Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. Cisco ISE Provider
  4. API Docs
  5. identitymanagement
  6. InternalUser
Viewing docs for Cisco ISE v0.6.0
published on Thursday, Sep 17, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-ise

ise.identitymanagement.InternalUser

ise logo
Viewing docs for Cisco ISE v0.6.0
published on Thursday, Sep 17, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-ise

    This resource can manage an Internal User.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = new ise.identitymanagement.InternalUser("example", {
    name: "UserTF",
    passwordWo: "Cisco123",
    passwordWoVersion: 1,
    changePassword: true,
    email: "aaa@cisco.com",
    accountNameAlias: "User 1",
    enablePasswordWo: "Cisco123",
    enablePasswordWoVersion: 1,
    enabled: true,
    passwordNeverExpires: false,
    firstName: "John",
    lastName: "Doe",
    passwordIdStore: "Internal Users",
    description: "My first Terraform user",
});

    import pulumi
import pulumi_ise as ise

example = ise.identitymanagement.InternalUser("example",
    name="UserTF",
    password_wo="Cisco123",
    password_wo_version=1,
    change_password=True,
    email="aaa@cisco.com",
    account_name_alias="User 1",
    enable_password_wo="Cisco123",
    enable_password_wo_version=1,
    enabled=True,
    password_never_expires=False,
    first_name="John",
    last_name="Doe",
    password_id_store="Internal Users",
    description="My first Terraform user")

    package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/identitymanagement"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := identitymanagement.NewInternalUser(ctx, "example", &identitymanagement.InternalUserArgs{
			Name:                    pulumi.String("UserTF"),
			PasswordWo:              pulumi.String("Cisco123"),
			PasswordWoVersion:       pulumi.Int(1),
			ChangePassword:          pulumi.Bool(true),
			Email:                   pulumi.String("aaa@cisco.com"),
			AccountNameAlias:        pulumi.String("User 1"),
			EnablePasswordWo:        pulumi.String("Cisco123"),
			EnablePasswordWoVersion: pulumi.Int(1),
			Enabled:                 pulumi.Bool(true),
			PasswordNeverExpires:    pulumi.Bool(false),
			FirstName:               pulumi.String("John"),
			LastName:                pulumi.String("Doe"),
			PasswordIdStore:         pulumi.String("Internal Users"),
			Description:             pulumi.String("My first Terraform user"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = new Ise.IdentityManagement.InternalUser("example", new()
    {
        Name = "UserTF",
        PasswordWo = "Cisco123",
        PasswordWoVersion = 1,
        ChangePassword = true,
        Email = "aaa@cisco.com",
        AccountNameAlias = "User 1",
        EnablePasswordWo = "Cisco123",
        EnablePasswordWoVersion = 1,
        Enabled = true,
        PasswordNeverExpires = false,
        FirstName = "John",
        LastName = "Doe",
        PasswordIdStore = "Internal Users",
        Description = "My first Terraform user",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.identitymanagement.InternalUser;
import com.pulumi.ise.identitymanagement.InternalUserArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new InternalUser("example", InternalUserArgs.builder()
            .name("UserTF")
            .passwordWo("Cisco123")
            .passwordWoVersion(1)
            .changePassword(true)
            .email("aaa@cisco.com")
            .accountNameAlias("User 1")
            .enablePasswordWo("Cisco123")
            .enablePasswordWoVersion(1)
            .enabled(true)
            .passwordNeverExpires(false)
            .firstName("John")
            .lastName("Doe")
            .passwordIdStore("Internal Users")
            .description("My first Terraform user")
            .build());

    }
}

    resources:
  example:
    type: ise:identitymanagement:InternalUser
    properties:
      name: UserTF
      passwordWo: Cisco123
      passwordWoVersion: 1
      changePassword: true
      email: aaa@cisco.com
      accountNameAlias: User 1
      enablePasswordWo: Cisco123
      enablePasswordWoVersion: 1
      enabled: true
      passwordNeverExpires: false
      firstName: John
      lastName: Doe
      passwordIdStore: Internal Users
      description: My first Terraform user

    pulumi {
  required_providers {
    ise = {
      source = "pulumi/ise"
    }
  }
}

resource "ise_identitymanagement_internaluser" "example" {
  name                       = "UserTF"
  password_wo                = "Cisco123"
  password_wo_version        = 1
  change_password            = true
  email                      = "aaa@cisco.com"
  account_name_alias         = "User 1"
  enable_password_wo         = "Cisco123"
  enable_password_wo_version = 1
  enabled                    = true
  password_never_expires     = false
  first_name                 = "John"
  last_name                  = "Doe"
  password_id_store          = "Internal Users"
  description                = "My first Terraform user"
}

    Create InternalUser Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new InternalUser(name: string, args?: InternalUserArgs, opts?: CustomResourceOptions);
    @overload
def InternalUser(resource_name: str,
                 args: Optional[InternalUserArgs] = None,
                 opts: Optional[ResourceOptions] = None)

@overload
def InternalUser(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 account_name_alias: Optional[str] = None,
                 change_password: Optional[bool] = None,
                 custom_attributes: Optional[Mapping[str, str]] = None,
                 description: Optional[str] = None,
                 email: Optional[str] = None,
                 enable_password: Optional[str] = None,
                 enable_password_wo: Optional[str] = None,
                 enable_password_wo_version: Optional[int] = None,
                 enabled: Optional[bool] = None,
                 first_name: Optional[str] = None,
                 identity_groups: Optional[str] = None,
                 last_name: Optional[str] = None,
                 name: Optional[str] = None,
                 password: Optional[str] = None,
                 password_id_store: Optional[str] = None,
                 password_never_expires: Optional[bool] = None,
                 password_wo: Optional[str] = None,
                 password_wo_version: Optional[int] = None)
    func NewInternalUser(ctx *Context, name string, args *InternalUserArgs, opts ...ResourceOption) (*InternalUser, error)
    public InternalUser(string name, InternalUserArgs? args = null, CustomResourceOptions? opts = null)
    public InternalUser(String name, InternalUserArgs args)
public InternalUser(String name, InternalUserArgs args, CustomResourceOptions options)

    type: ise:identitymanagement:InternalUser
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "ise_identitymanagement_internal_user" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args InternalUserArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args InternalUserArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args InternalUserArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args InternalUserArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args InternalUserArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var internalUserResource = new Ise.IdentityManagement.InternalUser("internalUserResource", new()
{
    AccountNameAlias = "string",
    ChangePassword = false,
    CustomAttributes = 
    {
        { "string", "string" },
    },
    Description = "string",
    Email = "string",
    EnablePassword = "string",
    EnablePasswordWo = "string",
    EnablePasswordWoVersion = 0,
    Enabled = false,
    FirstName = "string",
    IdentityGroups = "string",
    LastName = "string",
    Name = "string",
    Password = "string",
    PasswordIdStore = "string",
    PasswordNeverExpires = false,
    PasswordWo = "string",
    PasswordWoVersion = 0,
});

    example, err := identitymanagement.NewInternalUser(ctx, "internalUserResource", &identitymanagement.InternalUserArgs{
	AccountNameAlias: pulumi.String("string"),
	ChangePassword:   pulumi.Bool(false),
	CustomAttributes: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Description:             pulumi.String("string"),
	Email:                   pulumi.String("string"),
	EnablePassword:          pulumi.String("string"),
	EnablePasswordWo:        pulumi.String("string"),
	EnablePasswordWoVersion: pulumi.Int(0),
	Enabled:                 pulumi.Bool(false),
	FirstName:               pulumi.String("string"),
	IdentityGroups:          pulumi.String("string"),
	LastName:                pulumi.String("string"),
	Name:                    pulumi.String("string"),
	Password:                pulumi.String("string"),
	PasswordIdStore:         pulumi.String("string"),
	PasswordNeverExpires:    pulumi.Bool(false),
	PasswordWo:              pulumi.String("string"),
	PasswordWoVersion:       pulumi.Int(0),
})

    resource "ise_identitymanagement_internal_user" "internalUserResource" {
  lifecycle {
    create_before_destroy = true
  }
  account_name_alias = "string"
  change_password    = false
  custom_attributes = {
    "string" = "string"
  }
  description                = "string"
  email                      = "string"
  enable_password            = "string"
  enable_password_wo         = "string"
  enable_password_wo_version = 0
  enabled                    = false
  first_name                 = "string"
  identity_groups            = "string"
  last_name                  = "string"
  name                       = "string"
  password                   = "string"
  password_id_store          = "string"
  password_never_expires     = false
  password_wo                = "string"
  password_wo_version        = 0
}

    var internalUserResource = new InternalUser("internalUserResource", InternalUserArgs.builder()
    .accountNameAlias("string")
    .changePassword(false)
    .customAttributes(Map.of("string", "string"))
    .description("string")
    .email("string")
    .enablePassword("string")
    .enablePasswordWo("string")
    .enablePasswordWoVersion(0)
    .enabled(false)
    .firstName("string")
    .identityGroups("string")
    .lastName("string")
    .name("string")
    .password("string")
    .passwordIdStore("string")
    .passwordNeverExpires(false)
    .passwordWo("string")
    .passwordWoVersion(0)
    .build());

    internal_user_resource = ise.identitymanagement.InternalUser("internalUserResource",
    account_name_alias="string",
    change_password=False,
    custom_attributes={
        "string": "string",
    },
    description="string",
    email="string",
    enable_password="string",
    enable_password_wo="string",
    enable_password_wo_version=0,
    enabled=False,
    first_name="string",
    identity_groups="string",
    last_name="string",
    name="string",
    password="string",
    password_id_store="string",
    password_never_expires=False,
    password_wo="string",
    password_wo_version=0)

    const internalUserResource = new ise.identitymanagement.InternalUser("internalUserResource", {
    accountNameAlias: "string",
    changePassword: false,
    customAttributes: {
        string: "string",
    },
    description: "string",
    email: "string",
    enablePassword: "string",
    enablePasswordWo: "string",
    enablePasswordWoVersion: 0,
    enabled: false,
    firstName: "string",
    identityGroups: "string",
    lastName: "string",
    name: "string",
    password: "string",
    passwordIdStore: "string",
    passwordNeverExpires: false,
    passwordWo: "string",
    passwordWoVersion: 0,
});

    type: ise:identitymanagement:InternalUser
properties:
    accountNameAlias: string
    changePassword: false
    customAttributes:
        string: string
    description: string
    email: string
    enablePassword: string
    enablePasswordWo: string
    enablePasswordWoVersion: 0
    enabled: false
    firstName: string
    identityGroups: string
    lastName: string
    name: string
    password: string
    passwordIdStore: string
    passwordNeverExpires: false
    passwordWo: string
    passwordWoVersion: 0

    InternalUser Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The InternalUser resource accepts the following input properties:

    AccountNameAlias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    ChangePassword bool
    Requires the user to change the password

    • Default value: true
    CustomAttributes Dictionary<string, string>
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    Description string
    Description
    Email string
    Email address
    EnablePassword string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    EnablePasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    EnablePasswordWoVersion int
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    Enabled bool
    Whether the user is enabled/disabled
    FirstName string
    First name of the internal user
    IdentityGroups string
    Comma separated list of identity group IDs.
    LastName string
    Last name of the internal user
    Name string
    The name of the internal user
    Password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    PasswordIdStore string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    PasswordNeverExpires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    PasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    PasswordWoVersion int
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    AccountNameAlias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    ChangePassword bool
    Requires the user to change the password

    • Default value: true
    CustomAttributes map[string]string
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    Description string
    Description
    Email string
    Email address
    EnablePassword string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    EnablePasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    EnablePasswordWoVersion int
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    Enabled bool
    Whether the user is enabled/disabled
    FirstName string
    First name of the internal user
    IdentityGroups string
    Comma separated list of identity group IDs.
    LastName string
    Last name of the internal user
    Name string
    The name of the internal user
    Password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    PasswordIdStore string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    PasswordNeverExpires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    PasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    PasswordWoVersion int
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    account_name_alias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    change_password bool
    Requires the user to change the password

    • Default value: true
    custom_attributes map(string)
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description string
    Description
    email string
    Email address
    enable_password string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enable_password_wo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enable_password_wo_version number
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled bool
    Whether the user is enabled/disabled
    first_name string
    First name of the internal user
    identity_groups string
    Comma separated list of identity group IDs.
    last_name string
    Last name of the internal user
    name string
    The name of the internal user
    password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    password_id_store string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    password_never_expires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    password_wo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    password_wo_version number
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    accountNameAlias String
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    changePassword Boolean
    Requires the user to change the password

    • Default value: true
    customAttributes Map<String,String>
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description String
    Description
    email String
    Email address
    enablePassword String
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enablePasswordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enablePasswordWoVersion Integer
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled Boolean
    Whether the user is enabled/disabled
    firstName String
    First name of the internal user
    identityGroups String
    Comma separated list of identity group IDs.
    lastName String
    Last name of the internal user
    name String
    The name of the internal user
    password String
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    passwordIdStore String
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    passwordNeverExpires Boolean
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    passwordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    passwordWoVersion Integer
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    accountNameAlias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    changePassword boolean
    Requires the user to change the password

    • Default value: true
    customAttributes {[key: string]: string}
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description string
    Description
    email string
    Email address
    enablePassword string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enablePasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enablePasswordWoVersion number
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled boolean
    Whether the user is enabled/disabled
    firstName string
    First name of the internal user
    identityGroups string
    Comma separated list of identity group IDs.
    lastName string
    Last name of the internal user
    name string
    The name of the internal user
    password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    passwordIdStore string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    passwordNeverExpires boolean
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    passwordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    passwordWoVersion number
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    account_name_alias str
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    change_password bool
    Requires the user to change the password

    • Default value: true
    custom_attributes Mapping[str, str]
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description str
    Description
    email str
    Email address
    enable_password str
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enable_password_wo str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enable_password_wo_version int
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled bool
    Whether the user is enabled/disabled
    first_name str
    First name of the internal user
    identity_groups str
    Comma separated list of identity group IDs.
    last_name str
    Last name of the internal user
    name str
    The name of the internal user
    password str
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    password_id_store str
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    password_never_expires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    password_wo str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    password_wo_version int
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    accountNameAlias String
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    changePassword Boolean
    Requires the user to change the password

    • Default value: true
    customAttributes Map<String>
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description String
    Description
    email String
    Email address
    enablePassword String
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enablePasswordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enablePasswordWoVersion Number
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled Boolean
    Whether the user is enabled/disabled
    firstName String
    First name of the internal user
    identityGroups String
    Comma separated list of identity group IDs.
    lastName String
    Last name of the internal user
    name String
    The name of the internal user
    password String
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    passwordIdStore String
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    passwordNeverExpires Boolean
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    passwordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    passwordWoVersion Number
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the InternalUser resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing InternalUser Resource

    Get an existing InternalUser resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: InternalUserState, opts?: CustomResourceOptions): InternalUser
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_name_alias: Optional[str] = None,
        change_password: Optional[bool] = None,
        custom_attributes: Optional[Mapping[str, str]] = None,
        description: Optional[str] = None,
        email: Optional[str] = None,
        enable_password: Optional[str] = None,
        enable_password_wo: Optional[str] = None,
        enable_password_wo_version: Optional[int] = None,
        enabled: Optional[bool] = None,
        first_name: Optional[str] = None,
        identity_groups: Optional[str] = None,
        last_name: Optional[str] = None,
        name: Optional[str] = None,
        password: Optional[str] = None,
        password_id_store: Optional[str] = None,
        password_never_expires: Optional[bool] = None,
        password_wo: Optional[str] = None,
        password_wo_version: Optional[int] = None) -> InternalUser
    func GetInternalUser(ctx *Context, name string, id IDInput, state *InternalUserState, opts ...ResourceOption) (*InternalUser, error)
    public static InternalUser Get(string name, Input<string> id, InternalUserState? state, CustomResourceOptions? opts = null)
    public static InternalUser get(String name, Output<String> id, InternalUserState state, CustomResourceOptions options)
    resources:  _:    type: ise:identitymanagement:InternalUser    get:      id: ${id}
    import {
  to = ise_identitymanagement_internal_user.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountNameAlias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    ChangePassword bool
    Requires the user to change the password

    • Default value: true
    CustomAttributes Dictionary<string, string>
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    Description string
    Description
    Email string
    Email address
    EnablePassword string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    EnablePasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    EnablePasswordWoVersion int
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    Enabled bool
    Whether the user is enabled/disabled
    FirstName string
    First name of the internal user
    IdentityGroups string
    Comma separated list of identity group IDs.
    LastName string
    Last name of the internal user
    Name string
    The name of the internal user
    Password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    PasswordIdStore string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    PasswordNeverExpires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    PasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    PasswordWoVersion int
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    AccountNameAlias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    ChangePassword bool
    Requires the user to change the password

    • Default value: true
    CustomAttributes map[string]string
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    Description string
    Description
    Email string
    Email address
    EnablePassword string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    EnablePasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    EnablePasswordWoVersion int
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    Enabled bool
    Whether the user is enabled/disabled
    FirstName string
    First name of the internal user
    IdentityGroups string
    Comma separated list of identity group IDs.
    LastName string
    Last name of the internal user
    Name string
    The name of the internal user
    Password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    PasswordIdStore string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    PasswordNeverExpires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    PasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    PasswordWoVersion int
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    account_name_alias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    change_password bool
    Requires the user to change the password

    • Default value: true
    custom_attributes map(string)
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description string
    Description
    email string
    Email address
    enable_password string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enable_password_wo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enable_password_wo_version number
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled bool
    Whether the user is enabled/disabled
    first_name string
    First name of the internal user
    identity_groups string
    Comma separated list of identity group IDs.
    last_name string
    Last name of the internal user
    name string
    The name of the internal user
    password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    password_id_store string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    password_never_expires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    password_wo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    password_wo_version number
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    accountNameAlias String
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    changePassword Boolean
    Requires the user to change the password

    • Default value: true
    customAttributes Map<String,String>
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description String
    Description
    email String
    Email address
    enablePassword String
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enablePasswordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enablePasswordWoVersion Integer
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled Boolean
    Whether the user is enabled/disabled
    firstName String
    First name of the internal user
    identityGroups String
    Comma separated list of identity group IDs.
    lastName String
    Last name of the internal user
    name String
    The name of the internal user
    password String
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    passwordIdStore String
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    passwordNeverExpires Boolean
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    passwordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    passwordWoVersion Integer
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    accountNameAlias string
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    changePassword boolean
    Requires the user to change the password

    • Default value: true
    customAttributes {[key: string]: string}
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description string
    Description
    email string
    Email address
    enablePassword string
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enablePasswordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enablePasswordWoVersion number
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled boolean
    Whether the user is enabled/disabled
    firstName string
    First name of the internal user
    identityGroups string
    Comma separated list of identity group IDs.
    lastName string
    Last name of the internal user
    name string
    The name of the internal user
    password string
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    passwordIdStore string
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    passwordNeverExpires boolean
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    passwordWo string
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    passwordWoVersion number
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    account_name_alias str
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    change_password bool
    Requires the user to change the password

    • Default value: true
    custom_attributes Mapping[str, str]
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description str
    Description
    email str
    Email address
    enable_password str
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enable_password_wo str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enable_password_wo_version int
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled bool
    Whether the user is enabled/disabled
    first_name str
    First name of the internal user
    identity_groups str
    Comma separated list of identity group IDs.
    last_name str
    Last name of the internal user
    name str
    The name of the internal user
    password str
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    password_id_store str
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    password_never_expires bool
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    password_wo str
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    password_wo_version int
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    accountNameAlias String
    The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
    changePassword Boolean
    Requires the user to change the password

    • Default value: true
    customAttributes Map<String>
    Key value map of custom attributes. The keys must be defined in the ISE identity store configuration.
    description String
    Description
    email String
    Email address
    enablePassword String
    This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer enablePasswordWo together with enablePasswordWoVersion, which keeps it out of state.
    enablePasswordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. This field is added in ISE 2.0 to support TACACS+

    • Only one of enablePassword and enablePasswordWo can be set.
    enablePasswordWoVersion Number
    Rotation trigger for enablePasswordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.
    enabled Boolean
    Whether the user is enabled/disabled
    firstName String
    First name of the internal user
    identityGroups String
    Comma separated list of identity group IDs.
    lastName String
    Last name of the internal user
    name String
    The name of the internal user
    password String
    The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    • This attribute stores the secret in Terraform state. Prefer passwordWo together with passwordWoVersion, which keeps it out of state.
    passwordIdStore String
    The ID store where the internal user's password is kept

    • Default value: Internal Users
    passwordNeverExpires Boolean
    Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2.

    • Default value: false
    passwordWo String
    NOTE: This field is write-only and its value will not be updated in state as part of read operations. The password of the internal user. Required when creating a new user. When managing existing (brownfield) users the password can be omitted and the existing password will be preserved.

    • Only one of password and passwordWo can be set.
    passwordWoVersion Number
    Rotation trigger for passwordWo. Increment this integer whenever the write-only value changes so Terraform sends the new secret. The value is stored in state; the secret is not.

    Import

    The pulumi import command can be used, for example:

    $ pulumi import ise:identitymanagement/internalUser:InternalUser example "76d24097-41c4-4558-a4d0-a8c07ac08470"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Viewing docs for Cisco ISE v0.6.0
    published on Thursday, Sep 17, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-ise

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial