1. Packages
  2. Cisco ISE Provider
  3. API Docs
  4. networkaccess
  5. AuthorizationGlobalExceptionRule
Cisco ISE v0.1.11 published on Monday, Dec 2, 2024 by Pulumi

ise.networkaccess.AuthorizationGlobalExceptionRule

Explore with Pulumi AI

ise logo
Cisco ISE v0.1.11 published on Monday, Dec 2, 2024 by Pulumi

    This resource can manage a Network Access Authorization Global Exception Rule.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
    import * as ise from "@pulumi/ise";
    
    const example = new ise.networkaccess.AuthorizationGlobalExceptionRule("example", {
        name: "Rule1",
        rank: 0,
        state: "enabled",
        conditionType: "ConditionAttributes",
        conditionIsNegate: false,
        conditionAttributeName: "Location",
        conditionAttributeValue: "All Locations",
        conditionDictionaryName: "DEVICE",
        conditionOperator: "equals",
        profiles: ["PermitAccess"],
        securityGroup: "BYOD",
    });
    
    import pulumi
    import pulumi_ise as ise
    
    example = ise.networkaccess.AuthorizationGlobalExceptionRule("example",
        name="Rule1",
        rank=0,
        state="enabled",
        condition_type="ConditionAttributes",
        condition_is_negate=False,
        condition_attribute_name="Location",
        condition_attribute_value="All Locations",
        condition_dictionary_name="DEVICE",
        condition_operator="equals",
        profiles=["PermitAccess"],
        security_group="BYOD")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-ise/sdk/go/ise/networkaccess"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := networkaccess.NewAuthorizationGlobalExceptionRule(ctx, "example", &networkaccess.AuthorizationGlobalExceptionRuleArgs{
    			Name:                    pulumi.String("Rule1"),
    			Rank:                    pulumi.Int(0),
    			State:                   pulumi.String("enabled"),
    			ConditionType:           pulumi.String("ConditionAttributes"),
    			ConditionIsNegate:       pulumi.Bool(false),
    			ConditionAttributeName:  pulumi.String("Location"),
    			ConditionAttributeValue: pulumi.String("All Locations"),
    			ConditionDictionaryName: pulumi.String("DEVICE"),
    			ConditionOperator:       pulumi.String("equals"),
    			Profiles: pulumi.StringArray{
    				pulumi.String("PermitAccess"),
    			},
    			SecurityGroup: pulumi.String("BYOD"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Ise = Pulumi.Ise;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Ise.NetworkAccess.AuthorizationGlobalExceptionRule("example", new()
        {
            Name = "Rule1",
            Rank = 0,
            State = "enabled",
            ConditionType = "ConditionAttributes",
            ConditionIsNegate = false,
            ConditionAttributeName = "Location",
            ConditionAttributeValue = "All Locations",
            ConditionDictionaryName = "DEVICE",
            ConditionOperator = "equals",
            Profiles = new[]
            {
                "PermitAccess",
            },
            SecurityGroup = "BYOD",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.ise.networkaccess.AuthorizationGlobalExceptionRule;
    import com.pulumi.ise.networkaccess.AuthorizationGlobalExceptionRuleArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new AuthorizationGlobalExceptionRule("example", AuthorizationGlobalExceptionRuleArgs.builder()
                .name("Rule1")
                .rank(0)
                .state("enabled")
                .conditionType("ConditionAttributes")
                .conditionIsNegate(false)
                .conditionAttributeName("Location")
                .conditionAttributeValue("All Locations")
                .conditionDictionaryName("DEVICE")
                .conditionOperator("equals")
                .profiles("PermitAccess")
                .securityGroup("BYOD")
                .build());
    
        }
    }
    
    resources:
      example:
        type: ise:networkaccess:AuthorizationGlobalExceptionRule
        properties:
          name: Rule1
          rank: 0
          state: enabled
          conditionType: ConditionAttributes
          conditionIsNegate: false
          conditionAttributeName: Location
          conditionAttributeValue: All Locations
          conditionDictionaryName: DEVICE
          conditionOperator: equals
          profiles:
            - PermitAccess
          securityGroup: BYOD
    

    Create AuthorizationGlobalExceptionRule Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AuthorizationGlobalExceptionRule(name: string, args?: AuthorizationGlobalExceptionRuleArgs, opts?: CustomResourceOptions);
    @overload
    def AuthorizationGlobalExceptionRule(resource_name: str,
                                         args: Optional[AuthorizationGlobalExceptionRuleArgs] = None,
                                         opts: Optional[ResourceOptions] = None)
    
    @overload
    def AuthorizationGlobalExceptionRule(resource_name: str,
                                         opts: Optional[ResourceOptions] = None,
                                         childrens: Optional[Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]] = None,
                                         condition_attribute_name: Optional[str] = None,
                                         condition_attribute_value: Optional[str] = None,
                                         condition_dictionary_name: Optional[str] = None,
                                         condition_dictionary_value: Optional[str] = None,
                                         condition_id: Optional[str] = None,
                                         condition_is_negate: Optional[bool] = None,
                                         condition_operator: Optional[str] = None,
                                         condition_type: Optional[str] = None,
                                         name: Optional[str] = None,
                                         profiles: Optional[Sequence[str]] = None,
                                         rank: Optional[int] = None,
                                         security_group: Optional[str] = None,
                                         state: Optional[str] = None)
    func NewAuthorizationGlobalExceptionRule(ctx *Context, name string, args *AuthorizationGlobalExceptionRuleArgs, opts ...ResourceOption) (*AuthorizationGlobalExceptionRule, error)
    public AuthorizationGlobalExceptionRule(string name, AuthorizationGlobalExceptionRuleArgs? args = null, CustomResourceOptions? opts = null)
    public AuthorizationGlobalExceptionRule(String name, AuthorizationGlobalExceptionRuleArgs args)
    public AuthorizationGlobalExceptionRule(String name, AuthorizationGlobalExceptionRuleArgs args, CustomResourceOptions options)
    
    type: ise:networkaccess:AuthorizationGlobalExceptionRule
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    

    Parameters

    name string
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AuthorizationGlobalExceptionRuleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iseAuthorizationGlobalExceptionRuleResource = new Ise.NetworkAccess.AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource", new()
    {
        Childrens = new[]
        {
            new Ise.NetworkAccess.Inputs.AuthorizationGlobalExceptionRuleChildrenArgs
            {
                ConditionType = "string",
                AttributeName = "string",
                AttributeValue = "string",
                Childrens = new[]
                {
                    new Ise.NetworkAccess.Inputs.AuthorizationGlobalExceptionRuleChildrenChildrenArgs
                    {
                        ConditionType = "string",
                        AttributeName = "string",
                        AttributeValue = "string",
                        DictionaryName = "string",
                        DictionaryValue = "string",
                        Id = "string",
                        IsNegate = false,
                        Operator = "string",
                    },
                },
                DictionaryName = "string",
                DictionaryValue = "string",
                Id = "string",
                IsNegate = false,
                Operator = "string",
            },
        },
        ConditionAttributeName = "string",
        ConditionAttributeValue = "string",
        ConditionDictionaryName = "string",
        ConditionDictionaryValue = "string",
        ConditionId = "string",
        ConditionIsNegate = false,
        ConditionOperator = "string",
        ConditionType = "string",
        Name = "string",
        Profiles = new[]
        {
            "string",
        },
        Rank = 0,
        SecurityGroup = "string",
        State = "string",
    });
    
    example, err := networkaccess.NewAuthorizationGlobalExceptionRule(ctx, "iseAuthorizationGlobalExceptionRuleResource", &networkaccess.AuthorizationGlobalExceptionRuleArgs{
    	Childrens: networkaccess.AuthorizationGlobalExceptionRuleChildrenArray{
    		&networkaccess.AuthorizationGlobalExceptionRuleChildrenArgs{
    			ConditionType:  pulumi.String("string"),
    			AttributeName:  pulumi.String("string"),
    			AttributeValue: pulumi.String("string"),
    			Childrens: networkaccess.AuthorizationGlobalExceptionRuleChildrenChildrenArray{
    				&networkaccess.AuthorizationGlobalExceptionRuleChildrenChildrenArgs{
    					ConditionType:   pulumi.String("string"),
    					AttributeName:   pulumi.String("string"),
    					AttributeValue:  pulumi.String("string"),
    					DictionaryName:  pulumi.String("string"),
    					DictionaryValue: pulumi.String("string"),
    					Id:              pulumi.String("string"),
    					IsNegate:        pulumi.Bool(false),
    					Operator:        pulumi.String("string"),
    				},
    			},
    			DictionaryName:  pulumi.String("string"),
    			DictionaryValue: pulumi.String("string"),
    			Id:              pulumi.String("string"),
    			IsNegate:        pulumi.Bool(false),
    			Operator:        pulumi.String("string"),
    		},
    	},
    	ConditionAttributeName:   pulumi.String("string"),
    	ConditionAttributeValue:  pulumi.String("string"),
    	ConditionDictionaryName:  pulumi.String("string"),
    	ConditionDictionaryValue: pulumi.String("string"),
    	ConditionId:              pulumi.String("string"),
    	ConditionIsNegate:        pulumi.Bool(false),
    	ConditionOperator:        pulumi.String("string"),
    	ConditionType:            pulumi.String("string"),
    	Name:                     pulumi.String("string"),
    	Profiles: pulumi.StringArray{
    		pulumi.String("string"),
    	},
    	Rank:          pulumi.Int(0),
    	SecurityGroup: pulumi.String("string"),
    	State:         pulumi.String("string"),
    })
    
    var iseAuthorizationGlobalExceptionRuleResource = new AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource", AuthorizationGlobalExceptionRuleArgs.builder()
        .childrens(AuthorizationGlobalExceptionRuleChildrenArgs.builder()
            .conditionType("string")
            .attributeName("string")
            .attributeValue("string")
            .childrens(AuthorizationGlobalExceptionRuleChildrenChildrenArgs.builder()
                .conditionType("string")
                .attributeName("string")
                .attributeValue("string")
                .dictionaryName("string")
                .dictionaryValue("string")
                .id("string")
                .isNegate(false)
                .operator("string")
                .build())
            .dictionaryName("string")
            .dictionaryValue("string")
            .id("string")
            .isNegate(false)
            .operator("string")
            .build())
        .conditionAttributeName("string")
        .conditionAttributeValue("string")
        .conditionDictionaryName("string")
        .conditionDictionaryValue("string")
        .conditionId("string")
        .conditionIsNegate(false)
        .conditionOperator("string")
        .conditionType("string")
        .name("string")
        .profiles("string")
        .rank(0)
        .securityGroup("string")
        .state("string")
        .build());
    
    ise_authorization_global_exception_rule_resource = ise.networkaccess.AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource",
        childrens=[{
            "condition_type": "string",
            "attribute_name": "string",
            "attribute_value": "string",
            "childrens": [{
                "condition_type": "string",
                "attribute_name": "string",
                "attribute_value": "string",
                "dictionary_name": "string",
                "dictionary_value": "string",
                "id": "string",
                "is_negate": False,
                "operator": "string",
            }],
            "dictionary_name": "string",
            "dictionary_value": "string",
            "id": "string",
            "is_negate": False,
            "operator": "string",
        }],
        condition_attribute_name="string",
        condition_attribute_value="string",
        condition_dictionary_name="string",
        condition_dictionary_value="string",
        condition_id="string",
        condition_is_negate=False,
        condition_operator="string",
        condition_type="string",
        name="string",
        profiles=["string"],
        rank=0,
        security_group="string",
        state="string")
    
    const iseAuthorizationGlobalExceptionRuleResource = new ise.networkaccess.AuthorizationGlobalExceptionRule("iseAuthorizationGlobalExceptionRuleResource", {
        childrens: [{
            conditionType: "string",
            attributeName: "string",
            attributeValue: "string",
            childrens: [{
                conditionType: "string",
                attributeName: "string",
                attributeValue: "string",
                dictionaryName: "string",
                dictionaryValue: "string",
                id: "string",
                isNegate: false,
                operator: "string",
            }],
            dictionaryName: "string",
            dictionaryValue: "string",
            id: "string",
            isNegate: false,
            operator: "string",
        }],
        conditionAttributeName: "string",
        conditionAttributeValue: "string",
        conditionDictionaryName: "string",
        conditionDictionaryValue: "string",
        conditionId: "string",
        conditionIsNegate: false,
        conditionOperator: "string",
        conditionType: "string",
        name: "string",
        profiles: ["string"],
        rank: 0,
        securityGroup: "string",
        state: "string",
    });
    
    type: ise:networkaccess:AuthorizationGlobalExceptionRule
    properties:
        childrens:
            - attributeName: string
              attributeValue: string
              childrens:
                - attributeName: string
                  attributeValue: string
                  conditionType: string
                  dictionaryName: string
                  dictionaryValue: string
                  id: string
                  isNegate: false
                  operator: string
              conditionType: string
              dictionaryName: string
              dictionaryValue: string
              id: string
              isNegate: false
              operator: string
        conditionAttributeName: string
        conditionAttributeValue: string
        conditionDictionaryName: string
        conditionDictionaryValue: string
        conditionId: string
        conditionIsNegate: false
        conditionOperator: string
        conditionType: string
        name: string
        profiles:
            - string
        rank: 0
        securityGroup: string
        state: string
    

    AuthorizationGlobalExceptionRule Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AuthorizationGlobalExceptionRule resource accepts the following input properties:

    Childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles List<string>
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    Childrens []AuthorizationGlobalExceptionRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles []string
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens AuthorizationGlobalExceptionRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles string[]
    The authorization profile(s)
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup string
    Security group used in authorization policies
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles Sequence[str]
    The authorization profile(s)
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    security_group str
    Security group used in authorization policies
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AuthorizationGlobalExceptionRule resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AuthorizationGlobalExceptionRule Resource

    Get an existing AuthorizationGlobalExceptionRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AuthorizationGlobalExceptionRuleState, opts?: CustomResourceOptions): AuthorizationGlobalExceptionRule
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            childrens: Optional[Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]] = None,
            condition_attribute_name: Optional[str] = None,
            condition_attribute_value: Optional[str] = None,
            condition_dictionary_name: Optional[str] = None,
            condition_dictionary_value: Optional[str] = None,
            condition_id: Optional[str] = None,
            condition_is_negate: Optional[bool] = None,
            condition_operator: Optional[str] = None,
            condition_type: Optional[str] = None,
            name: Optional[str] = None,
            profiles: Optional[Sequence[str]] = None,
            rank: Optional[int] = None,
            security_group: Optional[str] = None,
            state: Optional[str] = None) -> AuthorizationGlobalExceptionRule
    func GetAuthorizationGlobalExceptionRule(ctx *Context, name string, id IDInput, state *AuthorizationGlobalExceptionRuleState, opts ...ResourceOption) (*AuthorizationGlobalExceptionRule, error)
    public static AuthorizationGlobalExceptionRule Get(string name, Input<string> id, AuthorizationGlobalExceptionRuleState? state, CustomResourceOptions? opts = null)
    public static AuthorizationGlobalExceptionRule get(String name, Output<String> id, AuthorizationGlobalExceptionRuleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles List<string>
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    Childrens []AuthorizationGlobalExceptionRuleChildrenArgs
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    ConditionAttributeName string
    Dictionary attribute name
    ConditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    ConditionDictionaryName string
    Dictionary name
    ConditionDictionaryValue string
    Dictionary value
    ConditionId string
    UUID for condition
    ConditionIsNegate bool
    Indicates whereas this condition is in negate mode
    ConditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    Name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    Profiles []string
    The authorization profile(s)
    Rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    SecurityGroup string
    Security group used in authorization policies
    State string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<AuthorizationGlobalExceptionRuleChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Integer
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens AuthorizationGlobalExceptionRuleChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName string
    Dictionary attribute name
    conditionAttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName string
    Dictionary name
    conditionDictionaryValue string
    Dictionary value
    conditionId string
    UUID for condition
    conditionIsNegate boolean
    Indicates whereas this condition is in negate mode
    conditionOperator string
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name string
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles string[]
    The authorization profile(s)
    rank number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup string
    Security group used in authorization policies
    state string
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens Sequence[AuthorizationGlobalExceptionRuleChildrenArgs]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    condition_attribute_name str
    Dictionary attribute name
    condition_attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    condition_dictionary_name str
    Dictionary name
    condition_dictionary_value str
    Dictionary value
    condition_id str
    UUID for condition
    condition_is_negate bool
    Indicates whereas this condition is in negate mode
    condition_operator str
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name str
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles Sequence[str]
    The authorization profile(s)
    rank int
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    security_group str
    Security group used in authorization policies
    state str
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    conditionAttributeName String
    Dictionary attribute name
    conditionAttributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    conditionDictionaryName String
    Dictionary name
    conditionDictionaryValue String
    Dictionary value
    conditionId String
    UUID for condition
    conditionIsNegate Boolean
    Indicates whereas this condition is in negate mode
    conditionOperator String
    Equality operator - Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute. - Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    name String
    Rule name, [Valid characters are alphanumerics, underscore, hyphen, space, period, parentheses]
    profiles List<String>
    The authorization profile(s)
    rank Number
    The rank (priority) in relation to other rules. Lower rank is higher priority.
    securityGroup String
    Security group used in authorization policies
    state String
    The state that the rule is in. A disabled rule cannot be matched. - Choices: disabled, enabled, monitor

    Supporting Types

    AuthorizationGlobalExceptionRuleChildren, AuthorizationGlobalExceptionRuleChildrenArgs

    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens List<AuthorizationGlobalExceptionRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    Childrens []AuthorizationGlobalExceptionRuleChildrenChildren
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<AuthorizationGlobalExceptionRuleChildrenChildren>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    childrens AuthorizationGlobalExceptionRuleChildrenChildren[]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    childrens Sequence[AuthorizationGlobalExceptionRuleChildrenChildren]
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Indicates whether the record is the condition itself or a logical aggregation. Logical aggreation indicates that additional conditions are present under the children attribute.

    • Choices: ConditionAndBlock, ConditionAttributes, ConditionOrBlock, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    childrens List<Property Map>
    List of child conditions. condition_type must be one of ConditionAndBlock or ConditionOrBlock.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    AuthorizationGlobalExceptionRuleChildrenChildren, AuthorizationGlobalExceptionRuleChildrenChildrenArgs

    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    ConditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    AttributeName string
    Dictionary attribute name
    AttributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    DictionaryName string
    Dictionary name
    DictionaryValue string
    Dictionary value
    Id string
    UUID for condition
    IsNegate bool
    Indicates whereas this condition is in negate mode
    Operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType string
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName string
    Dictionary attribute name
    attributeValue string
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName string
    Dictionary name
    dictionaryValue string
    Dictionary value
    id string
    UUID for condition
    isNegate boolean
    Indicates whereas this condition is in negate mode
    operator string
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    condition_type str
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attribute_name str
    Dictionary attribute name
    attribute_value str
    Attribute value for condition. Value type is specified in dictionary object.
    dictionary_name str
    Dictionary name
    dictionary_value str
    Dictionary value
    id str
    UUID for condition
    is_negate bool
    Indicates whereas this condition is in negate mode
    operator str
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith
    conditionType String
    Condition type.

    • Choices: ConditionAttributes, ConditionReference
    attributeName String
    Dictionary attribute name
    attributeValue String
    Attribute value for condition. Value type is specified in dictionary object.
    dictionaryName String
    Dictionary name
    dictionaryValue String
    Dictionary value
    id String
    UUID for condition
    isNegate Boolean
    Indicates whereas this condition is in negate mode
    operator String
    Equality operator

    • Choices: contains, endsWith, equals, greaterOrEquals, greaterThan, in, ipEquals, ipGreaterThan, ipLessThan, ipNotEquals, lessOrEquals, lessThan, matches, notContains, notEndsWith, notEquals, notIn, notStartsWith, startsWith

    Import

    $ pulumi import ise:networkaccess/authorizationGlobalExceptionRule:AuthorizationGlobalExceptionRule example "76d24097-41c4-4558-a4d0-a8c07ac08470"
    

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ise pulumi/pulumi-ise
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ise Terraform Provider.
    ise logo
    Cisco ISE v0.1.11 published on Monday, Dec 2, 2024 by Pulumi