId This property is required. string
The ID of your SAML identity provider.
attributeName This property is required. String
The name of the SAML attribute.
attributeValue This property is required. String
The SAML attribute value to look for.
identityProviderId This property is required. String
The ID of your SAML identity provider.
attributeName This property is required. string
The name of the SAML attribute.
attributeValue This property is required. string
The SAML attribute value to look for.
identityProviderId This property is required. string
The ID of your SAML identity provider.
attribute_name This property is required. str
The name of the SAML attribute.
attribute_value This property is required. str
The SAML attribute value to look for.
identity_provider_id This property is required. str
The ID of your SAML identity provider.
attributeName This property is required. String
The name of the SAML attribute.
attributeValue This property is required. String
The SAML attribute value to look for.
identityProviderId This property is required. String
The ID of your SAML identity provider.

AccessGroupExcludeServiceToken
, AccessGroupExcludeServiceTokenArgs

TokenId This property is required. string
The ID of a Service Token.
TokenId This property is required. string
The ID of a Service Token.
tokenId This property is required. String
The ID of a Service Token.
tokenId This property is required. string
The ID of a Service Token.
token_id This property is required. str
The ID of a Service Token.
tokenId This property is required. String
The ID of a Service Token.

AccessGroupInclude
, AccessGroupIncludeArgs

AnyValidServiceToken AccessGroupIncludeAnyValidServiceToken
An empty object which matches on all service tokens.
AuthContext AccessGroupIncludeAuthContext
AuthMethod AccessGroupIncludeAuthMethod
AzureAd AccessGroupIncludeAzureAd
Certificate AccessGroupIncludeCertificate
CommonName AccessGroupIncludeCommonName
DevicePosture AccessGroupIncludeDevicePosture
Email AccessGroupIncludeEmail
EmailDomain AccessGroupIncludeEmailDomain
EmailList AccessGroupIncludeEmailList
Everyone AccessGroupIncludeEveryone
An empty object which matches on all users.
ExternalEvaluation AccessGroupIncludeExternalEvaluation
Geo AccessGroupIncludeGeo
GithubOrganization AccessGroupIncludeGithubOrganization
Group AccessGroupIncludeGroup
Gsuite AccessGroupIncludeGsuite
Ip AccessGroupIncludeIp
IpList AccessGroupIncludeIpList
LoginMethod AccessGroupIncludeLoginMethod
Okta AccessGroupIncludeOkta
Saml AccessGroupIncludeSaml
ServiceToken AccessGroupIncludeServiceToken
AnyValidServiceToken AccessGroupIncludeAnyValidServiceToken
An empty object which matches on all service tokens.
AuthContext AccessGroupIncludeAuthContext
AuthMethod AccessGroupIncludeAuthMethod
AzureAd AccessGroupIncludeAzureAd
Certificate AccessGroupIncludeCertificate
CommonName AccessGroupIncludeCommonName
DevicePosture AccessGroupIncludeDevicePosture
Email AccessGroupIncludeEmail
EmailDomain AccessGroupIncludeEmailDomain
EmailList AccessGroupIncludeEmailList
Everyone AccessGroupIncludeEveryone
An empty object which matches on all users.
ExternalEvaluation AccessGroupIncludeExternalEvaluation
Geo AccessGroupIncludeGeo
GithubOrganization AccessGroupIncludeGithubOrganization
Group AccessGroupIncludeGroup
Gsuite AccessGroupIncludeGsuite
Ip AccessGroupIncludeIp
IpList AccessGroupIncludeIpList
LoginMethod AccessGroupIncludeLoginMethod
Okta AccessGroupIncludeOkta
Saml AccessGroupIncludeSaml
ServiceToken AccessGroupIncludeServiceToken
anyValidServiceToken AccessGroupIncludeAnyValidServiceToken
An empty object which matches on all service tokens.
authContext AccessGroupIncludeAuthContext
authMethod AccessGroupIncludeAuthMethod
azureAd AccessGroupIncludeAzureAd
certificate AccessGroupIncludeCertificate
commonName AccessGroupIncludeCommonName
devicePosture AccessGroupIncludeDevicePosture
email AccessGroupIncludeEmail
emailDomain AccessGroupIncludeEmailDomain
emailList AccessGroupIncludeEmailList
everyone AccessGroupIncludeEveryone
An empty object which matches on all users.
externalEvaluation AccessGroupIncludeExternalEvaluation
geo AccessGroupIncludeGeo
githubOrganization AccessGroupIncludeGithubOrganization
group AccessGroupIncludeGroup
gsuite AccessGroupIncludeGsuite
ip AccessGroupIncludeIp
ipList AccessGroupIncludeIpList
loginMethod AccessGroupIncludeLoginMethod
okta AccessGroupIncludeOkta
saml AccessGroupIncludeSaml
serviceToken AccessGroupIncludeServiceToken
anyValidServiceToken AccessGroupIncludeAnyValidServiceToken
An empty object which matches on all service tokens.
authContext AccessGroupIncludeAuthContext
authMethod AccessGroupIncludeAuthMethod
azureAd AccessGroupIncludeAzureAd
certificate AccessGroupIncludeCertificate
commonName AccessGroupIncludeCommonName
devicePosture AccessGroupIncludeDevicePosture
email AccessGroupIncludeEmail
emailDomain AccessGroupIncludeEmailDomain
emailList AccessGroupIncludeEmailList
everyone AccessGroupIncludeEveryone
An empty object which matches on all users.
externalEvaluation AccessGroupIncludeExternalEvaluation
geo AccessGroupIncludeGeo
githubOrganization AccessGroupIncludeGithubOrganization
group AccessGroupIncludeGroup
gsuite AccessGroupIncludeGsuite
ip AccessGroupIncludeIp
ipList AccessGroupIncludeIpList
loginMethod AccessGroupIncludeLoginMethod
okta AccessGroupIncludeOkta
saml AccessGroupIncludeSaml
serviceToken AccessGroupIncludeServiceToken
any_valid_service_token AccessGroupIncludeAnyValidServiceToken
An empty object which matches on all service tokens.
auth_context AccessGroupIncludeAuthContext
auth_method AccessGroupIncludeAuthMethod
azure_ad AccessGroupIncludeAzureAd
certificate AccessGroupIncludeCertificate
common_name AccessGroupIncludeCommonName
device_posture AccessGroupIncludeDevicePosture
email AccessGroupIncludeEmail
email_domain AccessGroupIncludeEmailDomain
email_list AccessGroupIncludeEmailList
everyone AccessGroupIncludeEveryone
An empty object which matches on all users.
external_evaluation AccessGroupIncludeExternalEvaluation
geo AccessGroupIncludeGeo
github_organization AccessGroupIncludeGithubOrganization
group AccessGroupIncludeGroup
gsuite AccessGroupIncludeGsuite
ip AccessGroupIncludeIp
ip_list AccessGroupIncludeIpList
login_method AccessGroupIncludeLoginMethod
okta AccessGroupIncludeOkta
saml AccessGroupIncludeSaml
service_token AccessGroupIncludeServiceToken

AccessGroupIncludeAuthContext
, AccessGroupIncludeAuthContextArgs

AcId This property is required. string
The ACID of an Authentication context.
Id This property is required. string
The ID of an Authentication context.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
AcId This property is required. string
The ACID of an Authentication context.
Id This property is required. string
The ID of an Authentication context.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
acId This property is required. String
The ACID of an Authentication context.
id This property is required. String
The ID of an Authentication context.
identityProviderId This property is required. String
The ID of your Azure identity provider.
acId This property is required. string
The ACID of an Authentication context.
id This property is required. string
The ID of an Authentication context.
identityProviderId This property is required. string
The ID of your Azure identity provider.
ac_id This property is required. str
The ACID of an Authentication context.
id This property is required. str
The ID of an Authentication context.
identity_provider_id This property is required. str
The ID of your Azure identity provider.
acId This property is required. String
The ACID of an Authentication context.
id This property is required. String
The ID of an Authentication context.
identityProviderId This property is required. String
The ID of your Azure identity provider.

AccessGroupIncludeAuthMethod
, AccessGroupIncludeAuthMethodArgs

AuthMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
AuthMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. String
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
auth_method This property is required. str
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. String
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

AccessGroupIncludeAzureAd
, AccessGroupIncludeAzureAdArgs

Id This property is required. string
The ID of an Azure group.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
Id This property is required. string
The ID of an Azure group.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
id This property is required. String
The ID of an Azure group.
identityProviderId This property is required. String
The ID of your Azure identity provider.
id This property is required. string
The ID of an Azure group.
identityProviderId This property is required. string
The ID of your Azure identity provider.
id This property is required. str
The ID of an Azure group.
identity_provider_id This property is required. str
The ID of your Azure identity provider.
id This property is required. String
The ID of an Azure group.
identityProviderId This property is required. String
The ID of your Azure identity provider.

AccessGroupIncludeCommonName
, AccessGroupIncludeCommonNameArgs

CommonName This property is required. string
The common name to match.
CommonName This property is required. string
The common name to match.
commonName This property is required. String
The common name to match.
commonName This property is required. string
The common name to match.
common_name This property is required. str
The common name to match.
commonName This property is required. String
The common name to match.

AccessGroupIncludeDevicePosture
, AccessGroupIncludeDevicePostureArgs

IntegrationUid This property is required. string
The ID of a device posture integration.
IntegrationUid This property is required. string
The ID of a device posture integration.
integrationUid This property is required. String
The ID of a device posture integration.
integrationUid This property is required. string
The ID of a device posture integration.
integration_uid This property is required. str
The ID of a device posture integration.
integrationUid This property is required. String
The ID of a device posture integration.

AccessGroupIncludeEmail
, AccessGroupIncludeEmailArgs

Email This property is required. string
The email of the user.
Email This property is required. string
The email of the user.
email This property is required. String
The email of the user.
email This property is required. string
The email of the user.
email This property is required. str
The email of the user.
email This property is required. String
The email of the user.

AccessGroupIncludeEmailDomain
, AccessGroupIncludeEmailDomainArgs

Domain This property is required. string
The email domain to match.
Domain This property is required. string
The email domain to match.
domain This property is required. String
The email domain to match.
domain This property is required. string
The email domain to match.
domain This property is required. str
The email domain to match.
domain This property is required. String
The email domain to match.

AccessGroupIncludeEmailList
, AccessGroupIncludeEmailListArgs

Id This property is required. string
The ID of a previously created email list.
Id This property is required. string
The ID of a previously created email list.
id This property is required. String
The ID of a previously created email list.
id This property is required. string
The ID of a previously created email list.
id This property is required. str
The ID of a previously created email list.
id This property is required. String
The ID of a previously created email list.

AccessGroupIncludeExternalEvaluation
, AccessGroupIncludeExternalEvaluationArgs

EvaluateUrl This property is required. string
The API endpoint containing your business logic.
KeysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
EvaluateUrl This property is required. string
The API endpoint containing your business logic.
KeysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. String
The API endpoint containing your business logic.
keysUrl This property is required. String
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. string
The API endpoint containing your business logic.
keysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluate_url This property is required. str
The API endpoint containing your business logic.
keys_url This property is required. str
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. String
The API endpoint containing your business logic.
keysUrl This property is required. String
The API endpoint containing the key that Access uses to verify that the response came from your API.

AccessGroupIncludeGeo
, AccessGroupIncludeGeoArgs

CountryCode This property is required. string
The country code that should be matched.
CountryCode This property is required. string
The country code that should be matched.
countryCode This property is required. String
The country code that should be matched.
countryCode This property is required. string
The country code that should be matched.
country_code This property is required. str
The country code that should be matched.
countryCode This property is required. String
The country code that should be matched.

AccessGroupIncludeGithubOrganization
, AccessGroupIncludeGithubOrganizationArgs

IdentityProviderId This property is required. string
The ID of your Github identity provider.
Name This property is required. string
The name of the organization.
Team string
The name of the team
IdentityProviderId This property is required. string
The ID of your Github identity provider.
Name This property is required. string
The name of the organization.
Team string
The name of the team
identityProviderId This property is required. String
The ID of your Github identity provider.
name This property is required. String
The name of the organization.
team String
The name of the team
identityProviderId This property is required. string
The ID of your Github identity provider.
name This property is required. string
The name of the organization.
team string
The name of the team
identity_provider_id This property is required. str
The ID of your Github identity provider.
name This property is required. str
The name of the organization.
team str
The name of the team
identityProviderId This property is required. String
The ID of your Github identity provider.
name This property is required. String
The name of the organization.
team String
The name of the team

AccessGroupIncludeGroup
, AccessGroupIncludeGroupArgs

Id This property is required. string
The ID of a previously created Access group.
Id This property is required. string
The ID of a previously created Access group.
id This property is required. String
The ID of a previously created Access group.
id This property is required. string
The ID of a previously created Access group.
id This property is required. str
The ID of a previously created Access group.
id This property is required. String
The ID of a previously created Access group.

AccessGroupIncludeGsuite
, AccessGroupIncludeGsuiteArgs

Email This property is required. string
The email of the Google Workspace group.
IdentityProviderId This property is required. string
The ID of your Google Workspace identity provider.
Email This property is required. string
The email of the Google Workspace group.
IdentityProviderId This property is required. string
The ID of your Google Workspace identity provider.
email This property is required. String
The email of the Google Workspace group.
identityProviderId This property is required. String
The ID of your Google Workspace identity provider.
email This property is required. string
The email of the Google Workspace group.
identityProviderId This property is required. string
The ID of your Google Workspace identity provider.
email This property is required. str
The email of the Google Workspace group.
identity_provider_id This property is required. str
The ID of your Google Workspace identity provider.
email This property is required. String
The email of the Google Workspace group.
identityProviderId This property is required. String
The ID of your Google Workspace identity provider.

AccessGroupIncludeIp
, AccessGroupIncludeIpArgs

Ip This property is required. string
An IPv4 or IPv6 CIDR block.
Ip This property is required. string
An IPv4 or IPv6 CIDR block.
ip This property is required. String
An IPv4 or IPv6 CIDR block.
ip This property is required. string
An IPv4 or IPv6 CIDR block.
ip This property is required. str
An IPv4 or IPv6 CIDR block.
ip This property is required. String
An IPv4 or IPv6 CIDR block.

AccessGroupIncludeIpList
, AccessGroupIncludeIpListArgs

Id This property is required. string
The ID of a previously created IP list.
Id This property is required. string
The ID of a previously created IP list.
id This property is required. String
The ID of a previously created IP list.
id This property is required. string
The ID of a previously created IP list.
id This property is required. str
The ID of a previously created IP list.
id This property is required. String
The ID of a previously created IP list.

AccessGroupIncludeLoginMethod
, AccessGroupIncludeLoginMethodArgs

Id This property is required. string
The ID of an identity provider.
Id This property is required. string
The ID of an identity provider.
id This property is required. String
The ID of an identity provider.
id This property is required. string
The ID of an identity provider.
id This property is required. str
The ID of an identity provider.
id This property is required. String
The ID of an identity provider.

AccessGroupIncludeOkta
, AccessGroupIncludeOktaArgs

IdentityProviderId This property is required. string
The ID of your Okta identity provider.
Name This property is required. string
The name of the Okta group.
IdentityProviderId This property is required. string
The ID of your Okta identity provider.
Name This property is required. string
The name of the Okta group.
identityProviderId This property is required. String
The ID of your Okta identity provider.
name This property is required. String
The name of the Okta group.
identityProviderId This property is required. string
The ID of your Okta identity provider.
name This property is required. string
The name of the Okta group.
identity_provider_id This property is required. str
The ID of your Okta identity provider.
name This property is required. str
The name of the Okta group.
identityProviderId This property is required. String
The ID of your Okta identity provider.
name This property is required. String
The name of the Okta group.

AccessGroupIncludeSaml
, AccessGroupIncludeSamlArgs

AttributeName This property is required. string
The name of the SAML attribute.
AttributeValue This property is required. string
The SAML attribute value to look for.
IdentityProviderId This property is required. string
The ID of your SAML identity provider.
AttributeName This property is required. string
The name of the SAML attribute.
AttributeValue This property is required. string
The SAML attribute value to look for.
IdentityProviderId This property is required. string
The ID of your SAML identity provider.
attributeName This property is required. String
The name of the SAML attribute.
attributeValue This property is required. String
The SAML attribute value to look for.
identityProviderId This property is required. String
The ID of your SAML identity provider.
attributeName This property is required. string
The name of the SAML attribute.
attributeValue This property is required. string
The SAML attribute value to look for.
identityProviderId This property is required. string
The ID of your SAML identity provider.
attribute_name This property is required. str
The name of the SAML attribute.
attribute_value This property is required. str
The SAML attribute value to look for.
identity_provider_id This property is required. str
The ID of your SAML identity provider.
attributeName This property is required. String
The name of the SAML attribute.
attributeValue This property is required. String
The SAML attribute value to look for.
identityProviderId This property is required. String
The ID of your SAML identity provider.

AccessGroupIncludeServiceToken
, AccessGroupIncludeServiceTokenArgs

TokenId This property is required. string
The ID of a Service Token.
TokenId This property is required. string
The ID of a Service Token.
tokenId This property is required. String
The ID of a Service Token.
tokenId This property is required. string
The ID of a Service Token.
token_id This property is required. str
The ID of a Service Token.
tokenId This property is required. String
The ID of a Service Token.

AccessGroupRequire
, AccessGroupRequireArgs

AnyValidServiceToken AccessGroupRequireAnyValidServiceToken
An empty object which matches on all service tokens.
AuthContext AccessGroupRequireAuthContext
AuthMethod AccessGroupRequireAuthMethod
AzureAd AccessGroupRequireAzureAd
Certificate AccessGroupRequireCertificate
CommonName AccessGroupRequireCommonName
DevicePosture AccessGroupRequireDevicePosture
Email AccessGroupRequireEmail
EmailDomain AccessGroupRequireEmailDomain
EmailList AccessGroupRequireEmailList
Everyone AccessGroupRequireEveryone
An empty object which matches on all users.
ExternalEvaluation AccessGroupRequireExternalEvaluation
Geo AccessGroupRequireGeo
GithubOrganization AccessGroupRequireGithubOrganization
Group AccessGroupRequireGroup
Gsuite AccessGroupRequireGsuite
Ip AccessGroupRequireIp
IpList AccessGroupRequireIpList
LoginMethod AccessGroupRequireLoginMethod
Okta AccessGroupRequireOkta
Saml AccessGroupRequireSaml
ServiceToken AccessGroupRequireServiceToken
AnyValidServiceToken AccessGroupRequireAnyValidServiceToken
An empty object which matches on all service tokens.
AuthContext AccessGroupRequireAuthContext
AuthMethod AccessGroupRequireAuthMethod
AzureAd AccessGroupRequireAzureAd
Certificate AccessGroupRequireCertificate
CommonName AccessGroupRequireCommonName
DevicePosture AccessGroupRequireDevicePosture
Email AccessGroupRequireEmail
EmailDomain AccessGroupRequireEmailDomain
EmailList AccessGroupRequireEmailList
Everyone AccessGroupRequireEveryone
An empty object which matches on all users.
ExternalEvaluation AccessGroupRequireExternalEvaluation
Geo AccessGroupRequireGeo
GithubOrganization AccessGroupRequireGithubOrganization
Group AccessGroupRequireGroup
Gsuite AccessGroupRequireGsuite
Ip AccessGroupRequireIp
IpList AccessGroupRequireIpList
LoginMethod AccessGroupRequireLoginMethod
Okta AccessGroupRequireOkta
Saml AccessGroupRequireSaml
ServiceToken AccessGroupRequireServiceToken
anyValidServiceToken AccessGroupRequireAnyValidServiceToken
An empty object which matches on all service tokens.
authContext AccessGroupRequireAuthContext
authMethod AccessGroupRequireAuthMethod
azureAd AccessGroupRequireAzureAd
certificate AccessGroupRequireCertificate
commonName AccessGroupRequireCommonName
devicePosture AccessGroupRequireDevicePosture
email AccessGroupRequireEmail
emailDomain AccessGroupRequireEmailDomain
emailList AccessGroupRequireEmailList
everyone AccessGroupRequireEveryone
An empty object which matches on all users.
externalEvaluation AccessGroupRequireExternalEvaluation
geo AccessGroupRequireGeo
githubOrganization AccessGroupRequireGithubOrganization
group AccessGroupRequireGroup
gsuite AccessGroupRequireGsuite
ip AccessGroupRequireIp
ipList AccessGroupRequireIpList
loginMethod AccessGroupRequireLoginMethod
okta AccessGroupRequireOkta
saml AccessGroupRequireSaml
serviceToken AccessGroupRequireServiceToken
anyValidServiceToken AccessGroupRequireAnyValidServiceToken
An empty object which matches on all service tokens.
authContext AccessGroupRequireAuthContext
authMethod AccessGroupRequireAuthMethod
azureAd AccessGroupRequireAzureAd
certificate AccessGroupRequireCertificate
commonName AccessGroupRequireCommonName
devicePosture AccessGroupRequireDevicePosture
email AccessGroupRequireEmail
emailDomain AccessGroupRequireEmailDomain
emailList AccessGroupRequireEmailList
everyone AccessGroupRequireEveryone
An empty object which matches on all users.
externalEvaluation AccessGroupRequireExternalEvaluation
geo AccessGroupRequireGeo
githubOrganization AccessGroupRequireGithubOrganization
group AccessGroupRequireGroup
gsuite AccessGroupRequireGsuite
ip AccessGroupRequireIp
ipList AccessGroupRequireIpList
loginMethod AccessGroupRequireLoginMethod
okta AccessGroupRequireOkta
saml AccessGroupRequireSaml
serviceToken AccessGroupRequireServiceToken
any_valid_service_token AccessGroupRequireAnyValidServiceToken
An empty object which matches on all service tokens.
auth_context AccessGroupRequireAuthContext
auth_method AccessGroupRequireAuthMethod
azure_ad AccessGroupRequireAzureAd
certificate AccessGroupRequireCertificate
common_name AccessGroupRequireCommonName
device_posture AccessGroupRequireDevicePosture
email AccessGroupRequireEmail
email_domain AccessGroupRequireEmailDomain
email_list AccessGroupRequireEmailList
everyone AccessGroupRequireEveryone
An empty object which matches on all users.
external_evaluation AccessGroupRequireExternalEvaluation
geo AccessGroupRequireGeo
github_organization AccessGroupRequireGithubOrganization
group AccessGroupRequireGroup
gsuite AccessGroupRequireGsuite
ip AccessGroupRequireIp
ip_list AccessGroupRequireIpList
login_method AccessGroupRequireLoginMethod
okta AccessGroupRequireOkta
saml AccessGroupRequireSaml
service_token AccessGroupRequireServiceToken

AccessGroupRequireAuthContext
, AccessGroupRequireAuthContextArgs

AcId This property is required. string
The ACID of an Authentication context.
Id This property is required. string
The ID of an Authentication context.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
AcId This property is required. string
The ACID of an Authentication context.
Id This property is required. string
The ID of an Authentication context.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
acId This property is required. String
The ACID of an Authentication context.
id This property is required. String
The ID of an Authentication context.
identityProviderId This property is required. String
The ID of your Azure identity provider.
acId This property is required. string
The ACID of an Authentication context.
id This property is required. string
The ID of an Authentication context.
identityProviderId This property is required. string
The ID of your Azure identity provider.
ac_id This property is required. str
The ACID of an Authentication context.
id This property is required. str
The ID of an Authentication context.
identity_provider_id This property is required. str
The ID of your Azure identity provider.
acId This property is required. String
The ACID of an Authentication context.
id This property is required. String
The ID of an Authentication context.
identityProviderId This property is required. String
The ID of your Azure identity provider.

AccessGroupRequireAuthMethod
, AccessGroupRequireAuthMethodArgs

AuthMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
AuthMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. String
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. string
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
auth_method This property is required. str
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
authMethod This property is required. String
The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

AccessGroupRequireAzureAd
, AccessGroupRequireAzureAdArgs

Id This property is required. string
The ID of an Azure group.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
Id This property is required. string
The ID of an Azure group.
IdentityProviderId This property is required. string
The ID of your Azure identity provider.
id This property is required. String
The ID of an Azure group.
identityProviderId This property is required. String
The ID of your Azure identity provider.
id This property is required. string
The ID of an Azure group.
identityProviderId This property is required. string
The ID of your Azure identity provider.
id This property is required. str
The ID of an Azure group.
identity_provider_id This property is required. str
The ID of your Azure identity provider.
id This property is required. String
The ID of an Azure group.
identityProviderId This property is required. String
The ID of your Azure identity provider.

AccessGroupRequireCommonName
, AccessGroupRequireCommonNameArgs

CommonName This property is required. string
The common name to match.
CommonName This property is required. string
The common name to match.
commonName This property is required. String
The common name to match.
commonName This property is required. string
The common name to match.
common_name This property is required. str
The common name to match.
commonName This property is required. String
The common name to match.

AccessGroupRequireDevicePosture
, AccessGroupRequireDevicePostureArgs

IntegrationUid This property is required. string
The ID of a device posture integration.
IntegrationUid This property is required. string
The ID of a device posture integration.
integrationUid This property is required. String
The ID of a device posture integration.
integrationUid This property is required. string
The ID of a device posture integration.
integration_uid This property is required. str
The ID of a device posture integration.
integrationUid This property is required. String
The ID of a device posture integration.

AccessGroupRequireEmail
, AccessGroupRequireEmailArgs

Email This property is required. string
The email of the user.
Email This property is required. string
The email of the user.
email This property is required. String
The email of the user.
email This property is required. string
The email of the user.
email This property is required. str
The email of the user.
email This property is required. String
The email of the user.

AccessGroupRequireEmailDomain
, AccessGroupRequireEmailDomainArgs

Domain This property is required. string
The email domain to match.
Domain This property is required. string
The email domain to match.
domain This property is required. String
The email domain to match.
domain This property is required. string
The email domain to match.
domain This property is required. str
The email domain to match.
domain This property is required. String
The email domain to match.

AccessGroupRequireEmailList
, AccessGroupRequireEmailListArgs

Id This property is required. string
The ID of a previously created email list.
Id This property is required. string
The ID of a previously created email list.
id This property is required. String
The ID of a previously created email list.
id This property is required. string
The ID of a previously created email list.
id This property is required. str
The ID of a previously created email list.
id This property is required. String
The ID of a previously created email list.

AccessGroupRequireExternalEvaluation
, AccessGroupRequireExternalEvaluationArgs

EvaluateUrl This property is required. string
The API endpoint containing your business logic.
KeysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
EvaluateUrl This property is required. string
The API endpoint containing your business logic.
KeysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. String
The API endpoint containing your business logic.
keysUrl This property is required. String
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. string
The API endpoint containing your business logic.
keysUrl This property is required. string
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluate_url This property is required. str
The API endpoint containing your business logic.
keys_url This property is required. str
The API endpoint containing the key that Access uses to verify that the response came from your API.
evaluateUrl This property is required. String
The API endpoint containing your business logic.
keysUrl This property is required. String
The API endpoint containing the key that Access uses to verify that the response came from your API.

AccessGroupRequireGeo
, AccessGroupRequireGeoArgs

CountryCode This property is required. string
The country code that should be matched.
CountryCode This property is required. string
The country code that should be matched.
countryCode This property is required. String
The country code that should be matched.
countryCode This property is required. string
The country code that should be matched.
country_code This property is required. str
The country code that should be matched.
countryCode This property is required. String
The country code that should be matched.

AccessGroupRequireGithubOrganization
, AccessGroupRequireGithubOrganizationArgs

IdentityProviderId This property is required. string
The ID of your Github identity provider.
Name This property is required. string
The name of the organization.
Team string
The name of the team
IdentityProviderId This property is required. string
The ID of your Github identity provider.
Name This property is required. string
The name of the organization.
Team string
The name of the team
identityProviderId This property is required. String
The ID of your Github identity provider.
name This property is required. String
The name of the organization.
team String
The name of the team
identityProviderId This property is required. string
The ID of your Github identity provider.
name This property is required. string
The name of the organization.
team string
The name of the team
identity_provider_id This property is required. str
The ID of your Github identity provider.
name This property is required. str
The name of the organization.
team str
The name of the team
identityProviderId This property is required. String
The ID of your Github identity provider.
name This property is required. String
The name of the organization.
team String
The name of the team

AccessGroupRequireGroup
, AccessGroupRequireGroupArgs

Id This property is required. string
The ID of a previously created Access group.
Id This property is required. string
The ID of a previously created Access group.
id This property is required. String
The ID of a previously created Access group.
id This property is required. string
The ID of a previously created Access group.
id This property is required. str
The ID of a previously created Access group.
id This property is required. String
The ID of a previously created Access group.

AccessGroupRequireGsuite
, AccessGroupRequireGsuiteArgs

Email This property is required. string
The email of the Google Workspace group.
IdentityProviderId This property is required. string
The ID of your Google Workspace identity provider.
Email This property is required. string
The email of the Google Workspace group.
IdentityProviderId This property is required. string
The ID of your Google Workspace identity provider.
email This property is required. String
The email of the Google Workspace group.
identityProviderId This property is required. String
The ID of your Google Workspace identity provider.
email This property is required. string
The email of the Google Workspace group.
identityProviderId This property is required. string
The ID of your Google Workspace identity provider.
email This property is required. str
The email of the Google Workspace group.
identity_provider_id This property is required. str
The ID of your Google Workspace identity provider.
email This property is required. String
The email of the Google Workspace group.
identityProviderId This property is required. String
The ID of your Google Workspace identity provider.

AccessGroupRequireIp
, AccessGroupRequireIpArgs

Ip This property is required. string
An IPv4 or IPv6 CIDR block.
Ip This property is required. string
An IPv4 or IPv6 CIDR block.
ip This property is required. String
An IPv4 or IPv6 CIDR block.
ip This property is required. string
An IPv4 or IPv6 CIDR block.
ip This property is required. str
An IPv4 or IPv6 CIDR block.
ip This property is required. String
An IPv4 or IPv6 CIDR block.

AccessGroupRequireIpList
, AccessGroupRequireIpListArgs

Id This property is required. string
The ID of a previously created IP list.
Id This property is required. string
The ID of a previously created IP list.
id This property is required. String
The ID of a previously created IP list.
id This property is required. string
The ID of a previously created IP list.
id This property is required. str
The ID of a previously created IP list.
id This property is required. String
The ID of a previously created IP list.

AccessGroupRequireLoginMethod
, AccessGroupRequireLoginMethodArgs

Id This property is required. string
The ID of an identity provider.
Id This property is required. string
The ID of an identity provider.
id This property is required. String
The ID of an identity provider.
id This property is required. string
The ID of an identity provider.
id This property is required. str
The ID of an identity provider.
id This property is required. String
The ID of an identity provider.

AccessGroupRequireOkta
, AccessGroupRequireOktaArgs

IdentityProviderId This property is required. string
The ID of your Okta identity provider.
Name This property is required. string
The name of the Okta group.
IdentityProviderId This property is required. string
The ID of your Okta identity provider.
Name This property is required. string
The name of the Okta group.
identityProviderId This property is required. String
The ID of your Okta identity provider.
name This property is required. String
The name of the Okta group.
identityProviderId This property is required. string
The ID of your Okta identity provider.
name This property is required. string
The name of the Okta group.
identity_provider_id This property is required. str
The ID of your Okta identity provider.
name This property is required. str
The name of the Okta group.
identityProviderId This property is required. String
The ID of your Okta identity provider.
name This property is required. String
The name of the Okta group.

AccessGroupRequireSaml
, AccessGroupRequireSamlArgs

AttributeName This property is required. string
The name of the SAML attribute.
AttributeValue This property is required. string
The SAML attribute value to look for.
IdentityProviderId This property is required. string
The ID of your SAML identity provider.
AttributeName This property is required. string
The name of the SAML attribute.
AttributeValue This property is required. string
The SAML attribute value to look for.
IdentityProviderId This property is required. string
The ID of your SAML identity provider.
attributeName This property is required. String
The name of the SAML attribute.
attributeValue This property is required. String
The SAML attribute value to look for.
identityProviderId This property is required. String
The ID of your SAML identity provider.
attributeName This property is required. string
The name of the SAML attribute.
attributeValue This property is required. string
The SAML attribute value to look for.
identityProviderId This property is required. string
The ID of your SAML identity provider.
attribute_name This property is required. str
The name of the SAML attribute.
attribute_value This property is required. str
The SAML attribute value to look for.
identity_provider_id This property is required. str
The ID of your SAML identity provider.
attributeName This property is required. String
The name of the SAML attribute.
attributeValue This property is required. String
The SAML attribute value to look for.
identityProviderId This property is required. String
The ID of your SAML identity provider.

AccessGroupRequireServiceToken
, AccessGroupRequireServiceTokenArgs

TokenId This property is required. string
The ID of a Service Token.
TokenId This property is required. string
The ID of a Service Token.
tokenId This property is required. String
The ID of a Service Token.
tokenId This property is required. string
The ID of a Service Token.
token_id This property is required. str
The ID of a Service Token.
tokenId This property is required. String
The ID of a Service Token.

Import

$ pulumi import cloudflare:index/accessGroup:AccessGroup example '<{accounts|zones}/{account_id|zone_id}>/<group_id>'
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Cloudflare pulumi/pulumi-cloudflare
License
Apache-2.0
Notes
This Pulumi package is based on the cloudflare Terraform Provider.
Cloudflare v6.1.1 published on Monday, Apr 21, 2025 by Pulumi
pulumi/pulumi-cloudflare