Skip to main content
Pulumi logo Pulumi logo
  1. Docs
  2. Reference
  3. REST API Docs
  4. Schema
  5. RbacScopeGroup

RbacScopeGroup

    RbacScopeGroup represents a group of scopes for a resource group

    Properties

    • name enum required
      The name of this scope group.
      Values:
      Stacks — Stacks
      Stack deployments — StackDeployments
      Stack webhooks — StackWebhooks
      Stack tags — StackTags
      Stack deployment schedules — StackDeploySchedules
      Agent pools — AgentPools
      Environments — Environments
      Environment webhooks — EnvironmentWebhooks
      Environment tags — EnvironmentTags
      Environment versions — EnvironmentVersions
      Environment schedules — EnvironmentSchedules
      Environment secrets rotation — EnvironmentSecretsRotation
      Accounts — InsightsAccounts
      Scans — InsightsScan
      Policy queue — InsightsPolicyQueue
      Policy evaluator — InsightsPolicyEvaluator
      Stack management — StackManagement
      Environment management — EnvironmentManagement
      Insights account management — InsightsAccountManagement
      Insights policy management — InsightsPolicyManagement
      Organization — Organization
      Membership — Membership
      Organization access tokens — OrganizationTokens
      Teams — Teams
      SSO — SSO
      Audit logs — AuditLogs
      Roles — Roles
      Search — Search
      Copilot — Copilot
      Neo — Neo
      Organization annotations — Annotations
      OIDC — Oidc
      Templates — Templates
      Deployments — OrgDeployments
      Organization webhooks — OrgWebhooks
      Approvals — ChangeRequests
    • scopes array[RbacScope] required
      The list of scopes in this group.
    • name enum required
      The permission name for this scope.
      Values:
      — NoPermission
      stack:list — StackList
      project:encrypt — ProjectEncrypt
      project:decrypt — ProjectDecrypt
      project_annotations:read — ProjectAnnotationRead
      project_annotations:update — ProjectAnnotationUpdate
      stack:read — StackRead
      stack:write — StackWrite
      stack:import — StackImport
      stack:export — StackExport
      stack:encrypt — StackEncrypt
      stack:decrypt — StackDecrypt
      stack:create — StackCreate
      stack:rename — StackRename
      stack:delete — StackDelete
      stack:cancel_update — StackCancelUpdate
      stack:transfer — StackTransfer
      stack:list_deleted — StackListDeleted
      stack:restore_deleted — StackRestoreDeleted
      stack_deployment:create — StackDeploymentCreate
      stack_deployment:read — StackDeploymentRead
      stack_deployment_settings:write — StackDeploymentSettingsWrite
      stack_deployment_settings:read — StackDeploymentSettingsRead
      stack_deployment_settings:encrypt — StackDeploymentSettingsEncrypt
      stack_deployment_cache:read — StackDeploymentCacheRead
      stack_webhook:read — StackWebhookRead
      stack_webhook:create — StackWebhookCreate
      stack_webhook:update — StackWebhookUpdate
      stack_webhook:delete — StackWebhookDelete
      stack_access:read — StackAccessRead
      stack_access:update — StackAccessUpdate
      stack_tags:update — StackTagsUpdate
      stack_annotations:read — StackAnnotationRead
      stack_annotations:update — StackAnnotationUpdate
      stack_schedule:create — StackScheduleCreate
      stack_schedule:update — StackScheduleUpdate
      stack_schedule:read — StackScheduleRead
      stack_schedule:delete — StackScheduleDelete
      stack_schedule:pause — StackSchedulePause
      stack_schedule:resume — StackScheduleResume
      organization:read_usage — OrganizationReadUsage
      organization:update — OrganizationUpdate
      organization:rename — OrganizationRename
      organization:delete — OrganizationDelete
      organization:change_backend — OrganizationChangeBackend
      organization:billing — OrganizationBilling
      organization:potential — OrganizationPotential
      organization:transfer_stacks — OrganizationTransferStacks
      OrganizationTransferStacks differs from Stack Transfer as it enables transferring all stacks within the organization, rather than being tied to an individual stack.
      saml:read — SAMLRead
      saml:update — SAMLUpdate
      audit_logs:read — AuditLogsRead
      audit_logs:export — AuditLogsExport
      scim:read — SCIMRead
      scim:update — SCIMUpdate
      scim:delete — SCIMDelete
      tags:read — TagsRead
      org_integrations:read — OrgIntegrationsRead
      org_integrations:update — OrgIntegrationsUpdate
      integrations:update — IntegrationsUpdate
      integrations:read — IntegrationsRead
      invites:read — InvitesRead
      invites:create — InvitesCreate
      org_requests:read — OrgRequestsRead
      org_requests:update — OrgRequestsUpdate
      org_member_access:read — OrgMemberAccessRead
      org_member:read — OrgMemberRead
      org_member:delete — OrgMemberDelete
      org_member:add — OrgMemberAdd
      org_member:update — OrgMemberUpdate
      org_member:set_admin — OrgMemberSetAdmin
      org_token:read — OrgTokenRead
      org_token:create — OrgTokenCreate
      org_token:delete — OrgTokenDelete
      auth_policies:read — AuthPoliciesRead
      auth_policies:update — AuthPoliciesUpdate
      oidc_issuers:read — OidcIssuersRead
      oidc_issuers:update — OidcIssuersUpdate
      oidc_issuers:regenerate_thumbprints — OidcIssuersRegenerateThumbprints
      oidc_issuers:create — OidcIssuersCreate
      oidc_issuers:delete — OidcIssuersDelete
      agent_pool:read — AgentPoolRead
      agent_pool:create — AgentPoolCreate
      agent_pool:update — AgentPoolUpdate
      agent_pool:delete — AgentPoolDelete
      agent_task:create — AgentTaskCreate
      organization_webhook:read — OrganizationWebhookRead
      organization_webhook:create — OrganizationWebhookCreate
      organization_webhook:update — OrganizationWebhookUpdate
      organization_webhook:delete — OrganizationWebhookDelete
      resources:index — ResourcesIndex
      resources:search — ResourcesSearch
      resources:dashboard — ResourcesDashboard
      templates:read — TemplatesRead
      templates_source:read — TemplatesSourceRead
      templates_source:update — TemplatesSourceUpdate
      templates_source:delete — TemplatesSourceDelete
      templates_source:create — TemplatesSourceCreate
      services:create — ServicesCreate
      services:read — ServicesRead
      services:write — ServicesWrite
      services:admin — ServicesAdmin
      deployments:read — DeploymentsRead
      deployments:pause — DeploymentsPause
      deployments:resume — DeploymentsResume
      deployments:read_usage — DeploymentsReadUsage
      organization_annotations:read — OrganizationAnnotationsRead
      organization_annotations:update — OrganizationAnnotationsUpdate
      policy_groups:create — InsightsPolicyGroupsCreate
      policy_groups:read — InsightsPolicyGroupsRead
      policy_groups:update — InsightsPolicyGroupsUpdate
      policy_groups:delete — InsightsPolicyGroupsDelete
      policy_pack:create — InsightsPolicyPackCreate
      policy_pack:read — InsightsPolicyPackRead
      policy_pack:update — InsightsPolicyPackUpdate
      policy_pack:delete — InsightsPolicyPackDelete
      policy_results:read — InsightsPolicyResultsRead
      environment:create — EnvironmentCreate
      environment:list — EnvironmentList
      environment:read — EnvironmentRead
      environment:open — EnvironmentOpen
      environment:write — EnvironmentWrite
      environment:delete — EnvironmentDelete
      environment_settings:read — EnvironmentSettingsRead
      environment_settings:update — EnvironmentSettingsUpdate
      environment:clone — EnvironmentClone
      environment:rotate — EnvironmentRotate
      environment:rotate_history — EnvironmentRotateHistory
      environment:list_deleted — EnvironmentListDeleted
      environment:restore_deleted — EnvironmentRestoreDeleted
      environment_yaml:open — EnvironmentYamlOpen
      environment_schedule:create — EnvironmentScheduleCreate
      environment_schedule:read — EnvironmentScheduleRead
      environment_schedule:update — EnvironmentScheduleUpdate
      environment_schedule:pause — EnvironmentSchedulePause
      environment_schedule:resume — EnvironmentScheduleResume
      environment_schedule:delete — EnvironmentScheduleDelete
      environment_tags:list — EnvironmentTagsList
      environment_tag:read — EnvironmentTagRead
      environment_tag:create — EnvironmentTagCreate
      environment_tag:update — EnvironmentTagUpdate
      environment_tag:delete — EnvironmentTagDelete
      environment_version:create — EnvironmentVersionCreate
      environment_version:read — EnvironmentVersionRead
      environment_version:update — EnvironmentVersionUpdate
      environment_version:delete — EnvironmentVersionDelete
      environment_version:retract — EnvironmentVersionRetract
      environment_version:open — EnvironmentVersionOpen
      environment_webhook:read — EnvironmentWebhookRead
      environment_webhook:create — EnvironmentWebhookCreate
      environment_webhook:update — EnvironmentWebhookUpdate
      environment_webhook:delete — EnvironmentWebhookDelete
      environment_access:read — EnvironmentAccessRead
      environment_access:update — EnvironmentAccessUpdate
      team:list — TeamList
      team:read — TeamRead
      team:create — TeamCreate
      team:update — TeamUpdate
      team:delete — TeamDelete
      team:create_token — TeamCreateToken
      team:list_tokens — TeamListTokens
      team:delete_token — TeamDeleteToken
      github_team:create — GithubTeamCreate
      insights_account:list — InsightsAccountList
      insights_account:read — InsightsAccountRead
      insights_account:create — InsightsAccountCreate
      insights_account:update — InsightsAccountUpdate
      insights_account:delete — InsightsAccountDelete
      insights_account:update_policy_results — InsightsAccountUpdatePolicyResults
      insights_account_access:read — InsightsAccountAccessRead
      insights_account_access:update — InsightsAccountAccessUpdate
      insights_account:scan — InsightsAccountScan
      insights_account_scan:read — InsightsAccountScanRead
      insights_account_scan:update — InsightsAccountScanUpdate
      insights_account_scan:cancel — InsightsAccountScanCancel
      insights_account_scan:pause — InsightsAccountScanPause
      insights_account_scan:resume — InsightsAccountScanResume
      insights_policy_queue:read — InsightsPolicyQueueRead
      insights_policy_evaluator:read — InsightsPolicyEvaluatorRead
      insights_policy_evaluator:delete — InsightsPolicyEvaluatorDelete
      insights_policy_evaluator:ensure — InsightsPolicyEvaluatorEnsure
      insights_policy_evaluator:update — InsightsPolicyEvaluatorUpdate
      ai_conversations:list_all — AIConversationsListAll
      ai_conversations:read — AIConversationsRead
      ai_conversations:create — AIConversationsCreate
      ai_conversations:update — AIConversationsUpdate
      role:create — RoleCreate
      role:read — RoleRead
      role:update — RoleUpdate
      role:delete — RoleDelete
      change_gate:create — ChangeGateCreate
      change_gate:update — ChangeGateUpdate
      change_gate:delete — ChangeGateDelete
    • metadata RbacScopeMetadata required
      Metadata associated with this scope.

      The infrastructure as code platform for any cloud.