Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cloudflare Provider
  3. API Docs
  4. AccessGroup
Cloudflare v6.3.1 published on Tuesday, Jun 17, 2025 by Pulumi
pulumi/pulumi-cloudflare

cloudflare.AccessGroup

Explore with Pulumi AI

cloudflare logo
Cloudflare v6.3.1 published on Tuesday, Jun 17, 2025 by Pulumi
pulumi/pulumi-cloudflare
    Deprecated: cloudflare.index/accessgroup.AccessGroup has been deprecated in favor of cloudflare.index/zerotrustaccessgroup.ZeroTrustAccessGroup

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

const exampleZeroTrustAccessGroup = new cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group", {
    includes: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    name: "Allow devs",
    zoneId: "zone_id",
    excludes: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    isDefault: true,
    requires: [{
        group: {
            id: "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
});

    import pulumi
import pulumi_cloudflare as cloudflare

example_zero_trust_access_group = cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group",
    includes=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    name="Allow devs",
    zone_id="zone_id",
    excludes=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }],
    is_default=True,
    requires=[{
        "group": {
            "id": "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
        },
    }])

    package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewZeroTrustAccessGroup(ctx, "example_zero_trust_access_group", &cloudflare.ZeroTrustAccessGroupArgs{
			Includes: cloudflare.ZeroTrustAccessGroupIncludeArray{
				&cloudflare.ZeroTrustAccessGroupIncludeArgs{
					Group: &cloudflare.ZeroTrustAccessGroupIncludeGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
			Name:   pulumi.String("Allow devs"),
			ZoneId: pulumi.String("zone_id"),
			Excludes: cloudflare.ZeroTrustAccessGroupExcludeArray{
				&cloudflare.ZeroTrustAccessGroupExcludeArgs{
					Group: &cloudflare.ZeroTrustAccessGroupExcludeGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
			IsDefault: pulumi.Bool(true),
			Requires: cloudflare.ZeroTrustAccessGroupRequireArray{
				&cloudflare.ZeroTrustAccessGroupRequireArgs{
					Group: &cloudflare.ZeroTrustAccessGroupRequireGroupArgs{
						Id: pulumi.String("aa0a4aab-672b-4bdb-bc33-a59f1130a11f"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    var exampleZeroTrustAccessGroup = new Cloudflare.ZeroTrustAccessGroup("example_zero_trust_access_group", new()
    {
        Includes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupIncludeGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
        Name = "Allow devs",
        ZoneId = "zone_id",
        Excludes = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupExcludeGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
        IsDefault = true,
        Requires = new[]
        {
            new Cloudflare.Inputs.ZeroTrustAccessGroupRequireArgs
            {
                Group = new Cloudflare.Inputs.ZeroTrustAccessGroupRequireGroupArgs
                {
                    Id = "aa0a4aab-672b-4bdb-bc33-a59f1130a11f",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.ZeroTrustAccessGroup;
import com.pulumi.cloudflare.ZeroTrustAccessGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupIncludeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupIncludeGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupExcludeArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupExcludeGroupArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupRequireArgs;
import com.pulumi.cloudflare.inputs.ZeroTrustAccessGroupRequireGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleZeroTrustAccessGroup = new ZeroTrustAccessGroup("exampleZeroTrustAccessGroup", ZeroTrustAccessGroupArgs.builder()
            .includes(ZeroTrustAccessGroupIncludeArgs.builder()
                .group(ZeroTrustAccessGroupIncludeGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .name("Allow devs")
            .zoneId("zone_id")
            .excludes(ZeroTrustAccessGroupExcludeArgs.builder()
                .group(ZeroTrustAccessGroupExcludeGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .isDefault(true)
            .requires(ZeroTrustAccessGroupRequireArgs.builder()
                .group(ZeroTrustAccessGroupRequireGroupArgs.builder()
                    .id("aa0a4aab-672b-4bdb-bc33-a59f1130a11f")
                    .build())
                .build())
            .build());

    }
}

    resources:
  exampleZeroTrustAccessGroup:
    type: cloudflare:ZeroTrustAccessGroup
    name: example_zero_trust_access_group
    properties:
      includes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      name: Allow devs
      zoneId: zone_id
      excludes:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f
      isDefault: true
      requires:
        - group:
            id: aa0a4aab-672b-4bdb-bc33-a59f1130a11f

    Create AccessGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AccessGroup(name: string, args: AccessGroupArgs, opts?: CustomResourceOptions);
    @overload
def AccessGroup(resource_name: str,
                args: AccessGroupArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def AccessGroup(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                account_id: Optional[str] = None,
                excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
                includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
                is_default: Optional[bool] = None,
                name: Optional[str] = None,
                requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
                zone_id: Optional[str] = None)
    func NewAccessGroup(ctx *Context, name string, args AccessGroupArgs, opts ...ResourceOption) (*AccessGroup, error)
    public AccessGroup(string name, AccessGroupArgs args, CustomResourceOptions? opts = null)
    public AccessGroup(String name, AccessGroupArgs args)
public AccessGroup(String name, AccessGroupArgs args, CustomResourceOptions options)

    type: cloudflare:AccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AccessGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AccessGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AccessGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AccessGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AccessGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    AccessGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AccessGroup resource accepts the following input properties:

    Includes List<AccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    Name string
    The name of the Access group.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    Excludes List<AccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    IsDefault bool
    Whether this is the default group
    Requires List<AccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    Includes []AccessGroupIncludeArgs
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    Name string
    The name of the Access group.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    Excludes []AccessGroupExcludeArgs
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    IsDefault bool
    Whether this is the default group
    Requires []AccessGroupRequireArgs
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes List<AccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name String
    The name of the Access group.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes List<AccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    isDefault Boolean
    Whether this is the default group
    requires List<AccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes AccessGroupInclude[]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name string
    The name of the Access group.
    accountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes AccessGroupExclude[]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    isDefault boolean
    Whether this is the default group
    requires AccessGroupRequire[]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes Sequence[AccessGroupIncludeArgs]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name str
    The name of the Access group.
    account_id str
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes Sequence[AccessGroupExcludeArgs]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    is_default bool
    Whether this is the default group
    requires Sequence[AccessGroupRequireArgs]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zone_id str
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    includes List<Property Map>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    name String
    The name of the Access group.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    excludes List<Property Map>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    isDefault Boolean
    Whether this is the default group
    requires List<Property Map>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AccessGroup resource produces the following output properties:

    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    CreatedAt string
    Id string
    The provider-assigned unique ID for this managed resource.
    UpdatedAt string
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String
    createdAt string
    id string
    The provider-assigned unique ID for this managed resource.
    updatedAt string
    created_at str
    id str
    The provider-assigned unique ID for this managed resource.
    updated_at str
    createdAt String
    id String
    The provider-assigned unique ID for this managed resource.
    updatedAt String

    Look up Existing AccessGroup Resource

    Get an existing AccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AccessGroupState, opts?: CustomResourceOptions): AccessGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        created_at: Optional[str] = None,
        excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
        includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
        is_default: Optional[bool] = None,
        name: Optional[str] = None,
        requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
        updated_at: Optional[str] = None,
        zone_id: Optional[str] = None) -> AccessGroup
    func GetAccessGroup(ctx *Context, name string, id IDInput, state *AccessGroupState, opts ...ResourceOption) (*AccessGroup, error)
    public static AccessGroup Get(string name, Input<string> id, AccessGroupState? state, CustomResourceOptions? opts = null)
    public static AccessGroup get(String name, Output<String> id, AccessGroupState state, CustomResourceOptions options)
    resources:  _:    type: cloudflare:AccessGroup    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    CreatedAt string
    Excludes List<AccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    Includes List<AccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    IsDefault bool
    Whether this is the default group
    Name string
    The name of the Access group.
    Requires List<AccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    UpdatedAt string
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    AccountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    CreatedAt string
    Excludes []AccessGroupExcludeArgs
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    Includes []AccessGroupIncludeArgs
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    IsDefault bool
    Whether this is the default group
    Name string
    The name of the Access group.
    Requires []AccessGroupRequireArgs
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    UpdatedAt string
    ZoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    createdAt String
    excludes List<AccessGroupExclude>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes List<AccessGroupInclude>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isDefault Boolean
    Whether this is the default group
    name String
    The name of the Access group.
    requires List<AccessGroupRequire>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updatedAt String
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId string
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    createdAt string
    excludes AccessGroupExclude[]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes AccessGroupInclude[]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isDefault boolean
    Whether this is the default group
    name string
    The name of the Access group.
    requires AccessGroupRequire[]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updatedAt string
    zoneId string
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    account_id str
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    created_at str
    excludes Sequence[AccessGroupExcludeArgs]
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes Sequence[AccessGroupIncludeArgs]
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    is_default bool
    Whether this is the default group
    name str
    The name of the Access group.
    requires Sequence[AccessGroupRequireArgs]
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updated_at str
    zone_id str
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
    accountId String
    The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.
    createdAt String
    excludes List<Property Map>
    Rules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
    includes List<Property Map>
    Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
    isDefault Boolean
    Whether this is the default group
    name String
    The name of the Access group.
    requires List<Property Map>
    Rules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
    updatedAt String
    zoneId String
    The Zone ID to use for this endpoint. Mutually exclusive with the Account ID.

    Supporting Types

    AccessGroupExclude, AccessGroupExcludeArgs

    AnyValidServiceToken AccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext AccessGroupExcludeAuthContext
    AuthMethod AccessGroupExcludeAuthMethod
    AzureAd AccessGroupExcludeAzureAd
    Certificate AccessGroupExcludeCertificate
    CommonName AccessGroupExcludeCommonName
    DevicePosture AccessGroupExcludeDevicePosture
    Email AccessGroupExcludeEmail
    EmailDomain AccessGroupExcludeEmailDomain
    EmailList AccessGroupExcludeEmailList
    Everyone AccessGroupExcludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation AccessGroupExcludeExternalEvaluation
    Geo AccessGroupExcludeGeo
    GithubOrganization AccessGroupExcludeGithubOrganization
    Group AccessGroupExcludeGroup
    Gsuite AccessGroupExcludeGsuite
    Ip AccessGroupExcludeIp
    IpList AccessGroupExcludeIpList
    LoginMethod AccessGroupExcludeLoginMethod
    Okta AccessGroupExcludeOkta
    Saml AccessGroupExcludeSaml
    ServiceToken AccessGroupExcludeServiceToken
    AnyValidServiceToken AccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext AccessGroupExcludeAuthContext
    AuthMethod AccessGroupExcludeAuthMethod
    AzureAd AccessGroupExcludeAzureAd
    Certificate AccessGroupExcludeCertificate
    CommonName AccessGroupExcludeCommonName
    DevicePosture AccessGroupExcludeDevicePosture
    Email AccessGroupExcludeEmail
    EmailDomain AccessGroupExcludeEmailDomain
    EmailList AccessGroupExcludeEmailList
    Everyone AccessGroupExcludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation AccessGroupExcludeExternalEvaluation
    Geo AccessGroupExcludeGeo
    GithubOrganization AccessGroupExcludeGithubOrganization
    Group AccessGroupExcludeGroup
    Gsuite AccessGroupExcludeGsuite
    Ip AccessGroupExcludeIp
    IpList AccessGroupExcludeIpList
    LoginMethod AccessGroupExcludeLoginMethod
    Okta AccessGroupExcludeOkta
    Saml AccessGroupExcludeSaml
    ServiceToken AccessGroupExcludeServiceToken
    anyValidServiceToken AccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext AccessGroupExcludeAuthContext
    authMethod AccessGroupExcludeAuthMethod
    azureAd AccessGroupExcludeAzureAd
    certificate AccessGroupExcludeCertificate
    commonName AccessGroupExcludeCommonName
    devicePosture AccessGroupExcludeDevicePosture
    email AccessGroupExcludeEmail
    emailDomain AccessGroupExcludeEmailDomain
    emailList AccessGroupExcludeEmailList
    everyone AccessGroupExcludeEveryone
    An empty object which matches on all users.
    externalEvaluation AccessGroupExcludeExternalEvaluation
    geo AccessGroupExcludeGeo
    githubOrganization AccessGroupExcludeGithubOrganization
    group AccessGroupExcludeGroup
    gsuite AccessGroupExcludeGsuite
    ip AccessGroupExcludeIp
    ipList AccessGroupExcludeIpList
    loginMethod AccessGroupExcludeLoginMethod
    okta AccessGroupExcludeOkta
    saml AccessGroupExcludeSaml
    serviceToken AccessGroupExcludeServiceToken
    anyValidServiceToken AccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext AccessGroupExcludeAuthContext
    authMethod AccessGroupExcludeAuthMethod
    azureAd AccessGroupExcludeAzureAd
    certificate AccessGroupExcludeCertificate
    commonName AccessGroupExcludeCommonName
    devicePosture AccessGroupExcludeDevicePosture
    email AccessGroupExcludeEmail
    emailDomain AccessGroupExcludeEmailDomain
    emailList AccessGroupExcludeEmailList
    everyone AccessGroupExcludeEveryone
    An empty object which matches on all users.
    externalEvaluation AccessGroupExcludeExternalEvaluation
    geo AccessGroupExcludeGeo
    githubOrganization AccessGroupExcludeGithubOrganization
    group AccessGroupExcludeGroup
    gsuite AccessGroupExcludeGsuite
    ip AccessGroupExcludeIp
    ipList AccessGroupExcludeIpList
    loginMethod AccessGroupExcludeLoginMethod
    okta AccessGroupExcludeOkta
    saml AccessGroupExcludeSaml
    serviceToken AccessGroupExcludeServiceToken
    any_valid_service_token AccessGroupExcludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context AccessGroupExcludeAuthContext
    auth_method AccessGroupExcludeAuthMethod
    azure_ad AccessGroupExcludeAzureAd
    certificate AccessGroupExcludeCertificate
    common_name AccessGroupExcludeCommonName
    device_posture AccessGroupExcludeDevicePosture
    email AccessGroupExcludeEmail
    email_domain AccessGroupExcludeEmailDomain
    email_list AccessGroupExcludeEmailList
    everyone AccessGroupExcludeEveryone
    An empty object which matches on all users.
    external_evaluation AccessGroupExcludeExternalEvaluation
    geo AccessGroupExcludeGeo
    github_organization AccessGroupExcludeGithubOrganization
    group AccessGroupExcludeGroup
    gsuite AccessGroupExcludeGsuite
    ip AccessGroupExcludeIp
    ip_list AccessGroupExcludeIpList
    login_method AccessGroupExcludeLoginMethod
    okta AccessGroupExcludeOkta
    saml AccessGroupExcludeSaml
    service_token AccessGroupExcludeServiceToken

    AccessGroupExcludeAuthContext, AccessGroupExcludeAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    AccessGroupExcludeAuthMethod, AccessGroupExcludeAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    AccessGroupExcludeAzureAd, AccessGroupExcludeAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    AccessGroupExcludeCommonName, AccessGroupExcludeCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    AccessGroupExcludeDevicePosture, AccessGroupExcludeDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    AccessGroupExcludeEmail, AccessGroupExcludeEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    AccessGroupExcludeEmailDomain, AccessGroupExcludeEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    AccessGroupExcludeEmailList, AccessGroupExcludeEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    AccessGroupExcludeExternalEvaluation, AccessGroupExcludeExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    AccessGroupExcludeGeo, AccessGroupExcludeGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    AccessGroupExcludeGithubOrganization, AccessGroupExcludeGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    AccessGroupExcludeGroup, AccessGroupExcludeGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    AccessGroupExcludeGsuite, AccessGroupExcludeGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    AccessGroupExcludeIp, AccessGroupExcludeIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    AccessGroupExcludeIpList, AccessGroupExcludeIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    AccessGroupExcludeLoginMethod, AccessGroupExcludeLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    AccessGroupExcludeOkta, AccessGroupExcludeOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    AccessGroupExcludeSaml, AccessGroupExcludeSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    AccessGroupExcludeServiceToken, AccessGroupExcludeServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    AccessGroupInclude, AccessGroupIncludeArgs

    AnyValidServiceToken AccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext AccessGroupIncludeAuthContext
    AuthMethod AccessGroupIncludeAuthMethod
    AzureAd AccessGroupIncludeAzureAd
    Certificate AccessGroupIncludeCertificate
    CommonName AccessGroupIncludeCommonName
    DevicePosture AccessGroupIncludeDevicePosture
    Email AccessGroupIncludeEmail
    EmailDomain AccessGroupIncludeEmailDomain
    EmailList AccessGroupIncludeEmailList
    Everyone AccessGroupIncludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation AccessGroupIncludeExternalEvaluation
    Geo AccessGroupIncludeGeo
    GithubOrganization AccessGroupIncludeGithubOrganization
    Group AccessGroupIncludeGroup
    Gsuite AccessGroupIncludeGsuite
    Ip AccessGroupIncludeIp
    IpList AccessGroupIncludeIpList
    LoginMethod AccessGroupIncludeLoginMethod
    Okta AccessGroupIncludeOkta
    Saml AccessGroupIncludeSaml
    ServiceToken AccessGroupIncludeServiceToken
    AnyValidServiceToken AccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext AccessGroupIncludeAuthContext
    AuthMethod AccessGroupIncludeAuthMethod
    AzureAd AccessGroupIncludeAzureAd
    Certificate AccessGroupIncludeCertificate
    CommonName AccessGroupIncludeCommonName
    DevicePosture AccessGroupIncludeDevicePosture
    Email AccessGroupIncludeEmail
    EmailDomain AccessGroupIncludeEmailDomain
    EmailList AccessGroupIncludeEmailList
    Everyone AccessGroupIncludeEveryone
    An empty object which matches on all users.
    ExternalEvaluation AccessGroupIncludeExternalEvaluation
    Geo AccessGroupIncludeGeo
    GithubOrganization AccessGroupIncludeGithubOrganization
    Group AccessGroupIncludeGroup
    Gsuite AccessGroupIncludeGsuite
    Ip AccessGroupIncludeIp
    IpList AccessGroupIncludeIpList
    LoginMethod AccessGroupIncludeLoginMethod
    Okta AccessGroupIncludeOkta
    Saml AccessGroupIncludeSaml
    ServiceToken AccessGroupIncludeServiceToken
    anyValidServiceToken AccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext AccessGroupIncludeAuthContext
    authMethod AccessGroupIncludeAuthMethod
    azureAd AccessGroupIncludeAzureAd
    certificate AccessGroupIncludeCertificate
    commonName AccessGroupIncludeCommonName
    devicePosture AccessGroupIncludeDevicePosture
    email AccessGroupIncludeEmail
    emailDomain AccessGroupIncludeEmailDomain
    emailList AccessGroupIncludeEmailList
    everyone AccessGroupIncludeEveryone
    An empty object which matches on all users.
    externalEvaluation AccessGroupIncludeExternalEvaluation
    geo AccessGroupIncludeGeo
    githubOrganization AccessGroupIncludeGithubOrganization
    group AccessGroupIncludeGroup
    gsuite AccessGroupIncludeGsuite
    ip AccessGroupIncludeIp
    ipList AccessGroupIncludeIpList
    loginMethod AccessGroupIncludeLoginMethod
    okta AccessGroupIncludeOkta
    saml AccessGroupIncludeSaml
    serviceToken AccessGroupIncludeServiceToken
    anyValidServiceToken AccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext AccessGroupIncludeAuthContext
    authMethod AccessGroupIncludeAuthMethod
    azureAd AccessGroupIncludeAzureAd
    certificate AccessGroupIncludeCertificate
    commonName AccessGroupIncludeCommonName
    devicePosture AccessGroupIncludeDevicePosture
    email AccessGroupIncludeEmail
    emailDomain AccessGroupIncludeEmailDomain
    emailList AccessGroupIncludeEmailList
    everyone AccessGroupIncludeEveryone
    An empty object which matches on all users.
    externalEvaluation AccessGroupIncludeExternalEvaluation
    geo AccessGroupIncludeGeo
    githubOrganization AccessGroupIncludeGithubOrganization
    group AccessGroupIncludeGroup
    gsuite AccessGroupIncludeGsuite
    ip AccessGroupIncludeIp
    ipList AccessGroupIncludeIpList
    loginMethod AccessGroupIncludeLoginMethod
    okta AccessGroupIncludeOkta
    saml AccessGroupIncludeSaml
    serviceToken AccessGroupIncludeServiceToken
    any_valid_service_token AccessGroupIncludeAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context AccessGroupIncludeAuthContext
    auth_method AccessGroupIncludeAuthMethod
    azure_ad AccessGroupIncludeAzureAd
    certificate AccessGroupIncludeCertificate
    common_name AccessGroupIncludeCommonName
    device_posture AccessGroupIncludeDevicePosture
    email AccessGroupIncludeEmail
    email_domain AccessGroupIncludeEmailDomain
    email_list AccessGroupIncludeEmailList
    everyone AccessGroupIncludeEveryone
    An empty object which matches on all users.
    external_evaluation AccessGroupIncludeExternalEvaluation
    geo AccessGroupIncludeGeo
    github_organization AccessGroupIncludeGithubOrganization
    group AccessGroupIncludeGroup
    gsuite AccessGroupIncludeGsuite
    ip AccessGroupIncludeIp
    ip_list AccessGroupIncludeIpList
    login_method AccessGroupIncludeLoginMethod
    okta AccessGroupIncludeOkta
    saml AccessGroupIncludeSaml
    service_token AccessGroupIncludeServiceToken

    AccessGroupIncludeAuthContext, AccessGroupIncludeAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    AccessGroupIncludeAuthMethod, AccessGroupIncludeAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    AccessGroupIncludeAzureAd, AccessGroupIncludeAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    AccessGroupIncludeCommonName, AccessGroupIncludeCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    AccessGroupIncludeDevicePosture, AccessGroupIncludeDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    AccessGroupIncludeEmail, AccessGroupIncludeEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    AccessGroupIncludeEmailDomain, AccessGroupIncludeEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    AccessGroupIncludeEmailList, AccessGroupIncludeEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    AccessGroupIncludeExternalEvaluation, AccessGroupIncludeExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    AccessGroupIncludeGeo, AccessGroupIncludeGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    AccessGroupIncludeGithubOrganization, AccessGroupIncludeGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    AccessGroupIncludeGroup, AccessGroupIncludeGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    AccessGroupIncludeGsuite, AccessGroupIncludeGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    AccessGroupIncludeIp, AccessGroupIncludeIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    AccessGroupIncludeIpList, AccessGroupIncludeIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    AccessGroupIncludeLoginMethod, AccessGroupIncludeLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    AccessGroupIncludeOkta, AccessGroupIncludeOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    AccessGroupIncludeSaml, AccessGroupIncludeSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    AccessGroupIncludeServiceToken, AccessGroupIncludeServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    AccessGroupRequire, AccessGroupRequireArgs

    AnyValidServiceToken AccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext AccessGroupRequireAuthContext
    AuthMethod AccessGroupRequireAuthMethod
    AzureAd AccessGroupRequireAzureAd
    Certificate AccessGroupRequireCertificate
    CommonName AccessGroupRequireCommonName
    DevicePosture AccessGroupRequireDevicePosture
    Email AccessGroupRequireEmail
    EmailDomain AccessGroupRequireEmailDomain
    EmailList AccessGroupRequireEmailList
    Everyone AccessGroupRequireEveryone
    An empty object which matches on all users.
    ExternalEvaluation AccessGroupRequireExternalEvaluation
    Geo AccessGroupRequireGeo
    GithubOrganization AccessGroupRequireGithubOrganization
    Group AccessGroupRequireGroup
    Gsuite AccessGroupRequireGsuite
    Ip AccessGroupRequireIp
    IpList AccessGroupRequireIpList
    LoginMethod AccessGroupRequireLoginMethod
    Okta AccessGroupRequireOkta
    Saml AccessGroupRequireSaml
    ServiceToken AccessGroupRequireServiceToken
    AnyValidServiceToken AccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    AuthContext AccessGroupRequireAuthContext
    AuthMethod AccessGroupRequireAuthMethod
    AzureAd AccessGroupRequireAzureAd
    Certificate AccessGroupRequireCertificate
    CommonName AccessGroupRequireCommonName
    DevicePosture AccessGroupRequireDevicePosture
    Email AccessGroupRequireEmail
    EmailDomain AccessGroupRequireEmailDomain
    EmailList AccessGroupRequireEmailList
    Everyone AccessGroupRequireEveryone
    An empty object which matches on all users.
    ExternalEvaluation AccessGroupRequireExternalEvaluation
    Geo AccessGroupRequireGeo
    GithubOrganization AccessGroupRequireGithubOrganization
    Group AccessGroupRequireGroup
    Gsuite AccessGroupRequireGsuite
    Ip AccessGroupRequireIp
    IpList AccessGroupRequireIpList
    LoginMethod AccessGroupRequireLoginMethod
    Okta AccessGroupRequireOkta
    Saml AccessGroupRequireSaml
    ServiceToken AccessGroupRequireServiceToken
    anyValidServiceToken AccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext AccessGroupRequireAuthContext
    authMethod AccessGroupRequireAuthMethod
    azureAd AccessGroupRequireAzureAd
    certificate AccessGroupRequireCertificate
    commonName AccessGroupRequireCommonName
    devicePosture AccessGroupRequireDevicePosture
    email AccessGroupRequireEmail
    emailDomain AccessGroupRequireEmailDomain
    emailList AccessGroupRequireEmailList
    everyone AccessGroupRequireEveryone
    An empty object which matches on all users.
    externalEvaluation AccessGroupRequireExternalEvaluation
    geo AccessGroupRequireGeo
    githubOrganization AccessGroupRequireGithubOrganization
    group AccessGroupRequireGroup
    gsuite AccessGroupRequireGsuite
    ip AccessGroupRequireIp
    ipList AccessGroupRequireIpList
    loginMethod AccessGroupRequireLoginMethod
    okta AccessGroupRequireOkta
    saml AccessGroupRequireSaml
    serviceToken AccessGroupRequireServiceToken
    anyValidServiceToken AccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    authContext AccessGroupRequireAuthContext
    authMethod AccessGroupRequireAuthMethod
    azureAd AccessGroupRequireAzureAd
    certificate AccessGroupRequireCertificate
    commonName AccessGroupRequireCommonName
    devicePosture AccessGroupRequireDevicePosture
    email AccessGroupRequireEmail
    emailDomain AccessGroupRequireEmailDomain
    emailList AccessGroupRequireEmailList
    everyone AccessGroupRequireEveryone
    An empty object which matches on all users.
    externalEvaluation AccessGroupRequireExternalEvaluation
    geo AccessGroupRequireGeo
    githubOrganization AccessGroupRequireGithubOrganization
    group AccessGroupRequireGroup
    gsuite AccessGroupRequireGsuite
    ip AccessGroupRequireIp
    ipList AccessGroupRequireIpList
    loginMethod AccessGroupRequireLoginMethod
    okta AccessGroupRequireOkta
    saml AccessGroupRequireSaml
    serviceToken AccessGroupRequireServiceToken
    any_valid_service_token AccessGroupRequireAnyValidServiceToken
    An empty object which matches on all service tokens.
    auth_context AccessGroupRequireAuthContext
    auth_method AccessGroupRequireAuthMethod
    azure_ad AccessGroupRequireAzureAd
    certificate AccessGroupRequireCertificate
    common_name AccessGroupRequireCommonName
    device_posture AccessGroupRequireDevicePosture
    email AccessGroupRequireEmail
    email_domain AccessGroupRequireEmailDomain
    email_list AccessGroupRequireEmailList
    everyone AccessGroupRequireEveryone
    An empty object which matches on all users.
    external_evaluation AccessGroupRequireExternalEvaluation
    geo AccessGroupRequireGeo
    github_organization AccessGroupRequireGithubOrganization
    group AccessGroupRequireGroup
    gsuite AccessGroupRequireGsuite
    ip AccessGroupRequireIp
    ip_list AccessGroupRequireIpList
    login_method AccessGroupRequireLoginMethod
    okta AccessGroupRequireOkta
    saml AccessGroupRequireSaml
    service_token AccessGroupRequireServiceToken

    AccessGroupRequireAuthContext, AccessGroupRequireAuthContextArgs

    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    AcId string
    The ACID of an Authentication context.
    Id string
    The ID of an Authentication context.
    IdentityProviderId string
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.
    acId string
    The ACID of an Authentication context.
    id string
    The ID of an Authentication context.
    identityProviderId string
    The ID of your Azure identity provider.
    ac_id str
    The ACID of an Authentication context.
    id str
    The ID of an Authentication context.
    identity_provider_id str
    The ID of your Azure identity provider.
    acId String
    The ACID of an Authentication context.
    id String
    The ID of an Authentication context.
    identityProviderId String
    The ID of your Azure identity provider.

    AccessGroupRequireAuthMethod, AccessGroupRequireAuthMethodArgs

    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    AuthMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod string
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    auth_method str
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.
    authMethod String
    The type of authentication method https://datatracker.ietf.org/doc/html/rfc8176#section-2.

    AccessGroupRequireAzureAd, AccessGroupRequireAzureAdArgs

    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    Id string
    The ID of an Azure group.
    IdentityProviderId string
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.
    id string
    The ID of an Azure group.
    identityProviderId string
    The ID of your Azure identity provider.
    id str
    The ID of an Azure group.
    identity_provider_id str
    The ID of your Azure identity provider.
    id String
    The ID of an Azure group.
    identityProviderId String
    The ID of your Azure identity provider.

    AccessGroupRequireCommonName, AccessGroupRequireCommonNameArgs

    CommonName string
    The common name to match.
    CommonName string
    The common name to match.
    commonName String
    The common name to match.
    commonName string
    The common name to match.
    common_name str
    The common name to match.
    commonName String
    The common name to match.

    AccessGroupRequireDevicePosture, AccessGroupRequireDevicePostureArgs

    IntegrationUid string
    The ID of a device posture integration.
    IntegrationUid string
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.
    integrationUid string
    The ID of a device posture integration.
    integration_uid str
    The ID of a device posture integration.
    integrationUid String
    The ID of a device posture integration.

    AccessGroupRequireEmail, AccessGroupRequireEmailArgs

    Email string
    The email of the user.
    Email string
    The email of the user.
    email String
    The email of the user.
    email string
    The email of the user.
    email str
    The email of the user.
    email String
    The email of the user.

    AccessGroupRequireEmailDomain, AccessGroupRequireEmailDomainArgs

    Domain string
    The email domain to match.
    Domain string
    The email domain to match.
    domain String
    The email domain to match.
    domain string
    The email domain to match.
    domain str
    The email domain to match.
    domain String
    The email domain to match.

    AccessGroupRequireEmailList, AccessGroupRequireEmailListArgs

    Id string
    The ID of a previously created email list.
    Id string
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.
    id string
    The ID of a previously created email list.
    id str
    The ID of a previously created email list.
    id String
    The ID of a previously created email list.

    AccessGroupRequireExternalEvaluation, AccessGroupRequireExternalEvaluationArgs

    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    EvaluateUrl string
    The API endpoint containing your business logic.
    KeysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl string
    The API endpoint containing your business logic.
    keysUrl string
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluate_url str
    The API endpoint containing your business logic.
    keys_url str
    The API endpoint containing the key that Access uses to verify that the response came from your API.
    evaluateUrl String
    The API endpoint containing your business logic.
    keysUrl String
    The API endpoint containing the key that Access uses to verify that the response came from your API.

    AccessGroupRequireGeo, AccessGroupRequireGeoArgs

    CountryCode string
    The country code that should be matched.
    CountryCode string
    The country code that should be matched.
    countryCode String
    The country code that should be matched.
    countryCode string
    The country code that should be matched.
    country_code str
    The country code that should be matched.
    countryCode String
    The country code that should be matched.

    AccessGroupRequireGithubOrganization, AccessGroupRequireGithubOrganizationArgs

    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    IdentityProviderId string
    The ID of your Github identity provider.
    Name string
    The name of the organization.
    Team string
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team
    identityProviderId string
    The ID of your Github identity provider.
    name string
    The name of the organization.
    team string
    The name of the team
    identity_provider_id str
    The ID of your Github identity provider.
    name str
    The name of the organization.
    team str
    The name of the team
    identityProviderId String
    The ID of your Github identity provider.
    name String
    The name of the organization.
    team String
    The name of the team

    AccessGroupRequireGroup, AccessGroupRequireGroupArgs

    Id string
    The ID of a previously created Access group.
    Id string
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.
    id string
    The ID of a previously created Access group.
    id str
    The ID of a previously created Access group.
    id String
    The ID of a previously created Access group.

    AccessGroupRequireGsuite, AccessGroupRequireGsuiteArgs

    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    Email string
    The email of the Google Workspace group.
    IdentityProviderId string
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.
    email string
    The email of the Google Workspace group.
    identityProviderId string
    The ID of your Google Workspace identity provider.
    email str
    The email of the Google Workspace group.
    identity_provider_id str
    The ID of your Google Workspace identity provider.
    email String
    The email of the Google Workspace group.
    identityProviderId String
    The ID of your Google Workspace identity provider.

    AccessGroupRequireIp, AccessGroupRequireIpArgs

    Ip string
    An IPv4 or IPv6 CIDR block.
    Ip string
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.
    ip string
    An IPv4 or IPv6 CIDR block.
    ip str
    An IPv4 or IPv6 CIDR block.
    ip String
    An IPv4 or IPv6 CIDR block.

    AccessGroupRequireIpList, AccessGroupRequireIpListArgs

    Id string
    The ID of a previously created IP list.
    Id string
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.
    id string
    The ID of a previously created IP list.
    id str
    The ID of a previously created IP list.
    id String
    The ID of a previously created IP list.

    AccessGroupRequireLoginMethod, AccessGroupRequireLoginMethodArgs

    Id string
    The ID of an identity provider.
    Id string
    The ID of an identity provider.
    id String
    The ID of an identity provider.
    id string
    The ID of an identity provider.
    id str
    The ID of an identity provider.
    id String
    The ID of an identity provider.

    AccessGroupRequireOkta, AccessGroupRequireOktaArgs

    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    IdentityProviderId string
    The ID of your Okta identity provider.
    Name string
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.
    identityProviderId string
    The ID of your Okta identity provider.
    name string
    The name of the Okta group.
    identity_provider_id str
    The ID of your Okta identity provider.
    name str
    The name of the Okta group.
    identityProviderId String
    The ID of your Okta identity provider.
    name String
    The name of the Okta group.

    AccessGroupRequireSaml, AccessGroupRequireSamlArgs

    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    AttributeName string
    The name of the SAML attribute.
    AttributeValue string
    The SAML attribute value to look for.
    IdentityProviderId string
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.
    attributeName string
    The name of the SAML attribute.
    attributeValue string
    The SAML attribute value to look for.
    identityProviderId string
    The ID of your SAML identity provider.
    attribute_name str
    The name of the SAML attribute.
    attribute_value str
    The SAML attribute value to look for.
    identity_provider_id str
    The ID of your SAML identity provider.
    attributeName String
    The name of the SAML attribute.
    attributeValue String
    The SAML attribute value to look for.
    identityProviderId String
    The ID of your SAML identity provider.

    AccessGroupRequireServiceToken, AccessGroupRequireServiceTokenArgs

    TokenId string
    The ID of a Service Token.
    TokenId string
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.
    tokenId string
    The ID of a Service Token.
    token_id str
    The ID of a Service Token.
    tokenId String
    The ID of a Service Token.

    Import

    $ pulumi import cloudflare:index/accessGroup:AccessGroup example '<{accounts|zones}/{account_id|zone_id}>/<group_id>'

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Cloudflare pulumi/pulumi-cloudflare
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the cloudflare Terraform Provider.
    cloudflare logo
    Cloudflare v6.3.1 published on Tuesday, Jun 17, 2025 by Pulumi
    pulumi/pulumi-cloudflare