1. Packages
  2. Packages
  3. Proxmox Virtual Environment (Proxmox VE)
  4. API Docs
  5. AclLegacy
Viewing docs for Proxmox Virtual Environment (Proxmox VE) v8.1.0
published on Sunday, Apr 26, 2026 by Daniel Muehlbachler-Pietrzykowski
Schema (JSON)
muhlba91/pulumi-proxmoxve

proxmoxve.AclLegacy

proxmoxve logo
Viewing docs for Proxmox Virtual Environment (Proxmox VE) v8.1.0
published on Sunday, Apr 26, 2026 by Daniel Muehlbachler-Pietrzykowski
Schema (JSON)
muhlba91/pulumi-proxmoxve

    Deprecated: Use proxmoxve.Acl instead. This resource will be removed in v1.0.

    Manages ACLs on the Proxmox cluster.

    ACLs are used to control access to resources in the Proxmox cluster. Each ACL consists of a path, a user, group or token, a role, and a flag to allow propagation of permissions.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as proxmoxve from "@muhlba91/pulumi-proxmoxve";

const operationsAutomation = new proxmoxve.UserLegacy("operations_automation", {
    comment: "Managed by Pulumi",
    password: "a-strong-password",
    userId: "operations-automation@pve",
});
const operationsMonitoring = new proxmoxve.RoleLegacy("operations_monitoring", {
    roleId: "operations-monitoring",
    privileges: ["VM.GuestAgent.Audit"],
});
const operationsAutomationMonitoring = new proxmoxve.AclLegacy("operations_automation_monitoring", {
    userId: operationsAutomation.userId,
    roleId: operationsMonitoring.roleId,
    path: "/vms/1234",
    propagate: true,
});

    import pulumi
import pulumi_proxmoxve as proxmoxve

operations_automation = proxmoxve.UserLegacy("operations_automation",
    comment="Managed by Pulumi",
    password="a-strong-password",
    user_id="operations-automation@pve")
operations_monitoring = proxmoxve.RoleLegacy("operations_monitoring",
    role_id="operations-monitoring",
    privileges=["VM.GuestAgent.Audit"])
operations_automation_monitoring = proxmoxve.AclLegacy("operations_automation_monitoring",
    user_id=operations_automation.user_id,
    role_id=operations_monitoring.role_id,
    path="/vms/1234",
    propagate=True)

    package main

import (
	"github.com/muhlba91/pulumi-proxmoxve/sdk/v8/go/proxmoxve"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		operationsAutomation, err := proxmoxve.NewUserLegacy(ctx, "operations_automation", &proxmoxve.UserLegacyArgs{
			Comment:  pulumi.String("Managed by Pulumi"),
			Password: pulumi.String("a-strong-password"),
			UserId:   pulumi.String("operations-automation@pve"),
		})
		if err != nil {
			return err
		}
		operationsMonitoring, err := proxmoxve.NewRoleLegacy(ctx, "operations_monitoring", &proxmoxve.RoleLegacyArgs{
			RoleId: pulumi.String("operations-monitoring"),
			Privileges: pulumi.StringArray{
				pulumi.String("VM.GuestAgent.Audit"),
			},
		})
		if err != nil {
			return err
		}
		_, err = proxmoxve.NewAclLegacy(ctx, "operations_automation_monitoring", &proxmoxve.AclLegacyArgs{
			UserId:    operationsAutomation.UserId,
			RoleId:    operationsMonitoring.RoleId,
			Path:      pulumi.String("/vms/1234"),
			Propagate: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ProxmoxVE = Pulumi.ProxmoxVE;

return await Deployment.RunAsync(() => 
{
    var operationsAutomation = new ProxmoxVE.Index.UserLegacy("operations_automation", new()
    {
        Comment = "Managed by Pulumi",
        Password = "a-strong-password",
        UserId = "operations-automation@pve",
    });

    var operationsMonitoring = new ProxmoxVE.Index.RoleLegacy("operations_monitoring", new()
    {
        RoleId = "operations-monitoring",
        Privileges = new[]
        {
            "VM.GuestAgent.Audit",
        },
    });

    var operationsAutomationMonitoring = new ProxmoxVE.Index.AclLegacy("operations_automation_monitoring", new()
    {
        UserId = operationsAutomation.UserId,
        RoleId = operationsMonitoring.RoleId,
        Path = "/vms/1234",
        Propagate = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import io.muehlbachler.pulumi.proxmoxve.UserLegacy;
import io.muehlbachler.pulumi.proxmoxve.UserLegacyArgs;
import io.muehlbachler.pulumi.proxmoxve.RoleLegacy;
import io.muehlbachler.pulumi.proxmoxve.RoleLegacyArgs;
import io.muehlbachler.pulumi.proxmoxve.AclLegacy;
import io.muehlbachler.pulumi.proxmoxve.AclLegacyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var operationsAutomation = new UserLegacy("operationsAutomation", UserLegacyArgs.builder()
            .comment("Managed by Pulumi")
            .password("a-strong-password")
            .userId("operations-automation@pve")
            .build());

        var operationsMonitoring = new RoleLegacy("operationsMonitoring", RoleLegacyArgs.builder()
            .roleId("operations-monitoring")
            .privileges("VM.GuestAgent.Audit")
            .build());

        var operationsAutomationMonitoring = new AclLegacy("operationsAutomationMonitoring", AclLegacyArgs.builder()
            .userId(operationsAutomation.userId())
            .roleId(operationsMonitoring.roleId())
            .path("/vms/1234")
            .propagate(true)
            .build());

    }
}

    resources:
  operationsAutomation:
    type: proxmoxve:UserLegacy
    name: operations_automation
    properties:
      comment: Managed by Pulumi
      password: a-strong-password
      userId: operations-automation@pve
  operationsMonitoring:
    type: proxmoxve:RoleLegacy
    name: operations_monitoring
    properties:
      roleId: operations-monitoring
      privileges:
        - VM.GuestAgent.Audit
  operationsAutomationMonitoring:
    type: proxmoxve:AclLegacy
    name: operations_automation_monitoring
    properties:
      userId: ${operationsAutomation.userId}
      roleId: ${operationsMonitoring.roleId}
      path: /vms/1234
      propagate: true

    Create AclLegacy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AclLegacy(name: string, args: AclLegacyArgs, opts?: CustomResourceOptions);
    @overload
def AclLegacy(resource_name: str,
              args: AclLegacyArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def AclLegacy(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              path: Optional[str] = None,
              role_id: Optional[str] = None,
              group_id: Optional[str] = None,
              propagate: Optional[bool] = None,
              token_id: Optional[str] = None,
              user_id: Optional[str] = None)
    func NewAclLegacy(ctx *Context, name string, args AclLegacyArgs, opts ...ResourceOption) (*AclLegacy, error)
    public AclLegacy(string name, AclLegacyArgs args, CustomResourceOptions? opts = null)
    public AclLegacy(String name, AclLegacyArgs args)
public AclLegacy(String name, AclLegacyArgs args, CustomResourceOptions options)

    type: proxmoxve:AclLegacy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AclLegacyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AclLegacyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AclLegacyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AclLegacyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AclLegacyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var aclLegacyResource = new ProxmoxVE.AclLegacy("aclLegacyResource", new()
{
    Path = "string",
    RoleId = "string",
    GroupId = "string",
    Propagate = false,
    TokenId = "string",
    UserId = "string",
});

    example, err := proxmoxve.NewAclLegacy(ctx, "aclLegacyResource", &proxmoxve.AclLegacyArgs{
	Path:      pulumi.String("string"),
	RoleId:    pulumi.String("string"),
	GroupId:   pulumi.String("string"),
	Propagate: pulumi.Bool(false),
	TokenId:   pulumi.String("string"),
	UserId:    pulumi.String("string"),
})

    var aclLegacyResource = new AclLegacy("aclLegacyResource", AclLegacyArgs.builder()
    .path("string")
    .roleId("string")
    .groupId("string")
    .propagate(false)
    .tokenId("string")
    .userId("string")
    .build());

    acl_legacy_resource = proxmoxve.AclLegacy("aclLegacyResource",
    path="string",
    role_id="string",
    group_id="string",
    propagate=False,
    token_id="string",
    user_id="string")

    const aclLegacyResource = new proxmoxve.AclLegacy("aclLegacyResource", {
    path: "string",
    roleId: "string",
    groupId: "string",
    propagate: false,
    tokenId: "string",
    userId: "string",
});

    type: proxmoxve:AclLegacy
properties:
    groupId: string
    path: string
    propagate: false
    roleId: string
    tokenId: string
    userId: string

    AclLegacy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AclLegacy resource accepts the following input properties:

    Path string
    Access control path
    RoleId string
    The role to apply
    GroupId string
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    Propagate bool
    Allow to propagate (inherit) permissions.
    TokenId string
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    UserId string
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    Path string
    Access control path
    RoleId string
    The role to apply
    GroupId string
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    Propagate bool
    Allow to propagate (inherit) permissions.
    TokenId string
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    UserId string
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    path String
    Access control path
    roleId String
    The role to apply
    groupId String
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    propagate Boolean
    Allow to propagate (inherit) permissions.
    tokenId String
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    userId String
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    path string
    Access control path
    roleId string
    The role to apply
    groupId string
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    propagate boolean
    Allow to propagate (inherit) permissions.
    tokenId string
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    userId string
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    path str
    Access control path
    role_id str
    The role to apply
    group_id str
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    propagate bool
    Allow to propagate (inherit) permissions.
    token_id str
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    user_id str
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    path String
    Access control path
    roleId String
    The role to apply
    groupId String
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    propagate Boolean
    Allow to propagate (inherit) permissions.
    tokenId String
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    userId String
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AclLegacy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing AclLegacy Resource

    Get an existing AclLegacy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AclLegacyState, opts?: CustomResourceOptions): AclLegacy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        group_id: Optional[str] = None,
        path: Optional[str] = None,
        propagate: Optional[bool] = None,
        role_id: Optional[str] = None,
        token_id: Optional[str] = None,
        user_id: Optional[str] = None) -> AclLegacy
    func GetAclLegacy(ctx *Context, name string, id IDInput, state *AclLegacyState, opts ...ResourceOption) (*AclLegacy, error)
    public static AclLegacy Get(string name, Input<string> id, AclLegacyState? state, CustomResourceOptions? opts = null)
    public static AclLegacy get(String name, Output<String> id, AclLegacyState state, CustomResourceOptions options)
    resources:  _:    type: proxmoxve:AclLegacy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    GroupId string
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    Path string
    Access control path
    Propagate bool
    Allow to propagate (inherit) permissions.
    RoleId string
    The role to apply
    TokenId string
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    UserId string
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    GroupId string
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    Path string
    Access control path
    Propagate bool
    Allow to propagate (inherit) permissions.
    RoleId string
    The role to apply
    TokenId string
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    UserId string
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    groupId String
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    path String
    Access control path
    propagate Boolean
    Allow to propagate (inherit) permissions.
    roleId String
    The role to apply
    tokenId String
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    userId String
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    groupId string
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    path string
    Access control path
    propagate boolean
    Allow to propagate (inherit) permissions.
    roleId string
    The role to apply
    tokenId string
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    userId string
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    group_id str
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    path str
    Access control path
    propagate bool
    Allow to propagate (inherit) permissions.
    role_id str
    The role to apply
    token_id str
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    user_id str
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)
    groupId String
    The group the ACL should apply to (mutually exclusive with tokenId and userId)
    path String
    Access control path
    propagate Boolean
    Allow to propagate (inherit) permissions.
    roleId String
    The role to apply
    tokenId String
    The token the ACL should apply to (mutually exclusive with groupId and userId)
    userId String
    The user the ACL should apply to (mutually exclusive with groupId and tokenId)

    Import

    !/usr/bin/env sh ACL can be imported using its unique identifier, e.g.: {path}?{group|user@realm|user@realm!token}?{role}

    $ pulumi import proxmoxve:index/aclLegacy:AclLegacy operations_automation_monitoring /?monitor@pve?operations-monitoring

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    proxmoxve muhlba91/pulumi-proxmoxve
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the proxmox Terraform Provider.
    proxmoxve logo
    Viewing docs for Proxmox Virtual Environment (Proxmox VE) v8.1.0
    published on Sunday, Apr 26, 2026 by Daniel Muehlbachler-Pietrzykowski
    Schema (JSON)
    muhlba91/pulumi-proxmoxve
      Try Pulumi Cloud free. Your team will thank you.