Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Juniper Mist Provider
  4. API Docs
  5. org
  6. SsoRole
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

junipermist.org.SsoRole

junipermist logo
Viewing docs for Juniper Mist v0.11.2
published on Saturday, Jul 11, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-junipermist

    This resource manages Org SSO Roles for Admin Authentication.

    SSO roles refer to the different functions assigned to users within a Single Sign-On (SSO) system.
    These roles determine the tasks and actions that users can perform within the SSO system. There are typically predefined roles and custom roles in an SSO system.
    Roles in SSO provide a well-defined separation of responsibility and visibility, allowing for granular-level access control on SSO objects.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as junipermist from "@pulumi/juniper-mist";

const ssoRoleOne = new junipermist.org.SsoRole("sso_role_one", {
    orgId: terraformTest.id,
    name: "admin_sso",
    privileges: [{
        scope: "site",
        role: "read",
        siteId: terraformSite.id,
    }],
});

    import pulumi
import pulumi_juniper_mist as junipermist

sso_role_one = junipermist.org.SsoRole("sso_role_one",
    org_id=terraform_test["id"],
    name="admin_sso",
    privileges=[{
        "scope": "site",
        "role": "read",
        "site_id": terraform_site["id"],
    }])

    package main

import (
	"github.com/pulumi/pulumi-junipermist/sdk/go/junipermist/org"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := org.NewSsoRole(ctx, "sso_role_one", &org.SsoRoleArgs{
			OrgId: pulumi.Any(terraformTest.Id),
			Name:  pulumi.String("admin_sso"),
			Privileges: org.SsoRolePrivilegeArray{
				&org.SsoRolePrivilegeArgs{
					Scope:  pulumi.String("site"),
					Role:   pulumi.String("read"),
					SiteId: pulumi.Any(terraformSite.Id),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using JuniperMist = Pulumi.JuniperMist;

return await Deployment.RunAsync(() => 
{
    var ssoRoleOne = new JuniperMist.Org.SsoRole("sso_role_one", new()
    {
        OrgId = terraformTest.Id,
        Name = "admin_sso",
        Privileges = new[]
        {
            new JuniperMist.Org.Inputs.SsoRolePrivilegeArgs
            {
                Scope = "site",
                Role = "read",
                SiteId = terraformSite.Id,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.junipermist.org.SsoRole;
import com.pulumi.junipermist.org.SsoRoleArgs;
import com.pulumi.junipermist.org.inputs.SsoRolePrivilegeArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var ssoRoleOne = new SsoRole("ssoRoleOne", SsoRoleArgs.builder()
            .orgId(terraformTest.id())
            .name("admin_sso")
            .privileges(SsoRolePrivilegeArgs.builder()
                .scope("site")
                .role("read")
                .siteId(terraformSite.id())
                .build())
            .build());

    }
}

    resources:
  ssoRoleOne:
    type: junipermist:org:SsoRole
    name: sso_role_one
    properties:
      orgId: ${terraformTest.id}
      name: admin_sso
      privileges:
        - scope: site
          role: read
          siteId: ${terraformSite.id}

    pulumi {
  required_providers {
    junipermist = {
      source = "pulumi/junipermist"
    }
  }
}

resource "junipermist_org_ssorole" "sso_role_one" {
  org_id = terraformTest.id
  name   = "admin_sso"
  privileges {
    scope   = "site"
    role    = "read"
    site_id = terraformSite.id
  }
}

    Create SsoRole Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new SsoRole(name: string, args: SsoRoleArgs, opts?: CustomResourceOptions);
    @overload
def SsoRole(resource_name: str,
            args: SsoRoleArgs,
            opts: Optional[ResourceOptions] = None)

@overload
def SsoRole(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            org_id: Optional[str] = None,
            privileges: Optional[Sequence[SsoRolePrivilegeArgs]] = None,
            name: Optional[str] = None)
    func NewSsoRole(ctx *Context, name string, args SsoRoleArgs, opts ...ResourceOption) (*SsoRole, error)
    public SsoRole(string name, SsoRoleArgs args, CustomResourceOptions? opts = null)
    public SsoRole(String name, SsoRoleArgs args)
public SsoRole(String name, SsoRoleArgs args, CustomResourceOptions options)

    type: junipermist:org:SsoRole
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "junipermist_org_ssorole" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args SsoRoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args SsoRoleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args SsoRoleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args SsoRoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args SsoRoleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var ssoRoleResource = new JuniperMist.Org.SsoRole("ssoRoleResource", new()
{
    OrgId = "string",
    Privileges = new[]
    {
        new JuniperMist.Org.Inputs.SsoRolePrivilegeArgs
        {
            Role = "string",
            Scope = "string",
            SiteId = "string",
            SitegroupId = "string",
            Views = new[]
            {
                "string",
            },
        },
    },
    Name = "string",
});

    example, err := org.NewSsoRole(ctx, "ssoRoleResource", &org.SsoRoleArgs{
	OrgId: pulumi.String("string"),
	Privileges: org.SsoRolePrivilegeArray{
		&org.SsoRolePrivilegeArgs{
			Role:        pulumi.String("string"),
			Scope:       pulumi.String("string"),
			SiteId:      pulumi.String("string"),
			SitegroupId: pulumi.String("string"),
			Views: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Name: pulumi.String("string"),
})

    resource "junipermist_org_ssorole" "ssoRoleResource" {
  org_id = "string"
  privileges {
    role         = "string"
    scope        = "string"
    site_id      = "string"
    sitegroup_id = "string"
    views        = ["string"]
  }
  name = "string"
}

    var ssoRoleResource = new SsoRole("ssoRoleResource", SsoRoleArgs.builder()
    .orgId("string")
    .privileges(SsoRolePrivilegeArgs.builder()
        .role("string")
        .scope("string")
        .siteId("string")
        .sitegroupId("string")
        .views("string")
        .build())
    .name("string")
    .build());

    sso_role_resource = junipermist.org.SsoRole("ssoRoleResource",
    org_id="string",
    privileges=[{
        "role": "string",
        "scope": "string",
        "site_id": "string",
        "sitegroup_id": "string",
        "views": ["string"],
    }],
    name="string")

    const ssoRoleResource = new junipermist.org.SsoRole("ssoRoleResource", {
    orgId: "string",
    privileges: [{
        role: "string",
        scope: "string",
        siteId: "string",
        sitegroupId: "string",
        views: ["string"],
    }],
    name: "string",
});

    type: junipermist:org:SsoRole
properties:
    name: string
    orgId: string
    privileges:
        - role: string
          scope: string
          siteId: string
          sitegroupId: string
          views:
            - string

    SsoRole Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The SsoRole resource accepts the following input properties:

    OrgId string
    Owning organization identifier for this SSO role
    Privileges List<Pulumi.JuniperMist.Org.Inputs.SsoRolePrivilege>
    Access privileges granted by this organization SSO role
    Name string
    Display name of the organization SSO role
    OrgId string
    Owning organization identifier for this SSO role
    Privileges []SsoRolePrivilegeArgs
    Access privileges granted by this organization SSO role
    Name string
    Display name of the organization SSO role
    org_id string
    Owning organization identifier for this SSO role
    privileges list(object)
    Access privileges granted by this organization SSO role
    name string
    Display name of the organization SSO role
    orgId String
    Owning organization identifier for this SSO role
    privileges List<SsoRolePrivilege>
    Access privileges granted by this organization SSO role
    name String
    Display name of the organization SSO role
    orgId string
    Owning organization identifier for this SSO role
    privileges SsoRolePrivilege[]
    Access privileges granted by this organization SSO role
    name string
    Display name of the organization SSO role
    org_id str
    Owning organization identifier for this SSO role
    privileges Sequence[SsoRolePrivilegeArgs]
    Access privileges granted by this organization SSO role
    name str
    Display name of the organization SSO role
    orgId String
    Owning organization identifier for this SSO role
    privileges List<Property Map>
    Access privileges granted by this organization SSO role
    name String
    Display name of the organization SSO role

    Outputs

    All input properties are implicitly available as output properties. Additionally, the SsoRole resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing SsoRole Resource

    Get an existing SsoRole resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: SsoRoleState, opts?: CustomResourceOptions): SsoRole
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        name: Optional[str] = None,
        org_id: Optional[str] = None,
        privileges: Optional[Sequence[SsoRolePrivilegeArgs]] = None) -> SsoRole
    func GetSsoRole(ctx *Context, name string, id IDInput, state *SsoRoleState, opts ...ResourceOption) (*SsoRole, error)
    public static SsoRole Get(string name, Input<string> id, SsoRoleState? state, CustomResourceOptions? opts = null)
    public static SsoRole get(String name, Output<String> id, SsoRoleState state, CustomResourceOptions options)
    resources:  _:    type: junipermist:org:SsoRole    get:      id: ${id}
    import {
  to = junipermist_org_ssorole.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Name string
    Display name of the organization SSO role
    OrgId string
    Owning organization identifier for this SSO role
    Privileges List<Pulumi.JuniperMist.Org.Inputs.SsoRolePrivilege>
    Access privileges granted by this organization SSO role
    Name string
    Display name of the organization SSO role
    OrgId string
    Owning organization identifier for this SSO role
    Privileges []SsoRolePrivilegeArgs
    Access privileges granted by this organization SSO role
    name string
    Display name of the organization SSO role
    org_id string
    Owning organization identifier for this SSO role
    privileges list(object)
    Access privileges granted by this organization SSO role
    name String
    Display name of the organization SSO role
    orgId String
    Owning organization identifier for this SSO role
    privileges List<SsoRolePrivilege>
    Access privileges granted by this organization SSO role
    name string
    Display name of the organization SSO role
    orgId string
    Owning organization identifier for this SSO role
    privileges SsoRolePrivilege[]
    Access privileges granted by this organization SSO role
    name str
    Display name of the organization SSO role
    org_id str
    Owning organization identifier for this SSO role
    privileges Sequence[SsoRolePrivilegeArgs]
    Access privileges granted by this organization SSO role
    name String
    Display name of the organization SSO role
    orgId String
    Owning organization identifier for this SSO role
    privileges List<Property Map>
    Access privileges granted by this organization SSO role

    Supporting Types

    SsoRolePrivilege, SsoRolePrivilegeArgs

    Role string
    Access role granted by this organization privilege
    Scope string
    Organization hierarchy level where this privilege applies
    SiteId string
    Required if scope==site
    SitegroupId string
    Required if scope==sitegroup
    Views List<string>
    UI views allowed by custom role restrictions
    Role string
    Access role granted by this organization privilege
    Scope string
    Organization hierarchy level where this privilege applies
    SiteId string
    Required if scope==site
    SitegroupId string
    Required if scope==sitegroup
    Views []string
    UI views allowed by custom role restrictions
    role string
    Access role granted by this organization privilege
    scope string
    Organization hierarchy level where this privilege applies
    site_id string
    Required if scope==site
    sitegroup_id string
    Required if scope==sitegroup
    views list(string)
    UI views allowed by custom role restrictions
    role String
    Access role granted by this organization privilege
    scope String
    Organization hierarchy level where this privilege applies
    siteId String
    Required if scope==site
    sitegroupId String
    Required if scope==sitegroup
    views List<String>
    UI views allowed by custom role restrictions
    role string
    Access role granted by this organization privilege
    scope string
    Organization hierarchy level where this privilege applies
    siteId string
    Required if scope==site
    sitegroupId string
    Required if scope==sitegroup
    views string[]
    UI views allowed by custom role restrictions
    role str
    Access role granted by this organization privilege
    scope str
    Organization hierarchy level where this privilege applies
    site_id str
    Required if scope==site
    sitegroup_id str
    Required if scope==sitegroup
    views Sequence[str]
    UI views allowed by custom role restrictions
    role String
    Access role granted by this organization privilege
    scope String
    Organization hierarchy level where this privilege applies
    siteId String
    Required if scope==site
    sitegroupId String
    Required if scope==sitegroup
    views List<String>
    UI views allowed by custom role restrictions

    Import

    Using pulumi import, import junipermist.org.SsoRole with: Org PSK can be imported by specifying the orgId and the ssoRoleId

    $ pulumi import junipermist:org/ssoRole:SsoRole sso_role_one 17b46405-3a6d-4715-8bb4-6bb6d06f316a.d3c42998-9012-4859-9743-6b9bee475309

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    junipermist pulumi/pulumi-junipermist
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mist Terraform Provider.
    junipermist logo
    Viewing docs for Juniper Mist v0.11.2
    published on Saturday, Jul 11, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-junipermist

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial