Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Descope Provider
  4. API Docs
  5. Descoper
Viewing docs for Descope v0.3.13
published on Tuesday, Jul 14, 2026 by Descope
Schema (JSON)
descope/pulumi-descope

descope.Descoper

descope logo
Viewing docs for Descope v0.3.13
published on Tuesday, Jul 14, 2026 by Descope
Schema (JSON)
descope/pulumi-descope

    Manages a Descope console user and their access control settings. Console users (referred to as “Descopers”) are team members who access the Descope console to manage projects.

    Access is controlled via RBAC, where each Descoper can be granted one of four roles:

    • admin – Full access to project settings
    • developer – Can edit flows and configurations
    • support – Can view user data and audit logs
    • auditor – Read-only access to audit logs

    Roles can be scoped to the entire company, to specific projects by ID, or to all projects with a given tag.

    Example Usage

    Company Admin

    import * as pulumi from "@pulumi/pulumi";
import * as descope from "@descope/pulumi-descope";

const admin = new descope.Descoper("admin", {
    email: "admin@example.com",
    name: "Alice Admin",
    rbac: {
        isCompanyAdmin: true,
    },
});

    import pulumi
import descope_pulumi as descope

admin = descope.Descoper("admin",
    email="admin@example.com",
    name="Alice Admin",
    rbac={
        "is_company_admin": True,
    })

    package main

import (
	"github.com/descope/pulumi-descope/sdk/go/descope"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := descope.NewDescoper(ctx, "admin", &descope.DescoperArgs{
			Email: pulumi.String("admin@example.com"),
			Name:  pulumi.String("Alice Admin"),
			Rbac: &descope.DescoperRbacArgs{
				IsCompanyAdmin: pulumi.Bool(true),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Descope = Descope.Pulumi.Descope;

return await Deployment.RunAsync(() => 
{
    var admin = new Descope.Descoper("admin", new()
    {
        Email = "admin@example.com",
        Name = "Alice Admin",
        Rbac = new Descope.Inputs.DescoperRbacArgs
        {
            IsCompanyAdmin = true,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.descope.pulumi.descope.Descoper;
import com.descope.pulumi.descope.DescoperArgs;
import com.pulumi.descope.inputs.DescoperRbacArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var admin = new Descoper("admin", DescoperArgs.builder()
            .email("admin@example.com")
            .name("Alice Admin")
            .rbac(DescoperRbacArgs.builder()
                .isCompanyAdmin(true)
                .build())
            .build());

    }
}

    resources:
  admin:
    type: descope:Descoper
    properties:
      email: admin@example.com
      name: Alice Admin
      rbac:
        isCompanyAdmin: true

    Example coming soon!

    Developer for Specific Projects

    import * as pulumi from "@pulumi/pulumi";
import * as descope from "@descope/pulumi-descope";

const developer = new descope.Descoper("developer", {
    email: "dev@example.com",
    name: "Bob Dev",
    rbac: {
        projectRoles: [{
            role: "developer",
            projectIds: [
                "P123abc",
                "P456def",
            ],
        }],
    },
});

    import pulumi
import descope_pulumi as descope

developer = descope.Descoper("developer",
    email="dev@example.com",
    name="Bob Dev",
    rbac={
        "project_roles": [{
            "role": "developer",
            "project_ids": [
                "P123abc",
                "P456def",
            ],
        }],
    })

    package main

import (
	"github.com/descope/pulumi-descope/sdk/go/descope"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := descope.NewDescoper(ctx, "developer", &descope.DescoperArgs{
			Email: pulumi.String("dev@example.com"),
			Name:  pulumi.String("Bob Dev"),
			Rbac: &descope.DescoperRbacArgs{
				ProjectRoles: descope.DescoperRbacProjectRoleArray{
					&descope.DescoperRbacProjectRoleArgs{
						Role: pulumi.String("developer"),
						ProjectIds: pulumi.StringArray{
							pulumi.String("P123abc"),
							pulumi.String("P456def"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Descope = Descope.Pulumi.Descope;

return await Deployment.RunAsync(() => 
{
    var developer = new Descope.Descoper("developer", new()
    {
        Email = "dev@example.com",
        Name = "Bob Dev",
        Rbac = new Descope.Inputs.DescoperRbacArgs
        {
            ProjectRoles = new[]
            {
                new Descope.Inputs.DescoperRbacProjectRoleArgs
                {
                    Role = "developer",
                    ProjectIds = new[]
                    {
                        "P123abc",
                        "P456def",
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.descope.pulumi.descope.Descoper;
import com.descope.pulumi.descope.DescoperArgs;
import com.pulumi.descope.inputs.DescoperRbacArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var developer = new Descoper("developer", DescoperArgs.builder()
            .email("dev@example.com")
            .name("Bob Dev")
            .rbac(DescoperRbacArgs.builder()
                .projectRoles(DescoperRbacProjectRoleArgs.builder()
                    .role("developer")
                    .projectIds(                    
                        "P123abc",
                        "P456def")
                    .build())
                .build())
            .build());

    }
}

    resources:
  developer:
    type: descope:Descoper
    properties:
      email: dev@example.com
      name: Bob Dev
      rbac:
        projectRoles:
          - role: developer
            projectIds:
              - P123abc
              - P456def

    Example coming soon!

    Support Access via Project Tags

    Grant a support engineer access to all projects tagged production:

    import * as pulumi from "@pulumi/pulumi";
import * as descope from "@descope/pulumi-descope";

const support = new descope.Descoper("support", {
    email: "support@example.com",
    rbac: {
        tagRoles: [{
            role: "support",
            tags: ["production"],
        }],
    },
});

    import pulumi
import descope_pulumi as descope

support = descope.Descoper("support",
    email="support@example.com",
    rbac={
        "tag_roles": [{
            "role": "support",
            "tags": ["production"],
        }],
    })

    package main

import (
	"github.com/descope/pulumi-descope/sdk/go/descope"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := descope.NewDescoper(ctx, "support", &descope.DescoperArgs{
			Email: pulumi.String("support@example.com"),
			Rbac: &descope.DescoperRbacArgs{
				TagRoles: descope.DescoperRbacTagRoleArray{
					&descope.DescoperRbacTagRoleArgs{
						Role: pulumi.String("support"),
						Tags: pulumi.StringArray{
							pulumi.String("production"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Descope = Descope.Pulumi.Descope;

return await Deployment.RunAsync(() => 
{
    var support = new Descope.Descoper("support", new()
    {
        Email = "support@example.com",
        Rbac = new Descope.Inputs.DescoperRbacArgs
        {
            TagRoles = new[]
            {
                new Descope.Inputs.DescoperRbacTagRoleArgs
                {
                    Role = "support",
                    Tags = new[]
                    {
                        "production",
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.descope.pulumi.descope.Descoper;
import com.descope.pulumi.descope.DescoperArgs;
import com.pulumi.descope.inputs.DescoperRbacArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var support = new Descoper("support", DescoperArgs.builder()
            .email("support@example.com")
            .rbac(DescoperRbacArgs.builder()
                .tagRoles(DescoperRbacTagRoleArgs.builder()
                    .role("support")
                    .tags("production")
                    .build())
                .build())
            .build());

    }
}

    resources:
  support:
    type: descope:Descoper
    properties:
      email: support@example.com
      rbac:
        tagRoles:
          - role: support
            tags:
              - production

    Example coming soon!

    Multi-Role Access

    import * as pulumi from "@pulumi/pulumi";
import * as descope from "@descope/pulumi-descope";

const multiRole = new descope.Descoper("multi_role", {
    email: "lead@example.com",
    rbac: {
        projectRoles: [
            {
                role: "admin",
                projectIds: ["P123abc"],
            },
            {
                role: "developer",
                projectIds: ["P789ghi"],
            },
        ],
    },
});

    import pulumi
import descope_pulumi as descope

multi_role = descope.Descoper("multi_role",
    email="lead@example.com",
    rbac={
        "project_roles": [
            {
                "role": "admin",
                "project_ids": ["P123abc"],
            },
            {
                "role": "developer",
                "project_ids": ["P789ghi"],
            },
        ],
    })

    package main

import (
	"github.com/descope/pulumi-descope/sdk/go/descope"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := descope.NewDescoper(ctx, "multi_role", &descope.DescoperArgs{
			Email: pulumi.String("lead@example.com"),
			Rbac: &descope.DescoperRbacArgs{
				ProjectRoles: descope.DescoperRbacProjectRoleArray{
					&descope.DescoperRbacProjectRoleArgs{
						Role: pulumi.String("admin"),
						ProjectIds: pulumi.StringArray{
							pulumi.String("P123abc"),
						},
					},
					&descope.DescoperRbacProjectRoleArgs{
						Role: pulumi.String("developer"),
						ProjectIds: pulumi.StringArray{
							pulumi.String("P789ghi"),
						},
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Descope = Descope.Pulumi.Descope;

return await Deployment.RunAsync(() => 
{
    var multiRole = new Descope.Descoper("multi_role", new()
    {
        Email = "lead@example.com",
        Rbac = new Descope.Inputs.DescoperRbacArgs
        {
            ProjectRoles = new[]
            {
                new Descope.Inputs.DescoperRbacProjectRoleArgs
                {
                    Role = "admin",
                    ProjectIds = new[]
                    {
                        "P123abc",
                    },
                },
                new Descope.Inputs.DescoperRbacProjectRoleArgs
                {
                    Role = "developer",
                    ProjectIds = new[]
                    {
                        "P789ghi",
                    },
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.descope.pulumi.descope.Descoper;
import com.descope.pulumi.descope.DescoperArgs;
import com.pulumi.descope.inputs.DescoperRbacArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var multiRole = new Descoper("multiRole", DescoperArgs.builder()
            .email("lead@example.com")
            .rbac(DescoperRbacArgs.builder()
                .projectRoles(                
                    DescoperRbacProjectRoleArgs.builder()
                        .role("admin")
                        .projectIds("P123abc")
                        .build(),
                    DescoperRbacProjectRoleArgs.builder()
                        .role("developer")
                        .projectIds("P789ghi")
                        .build())
                .build())
            .build());

    }
}

    resources:
  multiRole:
    type: descope:Descoper
    name: multi_role
    properties:
      email: lead@example.com
      rbac:
        projectRoles:
          - role: admin
            projectIds:
              - P123abc
          - role: developer
            projectIds:
              - P789ghi

    Example coming soon!

    Create Descoper Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Descoper(name: string, args: DescoperArgs, opts?: CustomResourceOptions);
    @overload
def Descoper(resource_name: str,
             args: DescoperArgs,
             opts: Optional[ResourceOptions] = None)

@overload
def Descoper(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             email: Optional[str] = None,
             rbac: Optional[DescoperRbacArgs] = None,
             name: Optional[str] = None,
             phone: Optional[str] = None)
    func NewDescoper(ctx *Context, name string, args DescoperArgs, opts ...ResourceOption) (*Descoper, error)
    public Descoper(string name, DescoperArgs args, CustomResourceOptions? opts = null)
    public Descoper(String name, DescoperArgs args)
public Descoper(String name, DescoperArgs args, CustomResourceOptions options)

    type: descope:Descoper
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "descope_descoper" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args DescoperArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args DescoperArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args DescoperArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args DescoperArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args DescoperArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var descoperResource = new Descope.Descoper("descoperResource", new()
{
    Email = "string",
    Rbac = new Descope.Inputs.DescoperRbacArgs
    {
        IsCompanyAdmin = false,
        ProjectRoles = new[]
        {
            new Descope.Inputs.DescoperRbacProjectRoleArgs
            {
                ProjectIds = new[]
                {
                    "string",
                },
                Role = "string",
            },
        },
        TagRoles = new[]
        {
            new Descope.Inputs.DescoperRbacTagRoleArgs
            {
                Role = "string",
                Tags = new[]
                {
                    "string",
                },
            },
        },
    },
    Name = "string",
    Phone = "string",
});

    example, err := descope.NewDescoper(ctx, "descoperResource", &descope.DescoperArgs{
	Email: pulumi.String("string"),
	Rbac: &descope.DescoperRbacArgs{
		IsCompanyAdmin: pulumi.Bool(false),
		ProjectRoles: descope.DescoperRbacProjectRoleArray{
			&descope.DescoperRbacProjectRoleArgs{
				ProjectIds: pulumi.StringArray{
					pulumi.String("string"),
				},
				Role: pulumi.String("string"),
			},
		},
		TagRoles: descope.DescoperRbacTagRoleArray{
			&descope.DescoperRbacTagRoleArgs{
				Role: pulumi.String("string"),
				Tags: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
	},
	Name:  pulumi.String("string"),
	Phone: pulumi.String("string"),
})

    resource "descope_descoper" "descoperResource" {
  lifecycle {
    create_before_destroy = true
  }
  email = "string"
  rbac = {
    is_company_admin = false
    project_roles = [{
      project_ids = ["string"]
      role        = "string"
    }]
    tag_roles = [{
      role = "string"
      tags = ["string"]
    }]
  }
  name  = "string"
  phone = "string"
}

    var descoperResource = new Descoper("descoperResource", DescoperArgs.builder()
    .email("string")
    .rbac(DescoperRbacArgs.builder()
        .isCompanyAdmin(false)
        .projectRoles(DescoperRbacProjectRoleArgs.builder()
            .projectIds("string")
            .role("string")
            .build())
        .tagRoles(DescoperRbacTagRoleArgs.builder()
            .role("string")
            .tags("string")
            .build())
        .build())
    .name("string")
    .phone("string")
    .build());

    descoper_resource = descope.Descoper("descoperResource",
    email="string",
    rbac={
        "is_company_admin": False,
        "project_roles": [{
            "project_ids": ["string"],
            "role": "string",
        }],
        "tag_roles": [{
            "role": "string",
            "tags": ["string"],
        }],
    },
    name="string",
    phone="string")

    const descoperResource = new descope.Descoper("descoperResource", {
    email: "string",
    rbac: {
        isCompanyAdmin: false,
        projectRoles: [{
            projectIds: ["string"],
            role: "string",
        }],
        tagRoles: [{
            role: "string",
            tags: ["string"],
        }],
    },
    name: "string",
    phone: "string",
});

    type: descope:Descoper
properties:
    email: string
    name: string
    phone: string
    rbac:
        isCompanyAdmin: false
        projectRoles:
            - projectIds:
                - string
              role: string
        tagRoles:
            - role: string
              tags:
                - string

    Descoper Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Descoper resource accepts the following input properties:

    Email string
    The email address of the Descope console user.
    Rbac Descope.DescoperRbac
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    Name string
    The display name of the Descope console user.
    Phone string
    The phone number of the Descope console user.
    Email string
    The email address of the Descope console user.
    Rbac DescoperRbacArgs
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    Name string
    The display name of the Descope console user.
    Phone string
    The phone number of the Descope console user.
    email string
    The email address of the Descope console user.
    rbac object
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    name string
    The display name of the Descope console user.
    phone string
    The phone number of the Descope console user.
    email String
    The email address of the Descope console user.
    rbac DescoperRbac
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    name String
    The display name of the Descope console user.
    phone String
    The phone number of the Descope console user.
    email string
    The email address of the Descope console user.
    rbac DescoperRbac
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    name string
    The display name of the Descope console user.
    phone string
    The phone number of the Descope console user.
    email str
    The email address of the Descope console user.
    rbac DescoperRbacArgs
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    name str
    The display name of the Descope console user.
    phone str
    The phone number of the Descope console user.
    email String
    The email address of the Descope console user.
    rbac Property Map
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    name String
    The display name of the Descope console user.
    phone String
    The phone number of the Descope console user.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Descoper resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing Descoper Resource

    Get an existing Descoper resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: DescoperState, opts?: CustomResourceOptions): Descoper
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        email: Optional[str] = None,
        name: Optional[str] = None,
        phone: Optional[str] = None,
        rbac: Optional[DescoperRbacArgs] = None) -> Descoper
    func GetDescoper(ctx *Context, name string, id IDInput, state *DescoperState, opts ...ResourceOption) (*Descoper, error)
    public static Descoper Get(string name, Input<string> id, DescoperState? state, CustomResourceOptions? opts = null)
    public static Descoper get(String name, Output<String> id, DescoperState state, CustomResourceOptions options)
    resources:  _:    type: descope:Descoper    get:      id: ${id}
    import {
  to = descope_descoper.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Email string
    The email address of the Descope console user.
    Name string
    The display name of the Descope console user.
    Phone string
    The phone number of the Descope console user.
    Rbac Descope.DescoperRbac
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    Email string
    The email address of the Descope console user.
    Name string
    The display name of the Descope console user.
    Phone string
    The phone number of the Descope console user.
    Rbac DescoperRbacArgs
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    email string
    The email address of the Descope console user.
    name string
    The display name of the Descope console user.
    phone string
    The phone number of the Descope console user.
    rbac object
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    email String
    The email address of the Descope console user.
    name String
    The display name of the Descope console user.
    phone String
    The phone number of the Descope console user.
    rbac DescoperRbac
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    email string
    The email address of the Descope console user.
    name string
    The display name of the Descope console user.
    phone string
    The phone number of the Descope console user.
    rbac DescoperRbac
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    email str
    The email address of the Descope console user.
    name str
    The display name of the Descope console user.
    phone str
    The phone number of the Descope console user.
    rbac DescoperRbacArgs
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.
    email String
    The email address of the Descope console user.
    name String
    The display name of the Descope console user.
    phone String
    The phone number of the Descope console user.
    rbac Property Map
    Access control settings for the Descope console user. This defines the permissions granted to the user, either as a company admin or for specific projects or project tags.

    Supporting Types

    DescoperRbac, DescoperRbacArgs

    IsCompanyAdmin bool
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    ProjectRoles List<Descope.DescoperRbacProjectRole>
    A list of roles that are granted to the descoper for specific projects by their project ID.
    TagRoles List<Descope.DescoperRbacTagRole>
    A list of roles that are granted to the descoper for all projects that have a specific tag.
    IsCompanyAdmin bool
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    ProjectRoles []DescoperRbacProjectRole
    A list of roles that are granted to the descoper for specific projects by their project ID.
    TagRoles []DescoperRbacTagRole
    A list of roles that are granted to the descoper for all projects that have a specific tag.
    is_company_admin bool
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    project_roles list(object)
    A list of roles that are granted to the descoper for specific projects by their project ID.
    tag_roles list(object)
    A list of roles that are granted to the descoper for all projects that have a specific tag.
    isCompanyAdmin Boolean
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    projectRoles List<DescoperRbacProjectRole>
    A list of roles that are granted to the descoper for specific projects by their project ID.
    tagRoles List<DescoperRbacTagRole>
    A list of roles that are granted to the descoper for all projects that have a specific tag.
    isCompanyAdmin boolean
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    projectRoles DescoperRbacProjectRole[]
    A list of roles that are granted to the descoper for specific projects by their project ID.
    tagRoles DescoperRbacTagRole[]
    A list of roles that are granted to the descoper for all projects that have a specific tag.
    is_company_admin bool
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    project_roles Sequence[DescoperRbacProjectRole]
    A list of roles that are granted to the descoper for specific projects by their project ID.
    tag_roles Sequence[DescoperRbacTagRole]
    A list of roles that are granted to the descoper for all projects that have a specific tag.
    isCompanyAdmin Boolean
    Whether this descoper has company-wide admin access. When set to true, the descoper cannot have tag_roles or project_roles.
    projectRoles List<Property Map>
    A list of roles that are granted to the descoper for specific projects by their project ID.
    tagRoles List<Property Map>
    A list of roles that are granted to the descoper for all projects that have a specific tag.

    DescoperRbacProjectRole, DescoperRbacProjectRoleArgs

    ProjectIds List<string>
    The project IDs this role grant applies to.
    Role string
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    ProjectIds []string
    The project IDs this role grant applies to.
    Role string
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    project_ids list(string)
    The project IDs this role grant applies to.
    role string
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    projectIds List<String>
    The project IDs this role grant applies to.
    role String
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    projectIds string[]
    The project IDs this role grant applies to.
    role string
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    project_ids Sequence[str]
    The project IDs this role grant applies to.
    role str
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    projectIds List<String>
    The project IDs this role grant applies to.
    role String
    The roles the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.

    DescoperRbacTagRole, DescoperRbacTagRoleArgs

    Role string
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    Tags List<string>
    The project tags this role assignment applies to.
    Role string
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    Tags []string
    The project tags this role assignment applies to.
    role string
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    tags list(string)
    The project tags this role assignment applies to.
    role String
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    tags List<String>
    The project tags this role assignment applies to.
    role string
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    tags string[]
    The project tags this role assignment applies to.
    role str
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    tags Sequence[str]
    The project tags this role assignment applies to.
    role String
    The role the descoper will be granted in the applicable projects. Must be one of: admin, developer, support, auditor.
    tags List<String>
    The project tags this role assignment applies to.

    Package Details

    Repository
    descope descope/pulumi-descope
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the descope Terraform Provider.
    descope logo
    Viewing docs for Descope v0.3.13
    published on Tuesday, Jul 14, 2026 by Descope
    Schema (JSON)
    descope/pulumi-descope

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial