published on Friday, Jul 31, 2026 by fortinetdev
published on Friday, Jul 31, 2026 by fortinetdev
Configure local users.
This resource is a sub resource for variable
dynamic_mappingof resourcefortimanager.ObjectUserLocal. Conflict and overwrite may occur if use both of them.
Create ObjectUserLocalDynamicMapping Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ObjectUserLocalDynamicMapping(name: string, args: ObjectUserLocalDynamicMappingArgs, opts?: CustomResourceOptions);@overload
def ObjectUserLocalDynamicMapping(resource_name: str,
args: ObjectUserLocalDynamicMappingInitArgs,
opts: Optional[ResourceOptions] = None)
@overload
def ObjectUserLocalDynamicMapping(resource_name: str,
opts: Optional[ResourceOptions] = None,
local: Optional[str] = None,
_scopes: Optional[Sequence[ObjectUserLocalDynamicMapping_ScopeArgs]] = None,
adom: Optional[str] = None,
auth_concurrent_override: Optional[str] = None,
auth_concurrent_value: Optional[float] = None,
authtimeout: Optional[float] = None,
dynamic_sort_subtable: Optional[str] = None,
email_to: Optional[str] = None,
fabric_force_sync: Optional[str] = None,
fabric_object: Optional[str] = None,
fabric_object_source: Optional[str] = None,
fortitokens: Optional[Sequence[str]] = None,
fosid: Optional[float] = None,
history0s: Optional[Sequence[str]] = None,
history10s: Optional[Sequence[str]] = None,
history11s: Optional[Sequence[str]] = None,
history12s: Optional[Sequence[str]] = None,
history13s: Optional[Sequence[str]] = None,
history14s: Optional[Sequence[str]] = None,
history15s: Optional[Sequence[str]] = None,
history16s: Optional[Sequence[str]] = None,
history17s: Optional[Sequence[str]] = None,
history18s: Optional[Sequence[str]] = None,
history19s: Optional[Sequence[str]] = None,
history1s: Optional[Sequence[str]] = None,
history2s: Optional[Sequence[str]] = None,
history3s: Optional[Sequence[str]] = None,
history4s: Optional[Sequence[str]] = None,
history5s: Optional[Sequence[str]] = None,
history6s: Optional[Sequence[str]] = None,
history7s: Optional[Sequence[str]] = None,
history8s: Optional[Sequence[str]] = None,
history9s: Optional[Sequence[str]] = None,
ldap_servers: Optional[Sequence[str]] = None,
object_user_local_dynamic_mapping_id: Optional[str] = None,
passwd_policies: Optional[Sequence[str]] = None,
passwd_time: Optional[str] = None,
passwds: Optional[Sequence[str]] = None,
ppk_identity: Optional[str] = None,
ppk_secrets: Optional[Sequence[str]] = None,
qkd_profiles: Optional[Sequence[str]] = None,
radius_servers: Optional[Sequence[str]] = None,
saml_servers: Optional[Sequence[str]] = None,
scopetype: Optional[str] = None,
sms_custom_servers: Optional[Sequence[str]] = None,
sms_phone: Optional[str] = None,
sms_providers: Optional[Sequence[str]] = None,
sms_server: Optional[str] = None,
status: Optional[str] = None,
tacacs_servers: Optional[Sequence[str]] = None,
two_factor: Optional[str] = None,
two_factor_authentication: Optional[str] = None,
two_factor_notification: Optional[str] = None,
type: Optional[str] = None,
update_if_exist: Optional[bool] = None,
username_case_insensitivity: Optional[str] = None,
username_case_sensitivity: Optional[str] = None,
username_sensitivity: Optional[str] = None,
uuid: Optional[str] = None,
workstation: Optional[str] = None)func NewObjectUserLocalDynamicMapping(ctx *Context, name string, args ObjectUserLocalDynamicMappingArgs, opts ...ResourceOption) (*ObjectUserLocalDynamicMapping, error)public ObjectUserLocalDynamicMapping(string name, ObjectUserLocalDynamicMappingArgs args, CustomResourceOptions? opts = null)
public ObjectUserLocalDynamicMapping(String name, ObjectUserLocalDynamicMappingArgs args)
public ObjectUserLocalDynamicMapping(String name, ObjectUserLocalDynamicMappingArgs args, CustomResourceOptions options)
type: fortimanager:ObjectUserLocalDynamicMapping
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "fortimanager_object_user_local_dynamic_mapping" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args ObjectUserLocalDynamicMappingArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ObjectUserLocalDynamicMappingInitArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ObjectUserLocalDynamicMappingArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ObjectUserLocalDynamicMappingArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ObjectUserLocalDynamicMappingArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var objectUserLocalDynamicMappingResource = new Fortimanager.ObjectUserLocalDynamicMapping("objectUserLocalDynamicMappingResource", new()
{
Local = "string",
_scopes = new[]
{
new Fortimanager.Inputs.ObjectUserLocalDynamicMapping_ScopeArgs
{
Name = "string",
Vdom = "string",
},
},
Adom = "string",
AuthConcurrentOverride = "string",
AuthConcurrentValue = 0,
Authtimeout = 0,
DynamicSortSubtable = "string",
EmailTo = "string",
FabricForceSync = "string",
FabricObject = "string",
FabricObjectSource = "string",
Fortitokens = new[]
{
"string",
},
Fosid = 0,
History0s = new[]
{
"string",
},
History10s = new[]
{
"string",
},
History11s = new[]
{
"string",
},
History12s = new[]
{
"string",
},
History13s = new[]
{
"string",
},
History14s = new[]
{
"string",
},
History15s = new[]
{
"string",
},
History16s = new[]
{
"string",
},
History17s = new[]
{
"string",
},
History18s = new[]
{
"string",
},
History19s = new[]
{
"string",
},
History1s = new[]
{
"string",
},
History2s = new[]
{
"string",
},
History3s = new[]
{
"string",
},
History4s = new[]
{
"string",
},
History5s = new[]
{
"string",
},
History6s = new[]
{
"string",
},
History7s = new[]
{
"string",
},
History8s = new[]
{
"string",
},
History9s = new[]
{
"string",
},
LdapServers = new[]
{
"string",
},
ObjectUserLocalDynamicMappingId = "string",
PasswdPolicies = new[]
{
"string",
},
PasswdTime = "string",
Passwds = new[]
{
"string",
},
PpkIdentity = "string",
PpkSecrets = new[]
{
"string",
},
QkdProfiles = new[]
{
"string",
},
RadiusServers = new[]
{
"string",
},
SamlServers = new[]
{
"string",
},
Scopetype = "string",
SmsCustomServers = new[]
{
"string",
},
SmsPhone = "string",
SmsProviders = new[]
{
"string",
},
SmsServer = "string",
Status = "string",
TacacsServers = new[]
{
"string",
},
TwoFactor = "string",
TwoFactorAuthentication = "string",
TwoFactorNotification = "string",
Type = "string",
UpdateIfExist = false,
UsernameCaseInsensitivity = "string",
UsernameCaseSensitivity = "string",
UsernameSensitivity = "string",
Uuid = "string",
Workstation = "string",
});
example, err := fortimanager.NewObjectUserLocalDynamicMapping(ctx, "objectUserLocalDynamicMappingResource", &fortimanager.ObjectUserLocalDynamicMappingArgs{
Local: pulumi.String("string"),
_scopes: fortimanager.ObjectUserLocalDynamicMapping_ScopeArray{
&fortimanager.ObjectUserLocalDynamicMapping_ScopeArgs{
Name: pulumi.String("string"),
Vdom: pulumi.String("string"),
},
},
Adom: pulumi.String("string"),
AuthConcurrentOverride: pulumi.String("string"),
AuthConcurrentValue: pulumi.Float64(0),
Authtimeout: pulumi.Float64(0),
DynamicSortSubtable: pulumi.String("string"),
EmailTo: pulumi.String("string"),
FabricForceSync: pulumi.String("string"),
FabricObject: pulumi.String("string"),
FabricObjectSource: pulumi.String("string"),
Fortitokens: pulumi.StringArray{
pulumi.String("string"),
},
Fosid: pulumi.Float64(0),
History0s: pulumi.StringArray{
pulumi.String("string"),
},
History10s: pulumi.StringArray{
pulumi.String("string"),
},
History11s: pulumi.StringArray{
pulumi.String("string"),
},
History12s: pulumi.StringArray{
pulumi.String("string"),
},
History13s: pulumi.StringArray{
pulumi.String("string"),
},
History14s: pulumi.StringArray{
pulumi.String("string"),
},
History15s: pulumi.StringArray{
pulumi.String("string"),
},
History16s: pulumi.StringArray{
pulumi.String("string"),
},
History17s: pulumi.StringArray{
pulumi.String("string"),
},
History18s: pulumi.StringArray{
pulumi.String("string"),
},
History19s: pulumi.StringArray{
pulumi.String("string"),
},
History1s: pulumi.StringArray{
pulumi.String("string"),
},
History2s: pulumi.StringArray{
pulumi.String("string"),
},
History3s: pulumi.StringArray{
pulumi.String("string"),
},
History4s: pulumi.StringArray{
pulumi.String("string"),
},
History5s: pulumi.StringArray{
pulumi.String("string"),
},
History6s: pulumi.StringArray{
pulumi.String("string"),
},
History7s: pulumi.StringArray{
pulumi.String("string"),
},
History8s: pulumi.StringArray{
pulumi.String("string"),
},
History9s: pulumi.StringArray{
pulumi.String("string"),
},
LdapServers: pulumi.StringArray{
pulumi.String("string"),
},
ObjectUserLocalDynamicMappingId: pulumi.String("string"),
PasswdPolicies: pulumi.StringArray{
pulumi.String("string"),
},
PasswdTime: pulumi.String("string"),
Passwds: pulumi.StringArray{
pulumi.String("string"),
},
PpkIdentity: pulumi.String("string"),
PpkSecrets: pulumi.StringArray{
pulumi.String("string"),
},
QkdProfiles: pulumi.StringArray{
pulumi.String("string"),
},
RadiusServers: pulumi.StringArray{
pulumi.String("string"),
},
SamlServers: pulumi.StringArray{
pulumi.String("string"),
},
Scopetype: pulumi.String("string"),
SmsCustomServers: pulumi.StringArray{
pulumi.String("string"),
},
SmsPhone: pulumi.String("string"),
SmsProviders: pulumi.StringArray{
pulumi.String("string"),
},
SmsServer: pulumi.String("string"),
Status: pulumi.String("string"),
TacacsServers: pulumi.StringArray{
pulumi.String("string"),
},
TwoFactor: pulumi.String("string"),
TwoFactorAuthentication: pulumi.String("string"),
TwoFactorNotification: pulumi.String("string"),
Type: pulumi.String("string"),
UpdateIfExist: pulumi.Bool(false),
UsernameCaseInsensitivity: pulumi.String("string"),
UsernameCaseSensitivity: pulumi.String("string"),
UsernameSensitivity: pulumi.String("string"),
Uuid: pulumi.String("string"),
Workstation: pulumi.String("string"),
})
resource "fortimanager_object_user_local_dynamic_mapping" "objectUserLocalDynamicMappingResource" {
lifecycle {
create_before_destroy = true
}
local = "string"
_scopes {
name = "string"
vdom = "string"
}
adom = "string"
auth_concurrent_override = "string"
auth_concurrent_value = 0
authtimeout = 0
dynamic_sort_subtable = "string"
email_to = "string"
fabric_force_sync = "string"
fabric_object = "string"
fabric_object_source = "string"
fortitokens = ["string"]
fosid = 0
history0s = ["string"]
history10s = ["string"]
history11s = ["string"]
history12s = ["string"]
history13s = ["string"]
history14s = ["string"]
history15s = ["string"]
history16s = ["string"]
history17s = ["string"]
history18s = ["string"]
history19s = ["string"]
history1s = ["string"]
history2s = ["string"]
history3s = ["string"]
history4s = ["string"]
history5s = ["string"]
history6s = ["string"]
history7s = ["string"]
history8s = ["string"]
history9s = ["string"]
ldap_servers = ["string"]
object_user_local_dynamic_mapping_id = "string"
passwd_policies = ["string"]
passwd_time = "string"
passwds = ["string"]
ppk_identity = "string"
ppk_secrets = ["string"]
qkd_profiles = ["string"]
radius_servers = ["string"]
saml_servers = ["string"]
scopetype = "string"
sms_custom_servers = ["string"]
sms_phone = "string"
sms_providers = ["string"]
sms_server = "string"
status = "string"
tacacs_servers = ["string"]
two_factor = "string"
two_factor_authentication = "string"
two_factor_notification = "string"
type = "string"
update_if_exist = false
username_case_insensitivity = "string"
username_case_sensitivity = "string"
username_sensitivity = "string"
uuid = "string"
workstation = "string"
}
var objectUserLocalDynamicMappingResource = new ObjectUserLocalDynamicMapping("objectUserLocalDynamicMappingResource", ObjectUserLocalDynamicMappingArgs.builder()
.local("string")
._scopes(ObjectUserLocalDynamicMapping_ScopeArgs.builder()
.name("string")
.vdom("string")
.build())
.adom("string")
.authConcurrentOverride("string")
.authConcurrentValue(0.0)
.authtimeout(0.0)
.dynamicSortSubtable("string")
.emailTo("string")
.fabricForceSync("string")
.fabricObject("string")
.fabricObjectSource("string")
.fortitokens("string")
.fosid(0.0)
.history0s("string")
.history10s("string")
.history11s("string")
.history12s("string")
.history13s("string")
.history14s("string")
.history15s("string")
.history16s("string")
.history17s("string")
.history18s("string")
.history19s("string")
.history1s("string")
.history2s("string")
.history3s("string")
.history4s("string")
.history5s("string")
.history6s("string")
.history7s("string")
.history8s("string")
.history9s("string")
.ldapServers("string")
.objectUserLocalDynamicMappingId("string")
.passwdPolicies("string")
.passwdTime("string")
.passwds("string")
.ppkIdentity("string")
.ppkSecrets("string")
.qkdProfiles("string")
.radiusServers("string")
.samlServers("string")
.scopetype("string")
.smsCustomServers("string")
.smsPhone("string")
.smsProviders("string")
.smsServer("string")
.status("string")
.tacacsServers("string")
.twoFactor("string")
.twoFactorAuthentication("string")
.twoFactorNotification("string")
.type("string")
.updateIfExist(false)
.usernameCaseInsensitivity("string")
.usernameCaseSensitivity("string")
.usernameSensitivity("string")
.uuid("string")
.workstation("string")
.build());
object_user_local_dynamic_mapping_resource = fortimanager.ObjectUserLocalDynamicMapping("objectUserLocalDynamicMappingResource",
local="string",
_scopes=[{
"name": "string",
"vdom": "string",
}],
adom="string",
auth_concurrent_override="string",
auth_concurrent_value=float(0),
authtimeout=float(0),
dynamic_sort_subtable="string",
email_to="string",
fabric_force_sync="string",
fabric_object="string",
fabric_object_source="string",
fortitokens=["string"],
fosid=float(0),
history0s=["string"],
history10s=["string"],
history11s=["string"],
history12s=["string"],
history13s=["string"],
history14s=["string"],
history15s=["string"],
history16s=["string"],
history17s=["string"],
history18s=["string"],
history19s=["string"],
history1s=["string"],
history2s=["string"],
history3s=["string"],
history4s=["string"],
history5s=["string"],
history6s=["string"],
history7s=["string"],
history8s=["string"],
history9s=["string"],
ldap_servers=["string"],
object_user_local_dynamic_mapping_id="string",
passwd_policies=["string"],
passwd_time="string",
passwds=["string"],
ppk_identity="string",
ppk_secrets=["string"],
qkd_profiles=["string"],
radius_servers=["string"],
saml_servers=["string"],
scopetype="string",
sms_custom_servers=["string"],
sms_phone="string",
sms_providers=["string"],
sms_server="string",
status="string",
tacacs_servers=["string"],
two_factor="string",
two_factor_authentication="string",
two_factor_notification="string",
type="string",
update_if_exist=False,
username_case_insensitivity="string",
username_case_sensitivity="string",
username_sensitivity="string",
uuid="string",
workstation="string")
const objectUserLocalDynamicMappingResource = new fortimanager.ObjectUserLocalDynamicMapping("objectUserLocalDynamicMappingResource", {
local: "string",
_scopes: [{
name: "string",
vdom: "string",
}],
adom: "string",
authConcurrentOverride: "string",
authConcurrentValue: 0,
authtimeout: 0,
dynamicSortSubtable: "string",
emailTo: "string",
fabricForceSync: "string",
fabricObject: "string",
fabricObjectSource: "string",
fortitokens: ["string"],
fosid: 0,
history0s: ["string"],
history10s: ["string"],
history11s: ["string"],
history12s: ["string"],
history13s: ["string"],
history14s: ["string"],
history15s: ["string"],
history16s: ["string"],
history17s: ["string"],
history18s: ["string"],
history19s: ["string"],
history1s: ["string"],
history2s: ["string"],
history3s: ["string"],
history4s: ["string"],
history5s: ["string"],
history6s: ["string"],
history7s: ["string"],
history8s: ["string"],
history9s: ["string"],
ldapServers: ["string"],
objectUserLocalDynamicMappingId: "string",
passwdPolicies: ["string"],
passwdTime: "string",
passwds: ["string"],
ppkIdentity: "string",
ppkSecrets: ["string"],
qkdProfiles: ["string"],
radiusServers: ["string"],
samlServers: ["string"],
scopetype: "string",
smsCustomServers: ["string"],
smsPhone: "string",
smsProviders: ["string"],
smsServer: "string",
status: "string",
tacacsServers: ["string"],
twoFactor: "string",
twoFactorAuthentication: "string",
twoFactorNotification: "string",
type: "string",
updateIfExist: false,
usernameCaseInsensitivity: "string",
usernameCaseSensitivity: "string",
usernameSensitivity: "string",
uuid: "string",
workstation: "string",
});
type: fortimanager:ObjectUserLocalDynamicMapping
properties:
_scopes:
- name: string
vdom: string
adom: string
authConcurrentOverride: string
authConcurrentValue: 0
authtimeout: 0
dynamicSortSubtable: string
emailTo: string
fabricForceSync: string
fabricObject: string
fabricObjectSource: string
fortitokens:
- string
fosid: 0
history0s:
- string
history1s:
- string
history2s:
- string
history3s:
- string
history4s:
- string
history5s:
- string
history6s:
- string
history7s:
- string
history8s:
- string
history9s:
- string
history10s:
- string
history11s:
- string
history12s:
- string
history13s:
- string
history14s:
- string
history15s:
- string
history16s:
- string
history17s:
- string
history18s:
- string
history19s:
- string
ldapServers:
- string
local: string
objectUserLocalDynamicMappingId: string
passwdPolicies:
- string
passwdTime: string
passwds:
- string
ppkIdentity: string
ppkSecrets:
- string
qkdProfiles:
- string
radiusServers:
- string
samlServers:
- string
scopetype: string
smsCustomServers:
- string
smsPhone: string
smsProviders:
- string
smsServer: string
status: string
tacacsServers:
- string
twoFactor: string
twoFactorAuthentication: string
twoFactorNotification: string
type: string
updateIfExist: false
usernameCaseInsensitivity: string
usernameCaseSensitivity: string
usernameSensitivity: string
uuid: string
workstation: string
ObjectUserLocalDynamicMapping Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The ObjectUserLocalDynamicMapping resource accepts the following input properties:
- Local string
- Local.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Auth
Concurrent stringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - Auth
Concurrent doubleValue - Maximum number of concurrent logins permitted from the same user.
- Authtimeout double
- Time in minutes before the authentication timeout for a user is reached.
- Dynamic
Sort stringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- Email
To string - Two-factor recipient's email address.
- Fabric
Force stringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - Fabric
Object string - Security Fabric global object setting. Valid values:
disable,enable. - Fabric
Object stringSource - Source of truth for fabric object. Valid values:
member,local,root. - Fortitokens List<string>
- Two-factor recipient's FortiToken serial number.
- Fosid double
- Id.
- History0s List<string>
- History0.
- History10s List<string>
- History10.
- History11s List<string>
- History11.
- History12s List<string>
- History12.
- History13s List<string>
- History13.
- History14s List<string>
- History14.
- History15s List<string>
- History15.
- History16s List<string>
- History16.
- History17s List<string>
- History17.
- History18s List<string>
- History18.
- History19s List<string>
- History19.
- History1s List<string>
- History1.
- History2s List<string>
- History2.
- History3s List<string>
- History3.
- History4s List<string>
- History4.
- History5s List<string>
- History5.
- History6s List<string>
- History6.
- History7s List<string>
- History7.
- History8s List<string>
- History8.
- History9s List<string>
- History9.
- Ldap
Servers List<string> - Name of LDAP server with which the user must authenticate.
- Object
User stringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- Passwd
Policies List<string> - Password policy to apply to this user, as defined in config user password-policy.
- Passwd
Time string - Time of the last password update.
- Passwds List<string>
- User's password.
- Ppk
Identity string - IKEv2 Postquantum Preshared Key Identity.
- Ppk
Secrets List<string> - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- Qkd
Profiles List<string> - Quantum Key Distribution (QKD) profile.
- Radius
Servers List<string> - Name of RADIUS server with which the user must authenticate.
- Saml
Servers List<string> - Name of SAML server with which the user must authenticate.
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Sms
Custom List<string>Servers - Two-factor recipient's SMS server.
- Sms
Phone string - Two-factor recipient's mobile phone number.
- Sms
Providers List<string> - Sms-Provider.
- Sms
Server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - Status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - Tacacs
Servers List<string> - Name of TACACS+ server with which the user must authenticate.
- Two
Factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - Two
Factor stringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - Two
Factor stringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - Type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - Update
If boolExist - Username
Case stringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - Username
Case stringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - Username
Sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes List<ObjectUser Local Dynamic Mapping_Scope> - _Scope. The structure of
_scopeblock is documented below.
- Local string
- Local.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Auth
Concurrent stringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - Auth
Concurrent float64Value - Maximum number of concurrent logins permitted from the same user.
- Authtimeout float64
- Time in minutes before the authentication timeout for a user is reached.
- Dynamic
Sort stringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- Email
To string - Two-factor recipient's email address.
- Fabric
Force stringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - Fabric
Object string - Security Fabric global object setting. Valid values:
disable,enable. - Fabric
Object stringSource - Source of truth for fabric object. Valid values:
member,local,root. - Fortitokens []string
- Two-factor recipient's FortiToken serial number.
- Fosid float64
- Id.
- History0s []string
- History0.
- History10s []string
- History10.
- History11s []string
- History11.
- History12s []string
- History12.
- History13s []string
- History13.
- History14s []string
- History14.
- History15s []string
- History15.
- History16s []string
- History16.
- History17s []string
- History17.
- History18s []string
- History18.
- History19s []string
- History19.
- History1s []string
- History1.
- History2s []string
- History2.
- History3s []string
- History3.
- History4s []string
- History4.
- History5s []string
- History5.
- History6s []string
- History6.
- History7s []string
- History7.
- History8s []string
- History8.
- History9s []string
- History9.
- Ldap
Servers []string - Name of LDAP server with which the user must authenticate.
- Object
User stringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- Passwd
Policies []string - Password policy to apply to this user, as defined in config user password-policy.
- Passwd
Time string - Time of the last password update.
- Passwds []string
- User's password.
- Ppk
Identity string - IKEv2 Postquantum Preshared Key Identity.
- Ppk
Secrets []string - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- Qkd
Profiles []string - Quantum Key Distribution (QKD) profile.
- Radius
Servers []string - Name of RADIUS server with which the user must authenticate.
- Saml
Servers []string - Name of SAML server with which the user must authenticate.
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Sms
Custom []stringServers - Two-factor recipient's SMS server.
- Sms
Phone string - Two-factor recipient's mobile phone number.
- Sms
Providers []string - Sms-Provider.
- Sms
Server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - Status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - Tacacs
Servers []string - Name of TACACS+ server with which the user must authenticate.
- Two
Factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - Two
Factor stringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - Two
Factor stringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - Type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - Update
If boolExist - Username
Case stringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - Username
Case stringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - Username
Sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes []ObjectUser Local Dynamic Mapping_Scope Args - _Scope. The structure of
_scopeblock is documented below.
- local string
- Local.
- _
scopes list(object) - _Scope. The structure of
_scopeblock is documented below. - adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth_
concurrent_ stringoverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth_
concurrent_ numbervalue - Maximum number of concurrent logins permitted from the same user.
- authtimeout number
- Time in minutes before the authentication timeout for a user is reached.
- dynamic_
sort_ stringsubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email_
to string - Two-factor recipient's email address.
- fabric_
force_ stringsync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric_
object string - Security Fabric global object setting. Valid values:
disable,enable. - fabric_
object_ stringsource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens list(string)
- Two-factor recipient's FortiToken serial number.
- fosid number
- Id.
- history0s list(string)
- History0.
- history10s list(string)
- History10.
- history11s list(string)
- History11.
- history12s list(string)
- History12.
- history13s list(string)
- History13.
- history14s list(string)
- History14.
- history15s list(string)
- History15.
- history16s list(string)
- History16.
- history17s list(string)
- History17.
- history18s list(string)
- History18.
- history19s list(string)
- History19.
- history1s list(string)
- History1.
- history2s list(string)
- History2.
- history3s list(string)
- History3.
- history4s list(string)
- History4.
- history5s list(string)
- History5.
- history6s list(string)
- History6.
- history7s list(string)
- History7.
- history8s list(string)
- History8.
- history9s list(string)
- History9.
- ldap_
servers list(string) - Name of LDAP server with which the user must authenticate.
- object_
user_ stringlocal_ dynamic_ mapping_ id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd_
policies list(string) - Password policy to apply to this user, as defined in config user password-policy.
- passwd_
time string - Time of the last password update.
- passwds list(string)
- User's password.
- ppk_
identity string - IKEv2 Postquantum Preshared Key Identity.
- ppk_
secrets list(string) - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd_
profiles list(string) - Quantum Key Distribution (QKD) profile.
- radius_
servers list(string) - Name of RADIUS server with which the user must authenticate.
- saml_
servers list(string) - Name of SAML server with which the user must authenticate.
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms_
custom_ list(string)servers - Two-factor recipient's SMS server.
- sms_
phone string - Two-factor recipient's mobile phone number.
- sms_
providers list(string) - Sms-Provider.
- sms_
server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs_
servers list(string) - Name of TACACS+ server with which the user must authenticate.
- two_
factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two_
factor_ stringauthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two_
factor_ stringnotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update_
if_ boolexist - username_
case_ stringinsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username_
case_ stringsensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username_
sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- local String
- Local.
- _
scopes List<ObjectUser Local Dynamic Mapping_Scope> - _Scope. The structure of
_scopeblock is documented below. - adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth
Concurrent StringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth
Concurrent DoubleValue - Maximum number of concurrent logins permitted from the same user.
- authtimeout Double
- Time in minutes before the authentication timeout for a user is reached.
- dynamic
Sort StringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email
To String - Two-factor recipient's email address.
- fabric
Force StringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric
Object String - Security Fabric global object setting. Valid values:
disable,enable. - fabric
Object StringSource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens List<String>
- Two-factor recipient's FortiToken serial number.
- fosid Double
- Id.
- history0s List<String>
- History0.
- history10s List<String>
- History10.
- history11s List<String>
- History11.
- history12s List<String>
- History12.
- history13s List<String>
- History13.
- history14s List<String>
- History14.
- history15s List<String>
- History15.
- history16s List<String>
- History16.
- history17s List<String>
- History17.
- history18s List<String>
- History18.
- history19s List<String>
- History19.
- history1s List<String>
- History1.
- history2s List<String>
- History2.
- history3s List<String>
- History3.
- history4s List<String>
- History4.
- history5s List<String>
- History5.
- history6s List<String>
- History6.
- history7s List<String>
- History7.
- history8s List<String>
- History8.
- history9s List<String>
- History9.
- ldap
Servers List<String> - Name of LDAP server with which the user must authenticate.
- object
User StringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd
Policies List<String> - Password policy to apply to this user, as defined in config user password-policy.
- passwd
Time String - Time of the last password update.
- passwds List<String>
- User's password.
- ppk
Identity String - IKEv2 Postquantum Preshared Key Identity.
- ppk
Secrets List<String> - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd
Profiles List<String> - Quantum Key Distribution (QKD) profile.
- radius
Servers List<String> - Name of RADIUS server with which the user must authenticate.
- saml
Servers List<String> - Name of SAML server with which the user must authenticate.
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms
Custom List<String>Servers - Two-factor recipient's SMS server.
- sms
Phone String - Two-factor recipient's mobile phone number.
- sms
Providers List<String> - Sms-Provider.
- sms
Server String - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status String
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs
Servers List<String> - Name of TACACS+ server with which the user must authenticate.
- two
Factor String - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two
Factor StringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two
Factor StringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type String
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update
If BooleanExist - username
Case StringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username
Case StringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username
Sensitivity String - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation String
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- local string
- Local.
- _
scopes ObjectUser Local Dynamic Mapping_Scope[] - _Scope. The structure of
_scopeblock is documented below. - adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth
Concurrent stringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth
Concurrent numberValue - Maximum number of concurrent logins permitted from the same user.
- authtimeout number
- Time in minutes before the authentication timeout for a user is reached.
- dynamic
Sort stringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email
To string - Two-factor recipient's email address.
- fabric
Force stringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric
Object string - Security Fabric global object setting. Valid values:
disable,enable. - fabric
Object stringSource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens string[]
- Two-factor recipient's FortiToken serial number.
- fosid number
- Id.
- history0s string[]
- History0.
- history10s string[]
- History10.
- history11s string[]
- History11.
- history12s string[]
- History12.
- history13s string[]
- History13.
- history14s string[]
- History14.
- history15s string[]
- History15.
- history16s string[]
- History16.
- history17s string[]
- History17.
- history18s string[]
- History18.
- history19s string[]
- History19.
- history1s string[]
- History1.
- history2s string[]
- History2.
- history3s string[]
- History3.
- history4s string[]
- History4.
- history5s string[]
- History5.
- history6s string[]
- History6.
- history7s string[]
- History7.
- history8s string[]
- History8.
- history9s string[]
- History9.
- ldap
Servers string[] - Name of LDAP server with which the user must authenticate.
- object
User stringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd
Policies string[] - Password policy to apply to this user, as defined in config user password-policy.
- passwd
Time string - Time of the last password update.
- passwds string[]
- User's password.
- ppk
Identity string - IKEv2 Postquantum Preshared Key Identity.
- ppk
Secrets string[] - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd
Profiles string[] - Quantum Key Distribution (QKD) profile.
- radius
Servers string[] - Name of RADIUS server with which the user must authenticate.
- saml
Servers string[] - Name of SAML server with which the user must authenticate.
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms
Custom string[]Servers - Two-factor recipient's SMS server.
- sms
Phone string - Two-factor recipient's mobile phone number.
- sms
Providers string[] - Sms-Provider.
- sms
Server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs
Servers string[] - Name of TACACS+ server with which the user must authenticate.
- two
Factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two
Factor stringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two
Factor stringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update
If booleanExist - username
Case stringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username
Case stringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username
Sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- local str
- Local.
- _
scopes Sequence[ObjectUser Local Dynamic Mapping_Scope Args] - _Scope. The structure of
_scopeblock is documented below. - adom str
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth_
concurrent_ stroverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth_
concurrent_ floatvalue - Maximum number of concurrent logins permitted from the same user.
- authtimeout float
- Time in minutes before the authentication timeout for a user is reached.
- dynamic_
sort_ strsubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email_
to str - Two-factor recipient's email address.
- fabric_
force_ strsync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric_
object str - Security Fabric global object setting. Valid values:
disable,enable. - fabric_
object_ strsource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens Sequence[str]
- Two-factor recipient's FortiToken serial number.
- fosid float
- Id.
- history0s Sequence[str]
- History0.
- history10s Sequence[str]
- History10.
- history11s Sequence[str]
- History11.
- history12s Sequence[str]
- History12.
- history13s Sequence[str]
- History13.
- history14s Sequence[str]
- History14.
- history15s Sequence[str]
- History15.
- history16s Sequence[str]
- History16.
- history17s Sequence[str]
- History17.
- history18s Sequence[str]
- History18.
- history19s Sequence[str]
- History19.
- history1s Sequence[str]
- History1.
- history2s Sequence[str]
- History2.
- history3s Sequence[str]
- History3.
- history4s Sequence[str]
- History4.
- history5s Sequence[str]
- History5.
- history6s Sequence[str]
- History6.
- history7s Sequence[str]
- History7.
- history8s Sequence[str]
- History8.
- history9s Sequence[str]
- History9.
- ldap_
servers Sequence[str] - Name of LDAP server with which the user must authenticate.
- object_
user_ strlocal_ dynamic_ mapping_ id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd_
policies Sequence[str] - Password policy to apply to this user, as defined in config user password-policy.
- passwd_
time str - Time of the last password update.
- passwds Sequence[str]
- User's password.
- ppk_
identity str - IKEv2 Postquantum Preshared Key Identity.
- ppk_
secrets Sequence[str] - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd_
profiles Sequence[str] - Quantum Key Distribution (QKD) profile.
- radius_
servers Sequence[str] - Name of RADIUS server with which the user must authenticate.
- saml_
servers Sequence[str] - Name of SAML server with which the user must authenticate.
- scopetype str
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms_
custom_ Sequence[str]servers - Two-factor recipient's SMS server.
- sms_
phone str - Two-factor recipient's mobile phone number.
- sms_
providers Sequence[str] - Sms-Provider.
- sms_
server str - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status str
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs_
servers Sequence[str] - Name of TACACS+ server with which the user must authenticate.
- two_
factor str - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two_
factor_ strauthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two_
factor_ strnotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type str
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update_
if_ boolexist - username_
case_ strinsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username_
case_ strsensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username_
sensitivity str - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid str
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation str
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- local String
- Local.
- _
scopes List<Property Map> - _Scope. The structure of
_scopeblock is documented below. - adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth
Concurrent StringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth
Concurrent NumberValue - Maximum number of concurrent logins permitted from the same user.
- authtimeout Number
- Time in minutes before the authentication timeout for a user is reached.
- dynamic
Sort StringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email
To String - Two-factor recipient's email address.
- fabric
Force StringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric
Object String - Security Fabric global object setting. Valid values:
disable,enable. - fabric
Object StringSource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens List<String>
- Two-factor recipient's FortiToken serial number.
- fosid Number
- Id.
- history0s List<String>
- History0.
- history10s List<String>
- History10.
- history11s List<String>
- History11.
- history12s List<String>
- History12.
- history13s List<String>
- History13.
- history14s List<String>
- History14.
- history15s List<String>
- History15.
- history16s List<String>
- History16.
- history17s List<String>
- History17.
- history18s List<String>
- History18.
- history19s List<String>
- History19.
- history1s List<String>
- History1.
- history2s List<String>
- History2.
- history3s List<String>
- History3.
- history4s List<String>
- History4.
- history5s List<String>
- History5.
- history6s List<String>
- History6.
- history7s List<String>
- History7.
- history8s List<String>
- History8.
- history9s List<String>
- History9.
- ldap
Servers List<String> - Name of LDAP server with which the user must authenticate.
- object
User StringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd
Policies List<String> - Password policy to apply to this user, as defined in config user password-policy.
- passwd
Time String - Time of the last password update.
- passwds List<String>
- User's password.
- ppk
Identity String - IKEv2 Postquantum Preshared Key Identity.
- ppk
Secrets List<String> - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd
Profiles List<String> - Quantum Key Distribution (QKD) profile.
- radius
Servers List<String> - Name of RADIUS server with which the user must authenticate.
- saml
Servers List<String> - Name of SAML server with which the user must authenticate.
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms
Custom List<String>Servers - Two-factor recipient's SMS server.
- sms
Phone String - Two-factor recipient's mobile phone number.
- sms
Providers List<String> - Sms-Provider.
- sms
Server String - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status String
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs
Servers List<String> - Name of TACACS+ server with which the user must authenticate.
- two
Factor String - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two
Factor StringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two
Factor StringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type String
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update
If BooleanExist - username
Case StringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username
Case StringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username
Sensitivity String - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation String
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
Outputs
All input properties are implicitly available as output properties. Additionally, the ObjectUserLocalDynamicMapping resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing ObjectUserLocalDynamicMapping Resource
Get an existing ObjectUserLocalDynamicMapping resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ObjectUserLocalDynamicMappingState, opts?: CustomResourceOptions): ObjectUserLocalDynamicMapping@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
_scopes: Optional[Sequence[ObjectUserLocalDynamicMapping_ScopeArgs]] = None,
adom: Optional[str] = None,
auth_concurrent_override: Optional[str] = None,
auth_concurrent_value: Optional[float] = None,
authtimeout: Optional[float] = None,
dynamic_sort_subtable: Optional[str] = None,
email_to: Optional[str] = None,
fabric_force_sync: Optional[str] = None,
fabric_object: Optional[str] = None,
fabric_object_source: Optional[str] = None,
fortitokens: Optional[Sequence[str]] = None,
fosid: Optional[float] = None,
history0s: Optional[Sequence[str]] = None,
history10s: Optional[Sequence[str]] = None,
history11s: Optional[Sequence[str]] = None,
history12s: Optional[Sequence[str]] = None,
history13s: Optional[Sequence[str]] = None,
history14s: Optional[Sequence[str]] = None,
history15s: Optional[Sequence[str]] = None,
history16s: Optional[Sequence[str]] = None,
history17s: Optional[Sequence[str]] = None,
history18s: Optional[Sequence[str]] = None,
history19s: Optional[Sequence[str]] = None,
history1s: Optional[Sequence[str]] = None,
history2s: Optional[Sequence[str]] = None,
history3s: Optional[Sequence[str]] = None,
history4s: Optional[Sequence[str]] = None,
history5s: Optional[Sequence[str]] = None,
history6s: Optional[Sequence[str]] = None,
history7s: Optional[Sequence[str]] = None,
history8s: Optional[Sequence[str]] = None,
history9s: Optional[Sequence[str]] = None,
ldap_servers: Optional[Sequence[str]] = None,
local: Optional[str] = None,
object_user_local_dynamic_mapping_id: Optional[str] = None,
passwd_policies: Optional[Sequence[str]] = None,
passwd_time: Optional[str] = None,
passwds: Optional[Sequence[str]] = None,
ppk_identity: Optional[str] = None,
ppk_secrets: Optional[Sequence[str]] = None,
qkd_profiles: Optional[Sequence[str]] = None,
radius_servers: Optional[Sequence[str]] = None,
saml_servers: Optional[Sequence[str]] = None,
scopetype: Optional[str] = None,
sms_custom_servers: Optional[Sequence[str]] = None,
sms_phone: Optional[str] = None,
sms_providers: Optional[Sequence[str]] = None,
sms_server: Optional[str] = None,
status: Optional[str] = None,
tacacs_servers: Optional[Sequence[str]] = None,
two_factor: Optional[str] = None,
two_factor_authentication: Optional[str] = None,
two_factor_notification: Optional[str] = None,
type: Optional[str] = None,
update_if_exist: Optional[bool] = None,
username_case_insensitivity: Optional[str] = None,
username_case_sensitivity: Optional[str] = None,
username_sensitivity: Optional[str] = None,
uuid: Optional[str] = None,
workstation: Optional[str] = None) -> ObjectUserLocalDynamicMappingfunc GetObjectUserLocalDynamicMapping(ctx *Context, name string, id IDInput, state *ObjectUserLocalDynamicMappingState, opts ...ResourceOption) (*ObjectUserLocalDynamicMapping, error)public static ObjectUserLocalDynamicMapping Get(string name, Input<string> id, ObjectUserLocalDynamicMappingState? state, CustomResourceOptions? opts = null)public static ObjectUserLocalDynamicMapping get(String name, Output<String> id, ObjectUserLocalDynamicMappingState state, CustomResourceOptions options)resources: _: type: fortimanager:ObjectUserLocalDynamicMapping get: id: ${id}import {
to = fortimanager_object_user_local_dynamic_mapping.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Auth
Concurrent stringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - Auth
Concurrent doubleValue - Maximum number of concurrent logins permitted from the same user.
- Authtimeout double
- Time in minutes before the authentication timeout for a user is reached.
- Dynamic
Sort stringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- Email
To string - Two-factor recipient's email address.
- Fabric
Force stringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - Fabric
Object string - Security Fabric global object setting. Valid values:
disable,enable. - Fabric
Object stringSource - Source of truth for fabric object. Valid values:
member,local,root. - Fortitokens List<string>
- Two-factor recipient's FortiToken serial number.
- Fosid double
- Id.
- History0s List<string>
- History0.
- History10s List<string>
- History10.
- History11s List<string>
- History11.
- History12s List<string>
- History12.
- History13s List<string>
- History13.
- History14s List<string>
- History14.
- History15s List<string>
- History15.
- History16s List<string>
- History16.
- History17s List<string>
- History17.
- History18s List<string>
- History18.
- History19s List<string>
- History19.
- History1s List<string>
- History1.
- History2s List<string>
- History2.
- History3s List<string>
- History3.
- History4s List<string>
- History4.
- History5s List<string>
- History5.
- History6s List<string>
- History6.
- History7s List<string>
- History7.
- History8s List<string>
- History8.
- History9s List<string>
- History9.
- Ldap
Servers List<string> - Name of LDAP server with which the user must authenticate.
- Local string
- Local.
- Object
User stringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- Passwd
Policies List<string> - Password policy to apply to this user, as defined in config user password-policy.
- Passwd
Time string - Time of the last password update.
- Passwds List<string>
- User's password.
- Ppk
Identity string - IKEv2 Postquantum Preshared Key Identity.
- Ppk
Secrets List<string> - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- Qkd
Profiles List<string> - Quantum Key Distribution (QKD) profile.
- Radius
Servers List<string> - Name of RADIUS server with which the user must authenticate.
- Saml
Servers List<string> - Name of SAML server with which the user must authenticate.
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Sms
Custom List<string>Servers - Two-factor recipient's SMS server.
- Sms
Phone string - Two-factor recipient's mobile phone number.
- Sms
Providers List<string> - Sms-Provider.
- Sms
Server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - Status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - Tacacs
Servers List<string> - Name of TACACS+ server with which the user must authenticate.
- Two
Factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - Two
Factor stringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - Two
Factor stringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - Type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - Update
If boolExist - Username
Case stringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - Username
Case stringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - Username
Sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes List<ObjectUser Local Dynamic Mapping_Scope> - _Scope. The structure of
_scopeblock is documented below.
- Adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - Auth
Concurrent stringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - Auth
Concurrent float64Value - Maximum number of concurrent logins permitted from the same user.
- Authtimeout float64
- Time in minutes before the authentication timeout for a user is reached.
- Dynamic
Sort stringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- Email
To string - Two-factor recipient's email address.
- Fabric
Force stringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - Fabric
Object string - Security Fabric global object setting. Valid values:
disable,enable. - Fabric
Object stringSource - Source of truth for fabric object. Valid values:
member,local,root. - Fortitokens []string
- Two-factor recipient's FortiToken serial number.
- Fosid float64
- Id.
- History0s []string
- History0.
- History10s []string
- History10.
- History11s []string
- History11.
- History12s []string
- History12.
- History13s []string
- History13.
- History14s []string
- History14.
- History15s []string
- History15.
- History16s []string
- History16.
- History17s []string
- History17.
- History18s []string
- History18.
- History19s []string
- History19.
- History1s []string
- History1.
- History2s []string
- History2.
- History3s []string
- History3.
- History4s []string
- History4.
- History5s []string
- History5.
- History6s []string
- History6.
- History7s []string
- History7.
- History8s []string
- History8.
- History9s []string
- History9.
- Ldap
Servers []string - Name of LDAP server with which the user must authenticate.
- Local string
- Local.
- Object
User stringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- Passwd
Policies []string - Password policy to apply to this user, as defined in config user password-policy.
- Passwd
Time string - Time of the last password update.
- Passwds []string
- User's password.
- Ppk
Identity string - IKEv2 Postquantum Preshared Key Identity.
- Ppk
Secrets []string - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- Qkd
Profiles []string - Quantum Key Distribution (QKD) profile.
- Radius
Servers []string - Name of RADIUS server with which the user must authenticate.
- Saml
Servers []string - Name of SAML server with which the user must authenticate.
- Scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - Sms
Custom []stringServers - Two-factor recipient's SMS server.
- Sms
Phone string - Two-factor recipient's mobile phone number.
- Sms
Providers []string - Sms-Provider.
- Sms
Server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - Status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - Tacacs
Servers []string - Name of TACACS+ server with which the user must authenticate.
- Two
Factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - Two
Factor stringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - Two
Factor stringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - Type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - Update
If boolExist - Username
Case stringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - Username
Case stringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - Username
Sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - Uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- Workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes []ObjectUser Local Dynamic Mapping_Scope Args - _Scope. The structure of
_scopeblock is documented below.
- _
scopes list(object) - _Scope. The structure of
_scopeblock is documented below. - adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth_
concurrent_ stringoverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth_
concurrent_ numbervalue - Maximum number of concurrent logins permitted from the same user.
- authtimeout number
- Time in minutes before the authentication timeout for a user is reached.
- dynamic_
sort_ stringsubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email_
to string - Two-factor recipient's email address.
- fabric_
force_ stringsync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric_
object string - Security Fabric global object setting. Valid values:
disable,enable. - fabric_
object_ stringsource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens list(string)
- Two-factor recipient's FortiToken serial number.
- fosid number
- Id.
- history0s list(string)
- History0.
- history10s list(string)
- History10.
- history11s list(string)
- History11.
- history12s list(string)
- History12.
- history13s list(string)
- History13.
- history14s list(string)
- History14.
- history15s list(string)
- History15.
- history16s list(string)
- History16.
- history17s list(string)
- History17.
- history18s list(string)
- History18.
- history19s list(string)
- History19.
- history1s list(string)
- History1.
- history2s list(string)
- History2.
- history3s list(string)
- History3.
- history4s list(string)
- History4.
- history5s list(string)
- History5.
- history6s list(string)
- History6.
- history7s list(string)
- History7.
- history8s list(string)
- History8.
- history9s list(string)
- History9.
- ldap_
servers list(string) - Name of LDAP server with which the user must authenticate.
- local string
- Local.
- object_
user_ stringlocal_ dynamic_ mapping_ id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd_
policies list(string) - Password policy to apply to this user, as defined in config user password-policy.
- passwd_
time string - Time of the last password update.
- passwds list(string)
- User's password.
- ppk_
identity string - IKEv2 Postquantum Preshared Key Identity.
- ppk_
secrets list(string) - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd_
profiles list(string) - Quantum Key Distribution (QKD) profile.
- radius_
servers list(string) - Name of RADIUS server with which the user must authenticate.
- saml_
servers list(string) - Name of SAML server with which the user must authenticate.
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms_
custom_ list(string)servers - Two-factor recipient's SMS server.
- sms_
phone string - Two-factor recipient's mobile phone number.
- sms_
providers list(string) - Sms-Provider.
- sms_
server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs_
servers list(string) - Name of TACACS+ server with which the user must authenticate.
- two_
factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two_
factor_ stringauthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two_
factor_ stringnotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update_
if_ boolexist - username_
case_ stringinsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username_
case_ stringsensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username_
sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes List<ObjectUser Local Dynamic Mapping_Scope> - _Scope. The structure of
_scopeblock is documented below. - adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth
Concurrent StringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth
Concurrent DoubleValue - Maximum number of concurrent logins permitted from the same user.
- authtimeout Double
- Time in minutes before the authentication timeout for a user is reached.
- dynamic
Sort StringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email
To String - Two-factor recipient's email address.
- fabric
Force StringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric
Object String - Security Fabric global object setting. Valid values:
disable,enable. - fabric
Object StringSource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens List<String>
- Two-factor recipient's FortiToken serial number.
- fosid Double
- Id.
- history0s List<String>
- History0.
- history10s List<String>
- History10.
- history11s List<String>
- History11.
- history12s List<String>
- History12.
- history13s List<String>
- History13.
- history14s List<String>
- History14.
- history15s List<String>
- History15.
- history16s List<String>
- History16.
- history17s List<String>
- History17.
- history18s List<String>
- History18.
- history19s List<String>
- History19.
- history1s List<String>
- History1.
- history2s List<String>
- History2.
- history3s List<String>
- History3.
- history4s List<String>
- History4.
- history5s List<String>
- History5.
- history6s List<String>
- History6.
- history7s List<String>
- History7.
- history8s List<String>
- History8.
- history9s List<String>
- History9.
- ldap
Servers List<String> - Name of LDAP server with which the user must authenticate.
- local String
- Local.
- object
User StringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd
Policies List<String> - Password policy to apply to this user, as defined in config user password-policy.
- passwd
Time String - Time of the last password update.
- passwds List<String>
- User's password.
- ppk
Identity String - IKEv2 Postquantum Preshared Key Identity.
- ppk
Secrets List<String> - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd
Profiles List<String> - Quantum Key Distribution (QKD) profile.
- radius
Servers List<String> - Name of RADIUS server with which the user must authenticate.
- saml
Servers List<String> - Name of SAML server with which the user must authenticate.
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms
Custom List<String>Servers - Two-factor recipient's SMS server.
- sms
Phone String - Two-factor recipient's mobile phone number.
- sms
Providers List<String> - Sms-Provider.
- sms
Server String - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status String
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs
Servers List<String> - Name of TACACS+ server with which the user must authenticate.
- two
Factor String - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two
Factor StringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two
Factor StringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type String
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update
If BooleanExist - username
Case StringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username
Case StringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username
Sensitivity String - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation String
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes ObjectUser Local Dynamic Mapping_Scope[] - _Scope. The structure of
_scopeblock is documented below. - adom string
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth
Concurrent stringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth
Concurrent numberValue - Maximum number of concurrent logins permitted from the same user.
- authtimeout number
- Time in minutes before the authentication timeout for a user is reached.
- dynamic
Sort stringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email
To string - Two-factor recipient's email address.
- fabric
Force stringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric
Object string - Security Fabric global object setting. Valid values:
disable,enable. - fabric
Object stringSource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens string[]
- Two-factor recipient's FortiToken serial number.
- fosid number
- Id.
- history0s string[]
- History0.
- history10s string[]
- History10.
- history11s string[]
- History11.
- history12s string[]
- History12.
- history13s string[]
- History13.
- history14s string[]
- History14.
- history15s string[]
- History15.
- history16s string[]
- History16.
- history17s string[]
- History17.
- history18s string[]
- History18.
- history19s string[]
- History19.
- history1s string[]
- History1.
- history2s string[]
- History2.
- history3s string[]
- History3.
- history4s string[]
- History4.
- history5s string[]
- History5.
- history6s string[]
- History6.
- history7s string[]
- History7.
- history8s string[]
- History8.
- history9s string[]
- History9.
- ldap
Servers string[] - Name of LDAP server with which the user must authenticate.
- local string
- Local.
- object
User stringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd
Policies string[] - Password policy to apply to this user, as defined in config user password-policy.
- passwd
Time string - Time of the last password update.
- passwds string[]
- User's password.
- ppk
Identity string - IKEv2 Postquantum Preshared Key Identity.
- ppk
Secrets string[] - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd
Profiles string[] - Quantum Key Distribution (QKD) profile.
- radius
Servers string[] - Name of RADIUS server with which the user must authenticate.
- saml
Servers string[] - Name of SAML server with which the user must authenticate.
- scopetype string
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms
Custom string[]Servers - Two-factor recipient's SMS server.
- sms
Phone string - Two-factor recipient's mobile phone number.
- sms
Providers string[] - Sms-Provider.
- sms
Server string - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status string
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs
Servers string[] - Name of TACACS+ server with which the user must authenticate.
- two
Factor string - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two
Factor stringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two
Factor stringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type string
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update
If booleanExist - username
Case stringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username
Case stringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username
Sensitivity string - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid string
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation string
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes Sequence[ObjectUser Local Dynamic Mapping_Scope Args] - _Scope. The structure of
_scopeblock is documented below. - adom str
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth_
concurrent_ stroverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth_
concurrent_ floatvalue - Maximum number of concurrent logins permitted from the same user.
- authtimeout float
- Time in minutes before the authentication timeout for a user is reached.
- dynamic_
sort_ strsubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email_
to str - Two-factor recipient's email address.
- fabric_
force_ strsync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric_
object str - Security Fabric global object setting. Valid values:
disable,enable. - fabric_
object_ strsource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens Sequence[str]
- Two-factor recipient's FortiToken serial number.
- fosid float
- Id.
- history0s Sequence[str]
- History0.
- history10s Sequence[str]
- History10.
- history11s Sequence[str]
- History11.
- history12s Sequence[str]
- History12.
- history13s Sequence[str]
- History13.
- history14s Sequence[str]
- History14.
- history15s Sequence[str]
- History15.
- history16s Sequence[str]
- History16.
- history17s Sequence[str]
- History17.
- history18s Sequence[str]
- History18.
- history19s Sequence[str]
- History19.
- history1s Sequence[str]
- History1.
- history2s Sequence[str]
- History2.
- history3s Sequence[str]
- History3.
- history4s Sequence[str]
- History4.
- history5s Sequence[str]
- History5.
- history6s Sequence[str]
- History6.
- history7s Sequence[str]
- History7.
- history8s Sequence[str]
- History8.
- history9s Sequence[str]
- History9.
- ldap_
servers Sequence[str] - Name of LDAP server with which the user must authenticate.
- local str
- Local.
- object_
user_ strlocal_ dynamic_ mapping_ id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd_
policies Sequence[str] - Password policy to apply to this user, as defined in config user password-policy.
- passwd_
time str - Time of the last password update.
- passwds Sequence[str]
- User's password.
- ppk_
identity str - IKEv2 Postquantum Preshared Key Identity.
- ppk_
secrets Sequence[str] - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd_
profiles Sequence[str] - Quantum Key Distribution (QKD) profile.
- radius_
servers Sequence[str] - Name of RADIUS server with which the user must authenticate.
- saml_
servers Sequence[str] - Name of SAML server with which the user must authenticate.
- scopetype str
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms_
custom_ Sequence[str]servers - Two-factor recipient's SMS server.
- sms_
phone str - Two-factor recipient's mobile phone number.
- sms_
providers Sequence[str] - Sms-Provider.
- sms_
server str - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status str
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs_
servers Sequence[str] - Name of TACACS+ server with which the user must authenticate.
- two_
factor str - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two_
factor_ strauthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two_
factor_ strnotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type str
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update_
if_ boolexist - username_
case_ strinsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username_
case_ strsensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username_
sensitivity str - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid str
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation str
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
- _
scopes List<Property Map> - _Scope. The structure of
_scopeblock is documented below. - adom String
- Adom. This value is valid only when the
scopetypeisadom, otherwise the value of adom in the provider will be inherited. - auth
Concurrent StringOverride - Enable/disable overriding the policy-auth-concurrent under config system global. Valid values:
disable,enable. - auth
Concurrent NumberValue - Maximum number of concurrent logins permitted from the same user.
- authtimeout Number
- Time in minutes before the authentication timeout for a user is reached.
- dynamic
Sort StringSubtable - true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
- email
To String - Two-factor recipient's email address.
- fabric
Force StringSync - Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped. Valid values:
disable,enable. - fabric
Object String - Security Fabric global object setting. Valid values:
disable,enable. - fabric
Object StringSource - Source of truth for fabric object. Valid values:
member,local,root. - fortitokens List<String>
- Two-factor recipient's FortiToken serial number.
- fosid Number
- Id.
- history0s List<String>
- History0.
- history10s List<String>
- History10.
- history11s List<String>
- History11.
- history12s List<String>
- History12.
- history13s List<String>
- History13.
- history14s List<String>
- History14.
- history15s List<String>
- History15.
- history16s List<String>
- History16.
- history17s List<String>
- History17.
- history18s List<String>
- History18.
- history19s List<String>
- History19.
- history1s List<String>
- History1.
- history2s List<String>
- History2.
- history3s List<String>
- History3.
- history4s List<String>
- History4.
- history5s List<String>
- History5.
- history6s List<String>
- History6.
- history7s List<String>
- History7.
- history8s List<String>
- History8.
- history9s List<String>
- History9.
- ldap
Servers List<String> - Name of LDAP server with which the user must authenticate.
- local String
- Local.
- object
User StringLocal Dynamic Mapping Id - an identifier for the resource with format "{{_scope.name}} {{_scope.vdom}}".
- passwd
Policies List<String> - Password policy to apply to this user, as defined in config user password-policy.
- passwd
Time String - Time of the last password update.
- passwds List<String>
- User's password.
- ppk
Identity String - IKEv2 Postquantum Preshared Key Identity.
- ppk
Secrets List<String> - IKEv2 Postquantum Preshared Key (ASCII string or hexadecimal encoded with a leading 0x).
- qkd
Profiles List<String> - Quantum Key Distribution (QKD) profile.
- radius
Servers List<String> - Name of RADIUS server with which the user must authenticate.
- saml
Servers List<String> - Name of SAML server with which the user must authenticate.
- scopetype String
- The scope of application of the resource. Valid values:
inherit,adom,global. Theinheritmeans that the scopetype of the provider will be inherited, and adom will also be inherited. The default value isinherit. - sms
Custom List<String>Servers - Two-factor recipient's SMS server.
- sms
Phone String - Two-factor recipient's mobile phone number.
- sms
Providers List<String> - Sms-Provider.
- sms
Server String - Send SMS through FortiGuard or other external server. Valid values:
fortiguard,custom. - status String
- Enable/disable allowing the local user to authenticate with the FortiGate unit. Valid values:
disable,enable. - tacacs
Servers List<String> - Name of TACACS+ server with which the user must authenticate.
- two
Factor String - Enable/disable two-factor authentication. Valid values:
disable,fortitoken,email,sms,fortitoken-cloud. - two
Factor StringAuthentication - Authentication method by FortiToken Cloud. Valid values:
fortitoken,email,sms. - two
Factor StringNotification - Notification method for user activation by FortiToken Cloud. Valid values:
email,sms. - type String
- Authentication method. Valid values:
password,radius,tacacs+,ldap,saml. - update
If BooleanExist - username
Case StringInsensitivity - Username-Case-Insensitivity. Valid values:
disable,enable. - username
Case StringSensitivity - Username-Case-Sensitivity. Valid values:
disable,enable. - username
Sensitivity String - Enable/disable case and accent sensitivity when performing username matching (accents are stripped and case is ignored when disabled). Valid values:
disable,enable. - uuid String
- Universally Unique Identifier (UUID; automatically assigned but can be manually reset).
- workstation String
- Name of the remote user workstation, if you want to limit the user to authenticate only from a particular workstation.
Supporting Types
ObjectUserLocalDynamicMapping_Scope, ObjectUserLocalDynamicMapping_ScopeArgs
Import
ObjectUser LocalDynamicMapping can be imported using any of these accepted formats:
Set import_options = [“local=YOUR_VALUE”] in the provider section.
$ export “FORTIMANAGER_IMPORT_TABLE”=“true”
$ pulumi import fortimanager:index/objectUserLocalDynamicMapping:ObjectUserLocalDynamicMapping labelname {{_scope.name}}.{{_scope.vdom}}
$ unset “FORTIMANAGER_IMPORT_TABLE”
-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortimanager fortinetdev/terraform-provider-fortimanager
- License
- Notes
- This Pulumi package is based on the
fortimanagerTerraform Provider.
published on Friday, Jul 31, 2026 by fortinetdev