Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementAccessRole
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementAccessRole

Explore with Pulumi AI

checkpoint logo
checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

    This resource allows you to execute Check Point Access Role.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const example = new checkpoint.ManagementAccessRole("example", {
    machines: [{
        selections: ["any"],
        source: "any",
    }],
    tags: ["terraform"],
    users: [{
        selections: ["all identified"],
        source: "all identified",
    }],
});

    import pulumi
import pulumi_checkpoint as checkpoint

example = checkpoint.ManagementAccessRole("example",
    machines=[{
        "selections": ["any"],
        "source": "any",
    }],
    tags=["terraform"],
    users=[{
        "selections": ["all identified"],
        "source": "all identified",
    }])

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v2/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.NewManagementAccessRole(ctx, "example", &checkpoint.ManagementAccessRoleArgs{
			Machines: checkpoint.ManagementAccessRoleMachineArray{
				&checkpoint.ManagementAccessRoleMachineArgs{
					Selections: pulumi.StringArray{
						pulumi.String("any"),
					},
					Source: pulumi.String("any"),
				},
			},
			Tags: pulumi.StringArray{
				pulumi.String("terraform"),
			},
			Users: checkpoint.ManagementAccessRoleUserArray{
				&checkpoint.ManagementAccessRoleUserArgs{
					Selections: pulumi.StringArray{
						pulumi.String("all identified"),
					},
					Source: pulumi.String("all identified"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var example = new Checkpoint.ManagementAccessRole("example", new()
    {
        Machines = new[]
        {
            new Checkpoint.Inputs.ManagementAccessRoleMachineArgs
            {
                Selections = new[]
                {
                    "any",
                },
                Source = "any",
            },
        },
        Tags = new[]
        {
            "terraform",
        },
        Users = new[]
        {
            new Checkpoint.Inputs.ManagementAccessRoleUserArgs
            {
                Selections = new[]
                {
                    "all identified",
                },
                Source = "all identified",
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementAccessRole;
import com.pulumi.checkpoint.ManagementAccessRoleArgs;
import com.pulumi.checkpoint.inputs.ManagementAccessRoleMachineArgs;
import com.pulumi.checkpoint.inputs.ManagementAccessRoleUserArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ManagementAccessRole("example", ManagementAccessRoleArgs.builder()
            .machines(ManagementAccessRoleMachineArgs.builder()
                .selections("any")
                .source("any")
                .build())
            .tags("terraform")
            .users(ManagementAccessRoleUserArgs.builder()
                .selections("all identified")
                .source("all identified")
                .build())
            .build());

    }
}

    resources:
  example:
    type: checkpoint:ManagementAccessRole
    properties:
      machines:
        - selections:
            - any
          source: any
      tags:
        - terraform
      users:
        - selections:
            - all identified
          source: all identified

    Create ManagementAccessRole Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementAccessRole(name: string, args?: ManagementAccessRoleArgs, opts?: CustomResourceOptions);
    @overload
def ManagementAccessRole(resource_name: str,
                         args: Optional[ManagementAccessRoleArgs] = None,
                         opts: Optional[ResourceOptions] = None)

@overload
def ManagementAccessRole(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         color: Optional[str] = None,
                         comments: Optional[str] = None,
                         ignore_errors: Optional[bool] = None,
                         ignore_warnings: Optional[bool] = None,
                         machines: Optional[Sequence[ManagementAccessRoleMachineArgs]] = None,
                         management_access_role_id: Optional[str] = None,
                         name: Optional[str] = None,
                         networks: Optional[Sequence[str]] = None,
                         remote_access_clients: Optional[str] = None,
                         tags: Optional[Sequence[str]] = None,
                         timeouts: Optional[ManagementAccessRoleTimeoutsArgs] = None,
                         users: Optional[Sequence[ManagementAccessRoleUserArgs]] = None)
    func NewManagementAccessRole(ctx *Context, name string, args *ManagementAccessRoleArgs, opts ...ResourceOption) (*ManagementAccessRole, error)
    public ManagementAccessRole(string name, ManagementAccessRoleArgs? args = null, CustomResourceOptions? opts = null)
    public ManagementAccessRole(String name, ManagementAccessRoleArgs args)
public ManagementAccessRole(String name, ManagementAccessRoleArgs args, CustomResourceOptions options)

    type: checkpoint:ManagementAccessRole
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ManagementAccessRoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementAccessRoleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementAccessRoleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementAccessRoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementAccessRoleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementAccessRoleResource = new Checkpoint.ManagementAccessRole("managementAccessRoleResource", new()
{
    Color = "string",
    Comments = "string",
    IgnoreErrors = false,
    IgnoreWarnings = false,
    Machines = new[]
    {
        new Checkpoint.Inputs.ManagementAccessRoleMachineArgs
        {
            BaseDn = "string",
            Selections = new[]
            {
                "string",
            },
            Source = "string",
        },
    },
    ManagementAccessRoleId = "string",
    Name = "string",
    Networks = new[]
    {
        "string",
    },
    RemoteAccessClients = "string",
    Tags = new[]
    {
        "string",
    },
    Timeouts = new Checkpoint.Inputs.ManagementAccessRoleTimeoutsArgs
    {
        Create = "string",
    },
    Users = new[]
    {
        new Checkpoint.Inputs.ManagementAccessRoleUserArgs
        {
            BaseDn = "string",
            Selections = new[]
            {
                "string",
            },
            Source = "string",
        },
    },
});

    example, err := checkpoint.NewManagementAccessRole(ctx, "managementAccessRoleResource", &checkpoint.ManagementAccessRoleArgs{
	Color:          pulumi.String("string"),
	Comments:       pulumi.String("string"),
	IgnoreErrors:   pulumi.Bool(false),
	IgnoreWarnings: pulumi.Bool(false),
	Machines: checkpoint.ManagementAccessRoleMachineArray{
		&checkpoint.ManagementAccessRoleMachineArgs{
			BaseDn: pulumi.String("string"),
			Selections: pulumi.StringArray{
				pulumi.String("string"),
			},
			Source: pulumi.String("string"),
		},
	},
	ManagementAccessRoleId: pulumi.String("string"),
	Name:                   pulumi.String("string"),
	Networks: pulumi.StringArray{
		pulumi.String("string"),
	},
	RemoteAccessClients: pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	Timeouts: &checkpoint.ManagementAccessRoleTimeoutsArgs{
		Create: pulumi.String("string"),
	},
	Users: checkpoint.ManagementAccessRoleUserArray{
		&checkpoint.ManagementAccessRoleUserArgs{
			BaseDn: pulumi.String("string"),
			Selections: pulumi.StringArray{
				pulumi.String("string"),
			},
			Source: pulumi.String("string"),
		},
	},
})

    var managementAccessRoleResource = new ManagementAccessRole("managementAccessRoleResource", ManagementAccessRoleArgs.builder()
    .color("string")
    .comments("string")
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .machines(ManagementAccessRoleMachineArgs.builder()
        .baseDn("string")
        .selections("string")
        .source("string")
        .build())
    .managementAccessRoleId("string")
    .name("string")
    .networks("string")
    .remoteAccessClients("string")
    .tags("string")
    .timeouts(ManagementAccessRoleTimeoutsArgs.builder()
        .create("string")
        .build())
    .users(ManagementAccessRoleUserArgs.builder()
        .baseDn("string")
        .selections("string")
        .source("string")
        .build())
    .build());

    management_access_role_resource = checkpoint.ManagementAccessRole("managementAccessRoleResource",
    color="string",
    comments="string",
    ignore_errors=False,
    ignore_warnings=False,
    machines=[{
        "base_dn": "string",
        "selections": ["string"],
        "source": "string",
    }],
    management_access_role_id="string",
    name="string",
    networks=["string"],
    remote_access_clients="string",
    tags=["string"],
    timeouts={
        "create": "string",
    },
    users=[{
        "base_dn": "string",
        "selections": ["string"],
        "source": "string",
    }])

    const managementAccessRoleResource = new checkpoint.ManagementAccessRole("managementAccessRoleResource", {
    color: "string",
    comments: "string",
    ignoreErrors: false,
    ignoreWarnings: false,
    machines: [{
        baseDn: "string",
        selections: ["string"],
        source: "string",
    }],
    managementAccessRoleId: "string",
    name: "string",
    networks: ["string"],
    remoteAccessClients: "string",
    tags: ["string"],
    timeouts: {
        create: "string",
    },
    users: [{
        baseDn: "string",
        selections: ["string"],
        source: "string",
    }],
});

    type: checkpoint:ManagementAccessRole
properties:
    color: string
    comments: string
    ignoreErrors: false
    ignoreWarnings: false
    machines:
        - baseDn: string
          selections:
            - string
          source: string
    managementAccessRoleId: string
    name: string
    networks:
        - string
    remoteAccessClients: string
    tags:
        - string
    timeouts:
        create: string
    users:
        - baseDn: string
          selections:
            - string
          source: string

    ManagementAccessRole Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementAccessRole resource accepts the following input properties:

    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    Machines List<ManagementAccessRoleMachine>
    Machines that can access the system.machines blocks are documented below.
    ManagementAccessRoleId string
    Name string
    Object name.
    Networks List<string>
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    RemoteAccessClients string
    Remote access clients identified by name or UID.
    Tags List<string>
    Collection of tag identifiers.tags blocks are documented below.
    Timeouts ManagementAccessRoleTimeouts
    Users List<ManagementAccessRoleUser>
    Users that can access the system.users blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    Machines []ManagementAccessRoleMachineArgs
    Machines that can access the system.machines blocks are documented below.
    ManagementAccessRoleId string
    Name string
    Object name.
    Networks []string
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    RemoteAccessClients string
    Remote access clients identified by name or UID.
    Tags []string
    Collection of tag identifiers.tags blocks are documented below.
    Timeouts ManagementAccessRoleTimeoutsArgs
    Users []ManagementAccessRoleUserArgs
    Users that can access the system.users blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    machines List<ManagementAccessRoleMachine>
    Machines that can access the system.machines blocks are documented below.
    managementAccessRoleId String
    name String
    Object name.
    networks List<String>
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remoteAccessClients String
    Remote access clients identified by name or UID.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    timeouts ManagementAccessRoleTimeouts
    users List<ManagementAccessRoleUser>
    Users that can access the system.users blocks are documented below.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    machines ManagementAccessRoleMachine[]
    Machines that can access the system.machines blocks are documented below.
    managementAccessRoleId string
    name string
    Object name.
    networks string[]
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remoteAccessClients string
    Remote access clients identified by name or UID.
    tags string[]
    Collection of tag identifiers.tags blocks are documented below.
    timeouts ManagementAccessRoleTimeouts
    users ManagementAccessRoleUser[]
    Users that can access the system.users blocks are documented below.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    machines Sequence[ManagementAccessRoleMachineArgs]
    Machines that can access the system.machines blocks are documented below.
    management_access_role_id str
    name str
    Object name.
    networks Sequence[str]
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remote_access_clients str
    Remote access clients identified by name or UID.
    tags Sequence[str]
    Collection of tag identifiers.tags blocks are documented below.
    timeouts ManagementAccessRoleTimeoutsArgs
    users Sequence[ManagementAccessRoleUserArgs]
    Users that can access the system.users blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    machines List<Property Map>
    Machines that can access the system.machines blocks are documented below.
    managementAccessRoleId String
    name String
    Object name.
    networks List<String>
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remoteAccessClients String
    Remote access clients identified by name or UID.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    timeouts Property Map
    users List<Property Map>
    Users that can access the system.users blocks are documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementAccessRole resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementAccessRole Resource

    Get an existing ManagementAccessRole resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementAccessRoleState, opts?: CustomResourceOptions): ManagementAccessRole
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        color: Optional[str] = None,
        comments: Optional[str] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        machines: Optional[Sequence[ManagementAccessRoleMachineArgs]] = None,
        management_access_role_id: Optional[str] = None,
        name: Optional[str] = None,
        networks: Optional[Sequence[str]] = None,
        remote_access_clients: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        timeouts: Optional[ManagementAccessRoleTimeoutsArgs] = None,
        users: Optional[Sequence[ManagementAccessRoleUserArgs]] = None) -> ManagementAccessRole
    func GetManagementAccessRole(ctx *Context, name string, id IDInput, state *ManagementAccessRoleState, opts ...ResourceOption) (*ManagementAccessRole, error)
    public static ManagementAccessRole Get(string name, Input<string> id, ManagementAccessRoleState? state, CustomResourceOptions? opts = null)
    public static ManagementAccessRole get(String name, Output<String> id, ManagementAccessRoleState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementAccessRole    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    Machines List<ManagementAccessRoleMachine>
    Machines that can access the system.machines blocks are documented below.
    ManagementAccessRoleId string
    Name string
    Object name.
    Networks List<string>
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    RemoteAccessClients string
    Remote access clients identified by name or UID.
    Tags List<string>
    Collection of tag identifiers.tags blocks are documented below.
    Timeouts ManagementAccessRoleTimeouts
    Users List<ManagementAccessRoleUser>
    Users that can access the system.users blocks are documented below.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    Machines []ManagementAccessRoleMachineArgs
    Machines that can access the system.machines blocks are documented below.
    ManagementAccessRoleId string
    Name string
    Object name.
    Networks []string
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    RemoteAccessClients string
    Remote access clients identified by name or UID.
    Tags []string
    Collection of tag identifiers.tags blocks are documented below.
    Timeouts ManagementAccessRoleTimeoutsArgs
    Users []ManagementAccessRoleUserArgs
    Users that can access the system.users blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    machines List<ManagementAccessRoleMachine>
    Machines that can access the system.machines blocks are documented below.
    managementAccessRoleId String
    name String
    Object name.
    networks List<String>
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remoteAccessClients String
    Remote access clients identified by name or UID.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    timeouts ManagementAccessRoleTimeouts
    users List<ManagementAccessRoleUser>
    Users that can access the system.users blocks are documented below.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    machines ManagementAccessRoleMachine[]
    Machines that can access the system.machines blocks are documented below.
    managementAccessRoleId string
    name string
    Object name.
    networks string[]
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remoteAccessClients string
    Remote access clients identified by name or UID.
    tags string[]
    Collection of tag identifiers.tags blocks are documented below.
    timeouts ManagementAccessRoleTimeouts
    users ManagementAccessRoleUser[]
    Users that can access the system.users blocks are documented below.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    machines Sequence[ManagementAccessRoleMachineArgs]
    Machines that can access the system.machines blocks are documented below.
    management_access_role_id str
    name str
    Object name.
    networks Sequence[str]
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remote_access_clients str
    Remote access clients identified by name or UID.
    tags Sequence[str]
    Collection of tag identifiers.tags blocks are documented below.
    timeouts ManagementAccessRoleTimeoutsArgs
    users Sequence[ManagementAccessRoleUserArgs]
    Users that can access the system.users blocks are documented below.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    machines List<Property Map>
    Machines that can access the system.machines blocks are documented below.
    managementAccessRoleId String
    name String
    Object name.
    networks List<String>
    Collection of Network objects identified by the name or UID that can access the system.networks blocks are documented below.
    remoteAccessClients String
    Remote access clients identified by name or UID.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    timeouts Property Map
    users List<Property Map>
    Users that can access the system.users blocks are documented below.

    Supporting Types

    ManagementAccessRoleMachine, ManagementAccessRoleMachineArgs

    BaseDn string
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    Selections List<string>
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"]
    Source string
    any, all identified, Active Directory name or UID or Identity Tag. default value = "any"
    BaseDn string
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    Selections []string
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"]
    Source string
    any, all identified, Active Directory name or UID or Identity Tag. default value = "any"
    baseDn String
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections List<String>
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"]
    source String
    any, all identified, Active Directory name or UID or Identity Tag. default value = "any"
    baseDn string
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections string[]
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"]
    source string
    any, all identified, Active Directory name or UID or Identity Tag. default value = "any"
    base_dn str
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections Sequence[str]
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"]
    source str
    any, all identified, Active Directory name or UID or Identity Tag. default value = "any"
    baseDn String
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections List<String>
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"]
    source String
    any, all identified, Active Directory name or UID or Identity Tag. default value = "any"

    ManagementAccessRoleTimeouts, ManagementAccessRoleTimeoutsArgs

    Create string
    Create string
    create String
    create string
    create str
    create String

    ManagementAccessRoleUser, ManagementAccessRoleUserArgs

    BaseDn string
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    Selections List<string>
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"], on ad groups: Adds ad_group prefix to the selection, and removes spaces due to API limitations.
    Source string
    any, all identified, UID or Identity Tag or Internal User Groups or LDAP groups or Guests. default value = "any", supports only one AD group named CpmiAdGroup due to API limitations.
    BaseDn string
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    Selections []string
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"], on ad groups: Adds ad_group prefix to the selection, and removes spaces due to API limitations.
    Source string
    any, all identified, UID or Identity Tag or Internal User Groups or LDAP groups or Guests. default value = "any", supports only one AD group named CpmiAdGroup due to API limitations.
    baseDn String
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections List<String>
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"], on ad groups: Adds ad_group prefix to the selection, and removes spaces due to API limitations.
    source String
    any, all identified, UID or Identity Tag or Internal User Groups or LDAP groups or Guests. default value = "any", supports only one AD group named CpmiAdGroup due to API limitations.
    baseDn string
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections string[]
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"], on ad groups: Adds ad_group prefix to the selection, and removes spaces due to API limitations.
    source string
    any, all identified, UID or Identity Tag or Internal User Groups or LDAP groups or Guests. default value = "any", supports only one AD group named CpmiAdGroup due to API limitations.
    base_dn str
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections Sequence[str]
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"], on ad groups: Adds ad_group prefix to the selection, and removes spaces due to API limitations.
    source str
    any, all identified, UID or Identity Tag or Internal User Groups or LDAP groups or Guests. default value = "any", supports only one AD group named CpmiAdGroup due to API limitations.
    baseDn String
    When source is "Active Directory" use "base-dn" to refine the query in AD database.
    selections List<String>
    Name or UID of an object selected from source. selection blocks are documented below. default value = ["any"], on ad groups: Adds ad_group prefix to the selection, and removes spaces due to API limitations.
    source String
    any, all identified, UID or Identity Tag or Internal User Groups or LDAP groups or Guests. default value = "any", supports only one AD group named CpmiAdGroup due to API limitations.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    checkpoint logo
    checkpoint 2.9.0 published on Monday, Apr 14, 2025 by checkpointsw
    checkpointsw/terraform-provider-checkpoint