1. Packages
  2. Opentelekomcloud Provider
  3. API Docs
  4. IdentityUserV3
opentelekomcloud 1.36.51 published on Thursday, Oct 23, 2025 by opentelekomcloud
opentelekomcloud/terraform-provider-opentelekomcloud

opentelekomcloud.IdentityUserV3

Get Started
opentelekomcloud logo
opentelekomcloud 1.36.51 published on Thursday, Oct 23, 2025 by opentelekomcloud
opentelekomcloud/terraform-provider-opentelekomcloud

    Up-to-date reference of API arguments for IAM user you can get at documentation portal

    Manages a User resource within OpenTelekomCloud IAM service.

    You need to have admin privileges in your OpenTelekomCloud cloud to use this resource.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as opentelekomcloud from "@pulumi/opentelekomcloud";

const user1 = new opentelekomcloud.IdentityUserV3("user1", {password: "password123!"});

    import pulumi
import pulumi_opentelekomcloud as opentelekomcloud

user1 = opentelekomcloud.IdentityUserV3("user1", password="password123!")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/opentelekomcloud/opentelekomcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := opentelekomcloud.NewIdentityUserV3(ctx, "user1", &opentelekomcloud.IdentityUserV3Args{
			Password: pulumi.String("password123!"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Opentelekomcloud = Pulumi.Opentelekomcloud;

return await Deployment.RunAsync(() => 
{
    var user1 = new Opentelekomcloud.IdentityUserV3("user1", new()
    {
        Password = "password123!",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.opentelekomcloud.IdentityUserV3;
import com.pulumi.opentelekomcloud.IdentityUserV3Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var user1 = new IdentityUserV3("user1", IdentityUserV3Args.builder()
            .password("password123!")
            .build());

    }
}

    resources:
  user1:
    type: opentelekomcloud:IdentityUserV3
    properties:
      password: password123!

    Example with login protection

    import * as pulumi from "@pulumi/pulumi";
import * as opentelekomcloud from "@pulumi/opentelekomcloud";

const user1 = new opentelekomcloud.IdentityUserV3("user1", {
    email: "test@acme.org",
    enabled: true,
    loginProtection: {
        enabled: true,
        verificationMethod: "email",
    },
    password: "password123@!",
    sendWelcomeEmail: true,
});

    import pulumi
import pulumi_opentelekomcloud as opentelekomcloud

user1 = opentelekomcloud.IdentityUserV3("user1",
    email="test@acme.org",
    enabled=True,
    login_protection={
        "enabled": True,
        "verification_method": "email",
    },
    password="password123@!",
    send_welcome_email=True)

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/opentelekomcloud/opentelekomcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := opentelekomcloud.NewIdentityUserV3(ctx, "user1", &opentelekomcloud.IdentityUserV3Args{
			Email:   pulumi.String("test@acme.org"),
			Enabled: pulumi.Bool(true),
			LoginProtection: &opentelekomcloud.IdentityUserV3LoginProtectionArgs{
				Enabled:            pulumi.Bool(true),
				VerificationMethod: pulumi.String("email"),
			},
			Password:         pulumi.String("password123@!"),
			SendWelcomeEmail: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Opentelekomcloud = Pulumi.Opentelekomcloud;

return await Deployment.RunAsync(() => 
{
    var user1 = new Opentelekomcloud.IdentityUserV3("user1", new()
    {
        Email = "test@acme.org",
        Enabled = true,
        LoginProtection = new Opentelekomcloud.Inputs.IdentityUserV3LoginProtectionArgs
        {
            Enabled = true,
            VerificationMethod = "email",
        },
        Password = "password123@!",
        SendWelcomeEmail = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.opentelekomcloud.IdentityUserV3;
import com.pulumi.opentelekomcloud.IdentityUserV3Args;
import com.pulumi.opentelekomcloud.inputs.IdentityUserV3LoginProtectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var user1 = new IdentityUserV3("user1", IdentityUserV3Args.builder()
            .email("test@acme.org")
            .enabled(true)
            .loginProtection(IdentityUserV3LoginProtectionArgs.builder()
                .enabled(true)
                .verificationMethod("email")
                .build())
            .password("password123@!")
            .sendWelcomeEmail(true)
            .build());

    }
}

    resources:
  user1:
    type: opentelekomcloud:IdentityUserV3
    properties:
      email: test@acme.org
      enabled: true
      loginProtection:
        enabled: true
        verificationMethod: email
      password: password123@!
      sendWelcomeEmail: true

    Create IdentityUserV3 Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IdentityUserV3(name: string, args?: IdentityUserV3Args, opts?: CustomResourceOptions);
    @overload
def IdentityUserV3(resource_name: str,
                   args: Optional[IdentityUserV3Args] = None,
                   opts: Optional[ResourceOptions] = None)

@overload
def IdentityUserV3(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   access_type: Optional[str] = None,
                   country_code: Optional[str] = None,
                   description: Optional[str] = None,
                   email: Optional[str] = None,
                   enabled: Optional[bool] = None,
                   identity_user_v3_id: Optional[str] = None,
                   login_protection: Optional[IdentityUserV3LoginProtectionArgs] = None,
                   name: Optional[str] = None,
                   password: Optional[str] = None,
                   phone: Optional[str] = None,
                   pwd_reset: Optional[bool] = None,
                   send_welcome_email: Optional[bool] = None)
    func NewIdentityUserV3(ctx *Context, name string, args *IdentityUserV3Args, opts ...ResourceOption) (*IdentityUserV3, error)
    public IdentityUserV3(string name, IdentityUserV3Args? args = null, CustomResourceOptions? opts = null)
    public IdentityUserV3(String name, IdentityUserV3Args args)
public IdentityUserV3(String name, IdentityUserV3Args args, CustomResourceOptions options)

    type: opentelekomcloud:IdentityUserV3
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args IdentityUserV3Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IdentityUserV3Args
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IdentityUserV3Args
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IdentityUserV3Args
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IdentityUserV3Args
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var identityUserV3Resource = new Opentelekomcloud.IdentityUserV3("identityUserV3Resource", new()
{
    AccessType = "string",
    CountryCode = "string",
    Description = "string",
    Email = "string",
    Enabled = false,
    IdentityUserV3Id = "string",
    LoginProtection = new Opentelekomcloud.Inputs.IdentityUserV3LoginProtectionArgs
    {
        Enabled = false,
        VerificationMethod = "string",
    },
    Name = "string",
    Password = "string",
    Phone = "string",
    PwdReset = false,
    SendWelcomeEmail = false,
});

    example, err := opentelekomcloud.NewIdentityUserV3(ctx, "identityUserV3Resource", &opentelekomcloud.IdentityUserV3Args{
	AccessType:       pulumi.String("string"),
	CountryCode:      pulumi.String("string"),
	Description:      pulumi.String("string"),
	Email:            pulumi.String("string"),
	Enabled:          pulumi.Bool(false),
	IdentityUserV3Id: pulumi.String("string"),
	LoginProtection: &opentelekomcloud.IdentityUserV3LoginProtectionArgs{
		Enabled:            pulumi.Bool(false),
		VerificationMethod: pulumi.String("string"),
	},
	Name:             pulumi.String("string"),
	Password:         pulumi.String("string"),
	Phone:            pulumi.String("string"),
	PwdReset:         pulumi.Bool(false),
	SendWelcomeEmail: pulumi.Bool(false),
})

    var identityUserV3Resource = new IdentityUserV3("identityUserV3Resource", IdentityUserV3Args.builder()
    .accessType("string")
    .countryCode("string")
    .description("string")
    .email("string")
    .enabled(false)
    .identityUserV3Id("string")
    .loginProtection(IdentityUserV3LoginProtectionArgs.builder()
        .enabled(false)
        .verificationMethod("string")
        .build())
    .name("string")
    .password("string")
    .phone("string")
    .pwdReset(false)
    .sendWelcomeEmail(false)
    .build());

    identity_user_v3_resource = opentelekomcloud.IdentityUserV3("identityUserV3Resource",
    access_type="string",
    country_code="string",
    description="string",
    email="string",
    enabled=False,
    identity_user_v3_id="string",
    login_protection={
        "enabled": False,
        "verification_method": "string",
    },
    name="string",
    password="string",
    phone="string",
    pwd_reset=False,
    send_welcome_email=False)

    const identityUserV3Resource = new opentelekomcloud.IdentityUserV3("identityUserV3Resource", {
    accessType: "string",
    countryCode: "string",
    description: "string",
    email: "string",
    enabled: false,
    identityUserV3Id: "string",
    loginProtection: {
        enabled: false,
        verificationMethod: "string",
    },
    name: "string",
    password: "string",
    phone: "string",
    pwdReset: false,
    sendWelcomeEmail: false,
});

    type: opentelekomcloud:IdentityUserV3
properties:
    accessType: string
    countryCode: string
    description: string
    email: string
    enabled: false
    identityUserV3Id: string
    loginProtection:
        enabled: false
        verificationMethod: string
    name: string
    password: string
    phone: string
    pwdReset: false
    sendWelcomeEmail: false

    IdentityUserV3 Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IdentityUserV3 resource accepts the following input properties:

    AccessType string
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    CountryCode string
    Specifies the country code. This parameter must be used together with phone.
    Description string
    Specifies the description of the user.
    Email string
    Specifies the email address with a maximum of 255 characters.
    Enabled bool
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    IdentityUserV3Id string
    The resource ID in UUID format.
    LoginProtection IdentityUserV3LoginProtection
    Login protection configuration. The login_protection block supports:
    Name string
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    Password string
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    Phone string
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    PwdReset bool
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    SendWelcomeEmail bool

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    AccessType string
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    CountryCode string
    Specifies the country code. This parameter must be used together with phone.
    Description string
    Specifies the description of the user.
    Email string
    Specifies the email address with a maximum of 255 characters.
    Enabled bool
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    IdentityUserV3Id string
    The resource ID in UUID format.
    LoginProtection IdentityUserV3LoginProtectionArgs
    Login protection configuration. The login_protection block supports:
    Name string
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    Password string
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    Phone string
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    PwdReset bool
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    SendWelcomeEmail bool

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    accessType String
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    countryCode String
    Specifies the country code. This parameter must be used together with phone.
    description String
    Specifies the description of the user.
    email String
    Specifies the email address with a maximum of 255 characters.
    enabled Boolean
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identityUserV3Id String
    The resource ID in UUID format.
    loginProtection IdentityUserV3LoginProtection
    Login protection configuration. The login_protection block supports:
    name String
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password String
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    phone String
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwdReset Boolean
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    sendWelcomeEmail Boolean

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    accessType string
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    countryCode string
    Specifies the country code. This parameter must be used together with phone.
    description string
    Specifies the description of the user.
    email string
    Specifies the email address with a maximum of 255 characters.
    enabled boolean
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identityUserV3Id string
    The resource ID in UUID format.
    loginProtection IdentityUserV3LoginProtection
    Login protection configuration. The login_protection block supports:
    name string
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password string
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    phone string
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwdReset boolean
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    sendWelcomeEmail boolean

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    access_type str
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    country_code str
    Specifies the country code. This parameter must be used together with phone.
    description str
    Specifies the description of the user.
    email str
    Specifies the email address with a maximum of 255 characters.
    enabled bool
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identity_user_v3_id str
    The resource ID in UUID format.
    login_protection IdentityUserV3LoginProtectionArgs
    Login protection configuration. The login_protection block supports:
    name str
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password str
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    phone str
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwd_reset bool
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    send_welcome_email bool

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    accessType String
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    countryCode String
    Specifies the country code. This parameter must be used together with phone.
    description String
    Specifies the description of the user.
    email String
    Specifies the email address with a maximum of 255 characters.
    enabled Boolean
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identityUserV3Id String
    The resource ID in UUID format.
    loginProtection Property Map
    Login protection configuration. The login_protection block supports:
    name String
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password String
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    phone String
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwdReset Boolean
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    sendWelcomeEmail Boolean

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IdentityUserV3 resource produces the following output properties:

    CreateTime string
    The time when the IAM user was created.
    DomainId string
    The domain user belongs to.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastLogin string
    The time when the IAM user last login.
    PasswordStrength string
    Indicates the password strength.
    XuserId string
    ID of the user in the external system.
    XuserType string
    Type of the user in the external system.
    CreateTime string
    The time when the IAM user was created.
    DomainId string
    The domain user belongs to.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastLogin string
    The time when the IAM user last login.
    PasswordStrength string
    Indicates the password strength.
    XuserId string
    ID of the user in the external system.
    XuserType string
    Type of the user in the external system.
    createTime String
    The time when the IAM user was created.
    domainId String
    The domain user belongs to.
    id String
    The provider-assigned unique ID for this managed resource.
    lastLogin String
    The time when the IAM user last login.
    passwordStrength String
    Indicates the password strength.
    xuserId String
    ID of the user in the external system.
    xuserType String
    Type of the user in the external system.
    createTime string
    The time when the IAM user was created.
    domainId string
    The domain user belongs to.
    id string
    The provider-assigned unique ID for this managed resource.
    lastLogin string
    The time when the IAM user last login.
    passwordStrength string
    Indicates the password strength.
    xuserId string
    ID of the user in the external system.
    xuserType string
    Type of the user in the external system.
    create_time str
    The time when the IAM user was created.
    domain_id str
    The domain user belongs to.
    id str
    The provider-assigned unique ID for this managed resource.
    last_login str
    The time when the IAM user last login.
    password_strength str
    Indicates the password strength.
    xuser_id str
    ID of the user in the external system.
    xuser_type str
    Type of the user in the external system.
    createTime String
    The time when the IAM user was created.
    domainId String
    The domain user belongs to.
    id String
    The provider-assigned unique ID for this managed resource.
    lastLogin String
    The time when the IAM user last login.
    passwordStrength String
    Indicates the password strength.
    xuserId String
    ID of the user in the external system.
    xuserType String
    Type of the user in the external system.

    Look up Existing IdentityUserV3 Resource

    Get an existing IdentityUserV3 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IdentityUserV3State, opts?: CustomResourceOptions): IdentityUserV3
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_type: Optional[str] = None,
        country_code: Optional[str] = None,
        create_time: Optional[str] = None,
        description: Optional[str] = None,
        domain_id: Optional[str] = None,
        email: Optional[str] = None,
        enabled: Optional[bool] = None,
        identity_user_v3_id: Optional[str] = None,
        last_login: Optional[str] = None,
        login_protection: Optional[IdentityUserV3LoginProtectionArgs] = None,
        name: Optional[str] = None,
        password: Optional[str] = None,
        password_strength: Optional[str] = None,
        phone: Optional[str] = None,
        pwd_reset: Optional[bool] = None,
        send_welcome_email: Optional[bool] = None,
        xuser_id: Optional[str] = None,
        xuser_type: Optional[str] = None) -> IdentityUserV3
    func GetIdentityUserV3(ctx *Context, name string, id IDInput, state *IdentityUserV3State, opts ...ResourceOption) (*IdentityUserV3, error)
    public static IdentityUserV3 Get(string name, Input<string> id, IdentityUserV3State? state, CustomResourceOptions? opts = null)
    public static IdentityUserV3 get(String name, Output<String> id, IdentityUserV3State state, CustomResourceOptions options)
    resources:  _:    type: opentelekomcloud:IdentityUserV3    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccessType string
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    CountryCode string
    Specifies the country code. This parameter must be used together with phone.
    CreateTime string
    The time when the IAM user was created.
    Description string
    Specifies the description of the user.
    DomainId string
    The domain user belongs to.
    Email string
    Specifies the email address with a maximum of 255 characters.
    Enabled bool
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    IdentityUserV3Id string
    The resource ID in UUID format.
    LastLogin string
    The time when the IAM user last login.
    LoginProtection IdentityUserV3LoginProtection
    Login protection configuration. The login_protection block supports:
    Name string
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    Password string
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    PasswordStrength string
    Indicates the password strength.
    Phone string
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    PwdReset bool
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    SendWelcomeEmail bool

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    XuserId string
    ID of the user in the external system.
    XuserType string
    Type of the user in the external system.
    AccessType string
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    CountryCode string
    Specifies the country code. This parameter must be used together with phone.
    CreateTime string
    The time when the IAM user was created.
    Description string
    Specifies the description of the user.
    DomainId string
    The domain user belongs to.
    Email string
    Specifies the email address with a maximum of 255 characters.
    Enabled bool
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    IdentityUserV3Id string
    The resource ID in UUID format.
    LastLogin string
    The time when the IAM user last login.
    LoginProtection IdentityUserV3LoginProtectionArgs
    Login protection configuration. The login_protection block supports:
    Name string
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    Password string
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    PasswordStrength string
    Indicates the password strength.
    Phone string
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    PwdReset bool
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    SendWelcomeEmail bool

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    XuserId string
    ID of the user in the external system.
    XuserType string
    Type of the user in the external system.
    accessType String
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    countryCode String
    Specifies the country code. This parameter must be used together with phone.
    createTime String
    The time when the IAM user was created.
    description String
    Specifies the description of the user.
    domainId String
    The domain user belongs to.
    email String
    Specifies the email address with a maximum of 255 characters.
    enabled Boolean
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identityUserV3Id String
    The resource ID in UUID format.
    lastLogin String
    The time when the IAM user last login.
    loginProtection IdentityUserV3LoginProtection
    Login protection configuration. The login_protection block supports:
    name String
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password String
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    passwordStrength String
    Indicates the password strength.
    phone String
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwdReset Boolean
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    sendWelcomeEmail Boolean

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    xuserId String
    ID of the user in the external system.
    xuserType String
    Type of the user in the external system.
    accessType string
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    countryCode string
    Specifies the country code. This parameter must be used together with phone.
    createTime string
    The time when the IAM user was created.
    description string
    Specifies the description of the user.
    domainId string
    The domain user belongs to.
    email string
    Specifies the email address with a maximum of 255 characters.
    enabled boolean
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identityUserV3Id string
    The resource ID in UUID format.
    lastLogin string
    The time when the IAM user last login.
    loginProtection IdentityUserV3LoginProtection
    Login protection configuration. The login_protection block supports:
    name string
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password string
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    passwordStrength string
    Indicates the password strength.
    phone string
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwdReset boolean
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    sendWelcomeEmail boolean

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    xuserId string
    ID of the user in the external system.
    xuserType string
    Type of the user in the external system.
    access_type str
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    country_code str
    Specifies the country code. This parameter must be used together with phone.
    create_time str
    The time when the IAM user was created.
    description str
    Specifies the description of the user.
    domain_id str
    The domain user belongs to.
    email str
    Specifies the email address with a maximum of 255 characters.
    enabled bool
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identity_user_v3_id str
    The resource ID in UUID format.
    last_login str
    The time when the IAM user last login.
    login_protection IdentityUserV3LoginProtectionArgs
    Login protection configuration. The login_protection block supports:
    name str
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password str
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    password_strength str
    Indicates the password strength.
    phone str
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwd_reset bool
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    send_welcome_email bool

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    xuser_id str
    ID of the user in the external system.
    xuser_type str
    Type of the user in the external system.
    accessType String
    Specifies the access type of the user. Available values are:

    • default: support both programmatic and management console access.
    • programmatic: only support programmatic access.
    • console: only support management console access.
    countryCode String
    Specifies the country code. This parameter must be used together with phone.
    createTime String
    The time when the IAM user was created.
    description String
    Specifies the description of the user.
    domainId String
    The domain user belongs to.
    email String
    Specifies the email address with a maximum of 255 characters.
    enabled Boolean
    Specifies whether the user is enabled or disabled. Valid values are true and false.
    identityUserV3Id String
    The resource ID in UUID format.
    lastLogin String
    The time when the IAM user last login.
    loginProtection Property Map
    Login protection configuration. The login_protection block supports:
    name String
    Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
    password String
    Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
    passwordStrength String
    Indicates the password strength.
    phone String
    Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
    pwdReset Boolean
    Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
    sendWelcomeEmail Boolean

    Whether to send a Welcome Email or not. Possible values are true and false.

    Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

    xuserId String
    ID of the user in the external system.
    xuserType String
    Type of the user in the external system.

    Supporting Types

    IdentityUserV3LoginProtection, IdentityUserV3LoginProtectionArgs

    Enabled bool
    Indicates whether login protection has been enabled for the user. The value can be true or false.
    VerificationMethod string
    Login authentication method of the user. Options: sms, email, and vmfa.
    Enabled bool
    Indicates whether login protection has been enabled for the user. The value can be true or false.
    VerificationMethod string
    Login authentication method of the user. Options: sms, email, and vmfa.
    enabled Boolean
    Indicates whether login protection has been enabled for the user. The value can be true or false.
    verificationMethod String
    Login authentication method of the user. Options: sms, email, and vmfa.
    enabled boolean
    Indicates whether login protection has been enabled for the user. The value can be true or false.
    verificationMethod string
    Login authentication method of the user. Options: sms, email, and vmfa.
    enabled bool
    Indicates whether login protection has been enabled for the user. The value can be true or false.
    verification_method str
    Login authentication method of the user. Options: sms, email, and vmfa.
    enabled Boolean
    Indicates whether login protection has been enabled for the user. The value can be true or false.
    verificationMethod String
    Login authentication method of the user. Options: sms, email, and vmfa.

    Import

    Users can be imported using the id, e.g.

    $ pulumi import opentelekomcloud:index/identityUserV3:IdentityUserV3 user_1 89c60255-9bd6-460c-822a-e2b959ede9d2

    Due to the security reasons, password can not be imported. It can be ignored as shown below.

    hcl

    resource “opentelekomcloud_identity_user_v3” “user_1” {

    lifecycle {

    ignore_changes = [

  password,

]

    }

    }

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    opentelekomcloud opentelekomcloud/terraform-provider-opentelekomcloud
    License
    Notes
    This Pulumi package is based on the opentelekomcloud Terraform Provider.
    opentelekomcloud logo
    opentelekomcloud 1.36.51 published on Thursday, Oct 23, 2025 by opentelekomcloud
    opentelekomcloud/terraform-provider-opentelekomcloud
      Meet Neo: Your AI Platform Teammate