cloudflare.AccessGroup (v4)

Cloudflare v4.16.0 (4.x), Mar 9 26

Viewing docs for Cloudflare v4.16.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi

Go to latest version

Schema (JSON)

pulumi/pulumi-cloudflare

Viewing docs for Cloudflare v4.16.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi

Go to latest version

Schema (JSON)

pulumi/pulumi-cloudflare

It’s required that an account_id or zone_id is provided and in most cases using either is fine. However, if you’re using a scoped access token, you must provide the argument that matches the token’s scope. For example, an access token that is scoped to the “example.com” zone needs to use the zone_id argument.

Example Usage

using System.Collections.Generic;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;

return await Deployment.RunAsync(() => 
{
    // Allowing access to `test@example.com` email address only
    var testGroupAccessGroup = new Cloudflare.AccessGroup("testGroupAccessGroup", new()
    {
        AccountId = "f037e56e89293a057740de681ac9abbe",
        Name = "staging group",
        Includes = new[]
        {
            new Cloudflare.Inputs.AccessGroupIncludeArgs
            {
                Emails = new[]
                {
                    "test@example.com",
                },
            },
        },
    });

    // Allowing `test@example.com` to access but only when coming from a
    // specific IP.
    var testGroupIndex_accessGroupAccessGroup = new Cloudflare.AccessGroup("testGroupIndex/accessGroupAccessGroup", new()
    {
        AccountId = "f037e56e89293a057740de681ac9abbe",
        Name = "staging group",
        Includes = new[]
        {
            new Cloudflare.Inputs.AccessGroupIncludeArgs
            {
                Emails = new[]
                {
                    "test@example.com",
                },
            },
        },
        Requires = 
        {
            { "ips", new[]
            {
                @var.Office_ip,
            } },
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-cloudflare/sdk/v4/go/cloudflare"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := cloudflare.NewAccessGroup(ctx, "testGroupAccessGroup", &cloudflare.AccessGroupArgs{
			AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
			Name:      pulumi.String("staging group"),
			Includes: cloudflare.AccessGroupIncludeArray{
				&cloudflare.AccessGroupIncludeArgs{
					Emails: pulumi.StringArray{
						pulumi.String("test@example.com"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = cloudflare.NewAccessGroup(ctx, "testGroupIndex/accessGroupAccessGroup", &cloudflare.AccessGroupArgs{
			AccountId: pulumi.String("f037e56e89293a057740de681ac9abbe"),
			Name:      pulumi.String("staging group"),
			Includes: cloudflare.AccessGroupIncludeArray{
				&cloudflare.AccessGroupIncludeArgs{
					Emails: pulumi.StringArray{
						pulumi.String("test@example.com"),
					},
				},
			},
			Requires: cloudflare.AccessGroupRequireArray{
				Ips: cloudflare.AccessGroupRequireArgs{
					_var.Office_ip,
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.AccessGroup;
import com.pulumi.cloudflare.AccessGroupArgs;
import com.pulumi.cloudflare.inputs.AccessGroupIncludeArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var testGroupAccessGroup = new AccessGroup("testGroupAccessGroup", AccessGroupArgs.builder()        
            .accountId("f037e56e89293a057740de681ac9abbe")
            .name("staging group")
            .includes(AccessGroupIncludeArgs.builder()
                .emails("test@example.com")
                .build())
            .build());

        var testGroupIndex_accessGroupAccessGroup = new AccessGroup("testGroupIndex/accessGroupAccessGroup", AccessGroupArgs.builder()        
            .accountId("f037e56e89293a057740de681ac9abbe")
            .name("staging group")
            .includes(AccessGroupIncludeArgs.builder()
                .emails("test@example.com")
                .build())
            .requires(AccessGroupRequireArgs.builder()
                .ips(var_.office_ip())
                .build())
            .build());

    }
}

import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";

// Allowing access to `test@example.com` email address only
const testGroupAccessGroup = new cloudflare.AccessGroup("testGroupAccessGroup", {
    accountId: "f037e56e89293a057740de681ac9abbe",
    name: "staging group",
    includes: [{
        emails: ["test@example.com"],
    }],
});
// Allowing `test@example.com` to access but only when coming from a
// specific IP.
const testGroupIndex_accessGroupAccessGroup = new cloudflare.AccessGroup("testGroupIndex/accessGroupAccessGroup", {
    accountId: "f037e56e89293a057740de681ac9abbe",
    name: "staging group",
    includes: [{
        emails: ["test@example.com"],
    }],
    requires: {
        ips: [_var.office_ip],
    },
});

import pulumi
import pulumi_cloudflare as cloudflare

# Allowing access to `test@example.com` email address only
test_group_access_group = cloudflare.AccessGroup("testGroupAccessGroup",
    account_id="f037e56e89293a057740de681ac9abbe",
    name="staging group",
    includes=[cloudflare.AccessGroupIncludeArgs(
        emails=["test@example.com"],
    )])
# Allowing `test@example.com` to access but only when coming from a
# specific IP.
test_group_index_access_group_access_group = cloudflare.AccessGroup("testGroupIndex/accessGroupAccessGroup",
    account_id="f037e56e89293a057740de681ac9abbe",
    name="staging group",
    includes=[cloudflare.AccessGroupIncludeArgs(
        emails=["test@example.com"],
    )],
    requires={
        "ips": [var["office_ip"]],
    })

resources:
  # Allowing access to `test@example.com` email address only
  testGroupAccessGroup:
    type: cloudflare:AccessGroup
    properties:
      accountId: f037e56e89293a057740de681ac9abbe
      name: staging group
      includes:
        - emails:
            - test@example.com
  # Allowing `test@example.com` to access but only when coming from a
  # specific IP.
  testGroupIndex/accessGroupAccessGroup:
    type: cloudflare:AccessGroup
    properties:
      accountId: f037e56e89293a057740de681ac9abbe
      name: staging group
      includes:
        - emails:
            - test@example.com
      requires:
        ips:
          - ${var.office_ip}

Create AccessGroup Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AccessGroup(name: string, args: AccessGroupArgs, opts?: CustomResourceOptions);

@overload
def AccessGroup(resource_name: str,
                args: AccessGroupArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def AccessGroup(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
                name: Optional[str] = None,
                account_id: Optional[str] = None,
                excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
                requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
                zone_id: Optional[str] = None)

func NewAccessGroup(ctx *Context, name string, args AccessGroupArgs, opts ...ResourceOption) (*AccessGroup, error)

public AccessGroup(string name, AccessGroupArgs args, CustomResourceOptions? opts = null)

public AccessGroup(String name, AccessGroupArgs args)
public AccessGroup(String name, AccessGroupArgs args, CustomResourceOptions options)

type: cloudflare:AccessGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args AccessGroupArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args AccessGroupArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args AccessGroupArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args AccessGroupArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args AccessGroupArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var accessGroupResource = new Cloudflare.AccessGroup("accessGroupResource", new()
{
    Includes = new[]
    {
        new Cloudflare.Inputs.AccessGroupIncludeArgs
        {
            AnyValidServiceToken = false,
            AuthMethod = "string",
            Azures = new[]
            {
                new Cloudflare.Inputs.AccessGroupIncludeAzureArgs
                {
                    IdentityProviderId = "string",
                    Ids = new[]
                    {
                        "string",
                    },
                },
            },
            Certificate = false,
            CommonName = "string",
            DevicePostures = new[]
            {
                "string",
            },
            EmailDomains = new[]
            {
                "string",
            },
            Emails = new[]
            {
                "string",
            },
            Everyone = false,
            ExternalEvaluation = new Cloudflare.Inputs.AccessGroupIncludeExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geos = new[]
            {
                "string",
            },
            Githubs = new[]
            {
                new Cloudflare.Inputs.AccessGroupIncludeGithubArgs
                {
                    IdentityProviderId = "string",
                    Name = "string",
                    Teams = new[]
                    {
                        "string",
                    },
                },
            },
            Groups = new[]
            {
                "string",
            },
            Gsuites = new[]
            {
                new Cloudflare.Inputs.AccessGroupIncludeGsuiteArgs
                {
                    Emails = new[]
                    {
                        "string",
                    },
                    IdentityProviderId = "string",
                },
            },
            IpLists = new[]
            {
                "string",
            },
            Ips = new[]
            {
                "string",
            },
            LoginMethods = new[]
            {
                "string",
            },
            Oktas = new[]
            {
                new Cloudflare.Inputs.AccessGroupIncludeOktaArgs
                {
                    IdentityProviderId = "string",
                    Names = new[]
                    {
                        "string",
                    },
                },
            },
            Samls = new[]
            {
                new Cloudflare.Inputs.AccessGroupIncludeSamlArgs
                {
                    AttributeName = "string",
                    AttributeValue = "string",
                    IdentityProviderId = "string",
                },
            },
            ServiceTokens = new[]
            {
                "string",
            },
        },
    },
    Name = "string",
    AccountId = "string",
    Excludes = new[]
    {
        new Cloudflare.Inputs.AccessGroupExcludeArgs
        {
            AnyValidServiceToken = false,
            AuthMethod = "string",
            Azures = new[]
            {
                new Cloudflare.Inputs.AccessGroupExcludeAzureArgs
                {
                    IdentityProviderId = "string",
                    Ids = new[]
                    {
                        "string",
                    },
                },
            },
            Certificate = false,
            CommonName = "string",
            DevicePostures = new[]
            {
                "string",
            },
            EmailDomains = new[]
            {
                "string",
            },
            Emails = new[]
            {
                "string",
            },
            Everyone = false,
            ExternalEvaluation = new Cloudflare.Inputs.AccessGroupExcludeExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geos = new[]
            {
                "string",
            },
            Githubs = new[]
            {
                new Cloudflare.Inputs.AccessGroupExcludeGithubArgs
                {
                    IdentityProviderId = "string",
                    Name = "string",
                    Teams = new[]
                    {
                        "string",
                    },
                },
            },
            Groups = new[]
            {
                "string",
            },
            Gsuites = new[]
            {
                new Cloudflare.Inputs.AccessGroupExcludeGsuiteArgs
                {
                    Emails = new[]
                    {
                        "string",
                    },
                    IdentityProviderId = "string",
                },
            },
            IpLists = new[]
            {
                "string",
            },
            Ips = new[]
            {
                "string",
            },
            LoginMethods = new[]
            {
                "string",
            },
            Oktas = new[]
            {
                new Cloudflare.Inputs.AccessGroupExcludeOktaArgs
                {
                    IdentityProviderId = "string",
                    Names = new[]
                    {
                        "string",
                    },
                },
            },
            Samls = new[]
            {
                new Cloudflare.Inputs.AccessGroupExcludeSamlArgs
                {
                    AttributeName = "string",
                    AttributeValue = "string",
                    IdentityProviderId = "string",
                },
            },
            ServiceTokens = new[]
            {
                "string",
            },
        },
    },
    Requires = new[]
    {
        new Cloudflare.Inputs.AccessGroupRequireArgs
        {
            AnyValidServiceToken = false,
            AuthMethod = "string",
            Azures = new[]
            {
                new Cloudflare.Inputs.AccessGroupRequireAzureArgs
                {
                    IdentityProviderId = "string",
                    Ids = new[]
                    {
                        "string",
                    },
                },
            },
            Certificate = false,
            CommonName = "string",
            DevicePostures = new[]
            {
                "string",
            },
            EmailDomains = new[]
            {
                "string",
            },
            Emails = new[]
            {
                "string",
            },
            Everyone = false,
            ExternalEvaluation = new Cloudflare.Inputs.AccessGroupRequireExternalEvaluationArgs
            {
                EvaluateUrl = "string",
                KeysUrl = "string",
            },
            Geos = new[]
            {
                "string",
            },
            Githubs = new[]
            {
                new Cloudflare.Inputs.AccessGroupRequireGithubArgs
                {
                    IdentityProviderId = "string",
                    Name = "string",
                    Teams = new[]
                    {
                        "string",
                    },
                },
            },
            Groups = new[]
            {
                "string",
            },
            Gsuites = new[]
            {
                new Cloudflare.Inputs.AccessGroupRequireGsuiteArgs
                {
                    Emails = new[]
                    {
                        "string",
                    },
                    IdentityProviderId = "string",
                },
            },
            IpLists = new[]
            {
                "string",
            },
            Ips = new[]
            {
                "string",
            },
            LoginMethods = new[]
            {
                "string",
            },
            Oktas = new[]
            {
                new Cloudflare.Inputs.AccessGroupRequireOktaArgs
                {
                    IdentityProviderId = "string",
                    Names = new[]
                    {
                        "string",
                    },
                },
            },
            Samls = new[]
            {
                new Cloudflare.Inputs.AccessGroupRequireSamlArgs
                {
                    AttributeName = "string",
                    AttributeValue = "string",
                    IdentityProviderId = "string",
                },
            },
            ServiceTokens = new[]
            {
                "string",
            },
        },
    },
    ZoneId = "string",
});

example, err := cloudflare.NewAccessGroup(ctx, "accessGroupResource", &cloudflare.AccessGroupArgs{
	Includes: cloudflare.AccessGroupIncludeArray{
		&cloudflare.AccessGroupIncludeArgs{
			AnyValidServiceToken: pulumi.Bool(false),
			AuthMethod:           pulumi.String("string"),
			Azures: cloudflare.AccessGroupIncludeAzureArray{
				&cloudflare.AccessGroupIncludeAzureArgs{
					IdentityProviderId: pulumi.String("string"),
					Ids: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Certificate: pulumi.Bool(false),
			CommonName:  pulumi.String("string"),
			DevicePostures: pulumi.StringArray{
				pulumi.String("string"),
			},
			EmailDomains: pulumi.StringArray{
				pulumi.String("string"),
			},
			Emails: pulumi.StringArray{
				pulumi.String("string"),
			},
			Everyone: pulumi.Bool(false),
			ExternalEvaluation: &cloudflare.AccessGroupIncludeExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geos: pulumi.StringArray{
				pulumi.String("string"),
			},
			Githubs: cloudflare.AccessGroupIncludeGithubArray{
				&cloudflare.AccessGroupIncludeGithubArgs{
					IdentityProviderId: pulumi.String("string"),
					Name:               pulumi.String("string"),
					Teams: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Groups: pulumi.StringArray{
				pulumi.String("string"),
			},
			Gsuites: cloudflare.AccessGroupIncludeGsuiteArray{
				&cloudflare.AccessGroupIncludeGsuiteArgs{
					Emails: pulumi.StringArray{
						pulumi.String("string"),
					},
					IdentityProviderId: pulumi.String("string"),
				},
			},
			IpLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ips: pulumi.StringArray{
				pulumi.String("string"),
			},
			LoginMethods: pulumi.StringArray{
				pulumi.String("string"),
			},
			Oktas: cloudflare.AccessGroupIncludeOktaArray{
				&cloudflare.AccessGroupIncludeOktaArgs{
					IdentityProviderId: pulumi.String("string"),
					Names: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Samls: cloudflare.AccessGroupIncludeSamlArray{
				&cloudflare.AccessGroupIncludeSamlArgs{
					AttributeName:      pulumi.String("string"),
					AttributeValue:     pulumi.String("string"),
					IdentityProviderId: pulumi.String("string"),
				},
			},
			ServiceTokens: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Name:      pulumi.String("string"),
	AccountId: pulumi.String("string"),
	Excludes: cloudflare.AccessGroupExcludeArray{
		&cloudflare.AccessGroupExcludeArgs{
			AnyValidServiceToken: pulumi.Bool(false),
			AuthMethod:           pulumi.String("string"),
			Azures: cloudflare.AccessGroupExcludeAzureArray{
				&cloudflare.AccessGroupExcludeAzureArgs{
					IdentityProviderId: pulumi.String("string"),
					Ids: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Certificate: pulumi.Bool(false),
			CommonName:  pulumi.String("string"),
			DevicePostures: pulumi.StringArray{
				pulumi.String("string"),
			},
			EmailDomains: pulumi.StringArray{
				pulumi.String("string"),
			},
			Emails: pulumi.StringArray{
				pulumi.String("string"),
			},
			Everyone: pulumi.Bool(false),
			ExternalEvaluation: &cloudflare.AccessGroupExcludeExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geos: pulumi.StringArray{
				pulumi.String("string"),
			},
			Githubs: cloudflare.AccessGroupExcludeGithubArray{
				&cloudflare.AccessGroupExcludeGithubArgs{
					IdentityProviderId: pulumi.String("string"),
					Name:               pulumi.String("string"),
					Teams: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Groups: pulumi.StringArray{
				pulumi.String("string"),
			},
			Gsuites: cloudflare.AccessGroupExcludeGsuiteArray{
				&cloudflare.AccessGroupExcludeGsuiteArgs{
					Emails: pulumi.StringArray{
						pulumi.String("string"),
					},
					IdentityProviderId: pulumi.String("string"),
				},
			},
			IpLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ips: pulumi.StringArray{
				pulumi.String("string"),
			},
			LoginMethods: pulumi.StringArray{
				pulumi.String("string"),
			},
			Oktas: cloudflare.AccessGroupExcludeOktaArray{
				&cloudflare.AccessGroupExcludeOktaArgs{
					IdentityProviderId: pulumi.String("string"),
					Names: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Samls: cloudflare.AccessGroupExcludeSamlArray{
				&cloudflare.AccessGroupExcludeSamlArgs{
					AttributeName:      pulumi.String("string"),
					AttributeValue:     pulumi.String("string"),
					IdentityProviderId: pulumi.String("string"),
				},
			},
			ServiceTokens: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Requires: cloudflare.AccessGroupRequireArray{
		&cloudflare.AccessGroupRequireArgs{
			AnyValidServiceToken: pulumi.Bool(false),
			AuthMethod:           pulumi.String("string"),
			Azures: cloudflare.AccessGroupRequireAzureArray{
				&cloudflare.AccessGroupRequireAzureArgs{
					IdentityProviderId: pulumi.String("string"),
					Ids: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Certificate: pulumi.Bool(false),
			CommonName:  pulumi.String("string"),
			DevicePostures: pulumi.StringArray{
				pulumi.String("string"),
			},
			EmailDomains: pulumi.StringArray{
				pulumi.String("string"),
			},
			Emails: pulumi.StringArray{
				pulumi.String("string"),
			},
			Everyone: pulumi.Bool(false),
			ExternalEvaluation: &cloudflare.AccessGroupRequireExternalEvaluationArgs{
				EvaluateUrl: pulumi.String("string"),
				KeysUrl:     pulumi.String("string"),
			},
			Geos: pulumi.StringArray{
				pulumi.String("string"),
			},
			Githubs: cloudflare.AccessGroupRequireGithubArray{
				&cloudflare.AccessGroupRequireGithubArgs{
					IdentityProviderId: pulumi.String("string"),
					Name:               pulumi.String("string"),
					Teams: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Groups: pulumi.StringArray{
				pulumi.String("string"),
			},
			Gsuites: cloudflare.AccessGroupRequireGsuiteArray{
				&cloudflare.AccessGroupRequireGsuiteArgs{
					Emails: pulumi.StringArray{
						pulumi.String("string"),
					},
					IdentityProviderId: pulumi.String("string"),
				},
			},
			IpLists: pulumi.StringArray{
				pulumi.String("string"),
			},
			Ips: pulumi.StringArray{
				pulumi.String("string"),
			},
			LoginMethods: pulumi.StringArray{
				pulumi.String("string"),
			},
			Oktas: cloudflare.AccessGroupRequireOktaArray{
				&cloudflare.AccessGroupRequireOktaArgs{
					IdentityProviderId: pulumi.String("string"),
					Names: pulumi.StringArray{
						pulumi.String("string"),
					},
				},
			},
			Samls: cloudflare.AccessGroupRequireSamlArray{
				&cloudflare.AccessGroupRequireSamlArgs{
					AttributeName:      pulumi.String("string"),
					AttributeValue:     pulumi.String("string"),
					IdentityProviderId: pulumi.String("string"),
				},
			},
			ServiceTokens: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	ZoneId: pulumi.String("string"),
})

var accessGroupResource = new AccessGroup("accessGroupResource", AccessGroupArgs.builder()
    .includes(AccessGroupIncludeArgs.builder()
        .anyValidServiceToken(false)
        .authMethod("string")
        .azures(AccessGroupIncludeAzureArgs.builder()
            .identityProviderId("string")
            .ids("string")
            .build())
        .certificate(false)
        .commonName("string")
        .devicePostures("string")
        .emailDomains("string")
        .emails("string")
        .everyone(false)
        .externalEvaluation(AccessGroupIncludeExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geos("string")
        .githubs(AccessGroupIncludeGithubArgs.builder()
            .identityProviderId("string")
            .name("string")
            .teams("string")
            .build())
        .groups("string")
        .gsuites(AccessGroupIncludeGsuiteArgs.builder()
            .emails("string")
            .identityProviderId("string")
            .build())
        .ipLists("string")
        .ips("string")
        .loginMethods("string")
        .oktas(AccessGroupIncludeOktaArgs.builder()
            .identityProviderId("string")
            .names("string")
            .build())
        .samls(AccessGroupIncludeSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceTokens("string")
        .build())
    .name("string")
    .accountId("string")
    .excludes(AccessGroupExcludeArgs.builder()
        .anyValidServiceToken(false)
        .authMethod("string")
        .azures(AccessGroupExcludeAzureArgs.builder()
            .identityProviderId("string")
            .ids("string")
            .build())
        .certificate(false)
        .commonName("string")
        .devicePostures("string")
        .emailDomains("string")
        .emails("string")
        .everyone(false)
        .externalEvaluation(AccessGroupExcludeExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geos("string")
        .githubs(AccessGroupExcludeGithubArgs.builder()
            .identityProviderId("string")
            .name("string")
            .teams("string")
            .build())
        .groups("string")
        .gsuites(AccessGroupExcludeGsuiteArgs.builder()
            .emails("string")
            .identityProviderId("string")
            .build())
        .ipLists("string")
        .ips("string")
        .loginMethods("string")
        .oktas(AccessGroupExcludeOktaArgs.builder()
            .identityProviderId("string")
            .names("string")
            .build())
        .samls(AccessGroupExcludeSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceTokens("string")
        .build())
    .requires(AccessGroupRequireArgs.builder()
        .anyValidServiceToken(false)
        .authMethod("string")
        .azures(AccessGroupRequireAzureArgs.builder()
            .identityProviderId("string")
            .ids("string")
            .build())
        .certificate(false)
        .commonName("string")
        .devicePostures("string")
        .emailDomains("string")
        .emails("string")
        .everyone(false)
        .externalEvaluation(AccessGroupRequireExternalEvaluationArgs.builder()
            .evaluateUrl("string")
            .keysUrl("string")
            .build())
        .geos("string")
        .githubs(AccessGroupRequireGithubArgs.builder()
            .identityProviderId("string")
            .name("string")
            .teams("string")
            .build())
        .groups("string")
        .gsuites(AccessGroupRequireGsuiteArgs.builder()
            .emails("string")
            .identityProviderId("string")
            .build())
        .ipLists("string")
        .ips("string")
        .loginMethods("string")
        .oktas(AccessGroupRequireOktaArgs.builder()
            .identityProviderId("string")
            .names("string")
            .build())
        .samls(AccessGroupRequireSamlArgs.builder()
            .attributeName("string")
            .attributeValue("string")
            .identityProviderId("string")
            .build())
        .serviceTokens("string")
        .build())
    .zoneId("string")
    .build());

access_group_resource = cloudflare.AccessGroup("accessGroupResource",
    includes=[{
        "any_valid_service_token": False,
        "auth_method": "string",
        "azures": [{
            "identity_provider_id": "string",
            "ids": ["string"],
        }],
        "certificate": False,
        "common_name": "string",
        "device_postures": ["string"],
        "email_domains": ["string"],
        "emails": ["string"],
        "everyone": False,
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geos": ["string"],
        "githubs": [{
            "identity_provider_id": "string",
            "name": "string",
            "teams": ["string"],
        }],
        "groups": ["string"],
        "gsuites": [{
            "emails": ["string"],
            "identity_provider_id": "string",
        }],
        "ip_lists": ["string"],
        "ips": ["string"],
        "login_methods": ["string"],
        "oktas": [{
            "identity_provider_id": "string",
            "names": ["string"],
        }],
        "samls": [{
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        }],
        "service_tokens": ["string"],
    }],
    name="string",
    account_id="string",
    excludes=[{
        "any_valid_service_token": False,
        "auth_method": "string",
        "azures": [{
            "identity_provider_id": "string",
            "ids": ["string"],
        }],
        "certificate": False,
        "common_name": "string",
        "device_postures": ["string"],
        "email_domains": ["string"],
        "emails": ["string"],
        "everyone": False,
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geos": ["string"],
        "githubs": [{
            "identity_provider_id": "string",
            "name": "string",
            "teams": ["string"],
        }],
        "groups": ["string"],
        "gsuites": [{
            "emails": ["string"],
            "identity_provider_id": "string",
        }],
        "ip_lists": ["string"],
        "ips": ["string"],
        "login_methods": ["string"],
        "oktas": [{
            "identity_provider_id": "string",
            "names": ["string"],
        }],
        "samls": [{
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        }],
        "service_tokens": ["string"],
    }],
    requires=[{
        "any_valid_service_token": False,
        "auth_method": "string",
        "azures": [{
            "identity_provider_id": "string",
            "ids": ["string"],
        }],
        "certificate": False,
        "common_name": "string",
        "device_postures": ["string"],
        "email_domains": ["string"],
        "emails": ["string"],
        "everyone": False,
        "external_evaluation": {
            "evaluate_url": "string",
            "keys_url": "string",
        },
        "geos": ["string"],
        "githubs": [{
            "identity_provider_id": "string",
            "name": "string",
            "teams": ["string"],
        }],
        "groups": ["string"],
        "gsuites": [{
            "emails": ["string"],
            "identity_provider_id": "string",
        }],
        "ip_lists": ["string"],
        "ips": ["string"],
        "login_methods": ["string"],
        "oktas": [{
            "identity_provider_id": "string",
            "names": ["string"],
        }],
        "samls": [{
            "attribute_name": "string",
            "attribute_value": "string",
            "identity_provider_id": "string",
        }],
        "service_tokens": ["string"],
    }],
    zone_id="string")

const accessGroupResource = new cloudflare.AccessGroup("accessGroupResource", {
    includes: [{
        anyValidServiceToken: false,
        authMethod: "string",
        azures: [{
            identityProviderId: "string",
            ids: ["string"],
        }],
        certificate: false,
        commonName: "string",
        devicePostures: ["string"],
        emailDomains: ["string"],
        emails: ["string"],
        everyone: false,
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geos: ["string"],
        githubs: [{
            identityProviderId: "string",
            name: "string",
            teams: ["string"],
        }],
        groups: ["string"],
        gsuites: [{
            emails: ["string"],
            identityProviderId: "string",
        }],
        ipLists: ["string"],
        ips: ["string"],
        loginMethods: ["string"],
        oktas: [{
            identityProviderId: "string",
            names: ["string"],
        }],
        samls: [{
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        }],
        serviceTokens: ["string"],
    }],
    name: "string",
    accountId: "string",
    excludes: [{
        anyValidServiceToken: false,
        authMethod: "string",
        azures: [{
            identityProviderId: "string",
            ids: ["string"],
        }],
        certificate: false,
        commonName: "string",
        devicePostures: ["string"],
        emailDomains: ["string"],
        emails: ["string"],
        everyone: false,
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geos: ["string"],
        githubs: [{
            identityProviderId: "string",
            name: "string",
            teams: ["string"],
        }],
        groups: ["string"],
        gsuites: [{
            emails: ["string"],
            identityProviderId: "string",
        }],
        ipLists: ["string"],
        ips: ["string"],
        loginMethods: ["string"],
        oktas: [{
            identityProviderId: "string",
            names: ["string"],
        }],
        samls: [{
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        }],
        serviceTokens: ["string"],
    }],
    requires: [{
        anyValidServiceToken: false,
        authMethod: "string",
        azures: [{
            identityProviderId: "string",
            ids: ["string"],
        }],
        certificate: false,
        commonName: "string",
        devicePostures: ["string"],
        emailDomains: ["string"],
        emails: ["string"],
        everyone: false,
        externalEvaluation: {
            evaluateUrl: "string",
            keysUrl: "string",
        },
        geos: ["string"],
        githubs: [{
            identityProviderId: "string",
            name: "string",
            teams: ["string"],
        }],
        groups: ["string"],
        gsuites: [{
            emails: ["string"],
            identityProviderId: "string",
        }],
        ipLists: ["string"],
        ips: ["string"],
        loginMethods: ["string"],
        oktas: [{
            identityProviderId: "string",
            names: ["string"],
        }],
        samls: [{
            attributeName: "string",
            attributeValue: "string",
            identityProviderId: "string",
        }],
        serviceTokens: ["string"],
    }],
    zoneId: "string",
});

type: cloudflare:AccessGroup
properties:
    accountId: string
    excludes:
        - anyValidServiceToken: false
          authMethod: string
          azures:
            - identityProviderId: string
              ids:
                - string
          certificate: false
          commonName: string
          devicePostures:
            - string
          emailDomains:
            - string
          emails:
            - string
          everyone: false
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geos:
            - string
          githubs:
            - identityProviderId: string
              name: string
              teams:
                - string
          groups:
            - string
          gsuites:
            - emails:
                - string
              identityProviderId: string
          ipLists:
            - string
          ips:
            - string
          loginMethods:
            - string
          oktas:
            - identityProviderId: string
              names:
                - string
          samls:
            - attributeName: string
              attributeValue: string
              identityProviderId: string
          serviceTokens:
            - string
    includes:
        - anyValidServiceToken: false
          authMethod: string
          azures:
            - identityProviderId: string
              ids:
                - string
          certificate: false
          commonName: string
          devicePostures:
            - string
          emailDomains:
            - string
          emails:
            - string
          everyone: false
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geos:
            - string
          githubs:
            - identityProviderId: string
              name: string
              teams:
                - string
          groups:
            - string
          gsuites:
            - emails:
                - string
              identityProviderId: string
          ipLists:
            - string
          ips:
            - string
          loginMethods:
            - string
          oktas:
            - identityProviderId: string
              names:
                - string
          samls:
            - attributeName: string
              attributeValue: string
              identityProviderId: string
          serviceTokens:
            - string
    name: string
    requires:
        - anyValidServiceToken: false
          authMethod: string
          azures:
            - identityProviderId: string
              ids:
                - string
          certificate: false
          commonName: string
          devicePostures:
            - string
          emailDomains:
            - string
          emails:
            - string
          everyone: false
          externalEvaluation:
            evaluateUrl: string
            keysUrl: string
          geos:
            - string
          githubs:
            - identityProviderId: string
              name: string
              teams:
                - string
          groups:
            - string
          gsuites:
            - emails:
                - string
              identityProviderId: string
          ipLists:
            - string
          ips:
            - string
          loginMethods:
            - string
          oktas:
            - identityProviderId: string
              names:
                - string
          samls:
            - attributeName: string
              attributeValue: string
              identityProviderId: string
          serviceTokens:
            - string
    zoneId: string

AccessGroup Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AccessGroup resource accepts the following input properties:

Includes List<AccessGroupInclude>
Name string
AccountId string: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
Excludes List<AccessGroupExclude>
Requires List<AccessGroupRequire>
ZoneId string: The zone identifier to target for the resource. Conflicts with account_id.

Includes []AccessGroupIncludeArgs
Name string
AccountId string: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
Excludes []AccessGroupExcludeArgs
Requires []AccessGroupRequireArgs
ZoneId string: The zone identifier to target for the resource. Conflicts with account_id.

includes List<AccessGroupInclude>
name String
accountId String: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes List<AccessGroupExclude>
requires List<AccessGroupRequire>
zoneId String: The zone identifier to target for the resource. Conflicts with account_id.

includes AccessGroupInclude[]
name string
accountId string: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes AccessGroupExclude[]
requires AccessGroupRequire[]
zoneId string: The zone identifier to target for the resource. Conflicts with account_id.

includes Sequence[AccessGroupIncludeArgs]
name str
account_id str: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes Sequence[AccessGroupExcludeArgs]
requires Sequence[AccessGroupRequireArgs]
zone_id str: The zone identifier to target for the resource. Conflicts with account_id.

includes List<Property Map>
name String
accountId String: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes List<Property Map>
requires List<Property Map>
zoneId String: The zone identifier to target for the resource. Conflicts with account_id.

Outputs

All input properties are implicitly available as output properties. Additionally, the AccessGroup resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing AccessGroup Resource

Get an existing AccessGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AccessGroupState, opts?: CustomResourceOptions): AccessGroup

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        excludes: Optional[Sequence[AccessGroupExcludeArgs]] = None,
        includes: Optional[Sequence[AccessGroupIncludeArgs]] = None,
        name: Optional[str] = None,
        requires: Optional[Sequence[AccessGroupRequireArgs]] = None,
        zone_id: Optional[str] = None) -> AccessGroup

func GetAccessGroup(ctx *Context, name string, id IDInput, state *AccessGroupState, opts ...ResourceOption) (*AccessGroup, error)

public static AccessGroup Get(string name, Input<string> id, AccessGroupState? state, CustomResourceOptions? opts = null)

public static AccessGroup get(String name, Output<String> id, AccessGroupState state, CustomResourceOptions options)

resources:  _:    type: cloudflare:AccessGroup    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AccountId string: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
Excludes List<AccessGroupExclude>
Includes List<AccessGroupInclude>
Name string
Requires List<AccessGroupRequire>
ZoneId string: The zone identifier to target for the resource. Conflicts with account_id.

AccountId string: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
Excludes []AccessGroupExcludeArgs
Includes []AccessGroupIncludeArgs
Name string
Requires []AccessGroupRequireArgs
ZoneId string: The zone identifier to target for the resource. Conflicts with account_id.

accountId String: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes List<AccessGroupExclude>
includes List<AccessGroupInclude>
name String
requires List<AccessGroupRequire>
zoneId String: The zone identifier to target for the resource. Conflicts with account_id.

accountId string: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes AccessGroupExclude[]
includes AccessGroupInclude[]
name string
requires AccessGroupRequire[]
zoneId string: The zone identifier to target for the resource. Conflicts with account_id.

account_id str: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes Sequence[AccessGroupExcludeArgs]
includes Sequence[AccessGroupIncludeArgs]
name str
requires Sequence[AccessGroupRequireArgs]
zone_id str: The zone identifier to target for the resource. Conflicts with account_id.

accountId String: The account identifier to target for the resource. Conflicts with zone_id. Modifying this attribute will force creation of a new resource.
excludes List<Property Map>
includes List<Property Map>
name String
requires List<Property Map>
zoneId String: The zone identifier to target for the resource. Conflicts with account_id.

Supporting Types

AccessGroupExclude, AccessGroupExcludeArgs

AnyValidServiceToken bool
AuthMethod string
Azures List<AccessGroupExcludeAzure>
Certificate bool
CommonName string
DevicePostures List<string>
EmailDomains List<string>
Emails List<string>
Everyone bool
ExternalEvaluation AccessGroupExcludeExternalEvaluation
Geos List<string>
Githubs List<AccessGroupExcludeGithub>
Groups List<string>
Gsuites List<AccessGroupExcludeGsuite>
IpLists List<string>
Ips List<string>
LoginMethods List<string>
Oktas List<AccessGroupExcludeOkta>
Samls List<AccessGroupExcludeSaml>
ServiceTokens List<string>

AnyValidServiceToken bool
AuthMethod string
Azures []AccessGroupExcludeAzure
Certificate bool
CommonName string
DevicePostures []string
EmailDomains []string
Emails []string
Everyone bool
ExternalEvaluation AccessGroupExcludeExternalEvaluation
Geos []string
Githubs []AccessGroupExcludeGithub
Groups []string
Gsuites []AccessGroupExcludeGsuite
IpLists []string
Ips []string
LoginMethods []string
Oktas []AccessGroupExcludeOkta
Samls []AccessGroupExcludeSaml
ServiceTokens []string

anyValidServiceToken Boolean
authMethod String
azures List<AccessGroupExcludeAzure>
certificate Boolean
commonName String
devicePostures List<String>
emailDomains List<String>
emails List<String>
everyone Boolean
externalEvaluation AccessGroupExcludeExternalEvaluation
geos List<String>
githubs List<AccessGroupExcludeGithub>
groups List<String>
gsuites List<AccessGroupExcludeGsuite>
ipLists List<String>
ips List<String>
loginMethods List<String>
oktas List<AccessGroupExcludeOkta>
samls List<AccessGroupExcludeSaml>
serviceTokens List<String>

anyValidServiceToken boolean
authMethod string
azures AccessGroupExcludeAzure[]
certificate boolean
commonName string
devicePostures string[]
emailDomains string[]
emails string[]
everyone boolean
externalEvaluation AccessGroupExcludeExternalEvaluation
geos string[]
githubs AccessGroupExcludeGithub[]
groups string[]
gsuites AccessGroupExcludeGsuite[]
ipLists string[]
ips string[]
loginMethods string[]
oktas AccessGroupExcludeOkta[]
samls AccessGroupExcludeSaml[]
serviceTokens string[]

any_valid_service_token bool
auth_method str
azures Sequence[AccessGroupExcludeAzure]
certificate bool
common_name str
device_postures Sequence[str]
email_domains Sequence[str]
emails Sequence[str]
everyone bool
external_evaluation AccessGroupExcludeExternalEvaluation
geos Sequence[str]
githubs Sequence[AccessGroupExcludeGithub]
groups Sequence[str]
gsuites Sequence[AccessGroupExcludeGsuite]
ip_lists Sequence[str]
ips Sequence[str]
login_methods Sequence[str]
oktas Sequence[AccessGroupExcludeOkta]
samls Sequence[AccessGroupExcludeSaml]
service_tokens Sequence[str]

anyValidServiceToken Boolean
authMethod String
azures List<Property Map>
certificate Boolean
commonName String
devicePostures List<String>
emailDomains List<String>
emails List<String>
everyone Boolean
externalEvaluation Property Map
geos List<String>
githubs List<Property Map>
groups List<String>
gsuites List<Property Map>
ipLists List<String>
ips List<String>
loginMethods List<String>
oktas List<Property Map>
samls List<Property Map>
serviceTokens List<String>

AccessGroupExcludeAzure, AccessGroupExcludeAzureArgs

IdentityProviderId string
Ids List<string>: The ID of this resource.

IdentityProviderId string
Ids []string: The ID of this resource.

identityProviderId String
ids List<String>: The ID of this resource.

identityProviderId string
ids string[]: The ID of this resource.

identity_provider_id str
ids Sequence[str]: The ID of this resource.

identityProviderId String
ids List<String>: The ID of this resource.

AccessGroupExcludeExternalEvaluation, AccessGroupExcludeExternalEvaluationArgs

EvaluateUrl string
KeysUrl string

EvaluateUrl string
KeysUrl string

evaluateUrl String
keysUrl String

evaluateUrl string
keysUrl string

evaluate_url str
keys_url str

evaluateUrl String
keysUrl String

AccessGroupExcludeGithub, AccessGroupExcludeGithubArgs

IdentityProviderId string
Name string
Teams List<string>

IdentityProviderId string
Name string
Teams []string

identityProviderId String
name String
teams List<String>

identityProviderId string
name string
teams string[]

identity_provider_id str
name str
teams Sequence[str]

identityProviderId String
name String
teams List<String>

AccessGroupIncludeAzure, AccessGroupIncludeAzureArgs

IdentityProviderId string
Ids List<string>: The ID of this resource.

IdentityProviderId string
Ids []string: The ID of this resource.

identityProviderId String
ids List<String>: The ID of this resource.

identityProviderId string
ids string[]: The ID of this resource.

identity_provider_id str
ids Sequence[str]: The ID of this resource.

identityProviderId String
ids List<String>: The ID of this resource.

AccessGroupIncludeExternalEvaluation, AccessGroupIncludeExternalEvaluationArgs

EvaluateUrl string
KeysUrl string

EvaluateUrl string
KeysUrl string

evaluateUrl String
keysUrl String

evaluateUrl string
keysUrl string

evaluate_url str
keys_url str

evaluateUrl String
keysUrl String

AccessGroupIncludeGithub, AccessGroupIncludeGithubArgs

IdentityProviderId string
Name string
Teams List<string>

IdentityProviderId string
Name string
Teams []string

identityProviderId String
name String
teams List<String>

identityProviderId string
name string
teams string[]

identity_provider_id str
name str
teams Sequence[str]

identityProviderId String
name String
teams List<String>

AccessGroupIncludeGsuite, AccessGroupIncludeGsuiteArgs

Emails List<string>
IdentityProviderId string

Emails []string
IdentityProviderId string

emails List<String>
identityProviderId String

emails string[]
identityProviderId string

emails Sequence[str]
identity_provider_id str

emails List<String>
identityProviderId String

AccessGroupIncludeOkta, AccessGroupIncludeOktaArgs

IdentityProviderId string
Names List<string>

IdentityProviderId string
Names []string

identityProviderId String
names List<String>

identityProviderId string
names string[]

identity_provider_id str
names Sequence[str]

identityProviderId String
names List<String>

AccessGroupIncludeSaml, AccessGroupIncludeSamlArgs

AttributeName string
AttributeValue string
IdentityProviderId string

AttributeName string
AttributeValue string
IdentityProviderId string

attributeName String
attributeValue String
identityProviderId String

attributeName string
attributeValue string
identityProviderId string

attribute_name str
attribute_value str
identity_provider_id str

attributeName String
attributeValue String
identityProviderId String

AccessGroupRequire, AccessGroupRequireArgs

AnyValidServiceToken bool
AuthMethod string
Azures List<AccessGroupRequireAzure>
Certificate bool
CommonName string
DevicePostures List<string>
EmailDomains List<string>
Emails List<string>
Everyone bool
ExternalEvaluation AccessGroupRequireExternalEvaluation
Geos List<string>
Githubs List<AccessGroupRequireGithub>
Groups List<string>
Gsuites List<AccessGroupRequireGsuite>
IpLists List<string>
Ips List<string>
LoginMethods List<string>
Oktas List<AccessGroupRequireOkta>
Samls List<AccessGroupRequireSaml>
ServiceTokens List<string>

AnyValidServiceToken bool
AuthMethod string
Azures []AccessGroupRequireAzure
Certificate bool
CommonName string
DevicePostures []string
EmailDomains []string
Emails []string
Everyone bool
ExternalEvaluation AccessGroupRequireExternalEvaluation
Geos []string
Githubs []AccessGroupRequireGithub
Groups []string
Gsuites []AccessGroupRequireGsuite
IpLists []string
Ips []string
LoginMethods []string
Oktas []AccessGroupRequireOkta
Samls []AccessGroupRequireSaml
ServiceTokens []string

anyValidServiceToken Boolean
authMethod String
azures List<AccessGroupRequireAzure>
certificate Boolean
commonName String
devicePostures List<String>
emailDomains List<String>
emails List<String>
everyone Boolean
externalEvaluation AccessGroupRequireExternalEvaluation
geos List<String>
githubs List<AccessGroupRequireGithub>
groups List<String>
gsuites List<AccessGroupRequireGsuite>
ipLists List<String>
ips List<String>
loginMethods List<String>
oktas List<AccessGroupRequireOkta>
samls List<AccessGroupRequireSaml>
serviceTokens List<String>

anyValidServiceToken boolean
authMethod string
azures AccessGroupRequireAzure[]
certificate boolean
commonName string
devicePostures string[]
emailDomains string[]
emails string[]
everyone boolean
externalEvaluation AccessGroupRequireExternalEvaluation
geos string[]
githubs AccessGroupRequireGithub[]
groups string[]
gsuites AccessGroupRequireGsuite[]
ipLists string[]
ips string[]
loginMethods string[]
oktas AccessGroupRequireOkta[]
samls AccessGroupRequireSaml[]
serviceTokens string[]

any_valid_service_token bool
auth_method str
azures Sequence[AccessGroupRequireAzure]
certificate bool
common_name str
device_postures Sequence[str]
email_domains Sequence[str]
emails Sequence[str]
everyone bool
external_evaluation AccessGroupRequireExternalEvaluation
geos Sequence[str]
githubs Sequence[AccessGroupRequireGithub]
groups Sequence[str]
gsuites Sequence[AccessGroupRequireGsuite]
ip_lists Sequence[str]
ips Sequence[str]
login_methods Sequence[str]
oktas Sequence[AccessGroupRequireOkta]
samls Sequence[AccessGroupRequireSaml]
service_tokens Sequence[str]

anyValidServiceToken Boolean
authMethod String
azures List<Property Map>
certificate Boolean
commonName String
devicePostures List<String>
emailDomains List<String>
emails List<String>
everyone Boolean
externalEvaluation Property Map
geos List<String>
githubs List<Property Map>
groups List<String>
gsuites List<Property Map>
ipLists List<String>
ips List<String>
loginMethods List<String>
oktas List<Property Map>
samls List<Property Map>
serviceTokens List<String>

AccessGroupRequireAzure, AccessGroupRequireAzureArgs

IdentityProviderId string
Ids List<string>: The ID of this resource.

IdentityProviderId string
Ids []string: The ID of this resource.

identityProviderId String
ids List<String>: The ID of this resource.

identityProviderId string
ids string[]: The ID of this resource.

identity_provider_id str
ids Sequence[str]: The ID of this resource.

identityProviderId String
ids List<String>: The ID of this resource.

AccessGroupRequireExternalEvaluation, AccessGroupRequireExternalEvaluationArgs

EvaluateUrl string
KeysUrl string

EvaluateUrl string
KeysUrl string

evaluateUrl String
keysUrl String

evaluateUrl string
keysUrl string

evaluate_url str
keys_url str

evaluateUrl String
keysUrl String

AccessGroupRequireGithub, AccessGroupRequireGithubArgs

IdentityProviderId string
Name string
Teams List<string>

IdentityProviderId string
Name string
Teams []string

identityProviderId String
name String
teams List<String>

identityProviderId string
name string
teams string[]

identity_provider_id str
name str
teams Sequence[str]

identityProviderId String
name String
teams List<String>

AccessGroupRequireGsuite, AccessGroupRequireGsuiteArgs

Emails List<string>
IdentityProviderId string

Emails []string
IdentityProviderId string

emails List<String>
identityProviderId String

emails string[]
identityProviderId string

emails Sequence[str]
identity_provider_id str

emails List<String>
identityProviderId String

AccessGroupRequireOkta, AccessGroupRequireOktaArgs

IdentityProviderId string
Names List<string>

IdentityProviderId string
Names []string

identityProviderId String
names List<String>

identityProviderId string
names string[]

identity_provider_id str
names Sequence[str]

identityProviderId String
names List<String>

AccessGroupRequireSaml, AccessGroupRequireSamlArgs

AttributeName string
AttributeValue string
IdentityProviderId string

AttributeName string
AttributeValue string
IdentityProviderId string

attributeName String
attributeValue String
identityProviderId String

attributeName string
attributeValue string
identityProviderId string

attribute_name str
attribute_value str
identity_provider_id str

attributeName String
attributeValue String
identityProviderId String

Import

 $ pulumi import cloudflare:index/accessGroup:AccessGroup example <account_id>/<group_id>

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Cloudflare pulumi/pulumi-cloudflare
License: Apache-2.0
Notes: This Pulumi package is based on the cloudflare Terraform Provider.

Viewing docs for Cloudflare v4.16.0 (Older version)
published on Monday, Mar 9, 2026 by Pulumi

Go to latest version

Schema (JSON)

pulumi/pulumi-cloudflare

cloudflare.AccessGroup

On this page

On this page

Example Usage

Create AccessGroup Resource

Constructor syntax

Parameters

Constructor example

AccessGroup Resource Properties

Inputs

Outputs

Look up Existing AccessGroup Resource

Supporting Types

AccessGroupExclude, AccessGroupExcludeArgs

AccessGroupExcludeAzure, AccessGroupExcludeAzureArgs

AccessGroupExcludeExternalEvaluation, AccessGroupExcludeExternalEvaluationArgs

AccessGroupExcludeGithub, AccessGroupExcludeGithubArgs

AccessGroupExcludeGsuite, AccessGroupExcludeGsuiteArgs

AccessGroupExcludeOkta, AccessGroupExcludeOktaArgs

AccessGroupExcludeSaml, AccessGroupExcludeSamlArgs

AccessGroupInclude, AccessGroupIncludeArgs

AccessGroupIncludeAzure, AccessGroupIncludeAzureArgs

AccessGroupIncludeExternalEvaluation, AccessGroupIncludeExternalEvaluationArgs

AccessGroupIncludeGithub, AccessGroupIncludeGithubArgs

AccessGroupIncludeGsuite, AccessGroupIncludeGsuiteArgs

AccessGroupIncludeOkta, AccessGroupIncludeOktaArgs

AccessGroupIncludeSaml, AccessGroupIncludeSamlArgs

AccessGroupRequire, AccessGroupRequireArgs

AccessGroupRequireAzure, AccessGroupRequireAzureArgs

AccessGroupRequireExternalEvaluation, AccessGroupRequireExternalEvaluationArgs

AccessGroupRequireGithub, AccessGroupRequireGithubArgs

AccessGroupRequireGsuite, AccessGroupRequireGsuiteArgs

AccessGroupRequireOkta, AccessGroupRequireOktaArgs

AccessGroupRequireSaml, AccessGroupRequireSamlArgs

Import

Package Details

On this page

On this page