1. Registry
  2. Packages
  3. Mongodbatlas Provider
  4. API Docs
  5. OrgDelegationSettings
Viewing docs for MongoDB Atlas v4.16.0
published on Thursday, Sep 17, 2026 by Pulumi
mongodbatlas logo mongodbatlas logo
Viewing docs for MongoDB Atlas v4.16.0
published on Thursday, Sep 17, 2026 by Pulumi

    mongodbatlas.OrgDelegationSettings provides a resource for managing the delegation settings of a MongoDB Atlas organization. The resource lets you control how MCP (Model Context Protocol) and partner delegated access are permitted within the organization, as well as the refresh token lifetimes.

    NOTE: Delegation settings are a singleton at the organization level: the settings always exist, so creating this resource updates the existing settings. The delete operation is a no-op that only emits a warning and performs no API calls, so the settings in Atlas are left unchanged; Terraform only removes the resource from the state. Updating the settings requires the Organization Owner role.

    Example Usage

    S

    import * as pulumi from "@pulumi/pulumi";
    import * as mongodbatlas from "@pulumi/mongodbatlas";
    
    const thisOrgDelegationSettings = new mongodbatlas.OrgDelegationSettings("this", {
        orgId: atlasOrgId,
        delegatedMcpAccess: "READ_ONLY",
        delegatedPartnerAccess: "DISALLOWED",
        idleRefreshTokenLifetime: 3600,
        maximumRefreshTokenLifetime: 86400,
    });
    const _this = mongodbatlas.getOrgDelegationSettingsOutput({
        orgId: thisOrgDelegationSettings.orgId,
    });
    export const orgDelegationSettingsDelegatedMcpAccess = thisOrgDelegationSettings.delegatedMcpAccess;
    export const orgDelegationSettingsDelegatedPartnerAccess = thisOrgDelegationSettings.delegatedPartnerAccess;
    export const orgDelegationSettingsIdleRefreshTokenLifetime = thisOrgDelegationSettings.idleRefreshTokenLifetime;
    export const orgDelegationSettingsMaximumRefreshTokenLifetime = thisOrgDelegationSettings.maximumRefreshTokenLifetime;
    export const orgDelegationSettingsDelegatedMcpAccessDs = _this.delegatedMcpAccess;
    
    import pulumi
    import pulumi_mongodbatlas as mongodbatlas
    
    this_org_delegation_settings = mongodbatlas.OrgDelegationSettings("this",
        org_id=atlas_org_id,
        delegated_mcp_access="READ_ONLY",
        delegated_partner_access="DISALLOWED",
        idle_refresh_token_lifetime=3600,
        maximum_refresh_token_lifetime=86400)
    this = mongodbatlas.get_org_delegation_settings_output(org_id=this_org_delegation_settings.org_id)
    pulumi.export("orgDelegationSettingsDelegatedMcpAccess", this_org_delegation_settings.delegated_mcp_access)
    pulumi.export("orgDelegationSettingsDelegatedPartnerAccess", this_org_delegation_settings.delegated_partner_access)
    pulumi.export("orgDelegationSettingsIdleRefreshTokenLifetime", this_org_delegation_settings.idle_refresh_token_lifetime)
    pulumi.export("orgDelegationSettingsMaximumRefreshTokenLifetime", this_org_delegation_settings.maximum_refresh_token_lifetime)
    pulumi.export("orgDelegationSettingsDelegatedMcpAccessDs", this.delegated_mcp_access)
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-mongodbatlas/sdk/v4/go/mongodbatlas"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		thisOrgDelegationSettings, err := mongodbatlas.NewOrgDelegationSettings(ctx, "this", &mongodbatlas.OrgDelegationSettingsArgs{
    			OrgId:                       pulumi.Any(atlasOrgId),
    			DelegatedMcpAccess:          pulumi.String("READ_ONLY"),
    			DelegatedPartnerAccess:      pulumi.String("DISALLOWED"),
    			IdleRefreshTokenLifetime:    pulumi.Int(3600),
    			MaximumRefreshTokenLifetime: pulumi.Int(86400),
    		})
    		if err != nil {
    			return err
    		}
    		this := mongodbatlas.GetOrgDelegationSettingsOutput(ctx, mongodbatlas.GetOrgDelegationSettingsOutputArgs{
    			OrgId: thisOrgDelegationSettings.OrgId,
    		}, nil)
    		ctx.Export("orgDelegationSettingsDelegatedMcpAccess", thisOrgDelegationSettings.DelegatedMcpAccess)
    		ctx.Export("orgDelegationSettingsDelegatedPartnerAccess", thisOrgDelegationSettings.DelegatedPartnerAccess)
    		ctx.Export("orgDelegationSettingsIdleRefreshTokenLifetime", thisOrgDelegationSettings.IdleRefreshTokenLifetime)
    		ctx.Export("orgDelegationSettingsMaximumRefreshTokenLifetime", thisOrgDelegationSettings.MaximumRefreshTokenLifetime)
    		ctx.Export("orgDelegationSettingsDelegatedMcpAccessDs", this.DelegatedMcpAccess())
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Mongodbatlas = Pulumi.Mongodbatlas;
    
    return await Deployment.RunAsync(() => 
    {
        var thisOrgDelegationSettings = new Mongodbatlas.OrgDelegationSettings("this", new()
        {
            OrgId = atlasOrgId,
            DelegatedMcpAccess = "READ_ONLY",
            DelegatedPartnerAccess = "DISALLOWED",
            IdleRefreshTokenLifetime = 3600,
            MaximumRefreshTokenLifetime = 86400,
        });
    
        var @this = Mongodbatlas.GetOrgDelegationSettings.Invoke(new()
        {
            OrgId = thisOrgDelegationSettings.OrgId,
        });
    
        return new Dictionary<string, object?>
        {
            ["orgDelegationSettingsDelegatedMcpAccess"] = thisOrgDelegationSettings.DelegatedMcpAccess,
            ["orgDelegationSettingsDelegatedPartnerAccess"] = thisOrgDelegationSettings.DelegatedPartnerAccess,
            ["orgDelegationSettingsIdleRefreshTokenLifetime"] = thisOrgDelegationSettings.IdleRefreshTokenLifetime,
            ["orgDelegationSettingsMaximumRefreshTokenLifetime"] = thisOrgDelegationSettings.MaximumRefreshTokenLifetime,
            ["orgDelegationSettingsDelegatedMcpAccessDs"] = @this.Apply(@this => @this.Apply(getOrgDelegationSettingsResult => getOrgDelegationSettingsResult.DelegatedMcpAccess)),
        };
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.mongodbatlas.OrgDelegationSettings;
    import com.pulumi.mongodbatlas.OrgDelegationSettingsArgs;
    import com.pulumi.mongodbatlas.MongodbatlasFunctions;
    import com.pulumi.mongodbatlas.inputs.GetOrgDelegationSettingsArgs;
    import java.util.ArrayList;
    import java.util.Arrays;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var thisOrgDelegationSettings = new OrgDelegationSettings("thisOrgDelegationSettings", OrgDelegationSettingsArgs.builder()
                .orgId(atlasOrgId)
                .delegatedMcpAccess("READ_ONLY")
                .delegatedPartnerAccess("DISALLOWED")
                .idleRefreshTokenLifetime(3600)
                .maximumRefreshTokenLifetime(86400)
                .build());
    
            final var this = MongodbatlasFunctions.getOrgDelegationSettings(GetOrgDelegationSettingsArgs.builder()
                .orgId(thisOrgDelegationSettings.orgId())
                .build());
    
            ctx.export("orgDelegationSettingsDelegatedMcpAccess", thisOrgDelegationSettings.delegatedMcpAccess());
            ctx.export("orgDelegationSettingsDelegatedPartnerAccess", thisOrgDelegationSettings.delegatedPartnerAccess());
            ctx.export("orgDelegationSettingsIdleRefreshTokenLifetime", thisOrgDelegationSettings.idleRefreshTokenLifetime());
            ctx.export("orgDelegationSettingsMaximumRefreshTokenLifetime", thisOrgDelegationSettings.maximumRefreshTokenLifetime());
            ctx.export("orgDelegationSettingsDelegatedMcpAccessDs", this_.applyValue(_this_ -> _this_.delegatedMcpAccess()));
        }
    }
    
    resources:
      thisOrgDelegationSettings:
        type: mongodbatlas:OrgDelegationSettings
        name: this
        properties:
          orgId: ${atlasOrgId}
          delegatedMcpAccess: READ_ONLY
          delegatedPartnerAccess: DISALLOWED
          idleRefreshTokenLifetime: 3600
          maximumRefreshTokenLifetime: 86400
    variables:
      this:
        fn::invoke:
          function: mongodbatlas:getOrgDelegationSettings
          arguments:
            orgId: ${thisOrgDelegationSettings.orgId}
    outputs:
      orgDelegationSettingsDelegatedMcpAccess: ${thisOrgDelegationSettings.delegatedMcpAccess}
      orgDelegationSettingsDelegatedPartnerAccess: ${thisOrgDelegationSettings.delegatedPartnerAccess}
      orgDelegationSettingsIdleRefreshTokenLifetime: ${thisOrgDelegationSettings.idleRefreshTokenLifetime}
      orgDelegationSettingsMaximumRefreshTokenLifetime: ${thisOrgDelegationSettings.maximumRefreshTokenLifetime}
      orgDelegationSettingsDelegatedMcpAccessDs: ${this.delegatedMcpAccess}
    
    pulumi {
      required_providers {
        mongodbatlas = {
          source = "pulumi/mongodbatlas"
        }
      }
    }
    
    data "mongodbatlas_getorgdelegationsettings" "this" {
      org_id = mongodbatlas_orgdelegationsettings.this.org_id
    }
    
    resource "mongodbatlas_orgdelegationsettings" "this" {
      org_id                         = atlasOrgId
      delegated_mcp_access           = "READ_ONLY"
      delegated_partner_access       = "DISALLOWED"
      idle_refresh_token_lifetime    = 3600
      maximum_refresh_token_lifetime = 86400
    }
    output "orgDelegationSettingsDelegatedMcpAccess" {
      value = mongodbatlas_orgdelegationsettings.this.delegated_mcp_access
    }
    output "orgDelegationSettingsDelegatedPartnerAccess" {
      value = mongodbatlas_orgdelegationsettings.this.delegated_partner_access
    }
    output "orgDelegationSettingsIdleRefreshTokenLifetime" {
      value = mongodbatlas_orgdelegationsettings.this.idle_refresh_token_lifetime
    }
    output "orgDelegationSettingsMaximumRefreshTokenLifetime" {
      value = mongodbatlas_orgdelegationsettings.this.maximum_refresh_token_lifetime
    }
    output "orgDelegationSettingsDelegatedMcpAccessDs" {
      value = data.mongodbatlas_getorgdelegationsettings.this.delegated_mcp_access
    }
    

    Create OrgDelegationSettings Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new OrgDelegationSettings(name: string, args: OrgDelegationSettingsArgs, opts?: CustomResourceOptions);
    @overload
    def OrgDelegationSettings(resource_name: str,
                              args: OrgDelegationSettingsArgs,
                              opts: Optional[ResourceOptions] = None)
    
    @overload
    def OrgDelegationSettings(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              org_id: Optional[str] = None,
                              delegated_mcp_access: Optional[str] = None,
                              delegated_partner_access: Optional[str] = None,
                              idle_refresh_token_lifetime: Optional[int] = None,
                              maximum_refresh_token_lifetime: Optional[int] = None)
    func NewOrgDelegationSettings(ctx *Context, name string, args OrgDelegationSettingsArgs, opts ...ResourceOption) (*OrgDelegationSettings, error)
    public OrgDelegationSettings(string name, OrgDelegationSettingsArgs args, CustomResourceOptions? opts = null)
    public OrgDelegationSettings(String name, OrgDelegationSettingsArgs args)
    public OrgDelegationSettings(String name, OrgDelegationSettingsArgs args, CustomResourceOptions options)
    
    type: mongodbatlas:OrgDelegationSettings
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "mongodbatlas_org_delegation_settings" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args OrgDelegationSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OrgDelegationSettingsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OrgDelegationSettingsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OrgDelegationSettingsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OrgDelegationSettingsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var orgDelegationSettingsResource = new Mongodbatlas.OrgDelegationSettings("orgDelegationSettingsResource", new()
    {
        OrgId = "string",
        DelegatedMcpAccess = "string",
        DelegatedPartnerAccess = "string",
        IdleRefreshTokenLifetime = 0,
        MaximumRefreshTokenLifetime = 0,
    });
    
    example, err := mongodbatlas.NewOrgDelegationSettings(ctx, "orgDelegationSettingsResource", &mongodbatlas.OrgDelegationSettingsArgs{
    	OrgId:                       pulumi.String("string"),
    	DelegatedMcpAccess:          pulumi.String("string"),
    	DelegatedPartnerAccess:      pulumi.String("string"),
    	IdleRefreshTokenLifetime:    pulumi.Int(0),
    	MaximumRefreshTokenLifetime: pulumi.Int(0),
    })
    
    resource "mongodbatlas_org_delegation_settings" "orgDelegationSettingsResource" {
      lifecycle {
        create_before_destroy = true
      }
      org_id                         = "string"
      delegated_mcp_access           = "string"
      delegated_partner_access       = "string"
      idle_refresh_token_lifetime    = 0
      maximum_refresh_token_lifetime = 0
    }
    
    var orgDelegationSettingsResource = new OrgDelegationSettings("orgDelegationSettingsResource", OrgDelegationSettingsArgs.builder()
        .orgId("string")
        .delegatedMcpAccess("string")
        .delegatedPartnerAccess("string")
        .idleRefreshTokenLifetime(0)
        .maximumRefreshTokenLifetime(0)
        .build());
    
    org_delegation_settings_resource = mongodbatlas.OrgDelegationSettings("orgDelegationSettingsResource",
        org_id="string",
        delegated_mcp_access="string",
        delegated_partner_access="string",
        idle_refresh_token_lifetime=0,
        maximum_refresh_token_lifetime=0)
    
    const orgDelegationSettingsResource = new mongodbatlas.OrgDelegationSettings("orgDelegationSettingsResource", {
        orgId: "string",
        delegatedMcpAccess: "string",
        delegatedPartnerAccess: "string",
        idleRefreshTokenLifetime: 0,
        maximumRefreshTokenLifetime: 0,
    });
    
    type: mongodbatlas:OrgDelegationSettings
    properties:
        delegatedMcpAccess: string
        delegatedPartnerAccess: string
        idleRefreshTokenLifetime: 0
        maximumRefreshTokenLifetime: 0
        orgId: string
    

    OrgDelegationSettings Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The OrgDelegationSettings resource accepts the following input properties:

    OrgId string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    DelegatedMcpAccess string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    DelegatedPartnerAccess string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    IdleRefreshTokenLifetime int
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    MaximumRefreshTokenLifetime int
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    OrgId string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    DelegatedMcpAccess string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    DelegatedPartnerAccess string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    IdleRefreshTokenLifetime int
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    MaximumRefreshTokenLifetime int
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    org_id string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegated_mcp_access string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegated_partner_access string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idle_refresh_token_lifetime number
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximum_refresh_token_lifetime number
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    orgId String
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegatedMcpAccess String
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegatedPartnerAccess String
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idleRefreshTokenLifetime Integer
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximumRefreshTokenLifetime Integer
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    orgId string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegatedMcpAccess string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegatedPartnerAccess string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idleRefreshTokenLifetime number
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximumRefreshTokenLifetime number
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    org_id str
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegated_mcp_access str
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegated_partner_access str
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idle_refresh_token_lifetime int
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximum_refresh_token_lifetime int
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    orgId String
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegatedMcpAccess String
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegatedPartnerAccess String
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idleRefreshTokenLifetime Number
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximumRefreshTokenLifetime Number
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OrgDelegationSettings resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing OrgDelegationSettings Resource

    Get an existing OrgDelegationSettings resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: OrgDelegationSettingsState, opts?: CustomResourceOptions): OrgDelegationSettings
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            delegated_mcp_access: Optional[str] = None,
            delegated_partner_access: Optional[str] = None,
            idle_refresh_token_lifetime: Optional[int] = None,
            maximum_refresh_token_lifetime: Optional[int] = None,
            org_id: Optional[str] = None) -> OrgDelegationSettings
    func GetOrgDelegationSettings(ctx *Context, name string, id IDInput, state *OrgDelegationSettingsState, opts ...ResourceOption) (*OrgDelegationSettings, error)
    public static OrgDelegationSettings Get(string name, Input<string> id, OrgDelegationSettingsState? state, CustomResourceOptions? opts = null)
    public static OrgDelegationSettings get(String name, Output<String> id, OrgDelegationSettingsState state, CustomResourceOptions options)
    resources:  _:    type: mongodbatlas:OrgDelegationSettings    get:      id: ${id}
    import {
      to = mongodbatlas_org_delegation_settings.example
      id = "${id}"
    }
    
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DelegatedMcpAccess string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    DelegatedPartnerAccess string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    IdleRefreshTokenLifetime int
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    MaximumRefreshTokenLifetime int
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    OrgId string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    DelegatedMcpAccess string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    DelegatedPartnerAccess string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    IdleRefreshTokenLifetime int
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    MaximumRefreshTokenLifetime int
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    OrgId string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegated_mcp_access string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegated_partner_access string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idle_refresh_token_lifetime number
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximum_refresh_token_lifetime number
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    org_id string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegatedMcpAccess String
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegatedPartnerAccess String
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idleRefreshTokenLifetime Integer
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximumRefreshTokenLifetime Integer
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    orgId String
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegatedMcpAccess string
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegatedPartnerAccess string
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idleRefreshTokenLifetime number
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximumRefreshTokenLifetime number
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    orgId string
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegated_mcp_access str
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegated_partner_access str
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idle_refresh_token_lifetime int
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximum_refresh_token_lifetime int
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    org_id str
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.
    delegatedMcpAccess String
    Policy that controls how MCP (Model Context Protocol) delegated access is permitted within this organization. Possible values are DISALLOWED, READ_ONLY, and READ_WRITE. Defaults to DISALLOWED.
    delegatedPartnerAccess String
    Policy that controls whether partner delegated access is permitted within this organization. Possible values are DISALLOWED and READ_WRITE. Defaults to DISALLOWED.
    idleRefreshTokenLifetime Number
    Maximum number of seconds a refresh token may be idle before it expires. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    maximumRefreshTokenLifetime Number
    Maximum lifetime of a refresh token in seconds, regardless of activity. Omit to leave unchanged; set to null to reset to the system default. Must be between 1 and 31536000 (1 year) when provided.
    orgId String
    Unique 24-hexadecimal digit string that identifies the organization that contains your projects.

    Import

    Import the Delegation Settings resource by using the Organization ID. For example:

    $ pulumi import mongodbatlas:index/orgDelegationSettings:OrgDelegationSettings example 1112222b3bf99403840e8934
    

    For more information, see Delegation Settings in the MongoDB Atlas Administration API documentation.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    MongoDB Atlas pulumi/pulumi-mongodbatlas
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the mongodbatlas Terraform Provider.
    mongodbatlas logo mongodbatlas logo
    Viewing docs for MongoDB Atlas v4.16.0
    published on Thursday, Sep 17, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial