Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Checkpoint Provider
  3. API Docs
  4. ManagementLdapGroup
checkpoint 2.11.0 published on Wednesday, Sep 3, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

checkpoint.ManagementLdapGroup

Explore with Pulumi AI

checkpoint logo
checkpoint 2.11.0 published on Wednesday, Sep 3, 2025 by checkpointsw
checkpointsw/terraform-provider-checkpoint

    This resource allows you to execute Check Point Ldap Group.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as checkpoint from "@pulumi/checkpoint";

const example = new checkpoint.ManagementLdapGroup("example", {
    accountUnit: "TestLdapAccountUnit",
    accountUnitBranch: "OU=Test",
    applyFilterForDynamicGroup: true,
    groupPrefix: "N=TestGroup",
    ldapFilter: "N=AnotherGroup",
    scope: "only_sub_tree",
    subTreePrefix: "CA=AC",
});

    import pulumi
import pulumi_checkpoint as checkpoint

example = checkpoint.ManagementLdapGroup("example",
    account_unit="TestLdapAccountUnit",
    account_unit_branch="OU=Test",
    apply_filter_for_dynamic_group=True,
    group_prefix="N=TestGroup",
    ldap_filter="N=AnotherGroup",
    scope="only_sub_tree",
    sub_tree_prefix="CA=AC")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/checkpoint/v2/checkpoint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := checkpoint.NewManagementLdapGroup(ctx, "example", &checkpoint.ManagementLdapGroupArgs{
			AccountUnit:                pulumi.String("TestLdapAccountUnit"),
			AccountUnitBranch:          pulumi.String("OU=Test"),
			ApplyFilterForDynamicGroup: pulumi.Bool(true),
			GroupPrefix:                pulumi.String("N=TestGroup"),
			LdapFilter:                 pulumi.String("N=AnotherGroup"),
			Scope:                      pulumi.String("only_sub_tree"),
			SubTreePrefix:              pulumi.String("CA=AC"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Checkpoint = Pulumi.Checkpoint;

return await Deployment.RunAsync(() => 
{
    var example = new Checkpoint.ManagementLdapGroup("example", new()
    {
        AccountUnit = "TestLdapAccountUnit",
        AccountUnitBranch = "OU=Test",
        ApplyFilterForDynamicGroup = true,
        GroupPrefix = "N=TestGroup",
        LdapFilter = "N=AnotherGroup",
        Scope = "only_sub_tree",
        SubTreePrefix = "CA=AC",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.checkpoint.ManagementLdapGroup;
import com.pulumi.checkpoint.ManagementLdapGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ManagementLdapGroup("example", ManagementLdapGroupArgs.builder()
            .accountUnit("TestLdapAccountUnit")
            .accountUnitBranch("OU=Test")
            .applyFilterForDynamicGroup(true)
            .groupPrefix("N=TestGroup")
            .ldapFilter("N=AnotherGroup")
            .scope("only_sub_tree")
            .subTreePrefix("CA=AC")
            .build());

    }
}

    resources:
  example:
    type: checkpoint:ManagementLdapGroup
    properties:
      accountUnit: TestLdapAccountUnit
      accountUnitBranch: OU=Test
      applyFilterForDynamicGroup: true
      groupPrefix: N=TestGroup
      ldapFilter: N=AnotherGroup
      scope: only_sub_tree
      subTreePrefix: CA=AC

    Create ManagementLdapGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ManagementLdapGroup(name: string, args: ManagementLdapGroupArgs, opts?: CustomResourceOptions);
    @overload
def ManagementLdapGroup(resource_name: str,
                        args: ManagementLdapGroupArgs,
                        opts: Optional[ResourceOptions] = None)

@overload
def ManagementLdapGroup(resource_name: str,
                        opts: Optional[ResourceOptions] = None,
                        account_unit: Optional[str] = None,
                        account_unit_branch: Optional[str] = None,
                        apply_filter_for_dynamic_group: Optional[bool] = None,
                        color: Optional[str] = None,
                        comments: Optional[str] = None,
                        group_prefix: Optional[str] = None,
                        ignore_errors: Optional[bool] = None,
                        ignore_warnings: Optional[bool] = None,
                        ldap_filter: Optional[str] = None,
                        management_ldap_group_id: Optional[str] = None,
                        name: Optional[str] = None,
                        scope: Optional[str] = None,
                        sub_tree_prefix: Optional[str] = None,
                        tags: Optional[Sequence[str]] = None)
    func NewManagementLdapGroup(ctx *Context, name string, args ManagementLdapGroupArgs, opts ...ResourceOption) (*ManagementLdapGroup, error)
    public ManagementLdapGroup(string name, ManagementLdapGroupArgs args, CustomResourceOptions? opts = null)
    public ManagementLdapGroup(String name, ManagementLdapGroupArgs args)
public ManagementLdapGroup(String name, ManagementLdapGroupArgs args, CustomResourceOptions options)

    type: checkpoint:ManagementLdapGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ManagementLdapGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ManagementLdapGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ManagementLdapGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ManagementLdapGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ManagementLdapGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var managementLdapGroupResource = new Checkpoint.ManagementLdapGroup("managementLdapGroupResource", new()
{
    AccountUnit = "string",
    AccountUnitBranch = "string",
    ApplyFilterForDynamicGroup = false,
    Color = "string",
    Comments = "string",
    GroupPrefix = "string",
    IgnoreErrors = false,
    IgnoreWarnings = false,
    LdapFilter = "string",
    ManagementLdapGroupId = "string",
    Name = "string",
    Scope = "string",
    SubTreePrefix = "string",
    Tags = new[]
    {
        "string",
    },
});

    example, err := checkpoint.NewManagementLdapGroup(ctx, "managementLdapGroupResource", &checkpoint.ManagementLdapGroupArgs{
	AccountUnit:                pulumi.String("string"),
	AccountUnitBranch:          pulumi.String("string"),
	ApplyFilterForDynamicGroup: pulumi.Bool(false),
	Color:                      pulumi.String("string"),
	Comments:                   pulumi.String("string"),
	GroupPrefix:                pulumi.String("string"),
	IgnoreErrors:               pulumi.Bool(false),
	IgnoreWarnings:             pulumi.Bool(false),
	LdapFilter:                 pulumi.String("string"),
	ManagementLdapGroupId:      pulumi.String("string"),
	Name:                       pulumi.String("string"),
	Scope:                      pulumi.String("string"),
	SubTreePrefix:              pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var managementLdapGroupResource = new ManagementLdapGroup("managementLdapGroupResource", ManagementLdapGroupArgs.builder()
    .accountUnit("string")
    .accountUnitBranch("string")
    .applyFilterForDynamicGroup(false)
    .color("string")
    .comments("string")
    .groupPrefix("string")
    .ignoreErrors(false)
    .ignoreWarnings(false)
    .ldapFilter("string")
    .managementLdapGroupId("string")
    .name("string")
    .scope("string")
    .subTreePrefix("string")
    .tags("string")
    .build());

    management_ldap_group_resource = checkpoint.ManagementLdapGroup("managementLdapGroupResource",
    account_unit="string",
    account_unit_branch="string",
    apply_filter_for_dynamic_group=False,
    color="string",
    comments="string",
    group_prefix="string",
    ignore_errors=False,
    ignore_warnings=False,
    ldap_filter="string",
    management_ldap_group_id="string",
    name="string",
    scope="string",
    sub_tree_prefix="string",
    tags=["string"])

    const managementLdapGroupResource = new checkpoint.ManagementLdapGroup("managementLdapGroupResource", {
    accountUnit: "string",
    accountUnitBranch: "string",
    applyFilterForDynamicGroup: false,
    color: "string",
    comments: "string",
    groupPrefix: "string",
    ignoreErrors: false,
    ignoreWarnings: false,
    ldapFilter: "string",
    managementLdapGroupId: "string",
    name: "string",
    scope: "string",
    subTreePrefix: "string",
    tags: ["string"],
});

    type: checkpoint:ManagementLdapGroup
properties:
    accountUnit: string
    accountUnitBranch: string
    applyFilterForDynamicGroup: false
    color: string
    comments: string
    groupPrefix: string
    ignoreErrors: false
    ignoreWarnings: false
    ldapFilter: string
    managementLdapGroupId: string
    name: string
    scope: string
    subTreePrefix: string
    tags:
        - string

    ManagementLdapGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ManagementLdapGroup resource accepts the following input properties:

    AccountUnit string
    LDAP account unit of the group. Identified by name or UID.
    AccountUnitBranch string
    Branch of the selected LDAP Account Unit.
    ApplyFilterForDynamicGroup bool
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    GroupPrefix string
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    LdapFilter string
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    ManagementLdapGroupId string
    Name string
    Object name.
    Scope string
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    SubTreePrefix string
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    Tags List<string>
    Collection of tag identifiers.tags blocks are documented below.
    AccountUnit string
    LDAP account unit of the group. Identified by name or UID.
    AccountUnitBranch string
    Branch of the selected LDAP Account Unit.
    ApplyFilterForDynamicGroup bool
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    GroupPrefix string
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    LdapFilter string
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    ManagementLdapGroupId string
    Name string
    Object name.
    Scope string
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    SubTreePrefix string
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    Tags []string
    Collection of tag identifiers.tags blocks are documented below.
    accountUnit String
    LDAP account unit of the group. Identified by name or UID.
    accountUnitBranch String
    Branch of the selected LDAP Account Unit.
    applyFilterForDynamicGroup Boolean
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groupPrefix String
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    ldapFilter String
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    managementLdapGroupId String
    name String
    Object name.
    scope String
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    subTreePrefix String
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    accountUnit string
    LDAP account unit of the group. Identified by name or UID.
    accountUnitBranch string
    Branch of the selected LDAP Account Unit.
    applyFilterForDynamicGroup boolean
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    groupPrefix string
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    ldapFilter string
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    managementLdapGroupId string
    name string
    Object name.
    scope string
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    subTreePrefix string
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags string[]
    Collection of tag identifiers.tags blocks are documented below.
    account_unit str
    LDAP account unit of the group. Identified by name or UID.
    account_unit_branch str
    Branch of the selected LDAP Account Unit.
    apply_filter_for_dynamic_group bool
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    group_prefix str
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    ldap_filter str
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    management_ldap_group_id str
    name str
    Object name.
    scope str
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    sub_tree_prefix str
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags Sequence[str]
    Collection of tag identifiers.tags blocks are documented below.
    accountUnit String
    LDAP account unit of the group. Identified by name or UID.
    accountUnitBranch String
    Branch of the selected LDAP Account Unit.
    applyFilterForDynamicGroup Boolean
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groupPrefix String
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    ldapFilter String
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    managementLdapGroupId String
    name String
    Object name.
    scope String
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    subTreePrefix String
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ManagementLdapGroup resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ManagementLdapGroup Resource

    Get an existing ManagementLdapGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ManagementLdapGroupState, opts?: CustomResourceOptions): ManagementLdapGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_unit: Optional[str] = None,
        account_unit_branch: Optional[str] = None,
        apply_filter_for_dynamic_group: Optional[bool] = None,
        color: Optional[str] = None,
        comments: Optional[str] = None,
        group_prefix: Optional[str] = None,
        ignore_errors: Optional[bool] = None,
        ignore_warnings: Optional[bool] = None,
        ldap_filter: Optional[str] = None,
        management_ldap_group_id: Optional[str] = None,
        name: Optional[str] = None,
        scope: Optional[str] = None,
        sub_tree_prefix: Optional[str] = None,
        tags: Optional[Sequence[str]] = None) -> ManagementLdapGroup
    func GetManagementLdapGroup(ctx *Context, name string, id IDInput, state *ManagementLdapGroupState, opts ...ResourceOption) (*ManagementLdapGroup, error)
    public static ManagementLdapGroup Get(string name, Input<string> id, ManagementLdapGroupState? state, CustomResourceOptions? opts = null)
    public static ManagementLdapGroup get(String name, Output<String> id, ManagementLdapGroupState state, CustomResourceOptions options)
    resources:  _:    type: checkpoint:ManagementLdapGroup    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountUnit string
    LDAP account unit of the group. Identified by name or UID.
    AccountUnitBranch string
    Branch of the selected LDAP Account Unit.
    ApplyFilterForDynamicGroup bool
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    GroupPrefix string
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    LdapFilter string
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    ManagementLdapGroupId string
    Name string
    Object name.
    Scope string
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    SubTreePrefix string
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    Tags List<string>
    Collection of tag identifiers.tags blocks are documented below.
    AccountUnit string
    LDAP account unit of the group. Identified by name or UID.
    AccountUnitBranch string
    Branch of the selected LDAP Account Unit.
    ApplyFilterForDynamicGroup bool
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    Color string
    Color of the object. Should be one of existing colors.
    Comments string
    Comments string.
    GroupPrefix string
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    IgnoreErrors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    IgnoreWarnings bool
    Apply changes ignoring warnings.
    LdapFilter string
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    ManagementLdapGroupId string
    Name string
    Object name.
    Scope string
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    SubTreePrefix string
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    Tags []string
    Collection of tag identifiers.tags blocks are documented below.
    accountUnit String
    LDAP account unit of the group. Identified by name or UID.
    accountUnitBranch String
    Branch of the selected LDAP Account Unit.
    applyFilterForDynamicGroup Boolean
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groupPrefix String
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    ldapFilter String
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    managementLdapGroupId String
    name String
    Object name.
    scope String
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    subTreePrefix String
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.
    accountUnit string
    LDAP account unit of the group. Identified by name or UID.
    accountUnitBranch string
    Branch of the selected LDAP Account Unit.
    applyFilterForDynamicGroup boolean
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color string
    Color of the object. Should be one of existing colors.
    comments string
    Comments string.
    groupPrefix string
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignoreErrors boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings boolean
    Apply changes ignoring warnings.
    ldapFilter string
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    managementLdapGroupId string
    name string
    Object name.
    scope string
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    subTreePrefix string
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags string[]
    Collection of tag identifiers.tags blocks are documented below.
    account_unit str
    LDAP account unit of the group. Identified by name or UID.
    account_unit_branch str
    Branch of the selected LDAP Account Unit.
    apply_filter_for_dynamic_group bool
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color str
    Color of the object. Should be one of existing colors.
    comments str
    Comments string.
    group_prefix str
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignore_errors bool
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignore_warnings bool
    Apply changes ignoring warnings.
    ldap_filter str
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    management_ldap_group_id str
    name str
    Object name.
    scope str
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    sub_tree_prefix str
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags Sequence[str]
    Collection of tag identifiers.tags blocks are documented below.
    accountUnit String
    LDAP account unit of the group. Identified by name or UID.
    accountUnitBranch String
    Branch of the selected LDAP Account Unit.
    applyFilterForDynamicGroup Boolean
    Indicate whether to apply LDAP filter for dynamic group. Relevant only when 'scope' is not set to 'only_group_in_branch'.
    color String
    Color of the object. Should be one of existing colors.
    comments String
    Comments string.
    groupPrefix String
    Group name in the selected branch. Required only when 'scope' is set to 'only_group_in_branch'. Must be in DN syntax.
    ignoreErrors Boolean
    Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
    ignoreWarnings Boolean
    Apply changes ignoring warnings.
    ldapFilter String
    LDAP filter for the dynamic group. Relevant only when 'apply-filter-for-dynamic-group' is set to 'true'.
    managementLdapGroupId String
    name String
    Object name.
    scope String
    Group's scope. There are three possible ways of defining a group, based on the users defined on the Account Unit.
    subTreePrefix String
    Sub tree prefix of the selected branch. Relevant only when 'scope' is set to 'only_sub_prefix'. Must be in DN syntax.
    tags List<String>
    Collection of tag identifiers.tags blocks are documented below.

    Package Details

    Repository
    checkpoint checkpointsw/terraform-provider-checkpoint
    License
    Notes
    This Pulumi package is based on the checkpoint Terraform Provider.
    checkpoint logo
    checkpoint 2.11.0 published on Wednesday, Sep 3, 2025 by checkpointsw
    checkpointsw/terraform-provider-checkpoint