bytepluscc.cloudidentity.PermissionSetAssignment

bytepluscc v0.0.16, Mar 9 26

Viewing docs for bytepluscc v0.0.16
published on Monday, Mar 9, 2026 by Byteplus

Schema (JSON)

byteplus-sdk/pulumi-bytepluscc

Viewing docs for bytepluscc v0.0.16
published on Monday, Mar 9, 2026 by Byteplus

Schema (JSON)

byteplus-sdk/pulumi-bytepluscc

当您创建好云身份中心用户后，需要授予用户访问到各账号的登录访问权限。当用户访问火山引擎云资源的权限访问具备可抽象的共性时，如：网络运维权限、安全管理权限等，您可以在云身份中心预置访问权限集作为权限模版，最终基于访问权限集来实现中心化授权。云身份中心将会为您同步分发访问权限集到各个账号，减少企业权限的运维成本。

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as bytepluscc from "@byteplus/pulumi-bytepluscc";

const cloudIdentityPermissionSetAssignmentDemo = new bytepluscc.cloudidentity.PermissionSetAssignment("CloudIdentityPermissionSetAssignmentDemo", {
    permissionSetId: "897569*****",
    principalId: "899471*****",
    principalType: "User",
    targetId: "21036*****",
});

import pulumi
import pulumi_bytepluscc as bytepluscc

cloud_identity_permission_set_assignment_demo = bytepluscc.cloudidentity.PermissionSetAssignment("CloudIdentityPermissionSetAssignmentDemo",
    permission_set_id="897569*****",
    principal_id="899471*****",
    principal_type="User",
    target_id="21036*****")

package main

import (
	"github.com/byteplus-sdk/pulumi-bytepluscc/sdk/go/bytepluscc/cloudidentity"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudidentity.NewPermissionSetAssignment(ctx, "CloudIdentityPermissionSetAssignmentDemo", &cloudidentity.PermissionSetAssignmentArgs{
			PermissionSetId: pulumi.String("897569*****"),
			PrincipalId:     pulumi.String("899471*****"),
			PrincipalType:   pulumi.String("User"),
			TargetId:        pulumi.String("21036*****"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Bytepluscc = Byteplus.Pulumi.Bytepluscc;

return await Deployment.RunAsync(() => 
{
    var cloudIdentityPermissionSetAssignmentDemo = new Bytepluscc.Cloudidentity.PermissionSetAssignment("CloudIdentityPermissionSetAssignmentDemo", new()
    {
        PermissionSetId = "897569*****",
        PrincipalId = "899471*****",
        PrincipalType = "User",
        TargetId = "21036*****",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.byteplus.bytepluscc.cloudidentity.PermissionSetAssignment;
import com.byteplus.bytepluscc.cloudidentity.PermissionSetAssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var cloudIdentityPermissionSetAssignmentDemo = new PermissionSetAssignment("cloudIdentityPermissionSetAssignmentDemo", PermissionSetAssignmentArgs.builder()
            .permissionSetId("897569*****")
            .principalId("899471*****")
            .principalType("User")
            .targetId("21036*****")
            .build());

    }
}

resources:
  cloudIdentityPermissionSetAssignmentDemo:
    type: bytepluscc:cloudidentity:PermissionSetAssignment
    name: CloudIdentityPermissionSetAssignmentDemo
    properties:
      permissionSetId: 897569*****
      principalId: 899471*****
      principalType: User
      targetId: 21036*****

Create PermissionSetAssignment Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PermissionSetAssignment(name: string, args: PermissionSetAssignmentArgs, opts?: CustomResourceOptions);

@overload
def PermissionSetAssignment(resource_name: str,
                            args: PermissionSetAssignmentArgs,
                            opts: Optional[ResourceOptions] = None)

@overload
def PermissionSetAssignment(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            permission_set_id: Optional[str] = None,
                            principal_id: Optional[str] = None,
                            principal_type: Optional[str] = None,
                            target_id: Optional[str] = None)

func NewPermissionSetAssignment(ctx *Context, name string, args PermissionSetAssignmentArgs, opts ...ResourceOption) (*PermissionSetAssignment, error)

public PermissionSetAssignment(string name, PermissionSetAssignmentArgs args, CustomResourceOptions? opts = null)

public PermissionSetAssignment(String name, PermissionSetAssignmentArgs args)
public PermissionSetAssignment(String name, PermissionSetAssignmentArgs args, CustomResourceOptions options)

type: bytepluscc:cloudidentity:PermissionSetAssignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args PermissionSetAssignmentArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args PermissionSetAssignmentArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args PermissionSetAssignmentArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args PermissionSetAssignmentArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args PermissionSetAssignmentArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var permissionSetAssignmentResource = new Bytepluscc.Cloudidentity.PermissionSetAssignment("permissionSetAssignmentResource", new()
{
    PermissionSetId = "string",
    PrincipalId = "string",
    PrincipalType = "string",
    TargetId = "string",
});

example, err := cloudidentity.NewPermissionSetAssignment(ctx, "permissionSetAssignmentResource", &cloudidentity.PermissionSetAssignmentArgs{
	PermissionSetId: pulumi.String("string"),
	PrincipalId:     pulumi.String("string"),
	PrincipalType:   pulumi.String("string"),
	TargetId:        pulumi.String("string"),
})

var permissionSetAssignmentResource = new PermissionSetAssignment("permissionSetAssignmentResource", PermissionSetAssignmentArgs.builder()
    .permissionSetId("string")
    .principalId("string")
    .principalType("string")
    .targetId("string")
    .build());

permission_set_assignment_resource = bytepluscc.cloudidentity.PermissionSetAssignment("permissionSetAssignmentResource",
    permission_set_id="string",
    principal_id="string",
    principal_type="string",
    target_id="string")

const permissionSetAssignmentResource = new bytepluscc.cloudidentity.PermissionSetAssignment("permissionSetAssignmentResource", {
    permissionSetId: "string",
    principalId: "string",
    principalType: "string",
    targetId: "string",
});

type: bytepluscc:cloudidentity:PermissionSetAssignment
properties:
    permissionSetId: string
    principalId: string
    principalType: string
    targetId: string

PermissionSetAssignment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PermissionSetAssignment resource accepts the following input properties:

PermissionSetId string: 权限集 ID。
PrincipalId string: 云身份中心对象 ID
PrincipalType string: 云身份中心对象类型，User 或者 Group。
TargetId string: 授权账号 ID。

PermissionSetId string: 权限集 ID。
PrincipalId string: 云身份中心对象 ID
PrincipalType string: 云身份中心对象类型，User 或者 Group。
TargetId string: 授权账号 ID。

permissionSetId String: 权限集 ID。
principalId String: 云身份中心对象 ID
principalType String: 云身份中心对象类型，User 或者 Group。
targetId String: 授权账号 ID。

permissionSetId string: 权限集 ID。
principalId string: 云身份中心对象 ID
principalType string: 云身份中心对象类型，User 或者 Group。
targetId string: 授权账号 ID。

permission_set_id str: 权限集 ID。
principal_id str: 云身份中心对象 ID
principal_type str: 云身份中心对象类型，User 或者 Group。
target_id str: 授权账号 ID。

permissionSetId String: 权限集 ID。
principalId String: 云身份中心对象 ID
principalType String: 云身份中心对象类型，User 或者 Group。
targetId String: 授权账号 ID。

Outputs

All input properties are implicitly available as output properties. Additionally, the PermissionSetAssignment resource produces the following output properties:

CreatedTime string: 授权创建时间。
Id string: The provider-assigned unique ID for this managed resource.
PermissionSetName string: 权限集名称。
PrincipalName string: 云身份中心对象名。
TargetName string: 授权账号名。

CreatedTime string: 授权创建时间。
Id string: The provider-assigned unique ID for this managed resource.
PermissionSetName string: 权限集名称。
PrincipalName string: 云身份中心对象名。
TargetName string: 授权账号名。

createdTime String: 授权创建时间。
id String: The provider-assigned unique ID for this managed resource.
permissionSetName String: 权限集名称。
principalName String: 云身份中心对象名。
targetName String: 授权账号名。

createdTime string: 授权创建时间。
id string: The provider-assigned unique ID for this managed resource.
permissionSetName string: 权限集名称。
principalName string: 云身份中心对象名。
targetName string: 授权账号名。

created_time str: 授权创建时间。
id str: The provider-assigned unique ID for this managed resource.
permission_set_name str: 权限集名称。
principal_name str: 云身份中心对象名。
target_name str: 授权账号名。

createdTime String: 授权创建时间。
id String: The provider-assigned unique ID for this managed resource.
permissionSetName String: 权限集名称。
principalName String: 云身份中心对象名。
targetName String: 授权账号名。

Look up Existing PermissionSetAssignment Resource

Get an existing PermissionSetAssignment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: PermissionSetAssignmentState, opts?: CustomResourceOptions): PermissionSetAssignment

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_time: Optional[str] = None,
        permission_set_id: Optional[str] = None,
        permission_set_name: Optional[str] = None,
        principal_id: Optional[str] = None,
        principal_name: Optional[str] = None,
        principal_type: Optional[str] = None,
        target_id: Optional[str] = None,
        target_name: Optional[str] = None) -> PermissionSetAssignment

func GetPermissionSetAssignment(ctx *Context, name string, id IDInput, state *PermissionSetAssignmentState, opts ...ResourceOption) (*PermissionSetAssignment, error)

public static PermissionSetAssignment Get(string name, Input<string> id, PermissionSetAssignmentState? state, CustomResourceOptions? opts = null)

public static PermissionSetAssignment get(String name, Output<String> id, PermissionSetAssignmentState state, CustomResourceOptions options)

resources:  _:    type: bytepluscc:cloudidentity:PermissionSetAssignment    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

CreatedTime string: 授权创建时间。
PermissionSetId string: 权限集 ID。
PermissionSetName string: 权限集名称。
PrincipalId string: 云身份中心对象 ID
PrincipalName string: 云身份中心对象名。
PrincipalType string: 云身份中心对象类型，User 或者 Group。
TargetId string: 授权账号 ID。
TargetName string: 授权账号名。

CreatedTime string: 授权创建时间。
PermissionSetId string: 权限集 ID。
PermissionSetName string: 权限集名称。
PrincipalId string: 云身份中心对象 ID
PrincipalName string: 云身份中心对象名。
PrincipalType string: 云身份中心对象类型，User 或者 Group。
TargetId string: 授权账号 ID。
TargetName string: 授权账号名。

createdTime String: 授权创建时间。
permissionSetId String: 权限集 ID。
permissionSetName String: 权限集名称。
principalId String: 云身份中心对象 ID
principalName String: 云身份中心对象名。
principalType String: 云身份中心对象类型，User 或者 Group。
targetId String: 授权账号 ID。
targetName String: 授权账号名。

createdTime string: 授权创建时间。
permissionSetId string: 权限集 ID。
permissionSetName string: 权限集名称。
principalId string: 云身份中心对象 ID
principalName string: 云身份中心对象名。
principalType string: 云身份中心对象类型，User 或者 Group。
targetId string: 授权账号 ID。
targetName string: 授权账号名。

created_time str: 授权创建时间。
permission_set_id str: 权限集 ID。
permission_set_name str: 权限集名称。
principal_id str: 云身份中心对象 ID
principal_name str: 云身份中心对象名。
principal_type str: 云身份中心对象类型，User 或者 Group。
target_id str: 授权账号 ID。
target_name str: 授权账号名。

createdTime String: 授权创建时间。
permissionSetId String: 权限集 ID。
permissionSetName String: 权限集名称。
principalId String: 云身份中心对象 ID
principalName String: 云身份中心对象名。
principalType String: 云身份中心对象类型，User 或者 Group。
targetId String: 授权账号 ID。
targetName String: 授权账号名。

Import

$ pulumi import bytepluscc:cloudidentity/permissionSetAssignment:PermissionSetAssignment example "target_id|principal_id|permission_set_id"

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: bytepluscc byteplus-sdk/pulumi-bytepluscc
License: MPL-2.0
Notes: This Pulumi package is based on the bytepluscc Terraform Provider.

Viewing docs for bytepluscc v0.0.16
published on Monday, Mar 9, 2026 by Byteplus

Schema (JSON)

byteplus-sdk/pulumi-bytepluscc

bytepluscc.cloudidentity.PermissionSetAssignment

On this page

On this page

Example Usage

Create PermissionSetAssignment Resource

Constructor syntax

Parameters

Constructor example

PermissionSetAssignment Resource Properties

Inputs

Outputs

Look up Existing PermissionSetAssignment Resource

Import

Package Details

On this page

On this page