published on Thursday, Aug 20, 2026 by jschady
published on Thursday, Aug 20, 2026 by jschady
A User represents a human or system/service user with the ability to connect to Files.com via any of the available connectivity methods (unless restricted to specific protocols).
Users are associated with API Keys, SSH (SFTP) Keys, Notifications, Permissions, and Group memberships.
Authentication
The authenticationMethod property on a User determines exactly how that user can login and authenticate to their Files.com account. Files.com offers a variety of authentication methods to ensure flexibility, security, migration, and compliance.
These authentication methods can be configured during user creation and can be modified at any time by site administrators. The meanings of the available values are as follows:
password- Allows authentication via a password. If API Keys or SSH (SFTP) Keys are also configured, those can be used instead of the password. If Two Factor Authentication (2FA) methods are also configured, a valid 2nd factor is required in addition to the password.emailSignup- When set upon user creation, an email will be sent to the new user with a link for them to create their password. Once the user has created their password, their authentication type will change topassword.sso- Allows authentication via a linked Single Sign On provider. If API Keys or SSH (SFTP) Keys are also configured, those can be used instead of Single Sign On. If Two Factor Authentication (2FA) methods are also configured, a valid 2nd factor is required in addition to Single Sign On. When using this method, you must also provide a validssoStrategyIdto associate the User to the appropriate SSO provider.passwordWithImportedHash- Works like thepasswordmethod but allows importing a hashed password in MD5, SHA-1, or SHA-256 format. Provide the imported hash in the fieldimportedPasswordHash. Upon first use, the password will be converted to Files.com’s internal storage format and the authentication type will change topassword. Typically only used when migrating to Files.com from another MFT solution.none- Does not allow authentication via username and password, but does allow authentication via API Key or SSH (SFTP) Key. Typically only used for service users.passwordAndSshKey- Allows authentication only by providing a password and also a valid SSH (SFTP) Key in a single attempt. If API Keys are also configured, those can be used instead of the password and key combination. This method only works with (typically enterprise) SSH/SFTP clients capable of sending both authentication methods at once. Typically only used for service users.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as filescom from "pulumi-filescom";
const exampleUser = new filescom.User("example_user", {
avatarDelete: false,
email: "john.doe@files.com",
groupId: 1,
groupIds: "example",
announcementsRead: false,
aiAssistantPersonalityId: 1,
allowedIps: `10.0.0.0/8
127.0.0.1`,
attachmentsPermission: true,
authenticateUntil: "2000-01-01T01:00:00Z",
authenticationMethod: "password",
billingPermission: false,
bypassUserLifecycleRules: false,
bypassSiteAllowedIps: false,
davPermission: true,
desktopConfigurationProfileId: 1,
defaultWorkspaceId: 1,
disabled: true,
filesystemLayout: "site_root",
ftpPermission: true,
headerText: "User-specific message.",
integrationCentricProfileId: 1,
language: "en",
notificationDailySendTime: 18,
name: "John Doe",
company: "ACME Corp.",
notes: "Internal notes on this user.",
officeIntegrationEnabled: true,
partnerAdmin: true,
partnerId: 1,
passwordValidityDays: 1,
primaryGroupId: 1,
readonlySiteAdmin: true,
receiveAdminAlerts: true,
notifyOnAllSiteWarnings: true,
notifyOnAllSsoFailures: true,
notifyOnAllUserSecurityEvents: true,
notifyOnAllPendingWorkFailures: true,
notifyOnAllSiemHttpDestinationFailures: true,
notifyOnAllSyncFailures: true,
notifyOnAllAutomationFailures: true,
notifyOnAllExpectationFailures: true,
requireLoginBy: "2000-01-01T01:00:00Z",
requirePasswordChange: true,
responsibleGroupId: 1,
responsibleUserId: 1,
restapiPermission: true,
selfManaged: true,
sftpPermission: true,
siteAdmin: true,
skipWelcomeScreen: true,
sslRequired: "always_require",
ssoStrategyId: 1,
subscribeToNewsletter: true,
require2fa: "always_require",
tags: "example",
timeZone: "Pacific Time (US & Canada)",
userRoot: "example",
userHome: "example",
workspaceAdmin: true,
username: "user",
workspaceId: 1,
});
import pulumi
import pulumi_filescom as filescom
example_user = filescom.User("example_user",
avatar_delete=False,
email="john.doe@files.com",
group_id=1,
group_ids="example",
announcements_read=False,
ai_assistant_personality_id=1,
allowed_ips="""10.0.0.0/8
127.0.0.1""",
attachments_permission=True,
authenticate_until="2000-01-01T01:00:00Z",
authentication_method="password",
billing_permission=False,
bypass_user_lifecycle_rules=False,
bypass_site_allowed_ips=False,
dav_permission=True,
desktop_configuration_profile_id=1,
default_workspace_id=1,
disabled=True,
filesystem_layout="site_root",
ftp_permission=True,
header_text="User-specific message.",
integration_centric_profile_id=1,
language="en",
notification_daily_send_time=18,
name="John Doe",
company="ACME Corp.",
notes="Internal notes on this user.",
office_integration_enabled=True,
partner_admin=True,
partner_id=1,
password_validity_days=1,
primary_group_id=1,
readonly_site_admin=True,
receive_admin_alerts=True,
notify_on_all_site_warnings=True,
notify_on_all_sso_failures=True,
notify_on_all_user_security_events=True,
notify_on_all_pending_work_failures=True,
notify_on_all_siem_http_destination_failures=True,
notify_on_all_sync_failures=True,
notify_on_all_automation_failures=True,
notify_on_all_expectation_failures=True,
require_login_by="2000-01-01T01:00:00Z",
require_password_change=True,
responsible_group_id=1,
responsible_user_id=1,
restapi_permission=True,
self_managed=True,
sftp_permission=True,
site_admin=True,
skip_welcome_screen=True,
ssl_required="always_require",
sso_strategy_id=1,
subscribe_to_newsletter=True,
require2fa="always_require",
tags="example",
time_zone="Pacific Time (US & Canada)",
user_root="example",
user_home="example",
workspace_admin=True,
username="user",
workspace_id=1)
package main
import (
"github.com/jschady/pulumi-filescom/sdk/go/filescom"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := filescom.NewUser(ctx, "example_user", &filescom.UserArgs{
AvatarDelete: pulumi.Bool(false),
Email: pulumi.String("john.doe@files.com"),
GroupId: pulumi.Int(1),
GroupIds: pulumi.String("example"),
AnnouncementsRead: pulumi.Bool(false),
AiAssistantPersonalityId: pulumi.Int(1),
AllowedIps: pulumi.String("10.0.0.0/8\n127.0.0.1"),
AttachmentsPermission: pulumi.Bool(true),
AuthenticateUntil: pulumi.String("2000-01-01T01:00:00Z"),
AuthenticationMethod: pulumi.String("password"),
BillingPermission: pulumi.Bool(false),
BypassUserLifecycleRules: pulumi.Bool(false),
BypassSiteAllowedIps: pulumi.Bool(false),
DavPermission: pulumi.Bool(true),
DesktopConfigurationProfileId: pulumi.Int(1),
DefaultWorkspaceId: pulumi.Int(1),
Disabled: pulumi.Bool(true),
FilesystemLayout: pulumi.String("site_root"),
FtpPermission: pulumi.Bool(true),
HeaderText: pulumi.String("User-specific message."),
IntegrationCentricProfileId: pulumi.Int(1),
Language: pulumi.String("en"),
NotificationDailySendTime: pulumi.Int(18),
Name: pulumi.String("John Doe"),
Company: pulumi.String("ACME Corp."),
Notes: pulumi.String("Internal notes on this user."),
OfficeIntegrationEnabled: pulumi.Bool(true),
PartnerAdmin: pulumi.Bool(true),
PartnerId: pulumi.Int(1),
PasswordValidityDays: pulumi.Int(1),
PrimaryGroupId: pulumi.Int(1),
ReadonlySiteAdmin: pulumi.Bool(true),
ReceiveAdminAlerts: pulumi.Bool(true),
NotifyOnAllSiteWarnings: pulumi.Bool(true),
NotifyOnAllSsoFailures: pulumi.Bool(true),
NotifyOnAllUserSecurityEvents: pulumi.Bool(true),
NotifyOnAllPendingWorkFailures: pulumi.Bool(true),
NotifyOnAllSiemHttpDestinationFailures: pulumi.Bool(true),
NotifyOnAllSyncFailures: pulumi.Bool(true),
NotifyOnAllAutomationFailures: pulumi.Bool(true),
NotifyOnAllExpectationFailures: pulumi.Bool(true),
RequireLoginBy: pulumi.String("2000-01-01T01:00:00Z"),
RequirePasswordChange: pulumi.Bool(true),
ResponsibleGroupId: pulumi.Int(1),
ResponsibleUserId: pulumi.Int(1),
RestapiPermission: pulumi.Bool(true),
SelfManaged: pulumi.Bool(true),
SftpPermission: pulumi.Bool(true),
SiteAdmin: pulumi.Bool(true),
SkipWelcomeScreen: pulumi.Bool(true),
SslRequired: pulumi.String("always_require"),
SsoStrategyId: pulumi.Int(1),
SubscribeToNewsletter: pulumi.Bool(true),
Require2fa: pulumi.String("always_require"),
Tags: pulumi.String("example"),
TimeZone: pulumi.String("Pacific Time (US & Canada)"),
UserRoot: pulumi.String("example"),
UserHome: pulumi.String("example"),
WorkspaceAdmin: pulumi.Bool(true),
Username: pulumi.String("user"),
WorkspaceId: pulumi.Int(1),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Filescom = Jschady.Filescom;
return await Deployment.RunAsync(() =>
{
var exampleUser = new Filescom.User("example_user", new()
{
AvatarDelete = false,
Email = "john.doe@files.com",
GroupId = 1,
GroupIds = "example",
AnnouncementsRead = false,
AiAssistantPersonalityId = 1,
AllowedIps = @"10.0.0.0/8
127.0.0.1",
AttachmentsPermission = true,
AuthenticateUntil = "2000-01-01T01:00:00Z",
AuthenticationMethod = "password",
BillingPermission = false,
BypassUserLifecycleRules = false,
BypassSiteAllowedIps = false,
DavPermission = true,
DesktopConfigurationProfileId = 1,
DefaultWorkspaceId = 1,
Disabled = true,
FilesystemLayout = "site_root",
FtpPermission = true,
HeaderText = "User-specific message.",
IntegrationCentricProfileId = 1,
Language = "en",
NotificationDailySendTime = 18,
Name = "John Doe",
Company = "ACME Corp.",
Notes = "Internal notes on this user.",
OfficeIntegrationEnabled = true,
PartnerAdmin = true,
PartnerId = 1,
PasswordValidityDays = 1,
PrimaryGroupId = 1,
ReadonlySiteAdmin = true,
ReceiveAdminAlerts = true,
NotifyOnAllSiteWarnings = true,
NotifyOnAllSsoFailures = true,
NotifyOnAllUserSecurityEvents = true,
NotifyOnAllPendingWorkFailures = true,
NotifyOnAllSiemHttpDestinationFailures = true,
NotifyOnAllSyncFailures = true,
NotifyOnAllAutomationFailures = true,
NotifyOnAllExpectationFailures = true,
RequireLoginBy = "2000-01-01T01:00:00Z",
RequirePasswordChange = true,
ResponsibleGroupId = 1,
ResponsibleUserId = 1,
RestapiPermission = true,
SelfManaged = true,
SftpPermission = true,
SiteAdmin = true,
SkipWelcomeScreen = true,
SslRequired = "always_require",
SsoStrategyId = 1,
SubscribeToNewsletter = true,
Require2fa = "always_require",
Tags = "example",
TimeZone = "Pacific Time (US & Canada)",
UserRoot = "example",
UserHome = "example",
WorkspaceAdmin = true,
Username = "user",
WorkspaceId = 1,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.filescom.User;
import com.pulumi.filescom.UserArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleUser = new User("exampleUser", UserArgs.builder()
.avatarDelete(false)
.email("john.doe@files.com")
.groupId(1)
.groupIds("example")
.announcementsRead(false)
.aiAssistantPersonalityId(1)
.allowedIps("""
10.0.0.0/8
127.0.0.1 """)
.attachmentsPermission(true)
.authenticateUntil("2000-01-01T01:00:00Z")
.authenticationMethod("password")
.billingPermission(false)
.bypassUserLifecycleRules(false)
.bypassSiteAllowedIps(false)
.davPermission(true)
.desktopConfigurationProfileId(1)
.defaultWorkspaceId(1)
.disabled(true)
.filesystemLayout("site_root")
.ftpPermission(true)
.headerText("User-specific message.")
.integrationCentricProfileId(1)
.language("en")
.notificationDailySendTime(18)
.name("John Doe")
.company("ACME Corp.")
.notes("Internal notes on this user.")
.officeIntegrationEnabled(true)
.partnerAdmin(true)
.partnerId(1)
.passwordValidityDays(1)
.primaryGroupId(1)
.readonlySiteAdmin(true)
.receiveAdminAlerts(true)
.notifyOnAllSiteWarnings(true)
.notifyOnAllSsoFailures(true)
.notifyOnAllUserSecurityEvents(true)
.notifyOnAllPendingWorkFailures(true)
.notifyOnAllSiemHttpDestinationFailures(true)
.notifyOnAllSyncFailures(true)
.notifyOnAllAutomationFailures(true)
.notifyOnAllExpectationFailures(true)
.requireLoginBy("2000-01-01T01:00:00Z")
.requirePasswordChange(true)
.responsibleGroupId(1)
.responsibleUserId(1)
.restapiPermission(true)
.selfManaged(true)
.sftpPermission(true)
.siteAdmin(true)
.skipWelcomeScreen(true)
.sslRequired("always_require")
.ssoStrategyId(1)
.subscribeToNewsletter(true)
.require2fa("always_require")
.tags("example")
.timeZone("Pacific Time (US & Canada)")
.userRoot("example")
.userHome("example")
.workspaceAdmin(true)
.username("user")
.workspaceId(1)
.build());
}
}
resources:
exampleUser:
type: filescom:User
name: example_user
properties:
avatarDelete: false
email: john.doe@files.com
groupId: 1
groupIds: example
announcementsRead: false
aiAssistantPersonalityId: 1
allowedIps: |-
10.0.0.0/8
127.0.0.1
attachmentsPermission: true
authenticateUntil: 2000-01-01T01:00:00Z
authenticationMethod: password
billingPermission: false
bypassUserLifecycleRules: false
bypassSiteAllowedIps: false
davPermission: true
desktopConfigurationProfileId: 1
defaultWorkspaceId: 1
disabled: true
filesystemLayout: site_root
ftpPermission: true
headerText: User-specific message.
integrationCentricProfileId: 1
language: en
notificationDailySendTime: 18
name: John Doe
company: ACME Corp.
notes: Internal notes on this user.
officeIntegrationEnabled: true
partnerAdmin: true
partnerId: 1
passwordValidityDays: 1
primaryGroupId: 1
readonlySiteAdmin: true
receiveAdminAlerts: true
notifyOnAllSiteWarnings: true
notifyOnAllSsoFailures: true
notifyOnAllUserSecurityEvents: true
notifyOnAllPendingWorkFailures: true
notifyOnAllSiemHttpDestinationFailures: true
notifyOnAllSyncFailures: true
notifyOnAllAutomationFailures: true
notifyOnAllExpectationFailures: true
requireLoginBy: 2000-01-01T01:00:00Z
requirePasswordChange: true
responsibleGroupId: 1
responsibleUserId: 1
restapiPermission: true
selfManaged: true
sftpPermission: true
siteAdmin: true
skipWelcomeScreen: true
sslRequired: always_require
ssoStrategyId: 1
subscribeToNewsletter: true
require2fa: always_require
tags: example
timeZone: Pacific Time (US & Canada)
userRoot: example
userHome: example
workspaceAdmin: true
username: user
workspaceId: 1
pulumi {
required_providers {
filescom = {
source = "pulumi/filescom"
}
}
}
resource "filescom_user" "example_user" {
avatar_delete = false
email = "john.doe@files.com"
group_id = 1
group_ids = "example"
announcements_read = false
ai_assistant_personality_id = 1
allowed_ips = "10.0.0.0/8\n127.0.0.1"
attachments_permission = true
authenticate_until = "2000-01-01T01:00:00Z"
authentication_method = "password"
billing_permission = false
bypass_user_lifecycle_rules = false
bypass_site_allowed_ips = false
dav_permission = true
desktop_configuration_profile_id = 1
default_workspace_id = 1
disabled = true
filesystem_layout = "site_root"
ftp_permission = true
header_text = "User-specific message."
integration_centric_profile_id = 1
language = "en"
notification_daily_send_time = 18
name = "John Doe"
company = "ACME Corp."
notes = "Internal notes on this user."
office_integration_enabled = true
partner_admin = true
partner_id = 1
password_validity_days = 1
primary_group_id = 1
readonly_site_admin = true
receive_admin_alerts = true
notify_on_all_site_warnings = true
notify_on_all_sso_failures = true
notify_on_all_user_security_events = true
notify_on_all_pending_work_failures = true
notify_on_all_siem_http_destination_failures = true
notify_on_all_sync_failures = true
notify_on_all_automation_failures = true
notify_on_all_expectation_failures = true
require_login_by = "2000-01-01T01:00:00Z"
require_password_change = true
responsible_group_id = 1
responsible_user_id = 1
restapi_permission = true
self_managed = true
sftp_permission = true
site_admin = true
skip_welcome_screen = true
ssl_required = "always_require"
sso_strategy_id = 1
subscribe_to_newsletter = true
require2fa = "always_require"
tags = "example"
time_zone = "Pacific Time (US & Canada)"
user_root = "example"
user_home = "example"
workspace_admin = true
username = "user"
workspace_id = 1
}
Create User Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new User(name: string, args: UserArgs, opts?: CustomResourceOptions);@overload
def User(resource_name: str,
args: UserArgs,
opts: Optional[ResourceOptions] = None)
@overload
def User(resource_name: str,
opts: Optional[ResourceOptions] = None,
username: Optional[str] = None,
ai_assistant_personality_id: Optional[int] = None,
allowed_ips: Optional[str] = None,
announcements_read: Optional[bool] = None,
attachments_permission: Optional[bool] = None,
authenticate_until: Optional[str] = None,
authentication_method: Optional[str] = None,
avatar_delete: Optional[bool] = None,
billing_permission: Optional[bool] = None,
bypass_site_allowed_ips: Optional[bool] = None,
bypass_user_lifecycle_rules: Optional[bool] = None,
change_password: Optional[str] = None,
change_password_confirmation: Optional[str] = None,
company: Optional[str] = None,
dav_permission: Optional[bool] = None,
default_workspace_id: Optional[int] = None,
desktop_configuration_profile_id: Optional[int] = None,
disabled: Optional[bool] = None,
email: Optional[str] = None,
filesystem_layout: Optional[str] = None,
ftp_permission: Optional[bool] = None,
grant_permission: Optional[str] = None,
group_id: Optional[int] = None,
group_ids: Optional[str] = None,
header_text: Optional[str] = None,
imported_password_hash: Optional[str] = None,
integration_centric_profile_id: Optional[int] = None,
language: Optional[str] = None,
name: Optional[str] = None,
notes: Optional[str] = None,
notification_daily_send_time: Optional[int] = None,
notify_on_all_automation_failures: Optional[bool] = None,
notify_on_all_expectation_failures: Optional[bool] = None,
notify_on_all_pending_work_failures: Optional[bool] = None,
notify_on_all_siem_http_destination_failures: Optional[bool] = None,
notify_on_all_site_warnings: Optional[bool] = None,
notify_on_all_sso_failures: Optional[bool] = None,
notify_on_all_sync_failures: Optional[bool] = None,
notify_on_all_user_security_events: Optional[bool] = None,
office_integration_enabled: Optional[bool] = None,
partner_admin: Optional[bool] = None,
partner_id: Optional[int] = None,
password: Optional[str] = None,
password_confirmation: Optional[str] = None,
password_validity_days: Optional[int] = None,
primary_group_id: Optional[int] = None,
readonly_site_admin: Optional[bool] = None,
receive_admin_alerts: Optional[bool] = None,
require2fa: Optional[str] = None,
require_login_by: Optional[str] = None,
require_password_change: Optional[bool] = None,
responsible_group_id: Optional[int] = None,
responsible_user_id: Optional[int] = None,
restapi_permission: Optional[bool] = None,
self_managed: Optional[bool] = None,
sftp_permission: Optional[bool] = None,
site_admin: Optional[bool] = None,
skip_welcome_screen: Optional[bool] = None,
ssl_required: Optional[str] = None,
sso_strategy_id: Optional[int] = None,
subscribe_to_newsletter: Optional[bool] = None,
tags: Optional[str] = None,
time_zone: Optional[str] = None,
user_home: Optional[str] = None,
user_root: Optional[str] = None,
workspace_admin: Optional[bool] = None,
workspace_id: Optional[int] = None)func NewUser(ctx *Context, name string, args UserArgs, opts ...ResourceOption) (*User, error)public User(string name, UserArgs args, CustomResourceOptions? opts = null)type: filescom:User
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "filescom_user" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args UserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args UserArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args UserArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args UserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args UserArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var userResource = new Filescom.User("userResource", new()
{
Username = "string",
AiAssistantPersonalityId = 0,
AllowedIps = "string",
AnnouncementsRead = false,
AttachmentsPermission = false,
AuthenticateUntil = "string",
AuthenticationMethod = "string",
AvatarDelete = false,
BillingPermission = false,
BypassSiteAllowedIps = false,
BypassUserLifecycleRules = false,
ChangePassword = "string",
ChangePasswordConfirmation = "string",
Company = "string",
DavPermission = false,
DefaultWorkspaceId = 0,
DesktopConfigurationProfileId = 0,
Disabled = false,
Email = "string",
FilesystemLayout = "string",
FtpPermission = false,
GrantPermission = "string",
GroupId = 0,
GroupIds = "string",
HeaderText = "string",
ImportedPasswordHash = "string",
IntegrationCentricProfileId = 0,
Language = "string",
Name = "string",
Notes = "string",
NotificationDailySendTime = 0,
NotifyOnAllAutomationFailures = false,
NotifyOnAllExpectationFailures = false,
NotifyOnAllPendingWorkFailures = false,
NotifyOnAllSiemHttpDestinationFailures = false,
NotifyOnAllSiteWarnings = false,
NotifyOnAllSsoFailures = false,
NotifyOnAllSyncFailures = false,
NotifyOnAllUserSecurityEvents = false,
OfficeIntegrationEnabled = false,
PartnerAdmin = false,
PartnerId = 0,
Password = "string",
PasswordConfirmation = "string",
PasswordValidityDays = 0,
PrimaryGroupId = 0,
ReadonlySiteAdmin = false,
ReceiveAdminAlerts = false,
Require2fa = "string",
RequireLoginBy = "string",
RequirePasswordChange = false,
ResponsibleGroupId = 0,
ResponsibleUserId = 0,
RestapiPermission = false,
SelfManaged = false,
SftpPermission = false,
SiteAdmin = false,
SkipWelcomeScreen = false,
SslRequired = "string",
SsoStrategyId = 0,
SubscribeToNewsletter = false,
Tags = "string",
TimeZone = "string",
UserHome = "string",
UserRoot = "string",
WorkspaceAdmin = false,
WorkspaceId = 0,
});
example, err := filescom.NewUser(ctx, "userResource", &filescom.UserArgs{
Username: pulumi.String("string"),
AiAssistantPersonalityId: pulumi.Int(0),
AllowedIps: pulumi.String("string"),
AnnouncementsRead: pulumi.Bool(false),
AttachmentsPermission: pulumi.Bool(false),
AuthenticateUntil: pulumi.String("string"),
AuthenticationMethod: pulumi.String("string"),
AvatarDelete: pulumi.Bool(false),
BillingPermission: pulumi.Bool(false),
BypassSiteAllowedIps: pulumi.Bool(false),
BypassUserLifecycleRules: pulumi.Bool(false),
ChangePassword: pulumi.String("string"),
ChangePasswordConfirmation: pulumi.String("string"),
Company: pulumi.String("string"),
DavPermission: pulumi.Bool(false),
DefaultWorkspaceId: pulumi.Int(0),
DesktopConfigurationProfileId: pulumi.Int(0),
Disabled: pulumi.Bool(false),
Email: pulumi.String("string"),
FilesystemLayout: pulumi.String("string"),
FtpPermission: pulumi.Bool(false),
GrantPermission: pulumi.String("string"),
GroupId: pulumi.Int(0),
GroupIds: pulumi.String("string"),
HeaderText: pulumi.String("string"),
ImportedPasswordHash: pulumi.String("string"),
IntegrationCentricProfileId: pulumi.Int(0),
Language: pulumi.String("string"),
Name: pulumi.String("string"),
Notes: pulumi.String("string"),
NotificationDailySendTime: pulumi.Int(0),
NotifyOnAllAutomationFailures: pulumi.Bool(false),
NotifyOnAllExpectationFailures: pulumi.Bool(false),
NotifyOnAllPendingWorkFailures: pulumi.Bool(false),
NotifyOnAllSiemHttpDestinationFailures: pulumi.Bool(false),
NotifyOnAllSiteWarnings: pulumi.Bool(false),
NotifyOnAllSsoFailures: pulumi.Bool(false),
NotifyOnAllSyncFailures: pulumi.Bool(false),
NotifyOnAllUserSecurityEvents: pulumi.Bool(false),
OfficeIntegrationEnabled: pulumi.Bool(false),
PartnerAdmin: pulumi.Bool(false),
PartnerId: pulumi.Int(0),
Password: pulumi.String("string"),
PasswordConfirmation: pulumi.String("string"),
PasswordValidityDays: pulumi.Int(0),
PrimaryGroupId: pulumi.Int(0),
ReadonlySiteAdmin: pulumi.Bool(false),
ReceiveAdminAlerts: pulumi.Bool(false),
Require2fa: pulumi.String("string"),
RequireLoginBy: pulumi.String("string"),
RequirePasswordChange: pulumi.Bool(false),
ResponsibleGroupId: pulumi.Int(0),
ResponsibleUserId: pulumi.Int(0),
RestapiPermission: pulumi.Bool(false),
SelfManaged: pulumi.Bool(false),
SftpPermission: pulumi.Bool(false),
SiteAdmin: pulumi.Bool(false),
SkipWelcomeScreen: pulumi.Bool(false),
SslRequired: pulumi.String("string"),
SsoStrategyId: pulumi.Int(0),
SubscribeToNewsletter: pulumi.Bool(false),
Tags: pulumi.String("string"),
TimeZone: pulumi.String("string"),
UserHome: pulumi.String("string"),
UserRoot: pulumi.String("string"),
WorkspaceAdmin: pulumi.Bool(false),
WorkspaceId: pulumi.Int(0),
})
resource "filescom_user" "userResource" {
lifecycle {
create_before_destroy = true
}
username = "string"
ai_assistant_personality_id = 0
allowed_ips = "string"
announcements_read = false
attachments_permission = false
authenticate_until = "string"
authentication_method = "string"
avatar_delete = false
billing_permission = false
bypass_site_allowed_ips = false
bypass_user_lifecycle_rules = false
change_password = "string"
change_password_confirmation = "string"
company = "string"
dav_permission = false
default_workspace_id = 0
desktop_configuration_profile_id = 0
disabled = false
email = "string"
filesystem_layout = "string"
ftp_permission = false
grant_permission = "string"
group_id = 0
group_ids = "string"
header_text = "string"
imported_password_hash = "string"
integration_centric_profile_id = 0
language = "string"
name = "string"
notes = "string"
notification_daily_send_time = 0
notify_on_all_automation_failures = false
notify_on_all_expectation_failures = false
notify_on_all_pending_work_failures = false
notify_on_all_siem_http_destination_failures = false
notify_on_all_site_warnings = false
notify_on_all_sso_failures = false
notify_on_all_sync_failures = false
notify_on_all_user_security_events = false
office_integration_enabled = false
partner_admin = false
partner_id = 0
password = "string"
password_confirmation = "string"
password_validity_days = 0
primary_group_id = 0
readonly_site_admin = false
receive_admin_alerts = false
require2fa = "string"
require_login_by = "string"
require_password_change = false
responsible_group_id = 0
responsible_user_id = 0
restapi_permission = false
self_managed = false
sftp_permission = false
site_admin = false
skip_welcome_screen = false
ssl_required = "string"
sso_strategy_id = 0
subscribe_to_newsletter = false
tags = "string"
time_zone = "string"
user_home = "string"
user_root = "string"
workspace_admin = false
workspace_id = 0
}
var userResource = new User("userResource", UserArgs.builder()
.username("string")
.aiAssistantPersonalityId(0)
.allowedIps("string")
.announcementsRead(false)
.attachmentsPermission(false)
.authenticateUntil("string")
.authenticationMethod("string")
.avatarDelete(false)
.billingPermission(false)
.bypassSiteAllowedIps(false)
.bypassUserLifecycleRules(false)
.changePassword("string")
.changePasswordConfirmation("string")
.company("string")
.davPermission(false)
.defaultWorkspaceId(0)
.desktopConfigurationProfileId(0)
.disabled(false)
.email("string")
.filesystemLayout("string")
.ftpPermission(false)
.grantPermission("string")
.groupId(0)
.groupIds("string")
.headerText("string")
.importedPasswordHash("string")
.integrationCentricProfileId(0)
.language("string")
.name("string")
.notes("string")
.notificationDailySendTime(0)
.notifyOnAllAutomationFailures(false)
.notifyOnAllExpectationFailures(false)
.notifyOnAllPendingWorkFailures(false)
.notifyOnAllSiemHttpDestinationFailures(false)
.notifyOnAllSiteWarnings(false)
.notifyOnAllSsoFailures(false)
.notifyOnAllSyncFailures(false)
.notifyOnAllUserSecurityEvents(false)
.officeIntegrationEnabled(false)
.partnerAdmin(false)
.partnerId(0)
.password("string")
.passwordConfirmation("string")
.passwordValidityDays(0)
.primaryGroupId(0)
.readonlySiteAdmin(false)
.receiveAdminAlerts(false)
.require2fa("string")
.requireLoginBy("string")
.requirePasswordChange(false)
.responsibleGroupId(0)
.responsibleUserId(0)
.restapiPermission(false)
.selfManaged(false)
.sftpPermission(false)
.siteAdmin(false)
.skipWelcomeScreen(false)
.sslRequired("string")
.ssoStrategyId(0)
.subscribeToNewsletter(false)
.tags("string")
.timeZone("string")
.userHome("string")
.userRoot("string")
.workspaceAdmin(false)
.workspaceId(0)
.build());
user_resource = filescom.User("userResource",
username="string",
ai_assistant_personality_id=0,
allowed_ips="string",
announcements_read=False,
attachments_permission=False,
authenticate_until="string",
authentication_method="string",
avatar_delete=False,
billing_permission=False,
bypass_site_allowed_ips=False,
bypass_user_lifecycle_rules=False,
change_password="string",
change_password_confirmation="string",
company="string",
dav_permission=False,
default_workspace_id=0,
desktop_configuration_profile_id=0,
disabled=False,
email="string",
filesystem_layout="string",
ftp_permission=False,
grant_permission="string",
group_id=0,
group_ids="string",
header_text="string",
imported_password_hash="string",
integration_centric_profile_id=0,
language="string",
name="string",
notes="string",
notification_daily_send_time=0,
notify_on_all_automation_failures=False,
notify_on_all_expectation_failures=False,
notify_on_all_pending_work_failures=False,
notify_on_all_siem_http_destination_failures=False,
notify_on_all_site_warnings=False,
notify_on_all_sso_failures=False,
notify_on_all_sync_failures=False,
notify_on_all_user_security_events=False,
office_integration_enabled=False,
partner_admin=False,
partner_id=0,
password="string",
password_confirmation="string",
password_validity_days=0,
primary_group_id=0,
readonly_site_admin=False,
receive_admin_alerts=False,
require2fa="string",
require_login_by="string",
require_password_change=False,
responsible_group_id=0,
responsible_user_id=0,
restapi_permission=False,
self_managed=False,
sftp_permission=False,
site_admin=False,
skip_welcome_screen=False,
ssl_required="string",
sso_strategy_id=0,
subscribe_to_newsletter=False,
tags="string",
time_zone="string",
user_home="string",
user_root="string",
workspace_admin=False,
workspace_id=0)
const userResource = new filescom.User("userResource", {
username: "string",
aiAssistantPersonalityId: 0,
allowedIps: "string",
announcementsRead: false,
attachmentsPermission: false,
authenticateUntil: "string",
authenticationMethod: "string",
avatarDelete: false,
billingPermission: false,
bypassSiteAllowedIps: false,
bypassUserLifecycleRules: false,
changePassword: "string",
changePasswordConfirmation: "string",
company: "string",
davPermission: false,
defaultWorkspaceId: 0,
desktopConfigurationProfileId: 0,
disabled: false,
email: "string",
filesystemLayout: "string",
ftpPermission: false,
grantPermission: "string",
groupId: 0,
groupIds: "string",
headerText: "string",
importedPasswordHash: "string",
integrationCentricProfileId: 0,
language: "string",
name: "string",
notes: "string",
notificationDailySendTime: 0,
notifyOnAllAutomationFailures: false,
notifyOnAllExpectationFailures: false,
notifyOnAllPendingWorkFailures: false,
notifyOnAllSiemHttpDestinationFailures: false,
notifyOnAllSiteWarnings: false,
notifyOnAllSsoFailures: false,
notifyOnAllSyncFailures: false,
notifyOnAllUserSecurityEvents: false,
officeIntegrationEnabled: false,
partnerAdmin: false,
partnerId: 0,
password: "string",
passwordConfirmation: "string",
passwordValidityDays: 0,
primaryGroupId: 0,
readonlySiteAdmin: false,
receiveAdminAlerts: false,
require2fa: "string",
requireLoginBy: "string",
requirePasswordChange: false,
responsibleGroupId: 0,
responsibleUserId: 0,
restapiPermission: false,
selfManaged: false,
sftpPermission: false,
siteAdmin: false,
skipWelcomeScreen: false,
sslRequired: "string",
ssoStrategyId: 0,
subscribeToNewsletter: false,
tags: "string",
timeZone: "string",
userHome: "string",
userRoot: "string",
workspaceAdmin: false,
workspaceId: 0,
});
type: filescom:User
properties:
aiAssistantPersonalityId: 0
allowedIps: string
announcementsRead: false
attachmentsPermission: false
authenticateUntil: string
authenticationMethod: string
avatarDelete: false
billingPermission: false
bypassSiteAllowedIps: false
bypassUserLifecycleRules: false
changePassword: string
changePasswordConfirmation: string
company: string
davPermission: false
defaultWorkspaceId: 0
desktopConfigurationProfileId: 0
disabled: false
email: string
filesystemLayout: string
ftpPermission: false
grantPermission: string
groupId: 0
groupIds: string
headerText: string
importedPasswordHash: string
integrationCentricProfileId: 0
language: string
name: string
notes: string
notificationDailySendTime: 0
notifyOnAllAutomationFailures: false
notifyOnAllExpectationFailures: false
notifyOnAllPendingWorkFailures: false
notifyOnAllSiemHttpDestinationFailures: false
notifyOnAllSiteWarnings: false
notifyOnAllSsoFailures: false
notifyOnAllSyncFailures: false
notifyOnAllUserSecurityEvents: false
officeIntegrationEnabled: false
partnerAdmin: false
partnerId: 0
password: string
passwordConfirmation: string
passwordValidityDays: 0
primaryGroupId: 0
readonlySiteAdmin: false
receiveAdminAlerts: false
require2fa: string
requireLoginBy: string
requirePasswordChange: false
responsibleGroupId: 0
responsibleUserId: 0
restapiPermission: false
selfManaged: false
sftpPermission: false
siteAdmin: false
skipWelcomeScreen: false
sslRequired: string
ssoStrategyId: 0
subscribeToNewsletter: false
tags: string
timeZone: string
userHome: string
userRoot: string
username: string
workspaceAdmin: false
workspaceId: 0
User Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The User resource accepts the following input properties:
- Username string
- User's username
- Ai
Assistant intPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- Allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- Announcements
Read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- Attachments
Permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - Authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- Authentication
Method string - How is this user authenticated?
- Avatar
Delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- Billing
Permission bool - Allow this user to perform operations on the account, payments, and invoices?
- Bypass
Site boolAllowed Ips - Allow this user to skip site-wide IP blacklists?
- Bypass
User boolLifecycle Rules - Exempt this user from user lifecycle rules?
- Change
Password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- Change
Password stringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - Company string
- User's company
- Dav
Permission bool - Can the user connect with WebDAV?
- Default
Workspace intId - Workspace ID the user should land in by default when more than one Workspace is available.
- Desktop
Configuration intProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- Disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- Email string
- User email address
- Filesystem
Layout string - File system layout
- Ftp
Permission bool - Can the user access with FTP/FTPS?
- Grant
Permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - Group
Id int - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- Group
Ids string - Comma-separated list of group IDs of which this user is a member
- Header
Text string - Text to display to the user in the header of the UI
- Imported
Password stringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- Integration
Centric intProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- Language string
- Preferred language
- Name string
- User's full name
- Notes string
- Any internal notes on the user
- Notification
Daily intSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- Notify
On boolAll Automation Failures - Should the user receive automation failures via email?
- Notify
On boolAll Expectation Failures - Should the user receive expectation failures and misses via email?
- Notify
On boolAll Pending Work Failures - Should the user receive pending work failures via email?
- Notify
On boolAll Siem Http Destination Failures - Should the user receive siem failures via email?
- Notify
On boolAll Site Warnings - Should the user receive site warnings via email?
- Notify
On boolAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- Notify
On boolAll Sync Failures - Should the user receive sync failures via email?
- Notify
On boolAll User Security Events - Should the user receive user security events via email?
- Office
Integration boolEnabled - Enable integration with Office for the web?
- Partner
Admin bool - Is this user a Partner administrator?
- Partner
Id int - Partner ID if this user belongs to a Partner
- Password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- Password
Confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - Password
Validity intDays - Number of days to allow user to use the same password
- Primary
Group intId - Primary group ID for Group Admin scoping
- Readonly
Site boolAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- Receive
Admin boolAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- Require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - Require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- Require
Password boolChange - Is a password change required upon next user login?
- Responsible
Group intId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- Responsible
User intId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- Restapi
Permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- Self
Managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- Sftp
Permission bool - Can the user access with SFTP?
- Site
Admin bool - Is the user an administrator for this site?
- Skip
Welcome boolScreen - Skip Welcome page in the UI?
- Ssl
Required string - SSL required setting
- Sso
Strategy intId - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- Time
Zone string - User time zone
- User
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- User
Root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- Workspace
Admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- Workspace
Id int - Workspace ID
- Username string
- User's username
- Ai
Assistant intPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- Allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- Announcements
Read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- Attachments
Permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - Authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- Authentication
Method string - How is this user authenticated?
- Avatar
Delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- Billing
Permission bool - Allow this user to perform operations on the account, payments, and invoices?
- Bypass
Site boolAllowed Ips - Allow this user to skip site-wide IP blacklists?
- Bypass
User boolLifecycle Rules - Exempt this user from user lifecycle rules?
- Change
Password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- Change
Password stringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - Company string
- User's company
- Dav
Permission bool - Can the user connect with WebDAV?
- Default
Workspace intId - Workspace ID the user should land in by default when more than one Workspace is available.
- Desktop
Configuration intProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- Disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- Email string
- User email address
- Filesystem
Layout string - File system layout
- Ftp
Permission bool - Can the user access with FTP/FTPS?
- Grant
Permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - Group
Id int - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- Group
Ids string - Comma-separated list of group IDs of which this user is a member
- Header
Text string - Text to display to the user in the header of the UI
- Imported
Password stringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- Integration
Centric intProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- Language string
- Preferred language
- Name string
- User's full name
- Notes string
- Any internal notes on the user
- Notification
Daily intSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- Notify
On boolAll Automation Failures - Should the user receive automation failures via email?
- Notify
On boolAll Expectation Failures - Should the user receive expectation failures and misses via email?
- Notify
On boolAll Pending Work Failures - Should the user receive pending work failures via email?
- Notify
On boolAll Siem Http Destination Failures - Should the user receive siem failures via email?
- Notify
On boolAll Site Warnings - Should the user receive site warnings via email?
- Notify
On boolAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- Notify
On boolAll Sync Failures - Should the user receive sync failures via email?
- Notify
On boolAll User Security Events - Should the user receive user security events via email?
- Office
Integration boolEnabled - Enable integration with Office for the web?
- Partner
Admin bool - Is this user a Partner administrator?
- Partner
Id int - Partner ID if this user belongs to a Partner
- Password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- Password
Confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - Password
Validity intDays - Number of days to allow user to use the same password
- Primary
Group intId - Primary group ID for Group Admin scoping
- Readonly
Site boolAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- Receive
Admin boolAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- Require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - Require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- Require
Password boolChange - Is a password change required upon next user login?
- Responsible
Group intId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- Responsible
User intId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- Restapi
Permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- Self
Managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- Sftp
Permission bool - Can the user access with SFTP?
- Site
Admin bool - Is the user an administrator for this site?
- Skip
Welcome boolScreen - Skip Welcome page in the UI?
- Ssl
Required string - SSL required setting
- Sso
Strategy intId - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- Time
Zone string - User time zone
- User
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- User
Root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- Workspace
Admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- Workspace
Id int - Workspace ID
- username string
- User's username
- ai_
assistant_ numberpersonality_ id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed_
ips string - A list of allowed IPs if applicable. Newline delimited
- announcements_
read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- attachments_
permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate_
until string - Scheduled Date/Time at which user will be deactivated
- authentication_
method string - How is this user authenticated?
- avatar_
delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- billing_
permission bool - Allow this user to perform operations on the account, payments, and invoices?
- bypass_
site_ boolallowed_ ips - Allow this user to skip site-wide IP blacklists?
- bypass_
user_ boollifecycle_ rules - Exempt this user from user lifecycle rules?
- change_
password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change_
password_ stringconfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company string
- User's company
- dav_
permission bool - Can the user connect with WebDAV?
- default_
workspace_ numberid - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop_
configuration_ numberprofile_ id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- email string
- User email address
- filesystem_
layout string - File system layout
- ftp_
permission bool - Can the user access with FTP/FTPS?
- grant_
permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group_
id number - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group_
ids string - Comma-separated list of group IDs of which this user is a member
- header_
text string - Text to display to the user in the header of the UI
- imported_
password_ stringhash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration_
centric_ numberprofile_ id - Integration Centric Profile ID assigned directly to this user, if any.
- language string
- Preferred language
- name string
- User's full name
- notes string
- Any internal notes on the user
- notification_
daily_ numbersend_ time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify_
on_ boolall_ automation_ failures - Should the user receive automation failures via email?
- notify_
on_ boolall_ expectation_ failures - Should the user receive expectation failures and misses via email?
- notify_
on_ boolall_ pending_ work_ failures - Should the user receive pending work failures via email?
- notify_
on_ boolall_ siem_ http_ destination_ failures - Should the user receive siem failures via email?
- notify_
on_ boolall_ site_ warnings - Should the user receive site warnings via email?
- notify_
on_ boolall_ sso_ failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify_
on_ boolall_ sync_ failures - Should the user receive sync failures via email?
- notify_
on_ boolall_ user_ security_ events - Should the user receive user security events via email?
- office_
integration_ boolenabled - Enable integration with Office for the web?
- partner_
admin bool - Is this user a Partner administrator?
- partner_
id number - Partner ID if this user belongs to a Partner
- password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password_
confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password_
validity_ numberdays - Number of days to allow user to use the same password
- primary_
group_ numberid - Primary group ID for Group Admin scoping
- readonly_
site_ booladmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive_
admin_ boolalerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require_
login_ stringby - Require user to login by specified date otherwise it will be disabled.
- require_
password_ boolchange - Is a password change required upon next user login?
- responsible_
group_ numberid - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible_
user_ numberid - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi_
permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self_
managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- sftp_
permission bool - Can the user access with SFTP?
- site_
admin bool - Is the user an administrator for this site?
- skip_
welcome_ boolscreen - Skip Welcome page in the UI?
- ssl_
required string - SSL required setting
- sso_
strategy_ numberid - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time_
zone string - User time zone
- user_
home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user_
root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- workspace_
admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace_
id number - Workspace ID
- username String
- User's username
- ai
Assistant IntegerPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips String - A list of allowed IPs if applicable. Newline delimited
- announcements
Read Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- attachments
Permission Boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until String - Scheduled Date/Time at which user will be deactivated
- authentication
Method String - How is this user authenticated?
- avatar
Delete Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- billing
Permission Boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site BooleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User BooleanLifecycle Rules - Exempt this user from user lifecycle rules?
- change
Password String - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change
Password StringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company String
- User's company
- dav
Permission Boolean - Can the user connect with WebDAV?
- default
Workspace IntegerId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration IntegerProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled Boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- email String
- User email address
- filesystem
Layout String - File system layout
- ftp
Permission Boolean - Can the user access with FTP/FTPS?
- grant
Permission String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group
Id Integer - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group
Ids String - Comma-separated list of group IDs of which this user is a member
- header
Text String - Text to display to the user in the header of the UI
- imported
Password StringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration
Centric IntegerProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language String
- Preferred language
- name String
- User's full name
- notes String
- Any internal notes on the user
- notification
Daily IntegerSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On BooleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On BooleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On BooleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On BooleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On BooleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On BooleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On BooleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On BooleanAll User Security Events - Should the user receive user security events via email?
- office
Integration BooleanEnabled - Enable integration with Office for the web?
- partner
Admin Boolean - Is this user a Partner administrator?
- partner
Id Integer - Partner ID if this user belongs to a Partner
- password String
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password
Confirmation String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password
Validity IntegerDays - Number of days to allow user to use the same password
- primary
Group IntegerId - Primary group ID for Group Admin scoping
- readonly
Site BooleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin BooleanAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa String
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login StringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password BooleanChange - Is a password change required upon next user login?
- responsible
Group IntegerId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User IntegerId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission Boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed Boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission Boolean - Can the user access with SFTP?
- site
Admin Boolean - Is the user an administrator for this site?
- skip
Welcome BooleanScreen - Skip Welcome page in the UI?
- ssl
Required String - SSL required setting
- sso
Strategy IntegerId - SSO (Single Sign On) strategy ID for the user, if applicable.
- Boolean
- Is the user subscribed to the newsletter?
- String
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone String - User time zone
- user
Home String - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root String - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- workspace
Admin Boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id Integer - Workspace ID
- username string
- User's username
- ai
Assistant numberPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- announcements
Read boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- attachments
Permission boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- authentication
Method string - How is this user authenticated?
- avatar
Delete boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- billing
Permission boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site booleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User booleanLifecycle Rules - Exempt this user from user lifecycle rules?
- change
Password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change
Password stringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company string
- User's company
- dav
Permission boolean - Can the user connect with WebDAV?
- default
Workspace numberId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration numberProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- email string
- User email address
- filesystem
Layout string - File system layout
- ftp
Permission boolean - Can the user access with FTP/FTPS?
- grant
Permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group
Id number - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group
Ids string - Comma-separated list of group IDs of which this user is a member
- header
Text string - Text to display to the user in the header of the UI
- imported
Password stringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration
Centric numberProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language string
- Preferred language
- name string
- User's full name
- notes string
- Any internal notes on the user
- notification
Daily numberSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On booleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On booleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On booleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On booleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On booleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On booleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On booleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On booleanAll User Security Events - Should the user receive user security events via email?
- office
Integration booleanEnabled - Enable integration with Office for the web?
- partner
Admin boolean - Is this user a Partner administrator?
- partner
Id number - Partner ID if this user belongs to a Partner
- password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password
Confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password
Validity numberDays - Number of days to allow user to use the same password
- primary
Group numberId - Primary group ID for Group Admin scoping
- readonly
Site booleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin booleanAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password booleanChange - Is a password change required upon next user login?
- responsible
Group numberId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User numberId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission boolean - Can the user access with SFTP?
- site
Admin boolean - Is the user an administrator for this site?
- skip
Welcome booleanScreen - Skip Welcome page in the UI?
- ssl
Required string - SSL required setting
- sso
Strategy numberId - SSO (Single Sign On) strategy ID for the user, if applicable.
- boolean
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone string - User time zone
- user
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- workspace
Admin boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id number - Workspace ID
- username str
- User's username
- ai_
assistant_ intpersonality_ id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed_
ips str - A list of allowed IPs if applicable. Newline delimited
- announcements_
read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- attachments_
permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate_
until str - Scheduled Date/Time at which user will be deactivated
- authentication_
method str - How is this user authenticated?
- avatar_
delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- billing_
permission bool - Allow this user to perform operations on the account, payments, and invoices?
- bypass_
site_ boolallowed_ ips - Allow this user to skip site-wide IP blacklists?
- bypass_
user_ boollifecycle_ rules - Exempt this user from user lifecycle rules?
- change_
password str - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change_
password_ strconfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company str
- User's company
- dav_
permission bool - Can the user connect with WebDAV?
- default_
workspace_ intid - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop_
configuration_ intprofile_ id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- email str
- User email address
- filesystem_
layout str - File system layout
- ftp_
permission bool - Can the user access with FTP/FTPS?
- grant_
permission str - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group_
id int - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group_
ids str - Comma-separated list of group IDs of which this user is a member
- header_
text str - Text to display to the user in the header of the UI
- imported_
password_ strhash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration_
centric_ intprofile_ id - Integration Centric Profile ID assigned directly to this user, if any.
- language str
- Preferred language
- name str
- User's full name
- notes str
- Any internal notes on the user
- notification_
daily_ intsend_ time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify_
on_ boolall_ automation_ failures - Should the user receive automation failures via email?
- notify_
on_ boolall_ expectation_ failures - Should the user receive expectation failures and misses via email?
- notify_
on_ boolall_ pending_ work_ failures - Should the user receive pending work failures via email?
- notify_
on_ boolall_ siem_ http_ destination_ failures - Should the user receive siem failures via email?
- notify_
on_ boolall_ site_ warnings - Should the user receive site warnings via email?
- notify_
on_ boolall_ sso_ failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify_
on_ boolall_ sync_ failures - Should the user receive sync failures via email?
- notify_
on_ boolall_ user_ security_ events - Should the user receive user security events via email?
- office_
integration_ boolenabled - Enable integration with Office for the web?
- partner_
admin bool - Is this user a Partner administrator?
- partner_
id int - Partner ID if this user belongs to a Partner
- password str
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password_
confirmation str - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password_
validity_ intdays - Number of days to allow user to use the same password
- primary_
group_ intid - Primary group ID for Group Admin scoping
- readonly_
site_ booladmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive_
admin_ boolalerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa str
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require_
login_ strby - Require user to login by specified date otherwise it will be disabled.
- require_
password_ boolchange - Is a password change required upon next user login?
- responsible_
group_ intid - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible_
user_ intid - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi_
permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self_
managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- sftp_
permission bool - Can the user access with SFTP?
- site_
admin bool - Is the user an administrator for this site?
- skip_
welcome_ boolscreen - Skip Welcome page in the UI?
- ssl_
required str - SSL required setting
- sso_
strategy_ intid - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- str
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time_
zone str - User time zone
- user_
home str - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user_
root str - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- workspace_
admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace_
id int - Workspace ID
- username String
- User's username
- ai
Assistant NumberPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips String - A list of allowed IPs if applicable. Newline delimited
- announcements
Read Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- attachments
Permission Boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until String - Scheduled Date/Time at which user will be deactivated
- authentication
Method String - How is this user authenticated?
- avatar
Delete Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- billing
Permission Boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site BooleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User BooleanLifecycle Rules - Exempt this user from user lifecycle rules?
- change
Password String - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change
Password StringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company String
- User's company
- dav
Permission Boolean - Can the user connect with WebDAV?
- default
Workspace NumberId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration NumberProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled Boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- email String
- User email address
- filesystem
Layout String - File system layout
- ftp
Permission Boolean - Can the user access with FTP/FTPS?
- grant
Permission String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group
Id Number - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group
Ids String - Comma-separated list of group IDs of which this user is a member
- header
Text String - Text to display to the user in the header of the UI
- imported
Password StringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration
Centric NumberProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language String
- Preferred language
- name String
- User's full name
- notes String
- Any internal notes on the user
- notification
Daily NumberSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On BooleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On BooleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On BooleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On BooleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On BooleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On BooleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On BooleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On BooleanAll User Security Events - Should the user receive user security events via email?
- office
Integration BooleanEnabled - Enable integration with Office for the web?
- partner
Admin Boolean - Is this user a Partner administrator?
- partner
Id Number - Partner ID if this user belongs to a Partner
- password String
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password
Confirmation String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password
Validity NumberDays - Number of days to allow user to use the same password
- primary
Group NumberId - Primary group ID for Group Admin scoping
- readonly
Site BooleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin BooleanAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa String
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login StringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password BooleanChange - Is a password change required upon next user login?
- responsible
Group NumberId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User NumberId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission Boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed Boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission Boolean - Can the user access with SFTP?
- site
Admin Boolean - Is the user an administrator for this site?
- skip
Welcome BooleanScreen - Skip Welcome page in the UI?
- ssl
Required String - SSL required setting
- sso
Strategy NumberId - SSO (Single Sign On) strategy ID for the user, if applicable.
- Boolean
- Is the user subscribed to the newsletter?
- String
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone String - User time zone
- user
Home String - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root String - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- workspace
Admin Boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id Number - Workspace ID
Outputs
All input properties are implicitly available as output properties. Additionally, the User resource produces the following output properties:
- Active2fa bool
- Is 2fa active for the user?
- Admin
Group List<int>Ids - List of group IDs of which this user is an administrator
- Api
Keys intCount - Number of API keys associated with this user
- Avatar
Url string - URL holding the user's avatar
- Billable bool
- Is this a billable user record?
- Created
At string - When this user was created
- Days
Remaining intUntil Password Expire - Number of days remaining until password expires
- Disabled
Expired boolOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- Externally
Managed bool - Is this user managed by a SsoStrategy?
- First
Login stringAt - User's first login time
- Id string
- The provider-assigned unique ID for this managed resource.
- Last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- Last
Api stringUse At - User's most recent API use time
- Last
Dav stringLogin At - User's most recent login time via WebDAV
- Last
Desktop stringLogin At - User's most recent login time via Desktop app
- Last
Ftp stringLogin At - User's most recent login time via FTP
- Last
Login stringAt - User's most recent login time via any protocol
- Last
Protocol stringCipher - The most recent protocol and cipher used
- Last
Restapi stringLogin At - User's most recent login time via Rest API
- Last
Sftp stringLogin At - User's most recent login time via SFTP
- Last
Web stringLogin At - User's most recent login time via web
- Lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- Partner
Name string - Name of the Partner if this user belongs to a Partner
- Password
Expire stringAt - Password expiration datetime
- Password
Expired bool - Is user's password expired?
- Password
Set stringAt - Last time the user's password was set
- Public
Keys intCount - Number of public keys associated with this user
- Site
Id int - Site ID
- Type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - Type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
- Active2fa bool
- Is 2fa active for the user?
- Admin
Group []intIds - List of group IDs of which this user is an administrator
- Api
Keys intCount - Number of API keys associated with this user
- Avatar
Url string - URL holding the user's avatar
- Billable bool
- Is this a billable user record?
- Created
At string - When this user was created
- Days
Remaining intUntil Password Expire - Number of days remaining until password expires
- Disabled
Expired boolOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- Externally
Managed bool - Is this user managed by a SsoStrategy?
- First
Login stringAt - User's first login time
- Id string
- The provider-assigned unique ID for this managed resource.
- Last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- Last
Api stringUse At - User's most recent API use time
- Last
Dav stringLogin At - User's most recent login time via WebDAV
- Last
Desktop stringLogin At - User's most recent login time via Desktop app
- Last
Ftp stringLogin At - User's most recent login time via FTP
- Last
Login stringAt - User's most recent login time via any protocol
- Last
Protocol stringCipher - The most recent protocol and cipher used
- Last
Restapi stringLogin At - User's most recent login time via Rest API
- Last
Sftp stringLogin At - User's most recent login time via SFTP
- Last
Web stringLogin At - User's most recent login time via web
- Lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- Partner
Name string - Name of the Partner if this user belongs to a Partner
- Password
Expire stringAt - Password expiration datetime
- Password
Expired bool - Is user's password expired?
- Password
Set stringAt - Last time the user's password was set
- Public
Keys intCount - Number of public keys associated with this user
- Site
Id int - Site ID
- Type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - Type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
- active2fa bool
- Is 2fa active for the user?
- admin_
group_ list(number)ids - List of group IDs of which this user is an administrator
- api_
keys_ numbercount - Number of API keys associated with this user
- avatar_
url string - URL holding the user's avatar
- billable bool
- Is this a billable user record?
- created_
at string - When this user was created
- days_
remaining_ numberuntil_ password_ expire - Number of days remaining until password expires
- disabled_
expired_ boolor_ inactive - Computed property that returns true if user disabled or expired or inactive.
- externally_
managed bool - Is this user managed by a SsoStrategy?
- first_
login_ stringat - User's first login time
- id string
- The provider-assigned unique ID for this managed resource.
- last_
active_ stringat - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last_
api_ stringuse_ at - User's most recent API use time
- last_
dav_ stringlogin_ at - User's most recent login time via WebDAV
- last_
desktop_ stringlogin_ at - User's most recent login time via Desktop app
- last_
ftp_ stringlogin_ at - User's most recent login time via FTP
- last_
login_ stringat - User's most recent login time via any protocol
- last_
protocol_ stringcipher - The most recent protocol and cipher used
- last_
restapi_ stringlogin_ at - User's most recent login time via Rest API
- last_
sftp_ stringlogin_ at - User's most recent login time via SFTP
- last_
web_ stringlogin_ at - User's most recent login time via web
- lockout_
expires string - Time in the future that the user will no longer be locked out if applicable
- partner_
name string - Name of the Partner if this user belongs to a Partner
- password_
expire_ stringat - Password expiration datetime
- password_
expired bool - Is user's password expired?
- password_
set_ stringat - Last time the user's password was set
- public_
keys_ numbercount - Number of public keys associated with this user
- site_
id number - Site ID
- type_
of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type_
of2fa_ stringfor_ display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
- active2fa Boolean
- Is 2fa active for the user?
- admin
Group List<Integer>Ids - List of group IDs of which this user is an administrator
- api
Keys IntegerCount - Number of API keys associated with this user
- avatar
Url String - URL holding the user's avatar
- billable Boolean
- Is this a billable user record?
- created
At String - When this user was created
- days
Remaining IntegerUntil Password Expire - Number of days remaining until password expires
- disabled
Expired BooleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- externally
Managed Boolean - Is this user managed by a SsoStrategy?
- first
Login StringAt - User's first login time
- id String
- The provider-assigned unique ID for this managed resource.
- last
Active StringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api StringUse At - User's most recent API use time
- last
Dav StringLogin At - User's most recent login time via WebDAV
- last
Desktop StringLogin At - User's most recent login time via Desktop app
- last
Ftp StringLogin At - User's most recent login time via FTP
- last
Login StringAt - User's most recent login time via any protocol
- last
Protocol StringCipher - The most recent protocol and cipher used
- last
Restapi StringLogin At - User's most recent login time via Rest API
- last
Sftp StringLogin At - User's most recent login time via SFTP
- last
Web StringLogin At - User's most recent login time via web
- lockout
Expires String - Time in the future that the user will no longer be locked out if applicable
- partner
Name String - Name of the Partner if this user belongs to a Partner
- password
Expire StringAt - Password expiration datetime
- password
Expired Boolean - Is user's password expired?
- password
Set StringAt - Last time the user's password was set
- public
Keys IntegerCount - Number of public keys associated with this user
- site
Id Integer - Site ID
- type
Of2fa String - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa StringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
- active2fa boolean
- Is 2fa active for the user?
- admin
Group number[]Ids - List of group IDs of which this user is an administrator
- api
Keys numberCount - Number of API keys associated with this user
- avatar
Url string - URL holding the user's avatar
- billable boolean
- Is this a billable user record?
- created
At string - When this user was created
- days
Remaining numberUntil Password Expire - Number of days remaining until password expires
- disabled
Expired booleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- externally
Managed boolean - Is this user managed by a SsoStrategy?
- first
Login stringAt - User's first login time
- id string
- The provider-assigned unique ID for this managed resource.
- last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api stringUse At - User's most recent API use time
- last
Dav stringLogin At - User's most recent login time via WebDAV
- last
Desktop stringLogin At - User's most recent login time via Desktop app
- last
Ftp stringLogin At - User's most recent login time via FTP
- last
Login stringAt - User's most recent login time via any protocol
- last
Protocol stringCipher - The most recent protocol and cipher used
- last
Restapi stringLogin At - User's most recent login time via Rest API
- last
Sftp stringLogin At - User's most recent login time via SFTP
- last
Web stringLogin At - User's most recent login time via web
- lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- partner
Name string - Name of the Partner if this user belongs to a Partner
- password
Expire stringAt - Password expiration datetime
- password
Expired boolean - Is user's password expired?
- password
Set stringAt - Last time the user's password was set
- public
Keys numberCount - Number of public keys associated with this user
- site
Id number - Site ID
- type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
- active2fa bool
- Is 2fa active for the user?
- admin_
group_ Sequence[int]ids - List of group IDs of which this user is an administrator
- api_
keys_ intcount - Number of API keys associated with this user
- avatar_
url str - URL holding the user's avatar
- billable bool
- Is this a billable user record?
- created_
at str - When this user was created
- days_
remaining_ intuntil_ password_ expire - Number of days remaining until password expires
- disabled_
expired_ boolor_ inactive - Computed property that returns true if user disabled or expired or inactive.
- externally_
managed bool - Is this user managed by a SsoStrategy?
- first_
login_ strat - User's first login time
- id str
- The provider-assigned unique ID for this managed resource.
- last_
active_ strat - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last_
api_ struse_ at - User's most recent API use time
- last_
dav_ strlogin_ at - User's most recent login time via WebDAV
- last_
desktop_ strlogin_ at - User's most recent login time via Desktop app
- last_
ftp_ strlogin_ at - User's most recent login time via FTP
- last_
login_ strat - User's most recent login time via any protocol
- last_
protocol_ strcipher - The most recent protocol and cipher used
- last_
restapi_ strlogin_ at - User's most recent login time via Rest API
- last_
sftp_ strlogin_ at - User's most recent login time via SFTP
- last_
web_ strlogin_ at - User's most recent login time via web
- lockout_
expires str - Time in the future that the user will no longer be locked out if applicable
- partner_
name str - Name of the Partner if this user belongs to a Partner
- password_
expire_ strat - Password expiration datetime
- password_
expired bool - Is user's password expired?
- password_
set_ strat - Last time the user's password was set
- public_
keys_ intcount - Number of public keys associated with this user
- site_
id int - Site ID
- type_
of2fa str - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type_
of2fa_ strfor_ display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
- active2fa Boolean
- Is 2fa active for the user?
- admin
Group List<Number>Ids - List of group IDs of which this user is an administrator
- api
Keys NumberCount - Number of API keys associated with this user
- avatar
Url String - URL holding the user's avatar
- billable Boolean
- Is this a billable user record?
- created
At String - When this user was created
- days
Remaining NumberUntil Password Expire - Number of days remaining until password expires
- disabled
Expired BooleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- externally
Managed Boolean - Is this user managed by a SsoStrategy?
- first
Login StringAt - User's first login time
- id String
- The provider-assigned unique ID for this managed resource.
- last
Active StringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api StringUse At - User's most recent API use time
- last
Dav StringLogin At - User's most recent login time via WebDAV
- last
Desktop StringLogin At - User's most recent login time via Desktop app
- last
Ftp StringLogin At - User's most recent login time via FTP
- last
Login StringAt - User's most recent login time via any protocol
- last
Protocol StringCipher - The most recent protocol and cipher used
- last
Restapi StringLogin At - User's most recent login time via Rest API
- last
Sftp StringLogin At - User's most recent login time via SFTP
- last
Web StringLogin At - User's most recent login time via web
- lockout
Expires String - Time in the future that the user will no longer be locked out if applicable
- partner
Name String - Name of the Partner if this user belongs to a Partner
- password
Expire StringAt - Password expiration datetime
- password
Expired Boolean - Is user's password expired?
- password
Set StringAt - Last time the user's password was set
- public
Keys NumberCount - Number of public keys associated with this user
- site
Id Number - Site ID
- type
Of2fa String - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa StringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method.
Look up Existing User Resource
Get an existing User resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: UserState, opts?: CustomResourceOptions): User@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
active2fa: Optional[bool] = None,
admin_group_ids: Optional[Sequence[int]] = None,
ai_assistant_personality_id: Optional[int] = None,
allowed_ips: Optional[str] = None,
announcements_read: Optional[bool] = None,
api_keys_count: Optional[int] = None,
attachments_permission: Optional[bool] = None,
authenticate_until: Optional[str] = None,
authentication_method: Optional[str] = None,
avatar_delete: Optional[bool] = None,
avatar_url: Optional[str] = None,
billable: Optional[bool] = None,
billing_permission: Optional[bool] = None,
bypass_site_allowed_ips: Optional[bool] = None,
bypass_user_lifecycle_rules: Optional[bool] = None,
change_password: Optional[str] = None,
change_password_confirmation: Optional[str] = None,
company: Optional[str] = None,
created_at: Optional[str] = None,
dav_permission: Optional[bool] = None,
days_remaining_until_password_expire: Optional[int] = None,
default_workspace_id: Optional[int] = None,
desktop_configuration_profile_id: Optional[int] = None,
disabled: Optional[bool] = None,
disabled_expired_or_inactive: Optional[bool] = None,
email: Optional[str] = None,
externally_managed: Optional[bool] = None,
filesystem_layout: Optional[str] = None,
first_login_at: Optional[str] = None,
ftp_permission: Optional[bool] = None,
grant_permission: Optional[str] = None,
group_id: Optional[int] = None,
group_ids: Optional[str] = None,
header_text: Optional[str] = None,
imported_password_hash: Optional[str] = None,
integration_centric_profile_id: Optional[int] = None,
language: Optional[str] = None,
last_active_at: Optional[str] = None,
last_api_use_at: Optional[str] = None,
last_dav_login_at: Optional[str] = None,
last_desktop_login_at: Optional[str] = None,
last_ftp_login_at: Optional[str] = None,
last_login_at: Optional[str] = None,
last_protocol_cipher: Optional[str] = None,
last_restapi_login_at: Optional[str] = None,
last_sftp_login_at: Optional[str] = None,
last_web_login_at: Optional[str] = None,
lockout_expires: Optional[str] = None,
name: Optional[str] = None,
notes: Optional[str] = None,
notification_daily_send_time: Optional[int] = None,
notify_on_all_automation_failures: Optional[bool] = None,
notify_on_all_expectation_failures: Optional[bool] = None,
notify_on_all_pending_work_failures: Optional[bool] = None,
notify_on_all_siem_http_destination_failures: Optional[bool] = None,
notify_on_all_site_warnings: Optional[bool] = None,
notify_on_all_sso_failures: Optional[bool] = None,
notify_on_all_sync_failures: Optional[bool] = None,
notify_on_all_user_security_events: Optional[bool] = None,
office_integration_enabled: Optional[bool] = None,
partner_admin: Optional[bool] = None,
partner_id: Optional[int] = None,
partner_name: Optional[str] = None,
password: Optional[str] = None,
password_confirmation: Optional[str] = None,
password_expire_at: Optional[str] = None,
password_expired: Optional[bool] = None,
password_set_at: Optional[str] = None,
password_validity_days: Optional[int] = None,
primary_group_id: Optional[int] = None,
public_keys_count: Optional[int] = None,
readonly_site_admin: Optional[bool] = None,
receive_admin_alerts: Optional[bool] = None,
require2fa: Optional[str] = None,
require_login_by: Optional[str] = None,
require_password_change: Optional[bool] = None,
responsible_group_id: Optional[int] = None,
responsible_user_id: Optional[int] = None,
restapi_permission: Optional[bool] = None,
self_managed: Optional[bool] = None,
sftp_permission: Optional[bool] = None,
site_admin: Optional[bool] = None,
site_id: Optional[int] = None,
skip_welcome_screen: Optional[bool] = None,
ssl_required: Optional[str] = None,
sso_strategy_id: Optional[int] = None,
subscribe_to_newsletter: Optional[bool] = None,
tags: Optional[str] = None,
time_zone: Optional[str] = None,
type_of2fa: Optional[str] = None,
type_of2fa_for_display: Optional[str] = None,
user_home: Optional[str] = None,
user_root: Optional[str] = None,
username: Optional[str] = None,
workspace_admin: Optional[bool] = None,
workspace_id: Optional[int] = None) -> Userfunc GetUser(ctx *Context, name string, id IDInput, state *UserState, opts ...ResourceOption) (*User, error)public static User Get(string name, Input<string> id, UserState? state, CustomResourceOptions? opts = null)public static User get(String name, Output<String> id, UserState state, CustomResourceOptions options)resources: _: type: filescom:User get: id: ${id}import {
to = filescom_user.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Active2fa bool
- Is 2fa active for the user?
- Admin
Group List<int>Ids - List of group IDs of which this user is an administrator
- Ai
Assistant intPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- Allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- Announcements
Read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- Api
Keys intCount - Number of API keys associated with this user
- Attachments
Permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - Authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- Authentication
Method string - How is this user authenticated?
- Avatar
Delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- Avatar
Url string - URL holding the user's avatar
- Billable bool
- Is this a billable user record?
- Billing
Permission bool - Allow this user to perform operations on the account, payments, and invoices?
- Bypass
Site boolAllowed Ips - Allow this user to skip site-wide IP blacklists?
- Bypass
User boolLifecycle Rules - Exempt this user from user lifecycle rules?
- Change
Password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- Change
Password stringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - Company string
- User's company
- Created
At string - When this user was created
- Dav
Permission bool - Can the user connect with WebDAV?
- Days
Remaining intUntil Password Expire - Number of days remaining until password expires
- Default
Workspace intId - Workspace ID the user should land in by default when more than one Workspace is available.
- Desktop
Configuration intProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- Disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- Disabled
Expired boolOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- Email string
- User email address
- Externally
Managed bool - Is this user managed by a SsoStrategy?
- Filesystem
Layout string - File system layout
- First
Login stringAt - User's first login time
- Ftp
Permission bool - Can the user access with FTP/FTPS?
- Grant
Permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - Group
Id int - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- Group
Ids string - Comma-separated list of group IDs of which this user is a member
- Header
Text string - Text to display to the user in the header of the UI
- Imported
Password stringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- Integration
Centric intProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- Language string
- Preferred language
- Last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- Last
Api stringUse At - User's most recent API use time
- Last
Dav stringLogin At - User's most recent login time via WebDAV
- Last
Desktop stringLogin At - User's most recent login time via Desktop app
- Last
Ftp stringLogin At - User's most recent login time via FTP
- Last
Login stringAt - User's most recent login time via any protocol
- Last
Protocol stringCipher - The most recent protocol and cipher used
- Last
Restapi stringLogin At - User's most recent login time via Rest API
- Last
Sftp stringLogin At - User's most recent login time via SFTP
- Last
Web stringLogin At - User's most recent login time via web
- Lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- Name string
- User's full name
- Notes string
- Any internal notes on the user
- Notification
Daily intSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- Notify
On boolAll Automation Failures - Should the user receive automation failures via email?
- Notify
On boolAll Expectation Failures - Should the user receive expectation failures and misses via email?
- Notify
On boolAll Pending Work Failures - Should the user receive pending work failures via email?
- Notify
On boolAll Siem Http Destination Failures - Should the user receive siem failures via email?
- Notify
On boolAll Site Warnings - Should the user receive site warnings via email?
- Notify
On boolAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- Notify
On boolAll Sync Failures - Should the user receive sync failures via email?
- Notify
On boolAll User Security Events - Should the user receive user security events via email?
- Office
Integration boolEnabled - Enable integration with Office for the web?
- Partner
Admin bool - Is this user a Partner administrator?
- Partner
Id int - Partner ID if this user belongs to a Partner
- Partner
Name string - Name of the Partner if this user belongs to a Partner
- Password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- Password
Confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - Password
Expire stringAt - Password expiration datetime
- Password
Expired bool - Is user's password expired?
- Password
Set stringAt - Last time the user's password was set
- Password
Validity intDays - Number of days to allow user to use the same password
- Primary
Group intId - Primary group ID for Group Admin scoping
- Public
Keys intCount - Number of public keys associated with this user
- Readonly
Site boolAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- Receive
Admin boolAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- Require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - Require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- Require
Password boolChange - Is a password change required upon next user login?
- Responsible
Group intId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- Responsible
User intId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- Restapi
Permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- Self
Managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- Sftp
Permission bool - Can the user access with SFTP?
- Site
Admin bool - Is the user an administrator for this site?
- Site
Id int - Site ID
- Skip
Welcome boolScreen - Skip Welcome page in the UI?
- Ssl
Required string - SSL required setting
- Sso
Strategy intId - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- Time
Zone string - User time zone
- Type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - Type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - User
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- User
Root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- Username string
- User's username
- Workspace
Admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- Workspace
Id int - Workspace ID
- Active2fa bool
- Is 2fa active for the user?
- Admin
Group []intIds - List of group IDs of which this user is an administrator
- Ai
Assistant intPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- Allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- Announcements
Read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- Api
Keys intCount - Number of API keys associated with this user
- Attachments
Permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - Authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- Authentication
Method string - How is this user authenticated?
- Avatar
Delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- Avatar
Url string - URL holding the user's avatar
- Billable bool
- Is this a billable user record?
- Billing
Permission bool - Allow this user to perform operations on the account, payments, and invoices?
- Bypass
Site boolAllowed Ips - Allow this user to skip site-wide IP blacklists?
- Bypass
User boolLifecycle Rules - Exempt this user from user lifecycle rules?
- Change
Password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- Change
Password stringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - Company string
- User's company
- Created
At string - When this user was created
- Dav
Permission bool - Can the user connect with WebDAV?
- Days
Remaining intUntil Password Expire - Number of days remaining until password expires
- Default
Workspace intId - Workspace ID the user should land in by default when more than one Workspace is available.
- Desktop
Configuration intProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- Disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- Disabled
Expired boolOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- Email string
- User email address
- Externally
Managed bool - Is this user managed by a SsoStrategy?
- Filesystem
Layout string - File system layout
- First
Login stringAt - User's first login time
- Ftp
Permission bool - Can the user access with FTP/FTPS?
- Grant
Permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - Group
Id int - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- Group
Ids string - Comma-separated list of group IDs of which this user is a member
- Header
Text string - Text to display to the user in the header of the UI
- Imported
Password stringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- Integration
Centric intProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- Language string
- Preferred language
- Last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- Last
Api stringUse At - User's most recent API use time
- Last
Dav stringLogin At - User's most recent login time via WebDAV
- Last
Desktop stringLogin At - User's most recent login time via Desktop app
- Last
Ftp stringLogin At - User's most recent login time via FTP
- Last
Login stringAt - User's most recent login time via any protocol
- Last
Protocol stringCipher - The most recent protocol and cipher used
- Last
Restapi stringLogin At - User's most recent login time via Rest API
- Last
Sftp stringLogin At - User's most recent login time via SFTP
- Last
Web stringLogin At - User's most recent login time via web
- Lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- Name string
- User's full name
- Notes string
- Any internal notes on the user
- Notification
Daily intSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- Notify
On boolAll Automation Failures - Should the user receive automation failures via email?
- Notify
On boolAll Expectation Failures - Should the user receive expectation failures and misses via email?
- Notify
On boolAll Pending Work Failures - Should the user receive pending work failures via email?
- Notify
On boolAll Siem Http Destination Failures - Should the user receive siem failures via email?
- Notify
On boolAll Site Warnings - Should the user receive site warnings via email?
- Notify
On boolAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- Notify
On boolAll Sync Failures - Should the user receive sync failures via email?
- Notify
On boolAll User Security Events - Should the user receive user security events via email?
- Office
Integration boolEnabled - Enable integration with Office for the web?
- Partner
Admin bool - Is this user a Partner administrator?
- Partner
Id int - Partner ID if this user belongs to a Partner
- Partner
Name string - Name of the Partner if this user belongs to a Partner
- Password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- Password
Confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - Password
Expire stringAt - Password expiration datetime
- Password
Expired bool - Is user's password expired?
- Password
Set stringAt - Last time the user's password was set
- Password
Validity intDays - Number of days to allow user to use the same password
- Primary
Group intId - Primary group ID for Group Admin scoping
- Public
Keys intCount - Number of public keys associated with this user
- Readonly
Site boolAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- Receive
Admin boolAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- Require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - Require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- Require
Password boolChange - Is a password change required upon next user login?
- Responsible
Group intId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- Responsible
User intId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- Restapi
Permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- Self
Managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- Sftp
Permission bool - Can the user access with SFTP?
- Site
Admin bool - Is the user an administrator for this site?
- Site
Id int - Site ID
- Skip
Welcome boolScreen - Skip Welcome page in the UI?
- Ssl
Required string - SSL required setting
- Sso
Strategy intId - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- Time
Zone string - User time zone
- Type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - Type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - User
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- User
Root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- Username string
- User's username
- Workspace
Admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- Workspace
Id int - Workspace ID
- active2fa bool
- Is 2fa active for the user?
- admin_
group_ list(number)ids - List of group IDs of which this user is an administrator
- ai_
assistant_ numberpersonality_ id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed_
ips string - A list of allowed IPs if applicable. Newline delimited
- announcements_
read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- api_
keys_ numbercount - Number of API keys associated with this user
- attachments_
permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate_
until string - Scheduled Date/Time at which user will be deactivated
- authentication_
method string - How is this user authenticated?
- avatar_
delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- avatar_
url string - URL holding the user's avatar
- billable bool
- Is this a billable user record?
- billing_
permission bool - Allow this user to perform operations on the account, payments, and invoices?
- bypass_
site_ boolallowed_ ips - Allow this user to skip site-wide IP blacklists?
- bypass_
user_ boollifecycle_ rules - Exempt this user from user lifecycle rules?
- change_
password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change_
password_ stringconfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company string
- User's company
- created_
at string - When this user was created
- dav_
permission bool - Can the user connect with WebDAV?
- days_
remaining_ numberuntil_ password_ expire - Number of days remaining until password expires
- default_
workspace_ numberid - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop_
configuration_ numberprofile_ id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled_
expired_ boolor_ inactive - Computed property that returns true if user disabled or expired or inactive.
- email string
- User email address
- externally_
managed bool - Is this user managed by a SsoStrategy?
- filesystem_
layout string - File system layout
- first_
login_ stringat - User's first login time
- ftp_
permission bool - Can the user access with FTP/FTPS?
- grant_
permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group_
id number - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group_
ids string - Comma-separated list of group IDs of which this user is a member
- header_
text string - Text to display to the user in the header of the UI
- imported_
password_ stringhash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration_
centric_ numberprofile_ id - Integration Centric Profile ID assigned directly to this user, if any.
- language string
- Preferred language
- last_
active_ stringat - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last_
api_ stringuse_ at - User's most recent API use time
- last_
dav_ stringlogin_ at - User's most recent login time via WebDAV
- last_
desktop_ stringlogin_ at - User's most recent login time via Desktop app
- last_
ftp_ stringlogin_ at - User's most recent login time via FTP
- last_
login_ stringat - User's most recent login time via any protocol
- last_
protocol_ stringcipher - The most recent protocol and cipher used
- last_
restapi_ stringlogin_ at - User's most recent login time via Rest API
- last_
sftp_ stringlogin_ at - User's most recent login time via SFTP
- last_
web_ stringlogin_ at - User's most recent login time via web
- lockout_
expires string - Time in the future that the user will no longer be locked out if applicable
- name string
- User's full name
- notes string
- Any internal notes on the user
- notification_
daily_ numbersend_ time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify_
on_ boolall_ automation_ failures - Should the user receive automation failures via email?
- notify_
on_ boolall_ expectation_ failures - Should the user receive expectation failures and misses via email?
- notify_
on_ boolall_ pending_ work_ failures - Should the user receive pending work failures via email?
- notify_
on_ boolall_ siem_ http_ destination_ failures - Should the user receive siem failures via email?
- notify_
on_ boolall_ site_ warnings - Should the user receive site warnings via email?
- notify_
on_ boolall_ sso_ failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify_
on_ boolall_ sync_ failures - Should the user receive sync failures via email?
- notify_
on_ boolall_ user_ security_ events - Should the user receive user security events via email?
- office_
integration_ boolenabled - Enable integration with Office for the web?
- partner_
admin bool - Is this user a Partner administrator?
- partner_
id number - Partner ID if this user belongs to a Partner
- partner_
name string - Name of the Partner if this user belongs to a Partner
- password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password_
confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password_
expire_ stringat - Password expiration datetime
- password_
expired bool - Is user's password expired?
- password_
set_ stringat - Last time the user's password was set
- password_
validity_ numberdays - Number of days to allow user to use the same password
- primary_
group_ numberid - Primary group ID for Group Admin scoping
- public_
keys_ numbercount - Number of public keys associated with this user
- readonly_
site_ booladmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive_
admin_ boolalerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require_
login_ stringby - Require user to login by specified date otherwise it will be disabled.
- require_
password_ boolchange - Is a password change required upon next user login?
- responsible_
group_ numberid - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible_
user_ numberid - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi_
permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self_
managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- sftp_
permission bool - Can the user access with SFTP?
- site_
admin bool - Is the user an administrator for this site?
- site_
id number - Site ID
- skip_
welcome_ boolscreen - Skip Welcome page in the UI?
- ssl_
required string - SSL required setting
- sso_
strategy_ numberid - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time_
zone string - User time zone
- type_
of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type_
of2fa_ stringfor_ display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user_
home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user_
root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username string
- User's username
- workspace_
admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace_
id number - Workspace ID
- active2fa Boolean
- Is 2fa active for the user?
- admin
Group List<Integer>Ids - List of group IDs of which this user is an administrator
- ai
Assistant IntegerPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips String - A list of allowed IPs if applicable. Newline delimited
- announcements
Read Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- api
Keys IntegerCount - Number of API keys associated with this user
- attachments
Permission Boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until String - Scheduled Date/Time at which user will be deactivated
- authentication
Method String - How is this user authenticated?
- avatar
Delete Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- avatar
Url String - URL holding the user's avatar
- billable Boolean
- Is this a billable user record?
- billing
Permission Boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site BooleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User BooleanLifecycle Rules - Exempt this user from user lifecycle rules?
- change
Password String - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change
Password StringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company String
- User's company
- created
At String - When this user was created
- dav
Permission Boolean - Can the user connect with WebDAV?
- days
Remaining IntegerUntil Password Expire - Number of days remaining until password expires
- default
Workspace IntegerId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration IntegerProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled Boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled
Expired BooleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- email String
- User email address
- externally
Managed Boolean - Is this user managed by a SsoStrategy?
- filesystem
Layout String - File system layout
- first
Login StringAt - User's first login time
- ftp
Permission Boolean - Can the user access with FTP/FTPS?
- grant
Permission String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group
Id Integer - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group
Ids String - Comma-separated list of group IDs of which this user is a member
- header
Text String - Text to display to the user in the header of the UI
- imported
Password StringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration
Centric IntegerProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language String
- Preferred language
- last
Active StringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api StringUse At - User's most recent API use time
- last
Dav StringLogin At - User's most recent login time via WebDAV
- last
Desktop StringLogin At - User's most recent login time via Desktop app
- last
Ftp StringLogin At - User's most recent login time via FTP
- last
Login StringAt - User's most recent login time via any protocol
- last
Protocol StringCipher - The most recent protocol and cipher used
- last
Restapi StringLogin At - User's most recent login time via Rest API
- last
Sftp StringLogin At - User's most recent login time via SFTP
- last
Web StringLogin At - User's most recent login time via web
- lockout
Expires String - Time in the future that the user will no longer be locked out if applicable
- name String
- User's full name
- notes String
- Any internal notes on the user
- notification
Daily IntegerSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On BooleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On BooleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On BooleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On BooleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On BooleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On BooleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On BooleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On BooleanAll User Security Events - Should the user receive user security events via email?
- office
Integration BooleanEnabled - Enable integration with Office for the web?
- partner
Admin Boolean - Is this user a Partner administrator?
- partner
Id Integer - Partner ID if this user belongs to a Partner
- partner
Name String - Name of the Partner if this user belongs to a Partner
- password String
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password
Confirmation String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password
Expire StringAt - Password expiration datetime
- password
Expired Boolean - Is user's password expired?
- password
Set StringAt - Last time the user's password was set
- password
Validity IntegerDays - Number of days to allow user to use the same password
- primary
Group IntegerId - Primary group ID for Group Admin scoping
- public
Keys IntegerCount - Number of public keys associated with this user
- readonly
Site BooleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin BooleanAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa String
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login StringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password BooleanChange - Is a password change required upon next user login?
- responsible
Group IntegerId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User IntegerId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission Boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed Boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission Boolean - Can the user access with SFTP?
- site
Admin Boolean - Is the user an administrator for this site?
- site
Id Integer - Site ID
- skip
Welcome BooleanScreen - Skip Welcome page in the UI?
- ssl
Required String - SSL required setting
- sso
Strategy IntegerId - SSO (Single Sign On) strategy ID for the user, if applicable.
- Boolean
- Is the user subscribed to the newsletter?
- String
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone String - User time zone
- type
Of2fa String - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa StringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user
Home String - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root String - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username String
- User's username
- workspace
Admin Boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id Integer - Workspace ID
- active2fa boolean
- Is 2fa active for the user?
- admin
Group number[]Ids - List of group IDs of which this user is an administrator
- ai
Assistant numberPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips string - A list of allowed IPs if applicable. Newline delimited
- announcements
Read boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- api
Keys numberCount - Number of API keys associated with this user
- attachments
Permission boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until string - Scheduled Date/Time at which user will be deactivated
- authentication
Method string - How is this user authenticated?
- avatar
Delete boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- avatar
Url string - URL holding the user's avatar
- billable boolean
- Is this a billable user record?
- billing
Permission boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site booleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User booleanLifecycle Rules - Exempt this user from user lifecycle rules?
- change
Password string - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change
Password stringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company string
- User's company
- created
At string - When this user was created
- dav
Permission boolean - Can the user connect with WebDAV?
- days
Remaining numberUntil Password Expire - Number of days remaining until password expires
- default
Workspace numberId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration numberProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled
Expired booleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- email string
- User email address
- externally
Managed boolean - Is this user managed by a SsoStrategy?
- filesystem
Layout string - File system layout
- first
Login stringAt - User's first login time
- ftp
Permission boolean - Can the user access with FTP/FTPS?
- grant
Permission string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group
Id number - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group
Ids string - Comma-separated list of group IDs of which this user is a member
- header
Text string - Text to display to the user in the header of the UI
- imported
Password stringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration
Centric numberProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language string
- Preferred language
- last
Active stringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api stringUse At - User's most recent API use time
- last
Dav stringLogin At - User's most recent login time via WebDAV
- last
Desktop stringLogin At - User's most recent login time via Desktop app
- last
Ftp stringLogin At - User's most recent login time via FTP
- last
Login stringAt - User's most recent login time via any protocol
- last
Protocol stringCipher - The most recent protocol and cipher used
- last
Restapi stringLogin At - User's most recent login time via Rest API
- last
Sftp stringLogin At - User's most recent login time via SFTP
- last
Web stringLogin At - User's most recent login time via web
- lockout
Expires string - Time in the future that the user will no longer be locked out if applicable
- name string
- User's full name
- notes string
- Any internal notes on the user
- notification
Daily numberSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On booleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On booleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On booleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On booleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On booleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On booleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On booleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On booleanAll User Security Events - Should the user receive user security events via email?
- office
Integration booleanEnabled - Enable integration with Office for the web?
- partner
Admin boolean - Is this user a Partner administrator?
- partner
Id number - Partner ID if this user belongs to a Partner
- partner
Name string - Name of the Partner if this user belongs to a Partner
- password string
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password
Confirmation string - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password
Expire stringAt - Password expiration datetime
- password
Expired boolean - Is user's password expired?
- password
Set stringAt - Last time the user's password was set
- password
Validity numberDays - Number of days to allow user to use the same password
- primary
Group numberId - Primary group ID for Group Admin scoping
- public
Keys numberCount - Number of public keys associated with this user
- readonly
Site booleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin booleanAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa string
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login stringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password booleanChange - Is a password change required upon next user login?
- responsible
Group numberId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User numberId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission boolean - Can the user access with SFTP?
- site
Admin boolean - Is the user an administrator for this site?
- site
Id number - Site ID
- skip
Welcome booleanScreen - Skip Welcome page in the UI?
- ssl
Required string - SSL required setting
- sso
Strategy numberId - SSO (Single Sign On) strategy ID for the user, if applicable.
- boolean
- Is the user subscribed to the newsletter?
- string
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone string - User time zone
- type
Of2fa string - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa stringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user
Home string - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root string - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username string
- User's username
- workspace
Admin boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id number - Workspace ID
- active2fa bool
- Is 2fa active for the user?
- admin_
group_ Sequence[int]ids - List of group IDs of which this user is an administrator
- ai_
assistant_ intpersonality_ id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed_
ips str - A list of allowed IPs if applicable. Newline delimited
- announcements_
read bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- api_
keys_ intcount - Number of API keys associated with this user
- attachments_
permission bool - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate_
until str - Scheduled Date/Time at which user will be deactivated
- authentication_
method str - How is this user authenticated?
- avatar_
delete bool - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- avatar_
url str - URL holding the user's avatar
- billable bool
- Is this a billable user record?
- billing_
permission bool - Allow this user to perform operations on the account, payments, and invoices?
- bypass_
site_ boolallowed_ ips - Allow this user to skip site-wide IP blacklists?
- bypass_
user_ boollifecycle_ rules - Exempt this user from user lifecycle rules?
- change_
password str - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change_
password_ strconfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company str
- User's company
- created_
at str - When this user was created
- dav_
permission bool - Can the user connect with WebDAV?
- days_
remaining_ intuntil_ password_ expire - Number of days remaining until password expires
- default_
workspace_ intid - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop_
configuration_ intprofile_ id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled bool
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled_
expired_ boolor_ inactive - Computed property that returns true if user disabled or expired or inactive.
- email str
- User email address
- externally_
managed bool - Is this user managed by a SsoStrategy?
- filesystem_
layout str - File system layout
- first_
login_ strat - User's first login time
- ftp_
permission bool - Can the user access with FTP/FTPS?
- grant_
permission str - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group_
id int - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group_
ids str - Comma-separated list of group IDs of which this user is a member
- header_
text str - Text to display to the user in the header of the UI
- imported_
password_ strhash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration_
centric_ intprofile_ id - Integration Centric Profile ID assigned directly to this user, if any.
- language str
- Preferred language
- last_
active_ strat - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last_
api_ struse_ at - User's most recent API use time
- last_
dav_ strlogin_ at - User's most recent login time via WebDAV
- last_
desktop_ strlogin_ at - User's most recent login time via Desktop app
- last_
ftp_ strlogin_ at - User's most recent login time via FTP
- last_
login_ strat - User's most recent login time via any protocol
- last_
protocol_ strcipher - The most recent protocol and cipher used
- last_
restapi_ strlogin_ at - User's most recent login time via Rest API
- last_
sftp_ strlogin_ at - User's most recent login time via SFTP
- last_
web_ strlogin_ at - User's most recent login time via web
- lockout_
expires str - Time in the future that the user will no longer be locked out if applicable
- name str
- User's full name
- notes str
- Any internal notes on the user
- notification_
daily_ intsend_ time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify_
on_ boolall_ automation_ failures - Should the user receive automation failures via email?
- notify_
on_ boolall_ expectation_ failures - Should the user receive expectation failures and misses via email?
- notify_
on_ boolall_ pending_ work_ failures - Should the user receive pending work failures via email?
- notify_
on_ boolall_ siem_ http_ destination_ failures - Should the user receive siem failures via email?
- notify_
on_ boolall_ site_ warnings - Should the user receive site warnings via email?
- notify_
on_ boolall_ sso_ failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify_
on_ boolall_ sync_ failures - Should the user receive sync failures via email?
- notify_
on_ boolall_ user_ security_ events - Should the user receive user security events via email?
- office_
integration_ boolenabled - Enable integration with Office for the web?
- partner_
admin bool - Is this user a Partner administrator?
- partner_
id int - Partner ID if this user belongs to a Partner
- partner_
name str - Name of the Partner if this user belongs to a Partner
- password str
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password_
confirmation str - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password_
expire_ strat - Password expiration datetime
- password_
expired bool - Is user's password expired?
- password_
set_ strat - Last time the user's password was set
- password_
validity_ intdays - Number of days to allow user to use the same password
- primary_
group_ intid - Primary group ID for Group Admin scoping
- public_
keys_ intcount - Number of public keys associated with this user
- readonly_
site_ booladmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive_
admin_ boolalerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa str
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require_
login_ strby - Require user to login by specified date otherwise it will be disabled.
- require_
password_ boolchange - Is a password change required upon next user login?
- responsible_
group_ intid - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible_
user_ intid - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi_
permission bool - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self_
managed bool - Does this user manage it's own credentials or is it a shared/bot user?
- sftp_
permission bool - Can the user access with SFTP?
- site_
admin bool - Is the user an administrator for this site?
- site_
id int - Site ID
- skip_
welcome_ boolscreen - Skip Welcome page in the UI?
- ssl_
required str - SSL required setting
- sso_
strategy_ intid - SSO (Single Sign On) strategy ID for the user, if applicable.
- bool
- Is the user subscribed to the newsletter?
- str
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time_
zone str - User time zone
- type_
of2fa str - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type_
of2fa_ strfor_ display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user_
home str - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user_
root str - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username str
- User's username
- workspace_
admin bool - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace_
id int - Workspace ID
- active2fa Boolean
- Is 2fa active for the user?
- admin
Group List<Number>Ids - List of group IDs of which this user is an administrator
- ai
Assistant NumberPersonality Id - AI Assistant Personality ID assigned directly to this user, if any.
- allowed
Ips String - A list of allowed IPs if applicable. Newline delimited
- announcements
Read Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Signifies that the user has read all the announcements in the UI.
- api
Keys NumberCount - Number of API keys associated with this user
- attachments
Permission Boolean - If
true, the user can user create Bundles (aka Share Links). Use the bundle permission instead. - authenticate
Until String - Scheduled Date/Time at which user will be deactivated
- authentication
Method String - How is this user authenticated?
- avatar
Delete Boolean - NOTE: This field is write-only and its value will not be updated in state as part of read operations. If true, the avatar will be deleted.
- avatar
Url String - URL holding the user's avatar
- billable Boolean
- Is this a billable user record?
- billing
Permission Boolean - Allow this user to perform operations on the account, payments, and invoices?
- bypass
Site BooleanAllowed Ips - Allow this user to skip site-wide IP blacklists?
- bypass
User BooleanLifecycle Rules - Exempt this user from user lifecycle rules?
- change
Password String - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Used for changing a password on an existing user.
- change
Password StringConfirmation - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
changePassword. - company String
- User's company
- created
At String - When this user was created
- dav
Permission Boolean - Can the user connect with WebDAV?
- days
Remaining NumberUntil Password Expire - Number of days remaining until password expires
- default
Workspace NumberId - Workspace ID the user should land in by default when more than one Workspace is available.
- desktop
Configuration NumberProfile Id - Desktop Configuration Profile ID assigned directly to this user, if any.
- disabled Boolean
- Is user disabled? Disabled users cannot log in, and do not count for billing purposes. Users can be automatically disabled after an inactivity period via a Site setting or schedule to be deactivated after specific date.
- disabled
Expired BooleanOr Inactive - Computed property that returns true if user disabled or expired or inactive.
- email String
- User email address
- externally
Managed Boolean - Is this user managed by a SsoStrategy?
- filesystem
Layout String - File system layout
- first
Login StringAt - User's first login time
- ftp
Permission Boolean - Can the user access with FTP/FTPS?
- grant
Permission String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Permission to grant on the User Root upon user creation. Can be blank or
full,read,write,list,read+write, orlist+write - group
Id Number - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Group ID to associate this user with.
- group
Ids String - Comma-separated list of group IDs of which this user is a member
- header
Text String - Text to display to the user in the header of the UI
- imported
Password StringHash - NOTE: This field is write-only and its value will not be updated in state as part of read operations. Pre-calculated hash of the user's password. If supplied, this will be used to authenticate the user on first login. Supported hash methods are MD5, SHA1, and SHA256.
- integration
Centric NumberProfile Id - Integration Centric Profile ID assigned directly to this user, if any.
- language String
- Preferred language
- last
Active StringAt - User's most recent activity time, which is the latest of most recent login, most recent API use, enablement, or creation
- last
Api StringUse At - User's most recent API use time
- last
Dav StringLogin At - User's most recent login time via WebDAV
- last
Desktop StringLogin At - User's most recent login time via Desktop app
- last
Ftp StringLogin At - User's most recent login time via FTP
- last
Login StringAt - User's most recent login time via any protocol
- last
Protocol StringCipher - The most recent protocol and cipher used
- last
Restapi StringLogin At - User's most recent login time via Rest API
- last
Sftp StringLogin At - User's most recent login time via SFTP
- last
Web StringLogin At - User's most recent login time via web
- lockout
Expires String - Time in the future that the user will no longer be locked out if applicable
- name String
- User's full name
- notes String
- Any internal notes on the user
- notification
Daily NumberSend Time - Hour of the day at which daily notifications should be sent. Can be in range 0 to 23
- notify
On BooleanAll Automation Failures - Should the user receive automation failures via email?
- notify
On BooleanAll Expectation Failures - Should the user receive expectation failures and misses via email?
- notify
On BooleanAll Pending Work Failures - Should the user receive pending work failures via email?
- notify
On BooleanAll Siem Http Destination Failures - Should the user receive siem failures via email?
- notify
On BooleanAll Site Warnings - Should the user receive site warnings via email?
- notify
On BooleanAll Sso Failures - Should the user receive sso/scim/ldap configuration/sync failures via email?
- notify
On BooleanAll Sync Failures - Should the user receive sync failures via email?
- notify
On BooleanAll User Security Events - Should the user receive user security events via email?
- office
Integration BooleanEnabled - Enable integration with Office for the web?
- partner
Admin Boolean - Is this user a Partner administrator?
- partner
Id Number - Partner ID if this user belongs to a Partner
- partner
Name String - Name of the Partner if this user belongs to a Partner
- password String
- NOTE: This field is write-only and its value will not be updated in state as part of read operations. User password.
- password
Confirmation String - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Optional, but if provided, we will ensure that it matches the value sent in
password. - password
Expire StringAt - Password expiration datetime
- password
Expired Boolean - Is user's password expired?
- password
Set StringAt - Last time the user's password was set
- password
Validity NumberDays - Number of days to allow user to use the same password
- primary
Group NumberId - Primary group ID for Group Admin scoping
- public
Keys NumberCount - Number of public keys associated with this user
- readonly
Site BooleanAdmin - Is the user an allowed to view all (non-billing) site configuration for this site?
- receive
Admin BooleanAlerts - Deprecated. Use notifyOnAllSiteWarnings and granular failure notification preferences instead.
- require2fa String
- 2FA required setting.
useSystemSettinguses the site-wide setting, including SSO exemptions.alwaysRequireandneverRequireoverride the site-wide setting when user-level overrides are allowed. - require
Login StringBy - Require user to login by specified date otherwise it will be disabled.
- require
Password BooleanChange - Is a password change required upon next user login?
- responsible
Group NumberId - ID of the internal Group responsible for this Partner User, overriding the Partner default.
- responsible
User NumberId - ID of the internal User responsible for this Partner User, overriding the Partner default.
- restapi
Permission Boolean - Can this user access the Web app, Desktop app, SDKs, or REST API? (All of these tools use the API internally, so this is one unified permission set.)
- self
Managed Boolean - Does this user manage it's own credentials or is it a shared/bot user?
- sftp
Permission Boolean - Can the user access with SFTP?
- site
Admin Boolean - Is the user an administrator for this site?
- site
Id Number - Site ID
- skip
Welcome BooleanScreen - Skip Welcome page in the UI?
- ssl
Required String - SSL required setting
- sso
Strategy NumberId - SSO (Single Sign On) strategy ID for the user, if applicable.
- Boolean
- Is the user subscribed to the newsletter?
- String
- Comma-separated list of Tags for this user. Tags are used for other features, such as UserLifecycleRules, which can target specific tags. Tags must only contain lowercase letters, numbers, and hyphens.
- time
Zone String - User time zone
- type
Of2fa String - Type(s) of 2FA methods in use, for programmatic use. Will be either
sms,totp,webauthn,yubi,email, or multiple values sorted alphabetically and joined by an underscore. Does not specify whether user has more than one of a given method. - type
Of2fa StringFor Display - Type(s) of 2FA methods in use, formatted for displaying in the UI. Unlike
typeOf2fa, this value will make clear when a user has more than 1 of the same type of method. - user
Home String - Home folder for FTP/SFTP. For users with the partnerRoot filesystem layout, this path is relative to the Partner root folder. In all other cases, it is an absolute path. Only applies to FTP and SFTP, and not any other interface.
- user
Root String - If filesystem layout is user_root, this path is the root path the user is fixed to for all interfaces. If the filesystem layout is siteRoot or partner_root, this acts as a root folder only for FTP and SFTP (SFTP applicability also requires a site-wide setting to be set). For partnerRoot layout, this path is relative to the Partner root folder for all callers and blank opts out of an additional protocol root. In this situation, this path is not applied to the API, Desktop, or Web interface.
- username String
- User's username
- workspace
Admin Boolean - Is the user a Workspace administrator? Applicable only to the workspace ID related to this user, if one is set.
- workspace
Id Number - Workspace ID
Import
The pulumi import command can be used, for example:
Users can be imported by specifying the id.
$ pulumi import filescom:index/user:User example_user 1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- filescom jschady/pulumi-filescom
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
filescomTerraform Provider.
published on Thursday, Aug 20, 2026 by jschady