1. Docs
2. Reference
3. REST API Docs
4. Schema
5. OrganizationFeatures

OrganizationFeatures represents paid features for organizations.

Properties

• auditLogsEnabled boolean required
  Whether audit logs are enabled for the organization.
• hasTerraformModules boolean optional
  Whether the organization has any Terraform modules in the registry. Data-driven (not plan-gated): drives the Terraform Modules console nav entry so customers can manage existing modules even on plans without publishing.
• crossGuardEnabled boolean required
  Whether CrossGuard policy enforcement is enabled.
• webhooksEnabled boolean required
  Whether webhooks are enabled for the organization.
• integrationAssistantEnabled boolean required
  Whether the integration assistant is enabled.
• aleEnabled boolean required
  Whether audit log export (ALE) is enabled.
• deployEnabled boolean required
  Whether Pulumi Deployments is enabled.
• scimEnabled boolean required
  Whether SCIM provisioning is enabled.
• resourceSearchEnabled boolean required
  Whether resource search is enabled.
• resourceExportEnabled boolean required
  Whether resource export is enabled.
• propertySearchUIEnabled boolean required
  Deprecated: property search is included with resource search for every organization, so this no longer gates any behavior.
• nlpSearchEnabled boolean required
  Whether natural language search is enabled.
• customTemplatesEnabled boolean required
  Whether custom templates are enabled.
• restoreStacksEnabled boolean required
  Whether restoring deleted stacks is enabled.
• environmentsEnabled boolean required
  Whether Pulumi ESC environments are enabled.
• environmentRevisionTagsEnabled boolean required
  Whether environment revision tags are enabled.
• legacyDeploymentsOrgToken boolean required
  Whether the organization uses a legacy org token for deployments.
• gitHubEnterpriseIntegrationEnabled boolean required
  Whether GitHub Enterprise integration is enabled.
• gitHubEnterpriseIndividualAuthEnabled boolean optional
  Deprecated. Per-user (individual) GitHub Enterprise authentication is now a per-installation setting; no longer populated.
• agentPoolRegistrationEnabled boolean required
  Whether agent pool registration is enabled for self-hosted deployments.
• dashboardOnboardingUIEnabled boolean optional
  Deprecated. The dashboard onboarding prompt UI has been removed; no longer populated (always false).
• driftDetectionEnabled boolean required
  Whether drift detection is enabled.
• selfHostedDeploymentsEnabled boolean required
  Whether self-hosted deployment agents are enabled.
• auditLogUIFilteringEnabled boolean required
  Whether audit log UI filtering is enabled.
• dependencyCachingEnabled boolean required
  Whether dependency caching for deployments is enabled.
• environmentsRestoreEnabled boolean required
  Whether restoring deleted environments is enabled.
• pangeaAccountsScanPageEnabled boolean required
  Whether the Pangea accounts scan page is enabled.
• customRolesEnabled boolean required
  Whether custom RBAC roles are enabled.
• usersCustomRolesEnabled boolean optional
  Whether assigning custom RBAC roles to individual users is enabled.
• environmentSecretRotationEnabled boolean required
  Whether environment secret rotation is enabled.
• insightsMonetizationEnabled boolean required
  Whether Insights monetization features are enabled.
• selfServeIDPRemoval boolean required
  Whether self-serve IDP removal is enabled.
• iacCloudImportEnabled boolean required
  Whether IaC cloud import is enabled.
• bringYourOwnKeyEnabled boolean required
  Whether bring-your-own-key encryption is enabled.
• approvalsEnabled boolean required
  Whether change request approvals are enabled.
• escOnboardingEnabled boolean required
  Whether ESC onboarding is enabled.
• escOnboardingV2Enabled boolean required
  Whether ESC onboarding v2 is enabled.
• escEditorRevampEnabled boolean optional
  Deprecated. Always true.
• escOnboardingAzureOAuthClientEnabled boolean required
  Whether the Azure OAuth client for ESC onboarding is enabled.
• escOnboardingGcpOAuthClientEnabled boolean required
  Whether the GCP OAuth client for ESC onboarding is enabled.
• policyManagementV2Enabled boolean required
  Whether policy management v2 is enabled.
• policyIssueManagementEnabled boolean required
  Whether policy issue management is enabled.
• aiAgentsEnabled boolean required
  Whether AI agents (Pulumi Copilot) are enabled.
• aiAgentsReadOnly boolean required
  Whether the organization has read-only access to AI agents: it is not entitled to Neo on its current plan, but may still read the tasks it already has. Mutually exclusive with aiAgentsEnabled. When both are false, Neo is hidden entirely, which is what an organization sees when Neo has been disabled for it.
• themingEnabled boolean required
  Whether UI theming is enabled.
• customRoleCondition boolean required
  Whether custom role conditions are enabled.
• neoTaskSharingEnabled boolean required
  Whether Copilot task sharing is enabled.
• ghAppDetailedDiffEnabled boolean required
  Whether the GitHub App detailed diff view is enabled.
• neoServerSideApprovalsEnabled boolean optional
  Deprecated. Always true.
• neoPlanModeEnabled boolean optional
  Deprecated. Always true.
• neoCustomRolesEnabled boolean required
  Whether starting Neo tasks with an assumed RBAC role is enabled.
• getStartedOnboardEnabled boolean optional
  Deprecated. The getting-started onboarding flow is enabled for everyone; no longer populated (always false).
• neoReadOnlyEnabled boolean optional
  Deprecated. Always true.
• discoveredStacksEnabled boolean required
  Whether discovered stacks are enabled.
• agentIntegrationCatalogEnabled boolean required
  Whether the agent integration catalog is enabled.
• agentScheduledTasksEnabled boolean required
  Whether agent automations are enabled.
• neoCustomAgentsEnabled boolean required
  Whether Custom Agents are enabled.
• neoSecurityEnabled boolean required
  Whether Neo Security (cloud security posture scanning) is enabled.
• agentTriggeredTasksEnabled boolean required
  Whether event-triggered Neo tasks are enabled.
• aiReviewCodeAccessEnabled boolean optional
  Deprecated. The legacy per-stack code-access-for-AI-reviews setting has been removed; no longer populated (always false).
• neoCodeReviewsEnabled boolean optional
  Whether agentic Neo Code Reviews (a single agentic review per pull request, replacing the legacy per-stack AI preview summaries) are enabled.
• customVCSEnabled boolean required
  Whether custom VCS integrations are enabled.
• bitbucketVCSEnabled boolean required
  Whether Bitbucket VCS integration is enabled.
• insightsAutoPolicyPacksEnabled boolean required
  Whether the Insights auto policy packs experience (including the bulk account discover wizard) is enabled.
• fixDriftWithNeoEnabled boolean required
  Whether fixing drift with Neo is enabled.
• cliIntegrationCatalogEnabled boolean required
  Whether the CLI integration catalog is enabled.
• serviceBackedConfigEnabled boolean required
  Whether service-backed stack config is enabled.
• universalSearchEnabled boolean optional
  Whether universal search is enabled.
• driftRemediationEnabled boolean optional
  Whether drift remediation (auto-remediate via pulumi up –refresh) is enabled.
• expandedPolicyEnforcementLevelsEnabled boolean optional
  Whether expanded policy enforcement levels (including the Remediate level) are enabled.
• machineTokensEnabled boolean optional
  Whether machine tokens (organization access tokens) are enabled.
• samlSsoEnabled boolean optional
  Whether SAML SSO configuration is enabled.
• teamMemberRoleManagementEnabled boolean optional
  Whether team member role management (assigning custom roles per team member) is enabled.
• teamsEnabled boolean optional
  Whether team management (creating and assigning teams) is enabled.
• neoTokenMeteringEnabled boolean optional
  Deprecated. Matches aiAgentsEnabled.
• tagBasedDeploymentTriggersEnabled boolean optional
  Whether tag-based deployment triggers are enabled.
• notificationCenterEnabled boolean optional
  Whether the notification center (in-dashboard notification bell and inbox) is enabled.
• deploymentOidcSettingsEnabled boolean optional
  Whether the Deployments OIDC settings UI is shown.
• neoUsageLimitsEnabled boolean optional
  Whether org-configurable Neo usage limits (monthly dollar caps) are enabled.
• unlinkedGitHubAppRecoveryEnabled boolean optional
  Deprecated. Unlinked GitHub App installation recovery is now always enabled; no longer populated.
• accessTokenExpiryPolicyEnabled boolean optional
  Whether the per-org access token expiry policy (admin-configurable maximum lifetime for personal, organization, and team access tokens) is enabled.
• neoByokEnabled boolean required
  Whether Neo BYOK (bring-your-own-key) model provider configuration is enabled.
• neoAgentTaskRbacEnforcementEnabled boolean optional
  Whether the create-and-manage-Neo-tasks permission is enforced on Neo task creation for the organization (rollout flag). While unset the permission is evaluated in shadow mode only and denials do not block.
• linkExpressCheckoutEnabled boolean optional
  Whether one-click Link express checkout is enabled for adding a payment method.
• multiChangeRequestsEnabled boolean optional
  Deprecated. Always true: an environment holds one open draft per author.
• agentsAsTeamMembersEnabled boolean optional
  Whether the Pulumi Agents workspace navigation is enabled.
• entityUserAssignmentsEnabled boolean required
  Whether individual users can be assigned permission sets on stacks, environments and Insights accounts.