1. Packages
  2. Ibm Provider
  3. API Docs
  4. IamAccessGroupTemplateVersion
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud

ibm.IamAccessGroupTemplateVersion

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud

    Create, update, and delete iam_access_group_template_versions with this resource.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as ibm from "@pulumi/ibm";
    
    const iamAccessGroupTemplateVersionInstance = new ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance", {
        templateId: ibm_iam_access_group_template.iam_access_group_template_v1.template_id,
        description: "This access group template allows admin access to all IAM platform services in the account.",
        group: {
            name: "name",
            description: "description",
            members: {
                users: ["users"],
                services: ["services"],
                actionControls: {
                    add: true,
                    remove: true,
                },
            },
            assertions: {
                rules: [{
                    name: "name",
                    expiration: 1,
                    realmName: "realm_name",
                    conditions: [{
                        claim: "claim",
                        operator: "operator",
                        value: "value",
                    }],
                    actionControls: {
                        remove: true,
                    },
                }],
                actionControls: {
                    add: true,
                    remove: true,
                },
            },
            actionControls: {
                access: {
                    add: true,
                },
            },
        },
        policyTemplateReferences: [{
            id: "id",
            version: "version",
        }],
    });
    
    import pulumi
    import pulumi_ibm as ibm
    
    iam_access_group_template_version_instance = ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance",
        template_id=ibm_iam_access_group_template["iam_access_group_template_v1"]["template_id"],
        description="This access group template allows admin access to all IAM platform services in the account.",
        group={
            "name": "name",
            "description": "description",
            "members": {
                "users": ["users"],
                "services": ["services"],
                "action_controls": {
                    "add": True,
                    "remove": True,
                },
            },
            "assertions": {
                "rules": [{
                    "name": "name",
                    "expiration": 1,
                    "realm_name": "realm_name",
                    "conditions": [{
                        "claim": "claim",
                        "operator": "operator",
                        "value": "value",
                    }],
                    "action_controls": {
                        "remove": True,
                    },
                }],
                "action_controls": {
                    "add": True,
                    "remove": True,
                },
            },
            "action_controls": {
                "access": {
                    "add": True,
                },
            },
        },
        policy_template_references=[{
            "id": "id",
            "version": "version",
        }])
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := ibm.NewIamAccessGroupTemplateVersion(ctx, "iamAccessGroupTemplateVersionInstance", &ibm.IamAccessGroupTemplateVersionArgs{
    			TemplateId:  pulumi.Any(ibm_iam_access_group_template.Iam_access_group_template_v1.Template_id),
    			Description: pulumi.String("This access group template allows admin access to all IAM platform services in the account."),
    			Group: &ibm.IamAccessGroupTemplateVersionGroupArgs{
    				Name:        pulumi.String("name"),
    				Description: pulumi.String("description"),
    				Members: &ibm.IamAccessGroupTemplateVersionGroupMembersArgs{
    					Users: pulumi.StringArray{
    						pulumi.String("users"),
    					},
    					Services: pulumi.StringArray{
    						pulumi.String("services"),
    					},
    					ActionControls: &ibm.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs{
    						Add:    pulumi.Bool(true),
    						Remove: pulumi.Bool(true),
    					},
    				},
    				Assertions: &ibm.IamAccessGroupTemplateVersionGroupAssertionsArgs{
    					Rules: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArray{
    						&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs{
    							Name:       pulumi.String("name"),
    							Expiration: pulumi.Float64(1),
    							RealmName:  pulumi.String("realm_name"),
    							Conditions: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArray{
    								&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs{
    									Claim:    pulumi.String("claim"),
    									Operator: pulumi.String("operator"),
    									Value:    pulumi.String("value"),
    								},
    							},
    							ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs{
    								Remove: pulumi.Bool(true),
    							},
    						},
    					},
    					ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs{
    						Add:    pulumi.Bool(true),
    						Remove: pulumi.Bool(true),
    					},
    				},
    				ActionControls: &ibm.IamAccessGroupTemplateVersionGroupActionControlsArgs{
    					Access: &ibm.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs{
    						Add: pulumi.Bool(true),
    					},
    				},
    			},
    			PolicyTemplateReferences: ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArray{
    				&ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs{
    					Id:      pulumi.String("id"),
    					Version: pulumi.String("version"),
    				},
    			},
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ibm = Pulumi.Ibm;
    
    return await Deployment.RunAsync(() => 
    {
        var iamAccessGroupTemplateVersionInstance = new Ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance", new()
        {
            TemplateId = ibm_iam_access_group_template.Iam_access_group_template_v1.Template_id,
            Description = "This access group template allows admin access to all IAM platform services in the account.",
            Group = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupArgs
            {
                Name = "name",
                Description = "description",
                Members = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersArgs
                {
                    Users = new[]
                    {
                        "users",
                    },
                    Services = new[]
                    {
                        "services",
                    },
                    ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs
                    {
                        Add = true,
                        Remove = true,
                    },
                },
                Assertions = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsArgs
                {
                    Rules = new[]
                    {
                        new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs
                        {
                            Name = "name",
                            Expiration = 1,
                            RealmName = "realm_name",
                            Conditions = new[]
                            {
                                new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs
                                {
                                    Claim = "claim",
                                    Operator = "operator",
                                    Value = "value",
                                },
                            },
                            ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs
                            {
                                Remove = true,
                            },
                        },
                    },
                    ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs
                    {
                        Add = true,
                        Remove = true,
                    },
                },
                ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsArgs
                {
                    Access = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs
                    {
                        Add = true,
                    },
                },
            },
            PolicyTemplateReferences = new[]
            {
                new Ibm.Inputs.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
                {
                    Id = "id",
                    Version = "version",
                },
            },
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ibm.IamAccessGroupTemplateVersion;
    import com.pulumi.ibm.IamAccessGroupTemplateVersionArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupMembersArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupAssertionsArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupActionControlsArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs;
    import com.pulumi.ibm.inputs.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var iamAccessGroupTemplateVersionInstance = new IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionInstance", IamAccessGroupTemplateVersionArgs.builder()
                .templateId(ibm_iam_access_group_template.iam_access_group_template_v1().template_id())
                .description("This access group template allows admin access to all IAM platform services in the account.")
                .group(IamAccessGroupTemplateVersionGroupArgs.builder()
                    .name("name")
                    .description("description")
                    .members(IamAccessGroupTemplateVersionGroupMembersArgs.builder()
                        .users("users")
                        .services("services")
                        .actionControls(IamAccessGroupTemplateVersionGroupMembersActionControlsArgs.builder()
                            .add(true)
                            .remove(true)
                            .build())
                        .build())
                    .assertions(IamAccessGroupTemplateVersionGroupAssertionsArgs.builder()
                        .rules(IamAccessGroupTemplateVersionGroupAssertionsRuleArgs.builder()
                            .name("name")
                            .expiration(1)
                            .realmName("realm_name")
                            .conditions(IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs.builder()
                                .claim("claim")
                                .operator("operator")
                                .value("value")
                                .build())
                            .actionControls(IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs.builder()
                                .remove(true)
                                .build())
                            .build())
                        .actionControls(IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs.builder()
                            .add(true)
                            .remove(true)
                            .build())
                        .build())
                    .actionControls(IamAccessGroupTemplateVersionGroupActionControlsArgs.builder()
                        .access(IamAccessGroupTemplateVersionGroupActionControlsAccessArgs.builder()
                            .add(true)
                            .build())
                        .build())
                    .build())
                .policyTemplateReferences(IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs.builder()
                    .id("id")
                    .version("version")
                    .build())
                .build());
    
        }
    }
    
    resources:
      iamAccessGroupTemplateVersionInstance:
        type: ibm:IamAccessGroupTemplateVersion
        properties:
          templateId: ${ibm_iam_access_group_template.iam_access_group_template_v1.template_id}
          description: This access group template allows admin access to all IAM platform services in the account.
          group:
            name: name
            description: description
            members:
              users:
                - users
              services:
                - services
              actionControls:
                add: true
                remove: true
            assertions:
              rules:
                - name: name
                  expiration: 1
                  realmName: realm_name
                  conditions:
                    - claim: claim
                      operator: operator
                      value: value
                  actionControls:
                    remove: true
              actionControls:
                add: true
                remove: true
            actionControls:
              access:
                add: true
          policyTemplateReferences:
            - id: id
              version: version
    

    Create IamAccessGroupTemplateVersion Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IamAccessGroupTemplateVersion(name: string, args: IamAccessGroupTemplateVersionArgs, opts?: CustomResourceOptions);
    @overload
    def IamAccessGroupTemplateVersion(resource_name: str,
                                      args: IamAccessGroupTemplateVersionArgs,
                                      opts: Optional[ResourceOptions] = None)
    
    @overload
    def IamAccessGroupTemplateVersion(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      template_id: Optional[str] = None,
                                      committed: Optional[bool] = None,
                                      description: Optional[str] = None,
                                      group: Optional[IamAccessGroupTemplateVersionGroupArgs] = None,
                                      iam_access_group_template_version_id: Optional[str] = None,
                                      name: Optional[str] = None,
                                      policy_template_references: Optional[Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]] = None,
                                      transaction_id: Optional[str] = None)
    func NewIamAccessGroupTemplateVersion(ctx *Context, name string, args IamAccessGroupTemplateVersionArgs, opts ...ResourceOption) (*IamAccessGroupTemplateVersion, error)
    public IamAccessGroupTemplateVersion(string name, IamAccessGroupTemplateVersionArgs args, CustomResourceOptions? opts = null)
    public IamAccessGroupTemplateVersion(String name, IamAccessGroupTemplateVersionArgs args)
    public IamAccessGroupTemplateVersion(String name, IamAccessGroupTemplateVersionArgs args, CustomResourceOptions options)
    
    type: ibm:IamAccessGroupTemplateVersion
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args IamAccessGroupTemplateVersionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IamAccessGroupTemplateVersionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IamAccessGroupTemplateVersionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IamAccessGroupTemplateVersionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IamAccessGroupTemplateVersionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iamAccessGroupTemplateVersionResource = new Ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource", new()
    {
        TemplateId = "string",
        Committed = false,
        Description = "string",
        Group = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupArgs
        {
            Name = "string",
            ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsArgs
            {
                Access = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs
                {
                    Add = false,
                },
            },
            Assertions = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsArgs
            {
                ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs
                {
                    Add = false,
                    Remove = false,
                },
                Rules = new[]
                {
                    new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs
                    {
                        ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs
                        {
                            Remove = false,
                        },
                        Conditions = new[]
                        {
                            new Ibm.Inputs.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs
                            {
                                Claim = "string",
                                Operator = "string",
                                Value = "string",
                            },
                        },
                        Expiration = 0,
                        Name = "string",
                        RealmName = "string",
                    },
                },
            },
            Description = "string",
            Members = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersArgs
            {
                ActionControls = new Ibm.Inputs.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs
                {
                    Add = false,
                    Remove = false,
                },
                Services = new[]
                {
                    "string",
                },
                Users = new[]
                {
                    "string",
                },
            },
        },
        IamAccessGroupTemplateVersionId = "string",
        Name = "string",
        PolicyTemplateReferences = new[]
        {
            new Ibm.Inputs.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
            {
                Id = "string",
                Version = "string",
            },
        },
        TransactionId = "string",
    });
    
    example, err := ibm.NewIamAccessGroupTemplateVersion(ctx, "iamAccessGroupTemplateVersionResource", &ibm.IamAccessGroupTemplateVersionArgs{
    	TemplateId:  pulumi.String("string"),
    	Committed:   pulumi.Bool(false),
    	Description: pulumi.String("string"),
    	Group: &ibm.IamAccessGroupTemplateVersionGroupArgs{
    		Name: pulumi.String("string"),
    		ActionControls: &ibm.IamAccessGroupTemplateVersionGroupActionControlsArgs{
    			Access: &ibm.IamAccessGroupTemplateVersionGroupActionControlsAccessArgs{
    				Add: pulumi.Bool(false),
    			},
    		},
    		Assertions: &ibm.IamAccessGroupTemplateVersionGroupAssertionsArgs{
    			ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs{
    				Add:    pulumi.Bool(false),
    				Remove: pulumi.Bool(false),
    			},
    			Rules: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArray{
    				&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleArgs{
    					ActionControls: &ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs{
    						Remove: pulumi.Bool(false),
    					},
    					Conditions: ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArray{
    						&ibm.IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs{
    							Claim:    pulumi.String("string"),
    							Operator: pulumi.String("string"),
    							Value:    pulumi.String("string"),
    						},
    					},
    					Expiration: pulumi.Float64(0),
    					Name:       pulumi.String("string"),
    					RealmName:  pulumi.String("string"),
    				},
    			},
    		},
    		Description: pulumi.String("string"),
    		Members: &ibm.IamAccessGroupTemplateVersionGroupMembersArgs{
    			ActionControls: &ibm.IamAccessGroupTemplateVersionGroupMembersActionControlsArgs{
    				Add:    pulumi.Bool(false),
    				Remove: pulumi.Bool(false),
    			},
    			Services: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    			Users: pulumi.StringArray{
    				pulumi.String("string"),
    			},
    		},
    	},
    	IamAccessGroupTemplateVersionId: pulumi.String("string"),
    	Name:                            pulumi.String("string"),
    	PolicyTemplateReferences: ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArray{
    		&ibm.IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs{
    			Id:      pulumi.String("string"),
    			Version: pulumi.String("string"),
    		},
    	},
    	TransactionId: pulumi.String("string"),
    })
    
    var iamAccessGroupTemplateVersionResource = new IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource", IamAccessGroupTemplateVersionArgs.builder()
        .templateId("string")
        .committed(false)
        .description("string")
        .group(IamAccessGroupTemplateVersionGroupArgs.builder()
            .name("string")
            .actionControls(IamAccessGroupTemplateVersionGroupActionControlsArgs.builder()
                .access(IamAccessGroupTemplateVersionGroupActionControlsAccessArgs.builder()
                    .add(false)
                    .build())
                .build())
            .assertions(IamAccessGroupTemplateVersionGroupAssertionsArgs.builder()
                .actionControls(IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs.builder()
                    .add(false)
                    .remove(false)
                    .build())
                .rules(IamAccessGroupTemplateVersionGroupAssertionsRuleArgs.builder()
                    .actionControls(IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs.builder()
                        .remove(false)
                        .build())
                    .conditions(IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs.builder()
                        .claim("string")
                        .operator("string")
                        .value("string")
                        .build())
                    .expiration(0)
                    .name("string")
                    .realmName("string")
                    .build())
                .build())
            .description("string")
            .members(IamAccessGroupTemplateVersionGroupMembersArgs.builder()
                .actionControls(IamAccessGroupTemplateVersionGroupMembersActionControlsArgs.builder()
                    .add(false)
                    .remove(false)
                    .build())
                .services("string")
                .users("string")
                .build())
            .build())
        .iamAccessGroupTemplateVersionId("string")
        .name("string")
        .policyTemplateReferences(IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs.builder()
            .id("string")
            .version("string")
            .build())
        .transactionId("string")
        .build());
    
    iam_access_group_template_version_resource = ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource",
        template_id="string",
        committed=False,
        description="string",
        group={
            "name": "string",
            "action_controls": {
                "access": {
                    "add": False,
                },
            },
            "assertions": {
                "action_controls": {
                    "add": False,
                    "remove": False,
                },
                "rules": [{
                    "action_controls": {
                        "remove": False,
                    },
                    "conditions": [{
                        "claim": "string",
                        "operator": "string",
                        "value": "string",
                    }],
                    "expiration": 0,
                    "name": "string",
                    "realm_name": "string",
                }],
            },
            "description": "string",
            "members": {
                "action_controls": {
                    "add": False,
                    "remove": False,
                },
                "services": ["string"],
                "users": ["string"],
            },
        },
        iam_access_group_template_version_id="string",
        name="string",
        policy_template_references=[{
            "id": "string",
            "version": "string",
        }],
        transaction_id="string")
    
    const iamAccessGroupTemplateVersionResource = new ibm.IamAccessGroupTemplateVersion("iamAccessGroupTemplateVersionResource", {
        templateId: "string",
        committed: false,
        description: "string",
        group: {
            name: "string",
            actionControls: {
                access: {
                    add: false,
                },
            },
            assertions: {
                actionControls: {
                    add: false,
                    remove: false,
                },
                rules: [{
                    actionControls: {
                        remove: false,
                    },
                    conditions: [{
                        claim: "string",
                        operator: "string",
                        value: "string",
                    }],
                    expiration: 0,
                    name: "string",
                    realmName: "string",
                }],
            },
            description: "string",
            members: {
                actionControls: {
                    add: false,
                    remove: false,
                },
                services: ["string"],
                users: ["string"],
            },
        },
        iamAccessGroupTemplateVersionId: "string",
        name: "string",
        policyTemplateReferences: [{
            id: "string",
            version: "string",
        }],
        transactionId: "string",
    });
    
    type: ibm:IamAccessGroupTemplateVersion
    properties:
        committed: false
        description: string
        group:
            actionControls:
                access:
                    add: false
            assertions:
                actionControls:
                    add: false
                    remove: false
                rules:
                    - actionControls:
                        remove: false
                      conditions:
                        - claim: string
                          operator: string
                          value: string
                      expiration: 0
                      name: string
                      realmName: string
            description: string
            members:
                actionControls:
                    add: false
                    remove: false
                services:
                    - string
                users:
                    - string
            name: string
        iamAccessGroupTemplateVersionId: string
        name: string
        policyTemplateReferences:
            - id: string
              version: string
        templateId: string
        transactionId: string
    

    IamAccessGroupTemplateVersion Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IamAccessGroupTemplateVersion resource accepts the following input properties:

    TemplateId string
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Committed bool
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    Description string
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    Group IamAccessGroupTemplateVersionGroup
    Access Group Component. Nested schema for group:
    IamAccessGroupTemplateVersionId string
    (String) Policy template ID.
    Name string
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    PolicyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    TransactionId string
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    TemplateId string
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Committed bool
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    Description string
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    Group IamAccessGroupTemplateVersionGroupArgs
    Access Group Component. Nested schema for group:
    IamAccessGroupTemplateVersionId string
    (String) Policy template ID.
    Name string
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    PolicyTemplateReferences []IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    TransactionId string
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    templateId String
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    committed Boolean
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    description String
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group IamAccessGroupTemplateVersionGroup
    Access Group Component. Nested schema for group:
    iamAccessGroupTemplateVersionId String
    (String) Policy template ID.
    name String
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    transactionId String
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    templateId string
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    committed boolean
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    description string
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group IamAccessGroupTemplateVersionGroup
    Access Group Component. Nested schema for group:
    iamAccessGroupTemplateVersionId string
    (String) Policy template ID.
    name string
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policyTemplateReferences IamAccessGroupTemplateVersionPolicyTemplateReference[]
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    transactionId string
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    template_id str
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    committed bool
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    description str
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group IamAccessGroupTemplateVersionGroupArgs
    Access Group Component. Nested schema for group:
    iam_access_group_template_version_id str
    (String) Policy template ID.
    name str
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policy_template_references Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    transaction_id str
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    templateId String
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    committed Boolean
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    description String
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group Property Map
    Access Group Component. Nested schema for group:
    iamAccessGroupTemplateVersionId String
    (String) Policy template ID.
    name String
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policyTemplateReferences List<Property Map>
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    transactionId String
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IamAccessGroupTemplateVersion resource produces the following output properties:

    AccountId string
    (String) Enterprise account id.
    CreatedAt string
    (String) The date and time when the access group template was created.
    CreatedById string
    (String) The ID of the user who created the access group template.
    Href string
    (String) The URL of the access group template resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastModifiedAt string
    (String) The date and time when the access group template was last modified.
    LastModifiedById string
    (String) The ID of the user who last modified the access group template.
    Version string
    (String) Policy template version.
    AccountId string
    (String) Enterprise account id.
    CreatedAt string
    (String) The date and time when the access group template was created.
    CreatedById string
    (String) The ID of the user who created the access group template.
    Href string
    (String) The URL of the access group template resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastModifiedAt string
    (String) The date and time when the access group template was last modified.
    LastModifiedById string
    (String) The ID of the user who last modified the access group template.
    Version string
    (String) Policy template version.
    accountId String
    (String) Enterprise account id.
    createdAt String
    (String) The date and time when the access group template was created.
    createdById String
    (String) The ID of the user who created the access group template.
    href String
    (String) The URL of the access group template resource.
    id String
    The provider-assigned unique ID for this managed resource.
    lastModifiedAt String
    (String) The date and time when the access group template was last modified.
    lastModifiedById String
    (String) The ID of the user who last modified the access group template.
    version String
    (String) Policy template version.
    accountId string
    (String) Enterprise account id.
    createdAt string
    (String) The date and time when the access group template was created.
    createdById string
    (String) The ID of the user who created the access group template.
    href string
    (String) The URL of the access group template resource.
    id string
    The provider-assigned unique ID for this managed resource.
    lastModifiedAt string
    (String) The date and time when the access group template was last modified.
    lastModifiedById string
    (String) The ID of the user who last modified the access group template.
    version string
    (String) Policy template version.
    account_id str
    (String) Enterprise account id.
    created_at str
    (String) The date and time when the access group template was created.
    created_by_id str
    (String) The ID of the user who created the access group template.
    href str
    (String) The URL of the access group template resource.
    id str
    The provider-assigned unique ID for this managed resource.
    last_modified_at str
    (String) The date and time when the access group template was last modified.
    last_modified_by_id str
    (String) The ID of the user who last modified the access group template.
    version str
    (String) Policy template version.
    accountId String
    (String) Enterprise account id.
    createdAt String
    (String) The date and time when the access group template was created.
    createdById String
    (String) The ID of the user who created the access group template.
    href String
    (String) The URL of the access group template resource.
    id String
    The provider-assigned unique ID for this managed resource.
    lastModifiedAt String
    (String) The date and time when the access group template was last modified.
    lastModifiedById String
    (String) The ID of the user who last modified the access group template.
    version String
    (String) Policy template version.

    Look up Existing IamAccessGroupTemplateVersion Resource

    Get an existing IamAccessGroupTemplateVersion resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IamAccessGroupTemplateVersionState, opts?: CustomResourceOptions): IamAccessGroupTemplateVersion
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            account_id: Optional[str] = None,
            committed: Optional[bool] = None,
            created_at: Optional[str] = None,
            created_by_id: Optional[str] = None,
            description: Optional[str] = None,
            group: Optional[IamAccessGroupTemplateVersionGroupArgs] = None,
            href: Optional[str] = None,
            iam_access_group_template_version_id: Optional[str] = None,
            last_modified_at: Optional[str] = None,
            last_modified_by_id: Optional[str] = None,
            name: Optional[str] = None,
            policy_template_references: Optional[Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]] = None,
            template_id: Optional[str] = None,
            transaction_id: Optional[str] = None,
            version: Optional[str] = None) -> IamAccessGroupTemplateVersion
    func GetIamAccessGroupTemplateVersion(ctx *Context, name string, id IDInput, state *IamAccessGroupTemplateVersionState, opts ...ResourceOption) (*IamAccessGroupTemplateVersion, error)
    public static IamAccessGroupTemplateVersion Get(string name, Input<string> id, IamAccessGroupTemplateVersionState? state, CustomResourceOptions? opts = null)
    public static IamAccessGroupTemplateVersion get(String name, Output<String> id, IamAccessGroupTemplateVersionState state, CustomResourceOptions options)
    resources:  _:    type: ibm:IamAccessGroupTemplateVersion    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    (String) Enterprise account id.
    Committed bool
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    CreatedAt string
    (String) The date and time when the access group template was created.
    CreatedById string
    (String) The ID of the user who created the access group template.
    Description string
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    Group IamAccessGroupTemplateVersionGroup
    Access Group Component. Nested schema for group:
    Href string
    (String) The URL of the access group template resource.
    IamAccessGroupTemplateVersionId string
    (String) Policy template ID.
    LastModifiedAt string
    (String) The date and time when the access group template was last modified.
    LastModifiedById string
    (String) The ID of the user who last modified the access group template.
    Name string
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    PolicyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    TemplateId string
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    TransactionId string
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Version string
    (String) Policy template version.
    AccountId string
    (String) Enterprise account id.
    Committed bool
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    CreatedAt string
    (String) The date and time when the access group template was created.
    CreatedById string
    (String) The ID of the user who created the access group template.
    Description string
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    Group IamAccessGroupTemplateVersionGroupArgs
    Access Group Component. Nested schema for group:
    Href string
    (String) The URL of the access group template resource.
    IamAccessGroupTemplateVersionId string
    (String) Policy template ID.
    LastModifiedAt string
    (String) The date and time when the access group template was last modified.
    LastModifiedById string
    (String) The ID of the user who last modified the access group template.
    Name string
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    PolicyTemplateReferences []IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    TemplateId string
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    TransactionId string
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Version string
    (String) Policy template version.
    accountId String
    (String) Enterprise account id.
    committed Boolean
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    createdAt String
    (String) The date and time when the access group template was created.
    createdById String
    (String) The ID of the user who created the access group template.
    description String
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group IamAccessGroupTemplateVersionGroup
    Access Group Component. Nested schema for group:
    href String
    (String) The URL of the access group template resource.
    iamAccessGroupTemplateVersionId String
    (String) Policy template ID.
    lastModifiedAt String
    (String) The date and time when the access group template was last modified.
    lastModifiedById String
    (String) The ID of the user who last modified the access group template.
    name String
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policyTemplateReferences List<IamAccessGroupTemplateVersionPolicyTemplateReference>
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    templateId String
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    transactionId String
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version String
    (String) Policy template version.
    accountId string
    (String) Enterprise account id.
    committed boolean
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    createdAt string
    (String) The date and time when the access group template was created.
    createdById string
    (String) The ID of the user who created the access group template.
    description string
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group IamAccessGroupTemplateVersionGroup
    Access Group Component. Nested schema for group:
    href string
    (String) The URL of the access group template resource.
    iamAccessGroupTemplateVersionId string
    (String) Policy template ID.
    lastModifiedAt string
    (String) The date and time when the access group template was last modified.
    lastModifiedById string
    (String) The ID of the user who last modified the access group template.
    name string
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policyTemplateReferences IamAccessGroupTemplateVersionPolicyTemplateReference[]
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    templateId string
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    transactionId string
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version string
    (String) Policy template version.
    account_id str
    (String) Enterprise account id.
    committed bool
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    created_at str
    (String) The date and time when the access group template was created.
    created_by_id str
    (String) The ID of the user who created the access group template.
    description str
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group IamAccessGroupTemplateVersionGroupArgs
    Access Group Component. Nested schema for group:
    href str
    (String) The URL of the access group template resource.
    iam_access_group_template_version_id str
    (String) Policy template ID.
    last_modified_at str
    (String) The date and time when the access group template was last modified.
    last_modified_by_id str
    (String) The ID of the user who last modified the access group template.
    name str
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policy_template_references Sequence[IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs]
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    template_id str
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    transaction_id str
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version str
    (String) Policy template version.
    accountId String
    (String) Enterprise account id.
    committed Boolean
    (Boolean) A boolean indicating whether the access group template is committed. You must commit a template before you can assign it to child accounts.
    createdAt String
    (String) The date and time when the access group template was created.
    createdById String
    (String) The ID of the user who created the access group template.
    description String
    The description of the access group template.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    group Property Map
    Access Group Component. Nested schema for group:
    href String
    (String) The URL of the access group template resource.
    iamAccessGroupTemplateVersionId String
    (String) Policy template ID.
    lastModifiedAt String
    (String) The date and time when the access group template was last modified.
    lastModifiedById String
    (String) The ID of the user who last modified the access group template.
    name String
    The name of the access group template.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    policyTemplateReferences List<Property Map>
    References to policy templates assigned to the access group template.

    • Constraints: The maximum length is 100 items. The minimum length is 0 items. Nested schema for policy_template_references:
    templateId String
    ID of the template that you want to create a new version of.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    transactionId String
    An optional transaction id for the request.

    • Constraints: The maximum length is 50 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version String
    (String) Policy template version.

    Supporting Types

    IamAccessGroupTemplateVersionGroup, IamAccessGroupTemplateVersionGroupArgs

    Name string
    Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    ActionControls IamAccessGroupTemplateVersionGroupActionControls
    Access group action controls component. Nested schema for action_controls:
    Assertions IamAccessGroupTemplateVersionGroupAssertions
    Assertions Input Component. Nested schema for assertions:
    Description string
    Access group description. This is shown in child accounts.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    Members IamAccessGroupTemplateVersionGroupMembers
    Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
    Name string
    Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    ActionControls IamAccessGroupTemplateVersionGroupActionControls
    Access group action controls component. Nested schema for action_controls:
    Assertions IamAccessGroupTemplateVersionGroupAssertions
    Assertions Input Component. Nested schema for assertions:
    Description string
    Access group description. This is shown in child accounts.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    Members IamAccessGroupTemplateVersionGroupMembers
    Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
    name String
    Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    actionControls IamAccessGroupTemplateVersionGroupActionControls
    Access group action controls component. Nested schema for action_controls:
    assertions IamAccessGroupTemplateVersionGroupAssertions
    Assertions Input Component. Nested schema for assertions:
    description String
    Access group description. This is shown in child accounts.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    members IamAccessGroupTemplateVersionGroupMembers
    Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
    name string
    Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    actionControls IamAccessGroupTemplateVersionGroupActionControls
    Access group action controls component. Nested schema for action_controls:
    assertions IamAccessGroupTemplateVersionGroupAssertions
    Assertions Input Component. Nested schema for assertions:
    description string
    Access group description. This is shown in child accounts.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    members IamAccessGroupTemplateVersionGroupMembers
    Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
    name str
    Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    action_controls IamAccessGroupTemplateVersionGroupActionControls
    Access group action controls component. Nested schema for action_controls:
    assertions IamAccessGroupTemplateVersionGroupAssertions
    Assertions Input Component. Nested schema for assertions:
    description str
    Access group description. This is shown in child accounts.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    members IamAccessGroupTemplateVersionGroupMembers
    Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:
    name String
    Give the access group a unique name that doesn't conflict with other templates access group name in the given account. This is shown in child accounts.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    actionControls Property Map
    Access group action controls component. Nested schema for action_controls:
    assertions Property Map
    Assertions Input Component. Nested schema for assertions:
    description String
    Access group description. This is shown in child accounts.

    • Constraints: The maximum length is 250 characters. The minimum length is 0 characters. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    members Property Map
    Array of enterprise users to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned. Nested schema for members:

    IamAccessGroupTemplateVersionGroupActionControls, IamAccessGroupTemplateVersionGroupActionControlsArgs

    Access IamAccessGroupTemplateVersionGroupActionControlsAccess
    Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
    Access IamAccessGroupTemplateVersionGroupActionControlsAccess
    Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
    access IamAccessGroupTemplateVersionGroupActionControlsAccess
    Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
    access IamAccessGroupTemplateVersionGroupActionControlsAccess
    Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
    access IamAccessGroupTemplateVersionGroupActionControlsAccess
    Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:
    access Property Map
    Control whether or not access group administrators in child accounts can add access policies to the enterprise-managed access group in their account. Nested schema for access:

    IamAccessGroupTemplateVersionGroupActionControlsAccess, IamAccessGroupTemplateVersionGroupActionControlsAccessArgs

    Add bool
    Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
    Add bool
    Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
    add Boolean
    Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
    add boolean
    Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
    add bool
    Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.
    add Boolean
    Action control for adding access policies to an enterprise-managed access group in a child account. If an access group administrator in a child account adds a policy, they can always update or remove it.

    IamAccessGroupTemplateVersionGroupAssertions, IamAccessGroupTemplateVersionGroupAssertionsArgs

    ActionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
    Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
    Rules List<IamAccessGroupTemplateVersionGroupAssertionsRule>
    Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
    ActionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
    Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
    Rules []IamAccessGroupTemplateVersionGroupAssertionsRule
    Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
    actionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
    Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
    rules List<IamAccessGroupTemplateVersionGroupAssertionsRule>
    Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
    actionControls IamAccessGroupTemplateVersionGroupAssertionsActionControls
    Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
    rules IamAccessGroupTemplateVersionGroupAssertionsRule[]
    Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
    action_controls IamAccessGroupTemplateVersionGroupAssertionsActionControls
    Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
    rules Sequence[IamAccessGroupTemplateVersionGroupAssertionsRule]
    Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:
    actionControls Property Map
    Control whether or not access group administrators in child accounts can add, remove, and update dynamic rules for the enterprise-managed access group in their account. The inner level RuleActionControls override these action controls. Nested schema for action_controls:
    rules List<Property Map>
    Dynamic rules to automatically add federated users to access groups based on specific identity attributes.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for rules:

    IamAccessGroupTemplateVersionGroupAssertionsActionControls, IamAccessGroupTemplateVersionGroupAssertionsActionControlsArgs

    Add bool
    Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
    Remove bool
    Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
    Add bool
    Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
    Remove bool
    Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
    add Boolean
    Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
    remove Boolean
    Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
    add boolean
    Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
    remove boolean
    Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
    add bool
    Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
    remove bool
    Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.
    add Boolean
    Action control for adding dynamic rules to an enterprise-managed access group. If an access group administrator in a child account adds a dynamic rule, they can always update or remove it.
    remove Boolean
    Action control for removing enterprise-managed dynamic rules in an enterprise-managed access group.

    IamAccessGroupTemplateVersionGroupAssertionsRule, IamAccessGroupTemplateVersionGroupAssertionsRuleArgs

    ActionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
    Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
    Conditions List<IamAccessGroupTemplateVersionGroupAssertionsRuleCondition>
    Conditions of membership. You can think of this as a key:value pair.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
    Expiration double
    Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
    Name string
    Dynamic rule name.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    RealmName string
    The identity provider (IdP) URL.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    ActionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
    Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
    Conditions []IamAccessGroupTemplateVersionGroupAssertionsRuleCondition
    Conditions of membership. You can think of this as a key:value pair.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
    Expiration float64
    Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
    Name string
    Dynamic rule name.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    RealmName string
    The identity provider (IdP) URL.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    actionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
    Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
    conditions List<IamAccessGroupTemplateVersionGroupAssertionsRuleCondition>
    Conditions of membership. You can think of this as a key:value pair.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
    expiration Double
    Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
    name String
    Dynamic rule name.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    realmName String
    The identity provider (IdP) URL.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    actionControls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
    Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
    conditions IamAccessGroupTemplateVersionGroupAssertionsRuleCondition[]
    Conditions of membership. You can think of this as a key:value pair.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
    expiration number
    Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
    name string
    Dynamic rule name.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    realmName string
    The identity provider (IdP) URL.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    action_controls IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls
    Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
    conditions Sequence[IamAccessGroupTemplateVersionGroupAssertionsRuleCondition]
    Conditions of membership. You can think of this as a key:value pair.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
    expiration float
    Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
    name str
    Dynamic rule name.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    realm_name str
    The identity provider (IdP) URL.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    actionControls Property Map
    Control whether or not access group administrators in child accounts can update and remove this dynamic rule in the enterprise-managed access group in their account.This overrides outer level AssertionsActionControls. Nested schema for action_controls:
    conditions List<Property Map>
    Conditions of membership. You can think of this as a key:value pair.

    • Constraints: The maximum length is 50 items. The minimum length is 0 items. Nested schema for conditions:
    expiration Number
    Session duration in hours. Access group membership is revoked after this time period expires. Users must log back in to refresh their access group membership.
    name String
    Dynamic rule name.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.
    realmName String
    The identity provider (IdP) URL.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/.

    IamAccessGroupTemplateVersionGroupAssertionsRuleActionControls, IamAccessGroupTemplateVersionGroupAssertionsRuleActionControlsArgs

    Remove bool
    Action control for removing this enterprise-managed dynamic rule.
    Remove bool
    Action control for removing this enterprise-managed dynamic rule.
    remove Boolean
    Action control for removing this enterprise-managed dynamic rule.
    remove boolean
    Action control for removing this enterprise-managed dynamic rule.
    remove bool
    Action control for removing this enterprise-managed dynamic rule.
    remove Boolean
    Action control for removing this enterprise-managed dynamic rule.

    IamAccessGroupTemplateVersionGroupAssertionsRuleCondition, IamAccessGroupTemplateVersionGroupAssertionsRuleConditionArgs

    Claim string
    The key in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Operator string
    Compares the claim and the value.

    • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
    Value string
    The value in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Claim string
    The key in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Operator string
    Compares the claim and the value.

    • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
    Value string
    The value in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    claim String
    The key in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    operator String
    Compares the claim and the value.

    • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
    value String
    The value in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    claim string
    The key in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    operator string
    Compares the claim and the value.

    • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
    value string
    The value in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    claim str
    The key in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    operator str
    Compares the claim and the value.

    • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
    value str
    The value in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    claim String
    The key in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    operator String
    Compares the claim and the value.

    • Constraints: The maximum length is 10 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z-]+$/.
    value String
    The value in the key:value pair.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.

    IamAccessGroupTemplateVersionGroupMembers, IamAccessGroupTemplateVersionGroupMembersArgs

    ActionControls IamAccessGroupTemplateVersionGroupMembersActionControls
    Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
    Services List<string>
    Array of service IDs' IAM ID to add to the template.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
    Users List<string>
    Array of enterprise users' IAM ID to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
    ActionControls IamAccessGroupTemplateVersionGroupMembersActionControls
    Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
    Services []string
    Array of service IDs' IAM ID to add to the template.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
    Users []string
    Array of enterprise users' IAM ID to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
    actionControls IamAccessGroupTemplateVersionGroupMembersActionControls
    Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
    services List<String>
    Array of service IDs' IAM ID to add to the template.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
    users List<String>
    Array of enterprise users' IAM ID to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
    actionControls IamAccessGroupTemplateVersionGroupMembersActionControls
    Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
    services string[]
    Array of service IDs' IAM ID to add to the template.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
    users string[]
    Array of enterprise users' IAM ID to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
    action_controls IamAccessGroupTemplateVersionGroupMembersActionControls
    Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
    services Sequence[str]
    Array of service IDs' IAM ID to add to the template.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
    users Sequence[str]
    Array of enterprise users' IAM ID to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.
    actionControls Property Map
    Control whether or not access group administrators in child accounts can add and remove members from the enterprise-managed access group in their account. Nested schema for action_controls:
    services List<String>
    Array of service IDs' IAM ID to add to the template.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9_-]+$/. The maximum length is 50 items. The minimum length is 0 items.
    users List<String>
    Array of enterprise users' IAM ID to add to the template. All enterprise users that you add to the template must be invited to the child accounts where the template is assigned.

    • Constraints: The list items must match regular expression /^[a-zA-Z0-9!@#$%^&*()_+{}:;"'<>,.?\/|\\-\\s]+$/. The maximum length is 50 items. The minimum length is 0 items.

    IamAccessGroupTemplateVersionGroupMembersActionControls, IamAccessGroupTemplateVersionGroupMembersActionControlsArgs

    Add bool
    Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
    Remove bool
    Action control for removing enterprise-managed members from an enterprise-managed access group.
    Add bool
    Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
    Remove bool
    Action control for removing enterprise-managed members from an enterprise-managed access group.
    add Boolean
    Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
    remove Boolean
    Action control for removing enterprise-managed members from an enterprise-managed access group.
    add boolean
    Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
    remove boolean
    Action control for removing enterprise-managed members from an enterprise-managed access group.
    add bool
    Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
    remove bool
    Action control for removing enterprise-managed members from an enterprise-managed access group.
    add Boolean
    Action control for adding child account members to an enterprise-managed access group. If an access group administrator in a child account adds a member, they can always remove them.
    remove Boolean
    Action control for removing enterprise-managed members from an enterprise-managed access group.

    IamAccessGroupTemplateVersionPolicyTemplateReference, IamAccessGroupTemplateVersionPolicyTemplateReferenceArgs

    Id string
    Policy template ID.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Version string
    Policy template version.

    • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
    Id string
    Policy template ID.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    Version string
    Policy template version.

    • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
    id String
    Policy template ID.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version String
    Policy template version.

    • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
    id string
    Policy template ID.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version string
    Policy template version.

    • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
    id str
    Policy template ID.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version str
    Policy template version.

    • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.
    id String
    Policy template ID.

    • Constraints: The maximum length is 100 characters. The minimum length is 1 character. The value must match regular expression /^[a-zA-Z0-9_-]+$/.
    version String
    Policy template version.

    • Constraints: The maximum length is 2 characters. The minimum length is 1 character. The value must match regular expression /^[0-9]+$/.

    Import

    Syntax

    bash

    $ pulumi import ibm:index/iamAccessGroupTemplateVersion:IamAccessGroupTemplateVersion iam_access_group_template_version $template_id/$version
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud