1. Packages
  2. Packages
  3. Athenz Provider
  4. API Docs
  5. GroupMeta
Viewing docs for athenz 1.0.50
published on Monday, Apr 13, 2026 by athenz
Schema (JSON)
athenz/terraform-provider-athenz

athenz.GroupMeta

Viewing docs for athenz 1.0.50
published on Monday, Apr 13, 2026 by athenz
Schema (JSON)
athenz/terraform-provider-athenz

    Example Usage

    IMPORTANT NOTE: please do NOT use json syntax but only hcl syntax

    Create GroupMeta Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GroupMeta(name: string, args: GroupMetaArgs, opts?: CustomResourceOptions);
    @overload
def GroupMeta(resource_name: str,
              args: GroupMetaArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def GroupMeta(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              domain: Optional[str] = None,
              resource_state: Optional[float] = None,
              review_enabled: Optional[bool] = None,
              audit_ref: Optional[str] = None,
              audit_enabled: Optional[bool] = None,
              max_members: Optional[float] = None,
              name: Optional[str] = None,
              notify_details: Optional[str] = None,
              notify_roles: Optional[str] = None,
              delete_protection: Optional[bool] = None,
              principal_domain_filter: Optional[str] = None,
              group_meta_id: Optional[str] = None,
              self_renew: Optional[bool] = None,
              self_renew_mins: Optional[float] = None,
              self_serve: Optional[bool] = None,
              service_expiry_days: Optional[float] = None,
              tags: Optional[Mapping[str, str]] = None,
              user_authority_expiration: Optional[str] = None,
              user_authority_filter: Optional[str] = None,
              user_expiry_days: Optional[float] = None)
    func NewGroupMeta(ctx *Context, name string, args GroupMetaArgs, opts ...ResourceOption) (*GroupMeta, error)
    public GroupMeta(string name, GroupMetaArgs args, CustomResourceOptions? opts = null)
    public GroupMeta(String name, GroupMetaArgs args)
public GroupMeta(String name, GroupMetaArgs args, CustomResourceOptions options)

    type: athenz:GroupMeta
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "athenz_groupmeta" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args GroupMetaArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GroupMetaArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GroupMetaArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GroupMetaArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GroupMetaArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var groupMetaResource = new Athenz.GroupMeta("groupMetaResource", new()
{
    Domain = "string",
    ResourceState = 0,
    ReviewEnabled = false,
    AuditRef = "string",
    AuditEnabled = false,
    MaxMembers = 0,
    Name = "string",
    NotifyDetails = "string",
    NotifyRoles = "string",
    DeleteProtection = false,
    PrincipalDomainFilter = "string",
    GroupMetaId = "string",
    SelfRenew = false,
    SelfRenewMins = 0,
    SelfServe = false,
    ServiceExpiryDays = 0,
    Tags = 
    {
        { "string", "string" },
    },
    UserAuthorityExpiration = "string",
    UserAuthorityFilter = "string",
    UserExpiryDays = 0,
});

    example, err := athenz.NewGroupMeta(ctx, "groupMetaResource", &athenz.GroupMetaArgs{
	Domain:                pulumi.String("string"),
	ResourceState:         pulumi.Float64(0),
	ReviewEnabled:         pulumi.Bool(false),
	AuditRef:              pulumi.String("string"),
	AuditEnabled:          pulumi.Bool(false),
	MaxMembers:            pulumi.Float64(0),
	Name:                  pulumi.String("string"),
	NotifyDetails:         pulumi.String("string"),
	NotifyRoles:           pulumi.String("string"),
	DeleteProtection:      pulumi.Bool(false),
	PrincipalDomainFilter: pulumi.String("string"),
	GroupMetaId:           pulumi.String("string"),
	SelfRenew:             pulumi.Bool(false),
	SelfRenewMins:         pulumi.Float64(0),
	SelfServe:             pulumi.Bool(false),
	ServiceExpiryDays:     pulumi.Float64(0),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	UserAuthorityExpiration: pulumi.String("string"),
	UserAuthorityFilter:     pulumi.String("string"),
	UserExpiryDays:          pulumi.Float64(0),
})

    resource "athenz_groupmeta" "groupMetaResource" {
  domain                  = "string"
  resource_state          = 0
  review_enabled          = false
  audit_ref               = "string"
  audit_enabled           = false
  max_members             = 0
  name                    = "string"
  notify_details          = "string"
  notify_roles            = "string"
  delete_protection       = false
  principal_domain_filter = "string"
  group_meta_id           = "string"
  self_renew              = false
  self_renew_mins         = 0
  self_serve              = false
  service_expiry_days     = 0
  tags = {
    "string" = "string"
  }
  user_authority_expiration = "string"
  user_authority_filter     = "string"
  user_expiry_days          = 0
}

    var groupMetaResource = new GroupMeta("groupMetaResource", GroupMetaArgs.builder()
    .domain("string")
    .resourceState(0.0)
    .reviewEnabled(false)
    .auditRef("string")
    .auditEnabled(false)
    .maxMembers(0.0)
    .name("string")
    .notifyDetails("string")
    .notifyRoles("string")
    .deleteProtection(false)
    .principalDomainFilter("string")
    .groupMetaId("string")
    .selfRenew(false)
    .selfRenewMins(0.0)
    .selfServe(false)
    .serviceExpiryDays(0.0)
    .tags(Map.of("string", "string"))
    .userAuthorityExpiration("string")
    .userAuthorityFilter("string")
    .userExpiryDays(0.0)
    .build());

    group_meta_resource = athenz.GroupMeta("groupMetaResource",
    domain="string",
    resource_state=float(0),
    review_enabled=False,
    audit_ref="string",
    audit_enabled=False,
    max_members=float(0),
    name="string",
    notify_details="string",
    notify_roles="string",
    delete_protection=False,
    principal_domain_filter="string",
    group_meta_id="string",
    self_renew=False,
    self_renew_mins=float(0),
    self_serve=False,
    service_expiry_days=float(0),
    tags={
        "string": "string",
    },
    user_authority_expiration="string",
    user_authority_filter="string",
    user_expiry_days=float(0))

    const groupMetaResource = new athenz.GroupMeta("groupMetaResource", {
    domain: "string",
    resourceState: 0,
    reviewEnabled: false,
    auditRef: "string",
    auditEnabled: false,
    maxMembers: 0,
    name: "string",
    notifyDetails: "string",
    notifyRoles: "string",
    deleteProtection: false,
    principalDomainFilter: "string",
    groupMetaId: "string",
    selfRenew: false,
    selfRenewMins: 0,
    selfServe: false,
    serviceExpiryDays: 0,
    tags: {
        string: "string",
    },
    userAuthorityExpiration: "string",
    userAuthorityFilter: "string",
    userExpiryDays: 0,
});

    type: athenz:GroupMeta
properties:
    auditEnabled: false
    auditRef: string
    deleteProtection: false
    domain: string
    groupMetaId: string
    maxMembers: 0
    name: string
    notifyDetails: string
    notifyRoles: string
    principalDomainFilter: string
    resourceState: 0
    reviewEnabled: false
    selfRenew: false
    selfRenewMins: 0
    selfServe: false
    serviceExpiryDays: 0
    tags:
        string: string
    userAuthorityExpiration: string
    userAuthorityFilter: string
    userExpiryDays: 0

    GroupMeta Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GroupMeta resource accepts the following input properties:

    Domain string
    name of the domain
    AuditEnabled bool
    audit enabled flag for the group
    AuditRef string
    string containing audit specification or ticket number.
    DeleteProtection bool
    If true, ask for delete confirmation in audit and review enabled groups
    GroupMetaId string
    The ID of this resource.
    MaxMembers double
    maximum number of members allowed in the group
    Name string
    Name of the group
    NotifyDetails string
    Set of instructions included in notifications for review and audit enabled groups
    NotifyRoles string
    comma seperated list of roles whose members should be notified for member review/approval
    PrincipalDomainFilter string
    comma seperated list of domains to enforce principal membership
    ResourceState double
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    ReviewEnabled bool
    Flag indicates whether group updates require another review and approval
    SelfRenew bool
    Flag indicates whether to allow expired members to renew their membership
    SelfRenewMins double
    Number of minutes members can renew their membership if self review option is enabled
    SelfServe bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    ServiceExpiryDays double
    all services in the group will have specified max expiry days
    Tags Dictionary<string, string>
    map of group tags
    UserAuthorityExpiration string
    expiration enforced by a user authority configured attribute
    UserAuthorityFilter string
    membership filtered based on user authority configured attributes
    UserExpiryDays double
    all user members in the group will have specified max expiry days
    Domain string
    name of the domain
    AuditEnabled bool
    audit enabled flag for the group
    AuditRef string
    string containing audit specification or ticket number.
    DeleteProtection bool
    If true, ask for delete confirmation in audit and review enabled groups
    GroupMetaId string
    The ID of this resource.
    MaxMembers float64
    maximum number of members allowed in the group
    Name string
    Name of the group
    NotifyDetails string
    Set of instructions included in notifications for review and audit enabled groups
    NotifyRoles string
    comma seperated list of roles whose members should be notified for member review/approval
    PrincipalDomainFilter string
    comma seperated list of domains to enforce principal membership
    ResourceState float64
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    ReviewEnabled bool
    Flag indicates whether group updates require another review and approval
    SelfRenew bool
    Flag indicates whether to allow expired members to renew their membership
    SelfRenewMins float64
    Number of minutes members can renew their membership if self review option is enabled
    SelfServe bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    ServiceExpiryDays float64
    all services in the group will have specified max expiry days
    Tags map[string]string
    map of group tags
    UserAuthorityExpiration string
    expiration enforced by a user authority configured attribute
    UserAuthorityFilter string
    membership filtered based on user authority configured attributes
    UserExpiryDays float64
    all user members in the group will have specified max expiry days
    domain string
    name of the domain
    audit_enabled bool
    audit enabled flag for the group
    audit_ref string
    string containing audit specification or ticket number.
    delete_protection bool
    If true, ask for delete confirmation in audit and review enabled groups
    group_meta_id string
    The ID of this resource.
    max_members number
    maximum number of members allowed in the group
    name string
    Name of the group
    notify_details string
    Set of instructions included in notifications for review and audit enabled groups
    notify_roles string
    comma seperated list of roles whose members should be notified for member review/approval
    principal_domain_filter string
    comma seperated list of domains to enforce principal membership
    resource_state number
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    review_enabled bool
    Flag indicates whether group updates require another review and approval
    self_renew bool
    Flag indicates whether to allow expired members to renew their membership
    self_renew_mins number
    Number of minutes members can renew their membership if self review option is enabled
    self_serve bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    service_expiry_days number
    all services in the group will have specified max expiry days
    tags map(string)
    map of group tags
    user_authority_expiration string
    expiration enforced by a user authority configured attribute
    user_authority_filter string
    membership filtered based on user authority configured attributes
    user_expiry_days number
    all user members in the group will have specified max expiry days
    domain String
    name of the domain
    auditEnabled Boolean
    audit enabled flag for the group
    auditRef String
    string containing audit specification or ticket number.
    deleteProtection Boolean
    If true, ask for delete confirmation in audit and review enabled groups
    groupMetaId String
    The ID of this resource.
    maxMembers Double
    maximum number of members allowed in the group
    name String
    Name of the group
    notifyDetails String
    Set of instructions included in notifications for review and audit enabled groups
    notifyRoles String
    comma seperated list of roles whose members should be notified for member review/approval
    principalDomainFilter String
    comma seperated list of domains to enforce principal membership
    resourceState Double
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    reviewEnabled Boolean
    Flag indicates whether group updates require another review and approval
    selfRenew Boolean
    Flag indicates whether to allow expired members to renew their membership
    selfRenewMins Double
    Number of minutes members can renew their membership if self review option is enabled
    selfServe Boolean
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    serviceExpiryDays Double
    all services in the group will have specified max expiry days
    tags Map<String,String>
    map of group tags
    userAuthorityExpiration String
    expiration enforced by a user authority configured attribute
    userAuthorityFilter String
    membership filtered based on user authority configured attributes
    userExpiryDays Double
    all user members in the group will have specified max expiry days
    domain string
    name of the domain
    auditEnabled boolean
    audit enabled flag for the group
    auditRef string
    string containing audit specification or ticket number.
    deleteProtection boolean
    If true, ask for delete confirmation in audit and review enabled groups
    groupMetaId string
    The ID of this resource.
    maxMembers number
    maximum number of members allowed in the group
    name string
    Name of the group
    notifyDetails string
    Set of instructions included in notifications for review and audit enabled groups
    notifyRoles string
    comma seperated list of roles whose members should be notified for member review/approval
    principalDomainFilter string
    comma seperated list of domains to enforce principal membership
    resourceState number
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    reviewEnabled boolean
    Flag indicates whether group updates require another review and approval
    selfRenew boolean
    Flag indicates whether to allow expired members to renew their membership
    selfRenewMins number
    Number of minutes members can renew their membership if self review option is enabled
    selfServe boolean
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    serviceExpiryDays number
    all services in the group will have specified max expiry days
    tags {[key: string]: string}
    map of group tags
    userAuthorityExpiration string
    expiration enforced by a user authority configured attribute
    userAuthorityFilter string
    membership filtered based on user authority configured attributes
    userExpiryDays number
    all user members in the group will have specified max expiry days
    domain str
    name of the domain
    audit_enabled bool
    audit enabled flag for the group
    audit_ref str
    string containing audit specification or ticket number.
    delete_protection bool
    If true, ask for delete confirmation in audit and review enabled groups
    group_meta_id str
    The ID of this resource.
    max_members float
    maximum number of members allowed in the group
    name str
    Name of the group
    notify_details str
    Set of instructions included in notifications for review and audit enabled groups
    notify_roles str
    comma seperated list of roles whose members should be notified for member review/approval
    principal_domain_filter str
    comma seperated list of domains to enforce principal membership
    resource_state float
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    review_enabled bool
    Flag indicates whether group updates require another review and approval
    self_renew bool
    Flag indicates whether to allow expired members to renew their membership
    self_renew_mins float
    Number of minutes members can renew their membership if self review option is enabled
    self_serve bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    service_expiry_days float
    all services in the group will have specified max expiry days
    tags Mapping[str, str]
    map of group tags
    user_authority_expiration str
    expiration enforced by a user authority configured attribute
    user_authority_filter str
    membership filtered based on user authority configured attributes
    user_expiry_days float
    all user members in the group will have specified max expiry days
    domain String
    name of the domain
    auditEnabled Boolean
    audit enabled flag for the group
    auditRef String
    string containing audit specification or ticket number.
    deleteProtection Boolean
    If true, ask for delete confirmation in audit and review enabled groups
    groupMetaId String
    The ID of this resource.
    maxMembers Number
    maximum number of members allowed in the group
    name String
    Name of the group
    notifyDetails String
    Set of instructions included in notifications for review and audit enabled groups
    notifyRoles String
    comma seperated list of roles whose members should be notified for member review/approval
    principalDomainFilter String
    comma seperated list of domains to enforce principal membership
    resourceState Number
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    reviewEnabled Boolean
    Flag indicates whether group updates require another review and approval
    selfRenew Boolean
    Flag indicates whether to allow expired members to renew their membership
    selfRenewMins Number
    Number of minutes members can renew their membership if self review option is enabled
    selfServe Boolean
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    serviceExpiryDays Number
    all services in the group will have specified max expiry days
    tags Map<String>
    map of group tags
    userAuthorityExpiration String
    expiration enforced by a user authority configured attribute
    userAuthorityFilter String
    membership filtered based on user authority configured attributes
    userExpiryDays Number
    all user members in the group will have specified max expiry days

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GroupMeta resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GroupMeta Resource

    Get an existing GroupMeta resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GroupMetaState, opts?: CustomResourceOptions): GroupMeta
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        audit_enabled: Optional[bool] = None,
        audit_ref: Optional[str] = None,
        delete_protection: Optional[bool] = None,
        domain: Optional[str] = None,
        group_meta_id: Optional[str] = None,
        max_members: Optional[float] = None,
        name: Optional[str] = None,
        notify_details: Optional[str] = None,
        notify_roles: Optional[str] = None,
        principal_domain_filter: Optional[str] = None,
        resource_state: Optional[float] = None,
        review_enabled: Optional[bool] = None,
        self_renew: Optional[bool] = None,
        self_renew_mins: Optional[float] = None,
        self_serve: Optional[bool] = None,
        service_expiry_days: Optional[float] = None,
        tags: Optional[Mapping[str, str]] = None,
        user_authority_expiration: Optional[str] = None,
        user_authority_filter: Optional[str] = None,
        user_expiry_days: Optional[float] = None) -> GroupMeta
    func GetGroupMeta(ctx *Context, name string, id IDInput, state *GroupMetaState, opts ...ResourceOption) (*GroupMeta, error)
    public static GroupMeta Get(string name, Input<string> id, GroupMetaState? state, CustomResourceOptions? opts = null)
    public static GroupMeta get(String name, Output<String> id, GroupMetaState state, CustomResourceOptions options)
    resources:  _:    type: athenz:GroupMeta    get:      id: ${id}
    import {
  to = athenz_groupmeta.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AuditEnabled bool
    audit enabled flag for the group
    AuditRef string
    string containing audit specification or ticket number.
    DeleteProtection bool
    If true, ask for delete confirmation in audit and review enabled groups
    Domain string
    name of the domain
    GroupMetaId string
    The ID of this resource.
    MaxMembers double
    maximum number of members allowed in the group
    Name string
    Name of the group
    NotifyDetails string
    Set of instructions included in notifications for review and audit enabled groups
    NotifyRoles string
    comma seperated list of roles whose members should be notified for member review/approval
    PrincipalDomainFilter string
    comma seperated list of domains to enforce principal membership
    ResourceState double
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    ReviewEnabled bool
    Flag indicates whether group updates require another review and approval
    SelfRenew bool
    Flag indicates whether to allow expired members to renew their membership
    SelfRenewMins double
    Number of minutes members can renew their membership if self review option is enabled
    SelfServe bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    ServiceExpiryDays double
    all services in the group will have specified max expiry days
    Tags Dictionary<string, string>
    map of group tags
    UserAuthorityExpiration string
    expiration enforced by a user authority configured attribute
    UserAuthorityFilter string
    membership filtered based on user authority configured attributes
    UserExpiryDays double
    all user members in the group will have specified max expiry days
    AuditEnabled bool
    audit enabled flag for the group
    AuditRef string
    string containing audit specification or ticket number.
    DeleteProtection bool
    If true, ask for delete confirmation in audit and review enabled groups
    Domain string
    name of the domain
    GroupMetaId string
    The ID of this resource.
    MaxMembers float64
    maximum number of members allowed in the group
    Name string
    Name of the group
    NotifyDetails string
    Set of instructions included in notifications for review and audit enabled groups
    NotifyRoles string
    comma seperated list of roles whose members should be notified for member review/approval
    PrincipalDomainFilter string
    comma seperated list of domains to enforce principal membership
    ResourceState float64
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    ReviewEnabled bool
    Flag indicates whether group updates require another review and approval
    SelfRenew bool
    Flag indicates whether to allow expired members to renew their membership
    SelfRenewMins float64
    Number of minutes members can renew their membership if self review option is enabled
    SelfServe bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    ServiceExpiryDays float64
    all services in the group will have specified max expiry days
    Tags map[string]string
    map of group tags
    UserAuthorityExpiration string
    expiration enforced by a user authority configured attribute
    UserAuthorityFilter string
    membership filtered based on user authority configured attributes
    UserExpiryDays float64
    all user members in the group will have specified max expiry days
    audit_enabled bool
    audit enabled flag for the group
    audit_ref string
    string containing audit specification or ticket number.
    delete_protection bool
    If true, ask for delete confirmation in audit and review enabled groups
    domain string
    name of the domain
    group_meta_id string
    The ID of this resource.
    max_members number
    maximum number of members allowed in the group
    name string
    Name of the group
    notify_details string
    Set of instructions included in notifications for review and audit enabled groups
    notify_roles string
    comma seperated list of roles whose members should be notified for member review/approval
    principal_domain_filter string
    comma seperated list of domains to enforce principal membership
    resource_state number
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    review_enabled bool
    Flag indicates whether group updates require another review and approval
    self_renew bool
    Flag indicates whether to allow expired members to renew their membership
    self_renew_mins number
    Number of minutes members can renew their membership if self review option is enabled
    self_serve bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    service_expiry_days number
    all services in the group will have specified max expiry days
    tags map(string)
    map of group tags
    user_authority_expiration string
    expiration enforced by a user authority configured attribute
    user_authority_filter string
    membership filtered based on user authority configured attributes
    user_expiry_days number
    all user members in the group will have specified max expiry days
    auditEnabled Boolean
    audit enabled flag for the group
    auditRef String
    string containing audit specification or ticket number.
    deleteProtection Boolean
    If true, ask for delete confirmation in audit and review enabled groups
    domain String
    name of the domain
    groupMetaId String
    The ID of this resource.
    maxMembers Double
    maximum number of members allowed in the group
    name String
    Name of the group
    notifyDetails String
    Set of instructions included in notifications for review and audit enabled groups
    notifyRoles String
    comma seperated list of roles whose members should be notified for member review/approval
    principalDomainFilter String
    comma seperated list of domains to enforce principal membership
    resourceState Double
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    reviewEnabled Boolean
    Flag indicates whether group updates require another review and approval
    selfRenew Boolean
    Flag indicates whether to allow expired members to renew their membership
    selfRenewMins Double
    Number of minutes members can renew their membership if self review option is enabled
    selfServe Boolean
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    serviceExpiryDays Double
    all services in the group will have specified max expiry days
    tags Map<String,String>
    map of group tags
    userAuthorityExpiration String
    expiration enforced by a user authority configured attribute
    userAuthorityFilter String
    membership filtered based on user authority configured attributes
    userExpiryDays Double
    all user members in the group will have specified max expiry days
    auditEnabled boolean
    audit enabled flag for the group
    auditRef string
    string containing audit specification or ticket number.
    deleteProtection boolean
    If true, ask for delete confirmation in audit and review enabled groups
    domain string
    name of the domain
    groupMetaId string
    The ID of this resource.
    maxMembers number
    maximum number of members allowed in the group
    name string
    Name of the group
    notifyDetails string
    Set of instructions included in notifications for review and audit enabled groups
    notifyRoles string
    comma seperated list of roles whose members should be notified for member review/approval
    principalDomainFilter string
    comma seperated list of domains to enforce principal membership
    resourceState number
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    reviewEnabled boolean
    Flag indicates whether group updates require another review and approval
    selfRenew boolean
    Flag indicates whether to allow expired members to renew their membership
    selfRenewMins number
    Number of minutes members can renew their membership if self review option is enabled
    selfServe boolean
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    serviceExpiryDays number
    all services in the group will have specified max expiry days
    tags {[key: string]: string}
    map of group tags
    userAuthorityExpiration string
    expiration enforced by a user authority configured attribute
    userAuthorityFilter string
    membership filtered based on user authority configured attributes
    userExpiryDays number
    all user members in the group will have specified max expiry days
    audit_enabled bool
    audit enabled flag for the group
    audit_ref str
    string containing audit specification or ticket number.
    delete_protection bool
    If true, ask for delete confirmation in audit and review enabled groups
    domain str
    name of the domain
    group_meta_id str
    The ID of this resource.
    max_members float
    maximum number of members allowed in the group
    name str
    Name of the group
    notify_details str
    Set of instructions included in notifications for review and audit enabled groups
    notify_roles str
    comma seperated list of roles whose members should be notified for member review/approval
    principal_domain_filter str
    comma seperated list of domains to enforce principal membership
    resource_state float
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    review_enabled bool
    Flag indicates whether group updates require another review and approval
    self_renew bool
    Flag indicates whether to allow expired members to renew their membership
    self_renew_mins float
    Number of minutes members can renew their membership if self review option is enabled
    self_serve bool
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    service_expiry_days float
    all services in the group will have specified max expiry days
    tags Mapping[str, str]
    map of group tags
    user_authority_expiration str
    expiration enforced by a user authority configured attribute
    user_authority_filter str
    membership filtered based on user authority configured attributes
    user_expiry_days float
    all user members in the group will have specified max expiry days
    auditEnabled Boolean
    audit enabled flag for the group
    auditRef String
    string containing audit specification or ticket number.
    deleteProtection Boolean
    If true, ask for delete confirmation in audit and review enabled groups
    domain String
    name of the domain
    groupMetaId String
    The ID of this resource.
    maxMembers Number
    maximum number of members allowed in the group
    name String
    Name of the group
    notifyDetails String
    Set of instructions included in notifications for review and audit enabled groups
    notifyRoles String
    comma seperated list of roles whose members should be notified for member review/approval
    principalDomainFilter String
    comma seperated list of domains to enforce principal membership
    resourceState Number
    Bitmask of resource state flags controlling group behavior when creating or destroying the resource. 0x01: create the group if not already present, 0x02: always delete the group when destroying the resource. Default value is -1 indicating to inherit the value defined at the provider configuration level.
    reviewEnabled Boolean
    Flag indicates whether group updates require another review and approval
    selfRenew Boolean
    Flag indicates whether to allow expired members to renew their membership
    selfRenewMins Number
    Number of minutes members can renew their membership if self review option is enabled
    selfServe Boolean
    Flag indicates whether group allows self-service. Users can add themselves in the group, but it has to be approved by domain admins to be effective.
    serviceExpiryDays Number
    all services in the group will have specified max expiry days
    tags Map<String>
    map of group tags
    userAuthorityExpiration String
    expiration enforced by a user authority configured attribute
    userAuthorityFilter String
    membership filtered based on user authority configured attributes
    userExpiryDays Number
    all user members in the group will have specified max expiry days

    Package Details

    Repository
    athenz athenz/terraform-provider-athenz
    License
    Notes
    This Pulumi package is based on the athenz Terraform Provider.
    Viewing docs for athenz 1.0.50
    published on Monday, Apr 13, 2026 by athenz
    Schema (JSON)
    athenz/terraform-provider-athenz
      Try Pulumi Cloud free. Your team will thank you.