1. Packages
  2. Google Cloud (GCP) Classic
  3. API Docs
  4. privilegedaccessmanager
  5. Settings
Google Cloud v9.6.0 published on Wednesday, Nov 26, 2025 by Pulumi
gcp logo
Google Cloud v9.6.0 published on Wednesday, Nov 26, 2025 by Pulumi

    Settings resource defines the properties, applied directly to the resource or inherited through the hierarchy, to enable consistent, federated use of PAM.

    To get more information about Settings, see:

    Example Usage

    Privileged Access Manager Settings Basic

    import * as pulumi from "@pulumi/pulumi";
    import * as gcp from "@pulumi/gcp";
    
    const project = new gcp.organizations.Project("project", {
        name: "your-project-name",
        projectId: "your-project-id",
        orgId: "1234567",
    });
    const settings = new gcp.privilegedaccessmanager.Settings("settings", {
        location: "global",
        parent: pulumi.interpolate`projects/${project.projectId}`,
        serviceAccountApproverSettings: {
            enabled: false,
        },
        emailNotificationSettings: {
            customNotificationBehavior: {
                requesterNotifications: {
                    entitlementAssigned: "DISABLED",
                    grantActivated: "DISABLED",
                    grantDenied: "ENABLED",
                    grantExpired: "DISABLED",
                    grantEnded: "DISABLED",
                    grantRevoked: "DISABLED",
                    grantExternallyModified: "DISABLED",
                    grantActivationFailed: "DISABLED",
                },
            },
        },
    }, {
        dependsOn: [wait90s],
    });
    
    import pulumi
    import pulumi_gcp as gcp
    
    project = gcp.organizations.Project("project",
        name="your-project-name",
        project_id="your-project-id",
        org_id="1234567")
    settings = gcp.privilegedaccessmanager.Settings("settings",
        location="global",
        parent=project.project_id.apply(lambda project_id: f"projects/{project_id}"),
        service_account_approver_settings={
            "enabled": False,
        },
        email_notification_settings={
            "custom_notification_behavior": {
                "requester_notifications": {
                    "entitlement_assigned": "DISABLED",
                    "grant_activated": "DISABLED",
                    "grant_denied": "ENABLED",
                    "grant_expired": "DISABLED",
                    "grant_ended": "DISABLED",
                    "grant_revoked": "DISABLED",
                    "grant_externally_modified": "DISABLED",
                    "grant_activation_failed": "DISABLED",
                },
            },
        },
        opts = pulumi.ResourceOptions(depends_on=[wait90s]))
    
    package main
    
    import (
    	"fmt"
    
    	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/organizations"
    	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/privilegedaccessmanager"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		project, err := organizations.NewProject(ctx, "project", &organizations.ProjectArgs{
    			Name:      pulumi.String("your-project-name"),
    			ProjectId: pulumi.String("your-project-id"),
    			OrgId:     pulumi.String("1234567"),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = privilegedaccessmanager.NewSettings(ctx, "settings", &privilegedaccessmanager.SettingsArgs{
    			Location: pulumi.String("global"),
    			Parent: project.ProjectId.ApplyT(func(projectId string) (string, error) {
    				return fmt.Sprintf("projects/%v", projectId), nil
    			}).(pulumi.StringOutput),
    			ServiceAccountApproverSettings: &privilegedaccessmanager.SettingsServiceAccountApproverSettingsArgs{
    				Enabled: pulumi.Bool(false),
    			},
    			EmailNotificationSettings: &privilegedaccessmanager.SettingsEmailNotificationSettingsArgs{
    				CustomNotificationBehavior: &privilegedaccessmanager.SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs{
    					RequesterNotifications: &privilegedaccessmanager.SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs{
    						EntitlementAssigned:     pulumi.String("DISABLED"),
    						GrantActivated:          pulumi.String("DISABLED"),
    						GrantDenied:             pulumi.String("ENABLED"),
    						GrantExpired:            pulumi.String("DISABLED"),
    						GrantEnded:              pulumi.String("DISABLED"),
    						GrantRevoked:            pulumi.String("DISABLED"),
    						GrantExternallyModified: pulumi.String("DISABLED"),
    						GrantActivationFailed:   pulumi.String("DISABLED"),
    					},
    				},
    			},
    		}, pulumi.DependsOn([]pulumi.Resource{
    			wait90s,
    		}))
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Gcp = Pulumi.Gcp;
    
    return await Deployment.RunAsync(() => 
    {
        var project = new Gcp.Organizations.Project("project", new()
        {
            Name = "your-project-name",
            ProjectId = "your-project-id",
            OrgId = "1234567",
        });
    
        var settings = new Gcp.PrivilegedAccessManager.Settings("settings", new()
        {
            Location = "global",
            Parent = project.ProjectId.Apply(projectId => $"projects/{projectId}"),
            ServiceAccountApproverSettings = new Gcp.PrivilegedAccessManager.Inputs.SettingsServiceAccountApproverSettingsArgs
            {
                Enabled = false,
            },
            EmailNotificationSettings = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsArgs
            {
                CustomNotificationBehavior = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs
                {
                    RequesterNotifications = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs
                    {
                        EntitlementAssigned = "DISABLED",
                        GrantActivated = "DISABLED",
                        GrantDenied = "ENABLED",
                        GrantExpired = "DISABLED",
                        GrantEnded = "DISABLED",
                        GrantRevoked = "DISABLED",
                        GrantExternallyModified = "DISABLED",
                        GrantActivationFailed = "DISABLED",
                    },
                },
            },
        }, new CustomResourceOptions
        {
            DependsOn =
            {
                wait90s,
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.gcp.organizations.Project;
    import com.pulumi.gcp.organizations.ProjectArgs;
    import com.pulumi.gcp.privilegedaccessmanager.Settings;
    import com.pulumi.gcp.privilegedaccessmanager.SettingsArgs;
    import com.pulumi.gcp.privilegedaccessmanager.inputs.SettingsServiceAccountApproverSettingsArgs;
    import com.pulumi.gcp.privilegedaccessmanager.inputs.SettingsEmailNotificationSettingsArgs;
    import com.pulumi.gcp.privilegedaccessmanager.inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs;
    import com.pulumi.gcp.privilegedaccessmanager.inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs;
    import com.pulumi.resources.CustomResourceOptions;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var project = new Project("project", ProjectArgs.builder()
                .name("your-project-name")
                .projectId("your-project-id")
                .orgId("1234567")
                .build());
    
            var settings = new Settings("settings", SettingsArgs.builder()
                .location("global")
                .parent(project.projectId().applyValue(_projectId -> String.format("projects/%s", _projectId)))
                .serviceAccountApproverSettings(SettingsServiceAccountApproverSettingsArgs.builder()
                    .enabled(false)
                    .build())
                .emailNotificationSettings(SettingsEmailNotificationSettingsArgs.builder()
                    .customNotificationBehavior(SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs.builder()
                        .requesterNotifications(SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs.builder()
                            .entitlementAssigned("DISABLED")
                            .grantActivated("DISABLED")
                            .grantDenied("ENABLED")
                            .grantExpired("DISABLED")
                            .grantEnded("DISABLED")
                            .grantRevoked("DISABLED")
                            .grantExternallyModified("DISABLED")
                            .grantActivationFailed("DISABLED")
                            .build())
                        .build())
                    .build())
                .build(), CustomResourceOptions.builder()
                    .dependsOn(wait90s)
                    .build());
    
        }
    }
    
    resources:
      project:
        type: gcp:organizations:Project
        properties:
          name: your-project-name
          projectId: your-project-id
          orgId: '1234567'
      settings:
        type: gcp:privilegedaccessmanager:Settings
        properties:
          location: global
          parent: projects/${project.projectId}
          serviceAccountApproverSettings:
            enabled: false
          emailNotificationSettings:
            customNotificationBehavior:
              requesterNotifications:
                entitlementAssigned: DISABLED
                grantActivated: DISABLED
                grantDenied: ENABLED
                grantExpired: DISABLED
                grantEnded: DISABLED
                grantRevoked: DISABLED
                grantExternallyModified: DISABLED
                grantActivationFailed: DISABLED
        options:
          dependsOn:
            - ${wait90s}
    

    Create Settings Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Settings(name: string, args: SettingsArgs, opts?: CustomResourceOptions);
    @overload
    def Settings(resource_name: str,
                 args: SettingsArgs,
                 opts: Optional[ResourceOptions] = None)
    
    @overload
    def Settings(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 location: Optional[str] = None,
                 parent: Optional[str] = None,
                 email_notification_settings: Optional[SettingsEmailNotificationSettingsArgs] = None,
                 service_account_approver_settings: Optional[SettingsServiceAccountApproverSettingsArgs] = None)
    func NewSettings(ctx *Context, name string, args SettingsArgs, opts ...ResourceOption) (*Settings, error)
    public Settings(string name, SettingsArgs args, CustomResourceOptions? opts = null)
    public Settings(String name, SettingsArgs args)
    public Settings(String name, SettingsArgs args, CustomResourceOptions options)
    
    type: gcp:privilegedaccessmanager:Settings
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args SettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SettingsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SettingsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SettingsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var gcpSettingsResource = new Gcp.PrivilegedAccessManager.Settings("gcpSettingsResource", new()
    {
        Location = "string",
        Parent = "string",
        EmailNotificationSettings = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsArgs
        {
            CustomNotificationBehavior = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs
            {
                AdminNotifications = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotificationsArgs
                {
                    GrantActivated = "string",
                    GrantActivationFailed = "string",
                    GrantEnded = "string",
                    GrantExternallyModified = "string",
                },
                ApproverNotifications = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotificationsArgs
                {
                    PendingApproval = "string",
                },
                RequesterNotifications = new Gcp.PrivilegedAccessManager.Inputs.SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs
                {
                    EntitlementAssigned = "string",
                    GrantActivated = "string",
                    GrantActivationFailed = "string",
                    GrantDenied = "string",
                    GrantEnded = "string",
                    GrantExpired = "string",
                    GrantExternallyModified = "string",
                    GrantRevoked = "string",
                },
            },
            DisableAllNotifications = null,
        },
        ServiceAccountApproverSettings = new Gcp.PrivilegedAccessManager.Inputs.SettingsServiceAccountApproverSettingsArgs
        {
            Enabled = false,
        },
    });
    
    example, err := privilegedaccessmanager.NewSettings(ctx, "gcpSettingsResource", &privilegedaccessmanager.SettingsArgs{
    	Location: pulumi.String("string"),
    	Parent:   pulumi.String("string"),
    	EmailNotificationSettings: &privilegedaccessmanager.SettingsEmailNotificationSettingsArgs{
    		CustomNotificationBehavior: &privilegedaccessmanager.SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs{
    			AdminNotifications: &privilegedaccessmanager.SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotificationsArgs{
    				GrantActivated:          pulumi.String("string"),
    				GrantActivationFailed:   pulumi.String("string"),
    				GrantEnded:              pulumi.String("string"),
    				GrantExternallyModified: pulumi.String("string"),
    			},
    			ApproverNotifications: &privilegedaccessmanager.SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotificationsArgs{
    				PendingApproval: pulumi.String("string"),
    			},
    			RequesterNotifications: &privilegedaccessmanager.SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs{
    				EntitlementAssigned:     pulumi.String("string"),
    				GrantActivated:          pulumi.String("string"),
    				GrantActivationFailed:   pulumi.String("string"),
    				GrantDenied:             pulumi.String("string"),
    				GrantEnded:              pulumi.String("string"),
    				GrantExpired:            pulumi.String("string"),
    				GrantExternallyModified: pulumi.String("string"),
    				GrantRevoked:            pulumi.String("string"),
    			},
    		},
    		DisableAllNotifications: &privilegedaccessmanager.SettingsEmailNotificationSettingsDisableAllNotificationsArgs{},
    	},
    	ServiceAccountApproverSettings: &privilegedaccessmanager.SettingsServiceAccountApproverSettingsArgs{
    		Enabled: pulumi.Bool(false),
    	},
    })
    
    var gcpSettingsResource = new com.pulumi.gcp.privilegedaccessmanager.Settings("gcpSettingsResource", com.pulumi.gcp.privilegedaccessmanager.SettingsArgs.builder()
        .location("string")
        .parent("string")
        .emailNotificationSettings(SettingsEmailNotificationSettingsArgs.builder()
            .customNotificationBehavior(SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs.builder()
                .adminNotifications(SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotificationsArgs.builder()
                    .grantActivated("string")
                    .grantActivationFailed("string")
                    .grantEnded("string")
                    .grantExternallyModified("string")
                    .build())
                .approverNotifications(SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotificationsArgs.builder()
                    .pendingApproval("string")
                    .build())
                .requesterNotifications(SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs.builder()
                    .entitlementAssigned("string")
                    .grantActivated("string")
                    .grantActivationFailed("string")
                    .grantDenied("string")
                    .grantEnded("string")
                    .grantExpired("string")
                    .grantExternallyModified("string")
                    .grantRevoked("string")
                    .build())
                .build())
            .disableAllNotifications(SettingsEmailNotificationSettingsDisableAllNotificationsArgs.builder()
                .build())
            .build())
        .serviceAccountApproverSettings(SettingsServiceAccountApproverSettingsArgs.builder()
            .enabled(false)
            .build())
        .build());
    
    gcp_settings_resource = gcp.privilegedaccessmanager.Settings("gcpSettingsResource",
        location="string",
        parent="string",
        email_notification_settings={
            "custom_notification_behavior": {
                "admin_notifications": {
                    "grant_activated": "string",
                    "grant_activation_failed": "string",
                    "grant_ended": "string",
                    "grant_externally_modified": "string",
                },
                "approver_notifications": {
                    "pending_approval": "string",
                },
                "requester_notifications": {
                    "entitlement_assigned": "string",
                    "grant_activated": "string",
                    "grant_activation_failed": "string",
                    "grant_denied": "string",
                    "grant_ended": "string",
                    "grant_expired": "string",
                    "grant_externally_modified": "string",
                    "grant_revoked": "string",
                },
            },
            "disable_all_notifications": {},
        },
        service_account_approver_settings={
            "enabled": False,
        })
    
    const gcpSettingsResource = new gcp.privilegedaccessmanager.Settings("gcpSettingsResource", {
        location: "string",
        parent: "string",
        emailNotificationSettings: {
            customNotificationBehavior: {
                adminNotifications: {
                    grantActivated: "string",
                    grantActivationFailed: "string",
                    grantEnded: "string",
                    grantExternallyModified: "string",
                },
                approverNotifications: {
                    pendingApproval: "string",
                },
                requesterNotifications: {
                    entitlementAssigned: "string",
                    grantActivated: "string",
                    grantActivationFailed: "string",
                    grantDenied: "string",
                    grantEnded: "string",
                    grantExpired: "string",
                    grantExternallyModified: "string",
                    grantRevoked: "string",
                },
            },
            disableAllNotifications: {},
        },
        serviceAccountApproverSettings: {
            enabled: false,
        },
    });
    
    type: gcp:privilegedaccessmanager:Settings
    properties:
        emailNotificationSettings:
            customNotificationBehavior:
                adminNotifications:
                    grantActivated: string
                    grantActivationFailed: string
                    grantEnded: string
                    grantExternallyModified: string
                approverNotifications:
                    pendingApproval: string
                requesterNotifications:
                    entitlementAssigned: string
                    grantActivated: string
                    grantActivationFailed: string
                    grantDenied: string
                    grantEnded: string
                    grantExpired: string
                    grantExternallyModified: string
                    grantRevoked: string
            disableAllNotifications: {}
        location: string
        parent: string
        serviceAccountApproverSettings:
            enabled: false
    

    Settings Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Settings resource accepts the following input properties:

    Location string
    The region of the PAM settings resource.
    Parent string
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    EmailNotificationSettings SettingsEmailNotificationSettings
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    ServiceAccountApproverSettings SettingsServiceAccountApproverSettings
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    Location string
    The region of the PAM settings resource.
    Parent string
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    EmailNotificationSettings SettingsEmailNotificationSettingsArgs
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    ServiceAccountApproverSettings SettingsServiceAccountApproverSettingsArgs
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    location String
    The region of the PAM settings resource.
    parent String
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    emailNotificationSettings SettingsEmailNotificationSettings
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    serviceAccountApproverSettings SettingsServiceAccountApproverSettings
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    location string
    The region of the PAM settings resource.
    parent string
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    emailNotificationSettings SettingsEmailNotificationSettings
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    serviceAccountApproverSettings SettingsServiceAccountApproverSettings
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    location str
    The region of the PAM settings resource.
    parent str
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    email_notification_settings SettingsEmailNotificationSettingsArgs
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    service_account_approver_settings SettingsServiceAccountApproverSettingsArgs
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    location String
    The region of the PAM settings resource.
    parent String
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    emailNotificationSettings Property Map
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    serviceAccountApproverSettings Property Map
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Settings resource produces the following output properties:

    CreateTime string
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    Etag string
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    UpdateTime string
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    CreateTime string
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    Etag string
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    UpdateTime string
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    createTime String
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    etag String
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    updateTime String
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    createTime string
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    etag string
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    updateTime string
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    create_time str
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    etag str
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    update_time str
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    createTime String
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    etag String
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    updateTime String
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

    Look up Existing Settings Resource

    Get an existing Settings resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SettingsState, opts?: CustomResourceOptions): Settings
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            create_time: Optional[str] = None,
            email_notification_settings: Optional[SettingsEmailNotificationSettingsArgs] = None,
            etag: Optional[str] = None,
            location: Optional[str] = None,
            name: Optional[str] = None,
            parent: Optional[str] = None,
            service_account_approver_settings: Optional[SettingsServiceAccountApproverSettingsArgs] = None,
            update_time: Optional[str] = None) -> Settings
    func GetSettings(ctx *Context, name string, id IDInput, state *SettingsState, opts ...ResourceOption) (*Settings, error)
    public static Settings Get(string name, Input<string> id, SettingsState? state, CustomResourceOptions? opts = null)
    public static Settings get(String name, Output<String> id, SettingsState state, CustomResourceOptions options)
    resources:  _:    type: gcp:privilegedaccessmanager:Settings    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CreateTime string
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    EmailNotificationSettings SettingsEmailNotificationSettings
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    Etag string
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    Location string
    The region of the PAM settings resource.
    Name string
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    Parent string
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    ServiceAccountApproverSettings SettingsServiceAccountApproverSettings
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    UpdateTime string
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    CreateTime string
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    EmailNotificationSettings SettingsEmailNotificationSettingsArgs
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    Etag string
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    Location string
    The region of the PAM settings resource.
    Name string
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    Parent string
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    ServiceAccountApproverSettings SettingsServiceAccountApproverSettingsArgs
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    UpdateTime string
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    createTime String
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    emailNotificationSettings SettingsEmailNotificationSettings
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    etag String
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    location String
    The region of the PAM settings resource.
    name String
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    parent String
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    serviceAccountApproverSettings SettingsServiceAccountApproverSettings
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    updateTime String
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    createTime string
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    emailNotificationSettings SettingsEmailNotificationSettings
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    etag string
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    location string
    The region of the PAM settings resource.
    name string
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    parent string
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    serviceAccountApproverSettings SettingsServiceAccountApproverSettings
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    updateTime string
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    create_time str
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    email_notification_settings SettingsEmailNotificationSettingsArgs
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    etag str
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    location str
    The region of the PAM settings resource.
    name str
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    parent str
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    service_account_approver_settings SettingsServiceAccountApproverSettingsArgs
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    update_time str
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    createTime String
    Create timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
    emailNotificationSettings Property Map
    EmailNotificationSettings defines node-wide email notification preferences for various PAM events. Structure is documented below.
    etag String
    Fingerprint for optimistic concurrency returned in the response of GetSettings. Must be provided in the requests to UpdateSettings. If the value provided does not match the value known to the server, ABORTED will be thrown, and the client should retry the read-modify-write cycle.
    location String
    The region of the PAM settings resource.
    name String
    Name of the settings resource. Possible formats: projects/{project-id|project-number}/locations/{location}/settings folders/{folder-number}/locations/{location}/settings organizations/{organization-number}/locations/{location}/settings
    parent String
    Format: projects/{project-id|project-number} or organizations/{organization-number} or folders/{folder-number}
    serviceAccountApproverSettings Property Map
    This controls the node-level settings for allowing service accounts as approvers. Structure is documented below.
    updateTime String
    Update timestamp. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

    Supporting Types

    SettingsEmailNotificationSettings, SettingsEmailNotificationSettingsArgs

    CustomNotificationBehavior SettingsEmailNotificationSettingsCustomNotificationBehavior
    CustomNotificationBehavior provides granular control over email notification delivery. Allows admins to selectively enable/disable notifications for specific events and specific personas. Structure is documented below.
    DisableAllNotifications SettingsEmailNotificationSettingsDisableAllNotifications
    This option indicates that all email notifications are disabled.
    CustomNotificationBehavior SettingsEmailNotificationSettingsCustomNotificationBehavior
    CustomNotificationBehavior provides granular control over email notification delivery. Allows admins to selectively enable/disable notifications for specific events and specific personas. Structure is documented below.
    DisableAllNotifications SettingsEmailNotificationSettingsDisableAllNotifications
    This option indicates that all email notifications are disabled.
    customNotificationBehavior SettingsEmailNotificationSettingsCustomNotificationBehavior
    CustomNotificationBehavior provides granular control over email notification delivery. Allows admins to selectively enable/disable notifications for specific events and specific personas. Structure is documented below.
    disableAllNotifications SettingsEmailNotificationSettingsDisableAllNotifications
    This option indicates that all email notifications are disabled.
    customNotificationBehavior SettingsEmailNotificationSettingsCustomNotificationBehavior
    CustomNotificationBehavior provides granular control over email notification delivery. Allows admins to selectively enable/disable notifications for specific events and specific personas. Structure is documented below.
    disableAllNotifications SettingsEmailNotificationSettingsDisableAllNotifications
    This option indicates that all email notifications are disabled.
    custom_notification_behavior SettingsEmailNotificationSettingsCustomNotificationBehavior
    CustomNotificationBehavior provides granular control over email notification delivery. Allows admins to selectively enable/disable notifications for specific events and specific personas. Structure is documented below.
    disable_all_notifications SettingsEmailNotificationSettingsDisableAllNotifications
    This option indicates that all email notifications are disabled.
    customNotificationBehavior Property Map
    CustomNotificationBehavior provides granular control over email notification delivery. Allows admins to selectively enable/disable notifications for specific events and specific personas. Structure is documented below.
    disableAllNotifications Property Map
    This option indicates that all email notifications are disabled.

    SettingsEmailNotificationSettingsCustomNotificationBehavior, SettingsEmailNotificationSettingsCustomNotificationBehaviorArgs

    AdminNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotifications
    Email notifications specific to Requesters. Structure is documented below.
    ApproverNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotifications
    Email notifications specific to Approvers. Structure is documented below.
    RequesterNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotifications
    Email notifications specific to Requesters. Structure is documented below.
    AdminNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotifications
    Email notifications specific to Requesters. Structure is documented below.
    ApproverNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotifications
    Email notifications specific to Approvers. Structure is documented below.
    RequesterNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotifications
    Email notifications specific to Requesters. Structure is documented below.
    adminNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotifications
    Email notifications specific to Requesters. Structure is documented below.
    approverNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotifications
    Email notifications specific to Approvers. Structure is documented below.
    requesterNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotifications
    Email notifications specific to Requesters. Structure is documented below.
    adminNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotifications
    Email notifications specific to Requesters. Structure is documented below.
    approverNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotifications
    Email notifications specific to Approvers. Structure is documented below.
    requesterNotifications SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotifications
    Email notifications specific to Requesters. Structure is documented below.
    admin_notifications SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotifications
    Email notifications specific to Requesters. Structure is documented below.
    approver_notifications SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotifications
    Email notifications specific to Approvers. Structure is documented below.
    requester_notifications SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotifications
    Email notifications specific to Requesters. Structure is documented below.
    adminNotifications Property Map
    Email notifications specific to Requesters. Structure is documented below.
    approverNotifications Property Map
    Email notifications specific to Approvers. Structure is documented below.
    requesterNotifications Property Map
    Email notifications specific to Requesters. Structure is documented below.

    SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotifications, SettingsEmailNotificationSettingsCustomNotificationBehaviorAdminNotificationsArgs

    GrantActivated string
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivationFailed string
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantEnded string
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantExternallyModified string
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivated string
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivationFailed string
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantEnded string
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantExternallyModified string
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivated String
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivationFailed String
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantEnded String
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExternallyModified String
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivated string
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivationFailed string
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantEnded string
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExternallyModified string
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_activated str
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_activation_failed str
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_ended str
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_externally_modified str
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivated String
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivationFailed String
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantEnded String
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExternallyModified String
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.

    SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotifications, SettingsEmailNotificationSettingsCustomNotificationBehaviorApproverNotificationsArgs

    PendingApproval string
    Notification mode for pending approval. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    PendingApproval string
    Notification mode for pending approval. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    pendingApproval String
    Notification mode for pending approval. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    pendingApproval string
    Notification mode for pending approval. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    pending_approval str
    Notification mode for pending approval. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    pendingApproval String
    Notification mode for pending approval. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.

    SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotifications, SettingsEmailNotificationSettingsCustomNotificationBehaviorRequesterNotificationsArgs

    EntitlementAssigned string
    Notification mode for entitlement assigned. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivated string
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivationFailed string
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantDenied string
    Notification mode for grant denied. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantEnded string
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantExpired string
    Notification mode for grant expired. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantExternallyModified string
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantRevoked string
    Notification mode for grant revoked. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    EntitlementAssigned string
    Notification mode for entitlement assigned. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivated string
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantActivationFailed string
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantDenied string
    Notification mode for grant denied. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantEnded string
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantExpired string
    Notification mode for grant expired. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantExternallyModified string
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    GrantRevoked string
    Notification mode for grant revoked. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    entitlementAssigned String
    Notification mode for entitlement assigned. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivated String
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivationFailed String
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantDenied String
    Notification mode for grant denied. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantEnded String
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExpired String
    Notification mode for grant expired. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExternallyModified String
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantRevoked String
    Notification mode for grant revoked. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    entitlementAssigned string
    Notification mode for entitlement assigned. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivated string
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivationFailed string
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantDenied string
    Notification mode for grant denied. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantEnded string
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExpired string
    Notification mode for grant expired. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExternallyModified string
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantRevoked string
    Notification mode for grant revoked. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    entitlement_assigned str
    Notification mode for entitlement assigned. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_activated str
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_activation_failed str
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_denied str
    Notification mode for grant denied. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_ended str
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_expired str
    Notification mode for grant expired. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_externally_modified str
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grant_revoked str
    Notification mode for grant revoked. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    entitlementAssigned String
    Notification mode for entitlement assigned. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivated String
    Notification mode for grant activated. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantActivationFailed String
    Notification mode for grant activation failed. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantDenied String
    Notification mode for grant denied. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantEnded String
    Notification mode for grant ended. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExpired String
    Notification mode for grant expired. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantExternallyModified String
    Notification mode for grant externally modified. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.
    grantRevoked String
    Notification mode for grant revoked. Possible values are: NOTIFICATION_MODE_UNSPECIFIED, ENABLED, DISABLED.

    SettingsServiceAccountApproverSettings, SettingsServiceAccountApproverSettingsArgs

    Enabled bool
    Indicates whether service account is allowed to grant approvals.
    Enabled bool
    Indicates whether service account is allowed to grant approvals.
    enabled Boolean
    Indicates whether service account is allowed to grant approvals.
    enabled boolean
    Indicates whether service account is allowed to grant approvals.
    enabled bool
    Indicates whether service account is allowed to grant approvals.
    enabled Boolean
    Indicates whether service account is allowed to grant approvals.

    Import

    Settings can be imported using any of these accepted formats:

    • {{parent}}/locations/{{location}}/settings

    When using the pulumi import command, Settings can be imported using one of the formats above. For example:

    $ pulumi import gcp:privilegedaccessmanager/settings:Settings default {{parent}}/locations/{{location}}/settings
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Google Cloud v9.6.0 published on Wednesday, Nov 26, 2025 by Pulumi
      Meet Neo: Your AI Platform Teammate