bytepluscc.cloudidentity.PermissionSet

bytepluscc v0.0.16, Mar 9 26

Viewing docs for bytepluscc v0.0.16
published on Monday, Mar 9, 2026 by Byteplus

Schema (JSON)

byteplus-sdk/pulumi-bytepluscc

Viewing docs for bytepluscc v0.0.16
published on Monday, Mar 9, 2026 by Byteplus

Schema (JSON)

byteplus-sdk/pulumi-bytepluscc

当您创建好云身份中心用户后，需要授予用户访问到各账号的登录访问权限。当用户访问火山引擎云资源的权限访问具备可抽象的共性时，如：网络运维权限、安全管理权限等，您可以在云身份中心预置访问权限集作为权限模版，最终基于访问权限集来实现中心化授权。云身份中心将会为您同步分发访问权限集到各个账号，减少企业权限的运维成本。

Example Usage

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

Example coming soon!

resources:
  cloudIdentityPermissionSetDemo:
    type: bytepluscc:cloudidentity:PermissionSet
    name: CloudIdentityPermissionSetDemo
    properties:
      description: cc-test
      name: cctest-test
      relayState: https://console.xxxxx.com/xxxxx
      sessionDuration: 3600
      permissionPolicies:
        - permission_policy_name: AdministratorAccess
          permission_policy_type: System
          permission_policy_document: ""
        - permission_policy_name: IAMFullAccess
          permission_policy_type: System
          permission_policy_document: ""
        - permission_policy_name: InlinePolicy
          permission_policy_type: Inline
          permission_policy_document: |-
            {
                "Statement": [
                    {
                        "Effect": "Allow",
                        "Action": [
                            "vpc:*"
                        ],
                        "Resource": [
                            "*"
                        ]
                    }
                ]
            }

Create PermissionSet Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PermissionSet(name: string, args: PermissionSetArgs, opts?: CustomResourceOptions);

@overload
def PermissionSet(resource_name: str,
                  args: PermissionSetArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def PermissionSet(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  name: Optional[str] = None,
                  description: Optional[str] = None,
                  permission_policies: Optional[Sequence[PermissionSetPermissionPolicyArgs]] = None,
                  relay_state: Optional[str] = None,
                  session_duration: Optional[int] = None)

func NewPermissionSet(ctx *Context, name string, args PermissionSetArgs, opts ...ResourceOption) (*PermissionSet, error)

public PermissionSet(string name, PermissionSetArgs args, CustomResourceOptions? opts = null)

public PermissionSet(String name, PermissionSetArgs args)
public PermissionSet(String name, PermissionSetArgs args, CustomResourceOptions options)

type: bytepluscc:cloudidentity:PermissionSet
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args PermissionSetArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PermissionSetArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PermissionSetArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PermissionSetArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PermissionSetArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var permissionSetResource = new Bytepluscc.Cloudidentity.PermissionSet("permissionSetResource", new()
{
    Name = "string",
    Description = "string",
    PermissionPolicies = new[]
    {
        new Bytepluscc.Cloudidentity.Inputs.PermissionSetPermissionPolicyArgs
        {
            PermissionPolicyDocument = "string",
            PermissionPolicyName = "string",
            PermissionPolicyType = "string",
        },
    },
    RelayState = "string",
    SessionDuration = 0,
});

example, err := cloudidentity.NewPermissionSet(ctx, "permissionSetResource", &cloudidentity.PermissionSetArgs{
	Name:        pulumi.String("string"),
	Description: pulumi.String("string"),
	PermissionPolicies: cloudidentity.PermissionSetPermissionPolicyArray{
		&cloudidentity.PermissionSetPermissionPolicyArgs{
			PermissionPolicyDocument: pulumi.String("string"),
			PermissionPolicyName:     pulumi.String("string"),
			PermissionPolicyType:     pulumi.String("string"),
		},
	},
	RelayState:      pulumi.String("string"),
	SessionDuration: pulumi.Int(0),
})

var permissionSetResource = new PermissionSet("permissionSetResource", PermissionSetArgs.builder()
    .name("string")
    .description("string")
    .permissionPolicies(PermissionSetPermissionPolicyArgs.builder()
        .permissionPolicyDocument("string")
        .permissionPolicyName("string")
        .permissionPolicyType("string")
        .build())
    .relayState("string")
    .sessionDuration(0)
    .build());

permission_set_resource = bytepluscc.cloudidentity.PermissionSet("permissionSetResource",
    name="string",
    description="string",
    permission_policies=[{
        "permission_policy_document": "string",
        "permission_policy_name": "string",
        "permission_policy_type": "string",
    }],
    relay_state="string",
    session_duration=0)

const permissionSetResource = new bytepluscc.cloudidentity.PermissionSet("permissionSetResource", {
    name: "string",
    description: "string",
    permissionPolicies: [{
        permissionPolicyDocument: "string",
        permissionPolicyName: "string",
        permissionPolicyType: "string",
    }],
    relayState: "string",
    sessionDuration: 0,
});

type: bytepluscc:cloudidentity:PermissionSet
properties:
    description: string
    name: string
    permissionPolicies:
        - permissionPolicyDocument: string
          permissionPolicyName: string
          permissionPolicyType: string
    relayState: string
    sessionDuration: 0

PermissionSet Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PermissionSet resource accepts the following input properties:

Name string: 权限集名称。
Description string: 权限集描述。
PermissionPolicies List<Byteplus.PermissionSetPermissionPolicy>
RelayState string: 跳转控制台 URL。
SessionDuration int: session 过期时间，单位秒。

Name string: 权限集名称。
Description string: 权限集描述。
PermissionPolicies []PermissionSetPermissionPolicyArgs
RelayState string: 跳转控制台 URL。
SessionDuration int: session 过期时间，单位秒。

name String: 权限集名称。
description String: 权限集描述。
permissionPolicies List<PermissionSetPermissionPolicy>
relayState String: 跳转控制台 URL。
sessionDuration Integer: session 过期时间，单位秒。

name string: 权限集名称。
description string: 权限集描述。
permissionPolicies PermissionSetPermissionPolicy[]
relayState string: 跳转控制台 URL。
sessionDuration number: session 过期时间，单位秒。

name str: 权限集名称。
description str: 权限集描述。
permission_policies Sequence[PermissionSetPermissionPolicyArgs]
relay_state str: 跳转控制台 URL。
session_duration int: session 过期时间，单位秒。

name String: 权限集名称。
description String: 权限集描述。
permissionPolicies List<Property Map>
relayState String: 跳转控制台 URL。
sessionDuration Number: session 过期时间，单位秒。

Outputs

All input properties are implicitly available as output properties. Additionally, the PermissionSet resource produces the following output properties:

CreatedTime string: 创建时间。
Id string: The provider-assigned unique ID for this managed resource.
PermissionSetId string: 权限集 ID。
StatusNotifications List<string>: 状态通知配置。
UpdatedTime string: 更新时间。

CreatedTime string: 创建时间。
Id string: The provider-assigned unique ID for this managed resource.
PermissionSetId string: 权限集 ID。
StatusNotifications []string: 状态通知配置。
UpdatedTime string: 更新时间。

createdTime String: 创建时间。
id String: The provider-assigned unique ID for this managed resource.
permissionSetId String: 权限集 ID。
statusNotifications List<String>: 状态通知配置。
updatedTime String: 更新时间。

createdTime string: 创建时间。
id string: The provider-assigned unique ID for this managed resource.
permissionSetId string: 权限集 ID。
statusNotifications string[]: 状态通知配置。
updatedTime string: 更新时间。

created_time str: 创建时间。
id str: The provider-assigned unique ID for this managed resource.
permission_set_id str: 权限集 ID。
status_notifications Sequence[str]: 状态通知配置。
updated_time str: 更新时间。

createdTime String: 创建时间。
id String: The provider-assigned unique ID for this managed resource.
permissionSetId String: 权限集 ID。
statusNotifications List<String>: 状态通知配置。
updatedTime String: 更新时间。

Look up Existing PermissionSet Resource

Get an existing PermissionSet resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PermissionSetState, opts?: CustomResourceOptions): PermissionSet

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_time: Optional[str] = None,
        description: Optional[str] = None,
        name: Optional[str] = None,
        permission_policies: Optional[Sequence[PermissionSetPermissionPolicyArgs]] = None,
        permission_set_id: Optional[str] = None,
        relay_state: Optional[str] = None,
        session_duration: Optional[int] = None,
        status_notifications: Optional[Sequence[str]] = None,
        updated_time: Optional[str] = None) -> PermissionSet

func GetPermissionSet(ctx *Context, name string, id IDInput, state *PermissionSetState, opts ...ResourceOption) (*PermissionSet, error)

public static PermissionSet Get(string name, Input<string> id, PermissionSetState? state, CustomResourceOptions? opts = null)

public static PermissionSet get(String name, Output<String> id, PermissionSetState state, CustomResourceOptions options)

resources:  _:    type: bytepluscc:cloudidentity:PermissionSet    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

CreatedTime string: 创建时间。
Description string: 权限集描述。
Name string: 权限集名称。
PermissionPolicies List<Byteplus.PermissionSetPermissionPolicy>
PermissionSetId string: 权限集 ID。
RelayState string: 跳转控制台 URL。
SessionDuration int: session 过期时间，单位秒。
StatusNotifications List<string>: 状态通知配置。
UpdatedTime string: 更新时间。

CreatedTime string: 创建时间。
Description string: 权限集描述。
Name string: 权限集名称。
PermissionPolicies []PermissionSetPermissionPolicyArgs
PermissionSetId string: 权限集 ID。
RelayState string: 跳转控制台 URL。
SessionDuration int: session 过期时间，单位秒。
StatusNotifications []string: 状态通知配置。
UpdatedTime string: 更新时间。

createdTime String: 创建时间。
description String: 权限集描述。
name String: 权限集名称。
permissionPolicies List<PermissionSetPermissionPolicy>
permissionSetId String: 权限集 ID。
relayState String: 跳转控制台 URL。
sessionDuration Integer: session 过期时间，单位秒。
statusNotifications List<String>: 状态通知配置。
updatedTime String: 更新时间。

createdTime string: 创建时间。
description string: 权限集描述。
name string: 权限集名称。
permissionPolicies PermissionSetPermissionPolicy[]
permissionSetId string: 权限集 ID。
relayState string: 跳转控制台 URL。
sessionDuration number: session 过期时间，单位秒。
statusNotifications string[]: 状态通知配置。
updatedTime string: 更新时间。

created_time str: 创建时间。
description str: 权限集描述。
name str: 权限集名称。
permission_policies Sequence[PermissionSetPermissionPolicyArgs]
permission_set_id str: 权限集 ID。
relay_state str: 跳转控制台 URL。
session_duration int: session 过期时间，单位秒。
status_notifications Sequence[str]: 状态通知配置。
updated_time str: 更新时间。

createdTime String: 创建时间。
description String: 权限集描述。
name String: 权限集名称。
permissionPolicies List<Property Map>
permissionSetId String: 权限集 ID。
relayState String: 跳转控制台 URL。
sessionDuration Number: session 过期时间，单位秒。
statusNotifications List<String>: 状态通知配置。
updatedTime String: 更新时间。

Supporting Types

PermissionSetPermissionPolicy, PermissionSetPermissionPolicyArgs

PermissionPolicyDocument string: 策略语法内容。语法可参考策略语法说明。
PermissionPolicyName string: 策略名称。
PermissionPolicyType string: 策略类型，System or Inline。

PermissionPolicyDocument string: 策略语法内容。语法可参考策略语法说明。
PermissionPolicyName string: 策略名称。
PermissionPolicyType string: 策略类型，System or Inline。

permissionPolicyDocument String: 策略语法内容。语法可参考策略语法说明。
permissionPolicyName String: 策略名称。
permissionPolicyType String: 策略类型，System or Inline。

permissionPolicyDocument string: 策略语法内容。语法可参考策略语法说明。
permissionPolicyName string: 策略名称。
permissionPolicyType string: 策略类型，System or Inline。

permission_policy_document str: 策略语法内容。语法可参考策略语法说明。
permission_policy_name str: 策略名称。
permission_policy_type str: 策略类型，System or Inline。

permissionPolicyDocument String: 策略语法内容。语法可参考策略语法说明。
permissionPolicyName String: 策略名称。
permissionPolicyType String: 策略类型，System or Inline。

Import

$ pulumi import bytepluscc:cloudidentity/permissionSet:PermissionSet example "permission_set_id"

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: bytepluscc byteplus-sdk/pulumi-bytepluscc
License: MPL-2.0
Notes: This Pulumi package is based on the bytepluscc Terraform Provider.

Viewing docs for bytepluscc v0.0.16
published on Monday, Mar 9, 2026 by Byteplus

Schema (JSON)

byteplus-sdk/pulumi-bytepluscc

bytepluscc.cloudidentity.PermissionSet

On this page

On this page

Example Usage

Create PermissionSet Resource

Constructor syntax

Parameters

Constructor example

PermissionSet Resource Properties

Inputs

Outputs

Look up Existing PermissionSet Resource

Supporting Types

PermissionSetPermissionPolicy, PermissionSetPermissionPolicyArgs

Import

Package Details

On this page

On this page