1. Packages
  2. Avi Provider
  3. API Docs
  4. Role
avi 31.1.1 published on Monday, Apr 14, 2025 by vmware

avi.Role

Explore with Pulumi AI

avi logo
avi 31.1.1 published on Monday, Apr 14, 2025 by vmware

    <!–

    Copyright 2021 VMware, Inc.
    SPDX-License-Identifier: Mozilla Public License 2.0
    

    –>

    layout: “avi”

    page_title: “Avi: avi.Role” sidebar_current: “docs-avi-resource-role” description: |- Creates and manages Avi Role.

    avi.Role

    The Role resource allows the creation and management of Avi Role

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as avi from "@pulumi/avi";
    
    const foo = new avi.Role("foo", {tenantRef: "/api/tenant/?name=admin"});
    
    import pulumi
    import pulumi_avi as avi
    
    foo = avi.Role("foo", tenant_ref="/api/tenant/?name=admin")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/avi/v31/avi"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := avi.NewRole(ctx, "foo", &avi.RoleArgs{
    			TenantRef: pulumi.String("/api/tenant/?name=admin"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Avi = Pulumi.Avi;
    
    return await Deployment.RunAsync(() => 
    {
        var foo = new Avi.Role("foo", new()
        {
            TenantRef = "/api/tenant/?name=admin",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.avi.Role;
    import com.pulumi.avi.RoleArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var foo = new Role("foo", RoleArgs.builder()
                .tenantRef("/api/tenant/?name=admin")
                .build());
    
        }
    }
    
    resources:
      foo:
        type: avi:Role
        properties:
          tenantRef: /api/tenant/?name=admin
    

    Create Role Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Role(name: string, args?: RoleArgs, opts?: CustomResourceOptions);
    @overload
    def Role(resource_name: str,
             args: Optional[RoleArgs] = None,
             opts: Optional[ResourceOptions] = None)
    
    @overload
    def Role(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             allow_unlabelled_access: Optional[str] = None,
             configpb_attributes: Optional[Sequence[RoleConfigpbAttributeArgs]] = None,
             filters: Optional[Sequence[RoleFilterArgs]] = None,
             name: Optional[str] = None,
             privileges: Optional[Sequence[RolePrivilegeArgs]] = None,
             role_id: Optional[str] = None,
             tenant_ref: Optional[str] = None,
             uuid: Optional[str] = None)
    func NewRole(ctx *Context, name string, args *RoleArgs, opts ...ResourceOption) (*Role, error)
    public Role(string name, RoleArgs? args = null, CustomResourceOptions? opts = null)
    public Role(String name, RoleArgs args)
    public Role(String name, RoleArgs args, CustomResourceOptions options)
    
    type: avi:Role
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args RoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RoleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RoleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RoleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var roleResource = new Avi.Role("roleResource", new()
    {
        AllowUnlabelledAccess = "string",
        ConfigpbAttributes = new[]
        {
            new Avi.Inputs.RoleConfigpbAttributeArgs
            {
                Version = "string",
            },
        },
        Filters = new[]
        {
            new Avi.Inputs.RoleFilterArgs
            {
                MatchLabels = new[]
                {
                    new Avi.Inputs.RoleFilterMatchLabelArgs
                    {
                        Key = "string",
                        Values = new[]
                        {
                            "string",
                        },
                    },
                },
                Enabled = "string",
                MatchOperation = "string",
                Name = "string",
            },
        },
        Name = "string",
        Privileges = new[]
        {
            new Avi.Inputs.RolePrivilegeArgs
            {
                Resource = "string",
                Type = "string",
                Subresources = new[]
                {
                    new Avi.Inputs.RolePrivilegeSubresourceArgs
                    {
                        Subresources = new[]
                        {
                            "string",
                        },
                        ExcludeSubresources = "string",
                    },
                },
            },
        },
        RoleId = "string",
        TenantRef = "string",
        Uuid = "string",
    });
    
    example, err := avi.NewRole(ctx, "roleResource", &avi.RoleArgs{
    	AllowUnlabelledAccess: pulumi.String("string"),
    	ConfigpbAttributes: avi.RoleConfigpbAttributeArray{
    		&avi.RoleConfigpbAttributeArgs{
    			Version: pulumi.String("string"),
    		},
    	},
    	Filters: avi.RoleFilterArray{
    		&avi.RoleFilterArgs{
    			MatchLabels: avi.RoleFilterMatchLabelArray{
    				&avi.RoleFilterMatchLabelArgs{
    					Key: pulumi.String("string"),
    					Values: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    				},
    			},
    			Enabled:        pulumi.String("string"),
    			MatchOperation: pulumi.String("string"),
    			Name:           pulumi.String("string"),
    		},
    	},
    	Name: pulumi.String("string"),
    	Privileges: avi.RolePrivilegeArray{
    		&avi.RolePrivilegeArgs{
    			Resource: pulumi.String("string"),
    			Type:     pulumi.String("string"),
    			Subresources: avi.RolePrivilegeSubresourceArray{
    				&avi.RolePrivilegeSubresourceArgs{
    					Subresources: pulumi.StringArray{
    						pulumi.String("string"),
    					},
    					ExcludeSubresources: pulumi.String("string"),
    				},
    			},
    		},
    	},
    	RoleId:    pulumi.String("string"),
    	TenantRef: pulumi.String("string"),
    	Uuid:      pulumi.String("string"),
    })
    
    var roleResource = new Role("roleResource", RoleArgs.builder()
        .allowUnlabelledAccess("string")
        .configpbAttributes(RoleConfigpbAttributeArgs.builder()
            .version("string")
            .build())
        .filters(RoleFilterArgs.builder()
            .matchLabels(RoleFilterMatchLabelArgs.builder()
                .key("string")
                .values("string")
                .build())
            .enabled("string")
            .matchOperation("string")
            .name("string")
            .build())
        .name("string")
        .privileges(RolePrivilegeArgs.builder()
            .resource("string")
            .type("string")
            .subresources(RolePrivilegeSubresourceArgs.builder()
                .subresources("string")
                .excludeSubresources("string")
                .build())
            .build())
        .roleId("string")
        .tenantRef("string")
        .uuid("string")
        .build());
    
    role_resource = avi.Role("roleResource",
        allow_unlabelled_access="string",
        configpb_attributes=[{
            "version": "string",
        }],
        filters=[{
            "match_labels": [{
                "key": "string",
                "values": ["string"],
            }],
            "enabled": "string",
            "match_operation": "string",
            "name": "string",
        }],
        name="string",
        privileges=[{
            "resource": "string",
            "type": "string",
            "subresources": [{
                "subresources": ["string"],
                "exclude_subresources": "string",
            }],
        }],
        role_id="string",
        tenant_ref="string",
        uuid="string")
    
    const roleResource = new avi.Role("roleResource", {
        allowUnlabelledAccess: "string",
        configpbAttributes: [{
            version: "string",
        }],
        filters: [{
            matchLabels: [{
                key: "string",
                values: ["string"],
            }],
            enabled: "string",
            matchOperation: "string",
            name: "string",
        }],
        name: "string",
        privileges: [{
            resource: "string",
            type: "string",
            subresources: [{
                subresources: ["string"],
                excludeSubresources: "string",
            }],
        }],
        roleId: "string",
        tenantRef: "string",
        uuid: "string",
    });
    
    type: avi:Role
    properties:
        allowUnlabelledAccess: string
        configpbAttributes:
            - version: string
        filters:
            - enabled: string
              matchLabels:
                - key: string
                  values:
                    - string
              matchOperation: string
              name: string
        name: string
        privileges:
            - resource: string
              subresources:
                - excludeSubresources: string
                  subresources:
                    - string
              type: string
        roleId: string
        tenantRef: string
        uuid: string
    

    Role Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Role resource accepts the following input properties:

    AllowUnlabelledAccess string
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    ConfigpbAttributes List<RoleConfigpbAttribute>
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Filters List<RoleFilter>
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    Name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Privileges List<RolePrivilege>
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    RoleId string
    TenantRef string
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Uuid string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    AllowUnlabelledAccess string
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    ConfigpbAttributes []RoleConfigpbAttributeArgs
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Filters []RoleFilterArgs
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    Name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Privileges []RolePrivilegeArgs
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    RoleId string
    TenantRef string
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Uuid string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allowUnlabelledAccess String
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpbAttributes List<RoleConfigpbAttribute>
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters List<RoleFilter>
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges List<RolePrivilege>
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    roleId String
    tenantRef String
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allowUnlabelledAccess string
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpbAttributes RoleConfigpbAttribute[]
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters RoleFilter[]
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges RolePrivilege[]
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    roleId string
    tenantRef string
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allow_unlabelled_access str
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpb_attributes Sequence[RoleConfigpbAttributeArgs]
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters Sequence[RoleFilterArgs]
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name str
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges Sequence[RolePrivilegeArgs]
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    role_id str
    tenant_ref str
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid str
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allowUnlabelledAccess String
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpbAttributes List<Property Map>
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters List<Property Map>
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges List<Property Map>
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    roleId String
    tenantRef String
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Role resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Role Resource

    Get an existing Role resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: RoleState, opts?: CustomResourceOptions): Role
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            allow_unlabelled_access: Optional[str] = None,
            configpb_attributes: Optional[Sequence[RoleConfigpbAttributeArgs]] = None,
            filters: Optional[Sequence[RoleFilterArgs]] = None,
            name: Optional[str] = None,
            privileges: Optional[Sequence[RolePrivilegeArgs]] = None,
            role_id: Optional[str] = None,
            tenant_ref: Optional[str] = None,
            uuid: Optional[str] = None) -> Role
    func GetRole(ctx *Context, name string, id IDInput, state *RoleState, opts ...ResourceOption) (*Role, error)
    public static Role Get(string name, Input<string> id, RoleState? state, CustomResourceOptions? opts = null)
    public static Role get(String name, Output<String> id, RoleState state, CustomResourceOptions options)
    resources:  _:    type: avi:Role    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowUnlabelledAccess string
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    ConfigpbAttributes List<RoleConfigpbAttribute>
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Filters List<RoleFilter>
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    Name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Privileges List<RolePrivilege>
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    RoleId string
    TenantRef string
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Uuid string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    AllowUnlabelledAccess string
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    ConfigpbAttributes []RoleConfigpbAttributeArgs
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Filters []RoleFilterArgs
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    Name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Privileges []RolePrivilegeArgs
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    RoleId string
    TenantRef string
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    Uuid string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allowUnlabelledAccess String
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpbAttributes List<RoleConfigpbAttribute>
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters List<RoleFilter>
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges List<RolePrivilege>
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    roleId String
    tenantRef String
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allowUnlabelledAccess string
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpbAttributes RoleConfigpbAttribute[]
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters RoleFilter[]
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges RolePrivilege[]
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    roleId string
    tenantRef string
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allow_unlabelled_access str
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpb_attributes Sequence[RoleConfigpbAttributeArgs]
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters Sequence[RoleFilterArgs]
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name str
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges Sequence[RolePrivilegeArgs]
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    role_id str
    tenant_ref str
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid str
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    allowUnlabelledAccess String
    Allow access to unlabelled objects. Field introduced in 20.1.5. Allowed with any value in enterprise, enterprise with cloud services edition.
    configpbAttributes List<Property Map>
    Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    filters List<Property Map>
    Filters for granular object access control based on object labels. Multiple filters are merged using the and operator. If empty, all objects according to the privileges will be accessible to the user. Field introduced in 20.1.3. Maximum of 4 items allowed. Allowed with any value in enterprise, enterprise with cloud services edition.
    name String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    privileges List<Property Map>
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    roleId String
    tenantRef String
    It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    uuid String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

    Supporting Types

    RoleConfigpbAttribute, RoleConfigpbAttributeArgs

    Version string
    Version string
    version String
    version string
    version String

    RoleFilter, RoleFilterArgs

    MatchLabels List<RoleFilterMatchLabel>
    Enabled string
    MatchOperation string
    Name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    MatchLabels []RoleFilterMatchLabel
    Enabled string
    MatchOperation string
    Name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    matchLabels List<RoleFilterMatchLabel>
    enabled String
    matchOperation String
    name String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    matchLabels RoleFilterMatchLabel[]
    enabled string
    matchOperation string
    name string
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    match_labels Sequence[RoleFilterMatchLabel]
    enabled str
    match_operation str
    name str
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
    matchLabels List<Property Map>
    enabled String
    matchOperation String
    name String
    Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

    RoleFilterMatchLabel, RoleFilterMatchLabelArgs

    Key string
    Values List<string>
    Key string
    Values []string
    key String
    values List<String>
    key string
    values string[]
    key str
    values Sequence[str]
    key String
    values List<String>

    RolePrivilege, RolePrivilegeArgs

    RolePrivilegeSubresource, RolePrivilegeSubresourceArgs

    Package Details

    Repository
    avi vmware/terraform-provider-avi
    License
    Notes
    This Pulumi package is based on the avi Terraform Provider.
    avi logo
    avi 31.1.1 published on Monday, Apr 14, 2025 by vmware