1. Docs
2. Reference
3. REST API Docs
4. Schema
5. OrganizationFeatures

OrganizationFeatures represents paid features for organizations.

Properties

• auditLogsEnabled boolean required
  Whether audit logs are enabled for the organization.
• hasTerraformModules boolean optional
  Whether the organization has any Terraform modules in the registry. Data-driven (not plan-gated): drives the Terraform Modules console nav entry so customers can manage existing modules even on plans without publishing.
• crossGuardEnabled boolean required
  Whether CrossGuard policy enforcement is enabled.
• webhooksEnabled boolean required
  Whether webhooks are enabled for the organization.
• integrationAssistantEnabled boolean required
  Whether the integration assistant is enabled.
• aleEnabled boolean required
  Whether audit log export (ALE) is enabled.
• deployEnabled boolean required
  Whether Pulumi Deployments is enabled.
• scimEnabled boolean required
  Whether SCIM provisioning is enabled.
• resourceSearchEnabled boolean required
  Whether resource search is enabled.
• resourceExportEnabled boolean required
  Whether resource export is enabled.
• propertySearchUIEnabled boolean required
  Deprecated: property search is included with resource search for every organization, so this no longer gates any behavior.
• nlpSearchEnabled boolean required
  Whether natural language search is enabled.
• customTemplatesEnabled boolean required
  Whether custom templates are enabled.
• restoreStacksEnabled boolean required
  Whether restoring deleted stacks is enabled.
• environmentsEnabled boolean required
  Whether Pulumi ESC environments are enabled.
• environmentRevisionTagsEnabled boolean required
  Whether environment revision tags are enabled.
• legacyDeploymentsOrgToken boolean required
  Whether the organization uses a legacy org token for deployments.
• gitHubEnterpriseIntegrationEnabled boolean required
  Whether GitHub Enterprise integration is enabled.
• gitHubEnterpriseIndividualAuthEnabled boolean optional
  Deprecated. Per-user (individual) GitHub Enterprise authentication is now a per-installation setting; no longer populated.
• agentPoolRegistrationEnabled boolean required
  Whether agent pool registration is enabled for self-hosted deployments.
• dashboardOnboardingUIEnabled boolean optional
  Deprecated. The dashboard onboarding prompt UI has been removed; no longer populated (always false).
• driftDetectionEnabled boolean required
  Whether drift detection is enabled.
• selfHostedDeploymentsEnabled boolean required
  Whether self-hosted deployment agents are enabled.
• auditLogUIFilteringEnabled boolean required
  Whether audit log UI filtering is enabled.
• dependencyCachingEnabled boolean required
  Whether dependency caching for deployments is enabled.
• environmentsRestoreEnabled boolean required
  Whether restoring deleted environments is enabled.
• pangeaAccountsScanPageEnabled boolean required
  Whether the Pangea accounts scan page is enabled.
• customRolesEnabled boolean required
  Whether custom RBAC roles are enabled.
• usersCustomRolesEnabled boolean optional
  Whether assigning custom RBAC roles to individual users is enabled.
• environmentSecretRotationEnabled boolean required
  Whether environment secret rotation is enabled.
• insightsMonetizationEnabled boolean required
  Whether Insights monetization features are enabled.
• selfServeIDPRemoval boolean required
  Whether self-serve IDP removal is enabled.
• iacCloudImportEnabled boolean required
  Whether IaC cloud import is enabled.
• bringYourOwnKeyEnabled boolean required
  Whether bring-your-own-key encryption is enabled.
• approvalsEnabled boolean required
  Whether change request approvals are enabled.
• escOnboardingEnabled boolean required
  Whether ESC onboarding is enabled.
• escOnboardingV2Enabled boolean required
  Whether ESC onboarding v2 is enabled.
• escEditorRevampEnabled boolean required
  Whether the ESC editor revamp is enabled.
• escOnboardingAzureOAuthClientEnabled boolean required
  Whether the Azure OAuth client for ESC onboarding is enabled.
• escOnboardingGcpOAuthClientEnabled boolean required
  Whether the GCP OAuth client for ESC onboarding is enabled.
• policyManagementV2Enabled boolean required
  Whether policy management v2 is enabled.
• policyIssueManagementEnabled boolean required
  Whether policy issue management is enabled.
• aiAgentsEnabled boolean required
  Whether AI agents (Pulumi Copilot) are enabled.
• themingEnabled boolean required
  Whether UI theming is enabled.
• customRoleCondition boolean required
  Whether custom role conditions are enabled.
• neoTaskSharingEnabled boolean required
  Whether Copilot task sharing is enabled.
• ghAppDetailedDiffEnabled boolean required
  Whether the GitHub App detailed diff view is enabled.
• neoServerSideApprovalsEnabled boolean optional
  Deprecated. Always true.
• neoPlanModeEnabled boolean optional
  Deprecated. Always true.
• neoCustomRolesEnabled boolean required
  Whether starting Neo tasks with an assumed RBAC role is enabled.
• getStartedOnboardEnabled boolean optional
  Deprecated. The getting-started onboarding flow is enabled for everyone; no longer populated (always false).
• neoReadOnlyEnabled boolean optional
  Deprecated. Always true.
• discoveredStacksEnabled boolean required
  Whether discovered stacks are enabled.
• agentIntegrationCatalogEnabled boolean required
  Whether the agent integration catalog is enabled.
• agentScheduledTasksEnabled boolean required
  Whether agent automations are enabled.
• aiReviewCodeAccessEnabled boolean optional
  Deprecated. The legacy per-stack code-access-for-AI-reviews setting has been removed; no longer populated (always false).
• neoCodeReviewsEnabled boolean optional
  Whether agentic Neo Code Reviews (a single agentic review per pull request, replacing the legacy per-stack AI preview summaries) are enabled.
• customVCSEnabled boolean required
  Whether custom VCS integrations are enabled.
• bitbucketVCSEnabled boolean required
  Whether Bitbucket VCS integration is enabled.
• insightsAutoPolicyPacksEnabled boolean required
  Whether the Insights auto policy packs experience (including the bulk account discover wizard) is enabled.
• fixDriftWithNeoEnabled boolean required
  Whether fixing drift with Neo is enabled.
• cliIntegrationCatalogEnabled boolean required
  Whether the CLI integration catalog is enabled.
• serviceBackedConfigEnabled boolean required
  Whether service-backed stack config is enabled.
• universalSearchEnabled boolean optional
  Whether universal search is enabled.
• driftRemediationEnabled boolean optional
  Whether drift remediation (auto-remediate via pulumi up –refresh) is enabled.
• expandedPolicyEnforcementLevelsEnabled boolean optional
  Whether expanded policy enforcement levels (including the Remediate level) are enabled.
• machineTokensEnabled boolean optional
  Whether machine tokens (organization access tokens) are enabled.
• samlSsoEnabled boolean optional
  Whether SAML SSO configuration is enabled.
• teamMemberRoleManagementEnabled boolean optional
  Whether team member role management (assigning custom roles per team member) is enabled.
• teamsEnabled boolean optional
  Whether team management (creating and assigning teams) is enabled.
• neoTokenMeteringEnabled boolean optional
  Deprecated. Matches aiAgentsEnabled.
• tagBasedDeploymentTriggersEnabled boolean optional
  Whether tag-based deployment triggers are enabled.
• notificationCenterEnabled boolean optional
  Whether the notification center (in-dashboard notification bell and inbox) is enabled.
• deploymentOidcSettingsEnabled boolean optional
  Whether the Deployments OIDC settings UI is shown.
• neoUsageLimitsEnabled boolean optional
  Whether org-configurable Neo usage limits (monthly dollar caps) are enabled.
• unlinkedGitHubAppRecoveryEnabled boolean optional
  Deprecated. Unlinked GitHub App installation recovery is now always enabled; no longer populated.
• accessTokenExpiryPolicyEnabled boolean optional
  Whether the per-org access token expiry policy (admin-configurable maximum lifetime for personal, organization, and team access tokens) is enabled.
• neoByokEnabled boolean required
  Whether Neo BYOK (bring-your-own-key) model provider configuration is enabled.
• neoAgentTaskRbacEnforcementEnabled boolean optional
  Whether the create-and-manage-Neo-tasks permission is enforced on Neo task creation for the organization (rollout flag). While unset the permission is evaluated in shadow mode only and denials do not block.
• linkExpressCheckoutEnabled boolean optional
  Whether one-click Link express checkout is enabled for adding a payment method.