published on Saturday, Aug 15, 2026 by Daniel Muehlbachler-Pietrzykowski
published on Saturday, Aug 15, 2026 by Daniel Muehlbachler-Pietrzykowski
Manages a user.
Deprecation: the inline
aclblock is deprecated. Manage user ACLs via the dedicatedproxmoxve.Aclresource instead. Theaclblock is no longer auto-populated from a cluster-wide fetch on refresh or import; existing configurations usingaclblocks continue to work, but new code should useproxmoxve.Acl.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as proxmoxve from "@muhlba91/pulumi-proxmoxve";
const operationsAutomation = new proxmoxve.UserLegacy("operations_automation", {
comment: "Managed by Pulumi",
password: "a-strong-password",
userId: "operations-automation@pve",
});
const operationsMonitoring = new proxmoxve.RoleLegacy("operations_monitoring", {
roleId: "operations-monitoring",
privileges: ["VM.GuestAgent.Audit"],
});
const operationsAutomationVms = new proxmoxve.Acl("operations_automation_vms", {
userId: operationsAutomation.userId,
path: "/vms/1234",
roleId: operationsMonitoring.roleId,
propagate: true,
});
import pulumi
import pulumi_proxmoxve as proxmoxve
operations_automation = proxmoxve.UserLegacy("operations_automation",
comment="Managed by Pulumi",
password="a-strong-password",
user_id="operations-automation@pve")
operations_monitoring = proxmoxve.RoleLegacy("operations_monitoring",
role_id="operations-monitoring",
privileges=["VM.GuestAgent.Audit"])
operations_automation_vms = proxmoxve.Acl("operations_automation_vms",
user_id=operations_automation.user_id,
path="/vms/1234",
role_id=operations_monitoring.role_id,
propagate=True)
package main
import (
"github.com/muhlba91/pulumi-proxmoxve/sdk/v8/go/proxmoxve"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
operationsAutomation, err := proxmoxve.NewUserLegacy(ctx, "operations_automation", &proxmoxve.UserLegacyArgs{
Comment: pulumi.String("Managed by Pulumi"),
Password: pulumi.String("a-strong-password"),
UserId: pulumi.String("operations-automation@pve"),
})
if err != nil {
return err
}
operationsMonitoring, err := proxmoxve.NewRoleLegacy(ctx, "operations_monitoring", &proxmoxve.RoleLegacyArgs{
RoleId: pulumi.String("operations-monitoring"),
Privileges: pulumi.StringArray{
pulumi.String("VM.GuestAgent.Audit"),
},
})
if err != nil {
return err
}
_, err = proxmoxve.NewAcl(ctx, "operations_automation_vms", &proxmoxve.AclArgs{
UserId: operationsAutomation.UserId,
Path: pulumi.String("/vms/1234"),
RoleId: operationsMonitoring.RoleId,
Propagate: pulumi.Bool(true),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using ProxmoxVE = Pulumi.ProxmoxVE;
return await Deployment.RunAsync(() =>
{
var operationsAutomation = new ProxmoxVE.UserLegacy("operations_automation", new()
{
Comment = "Managed by Pulumi",
Password = "a-strong-password",
UserId = "operations-automation@pve",
});
var operationsMonitoring = new ProxmoxVE.RoleLegacy("operations_monitoring", new()
{
RoleId = "operations-monitoring",
Privileges = new[]
{
"VM.GuestAgent.Audit",
},
});
var operationsAutomationVms = new ProxmoxVE.Acl("operations_automation_vms", new()
{
UserId = operationsAutomation.UserId,
Path = "/vms/1234",
RoleId = operationsMonitoring.RoleId,
Propagate = true,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import io.muehlbachler.pulumi.proxmoxve.UserLegacy;
import io.muehlbachler.pulumi.proxmoxve.UserLegacyArgs;
import io.muehlbachler.pulumi.proxmoxve.RoleLegacy;
import io.muehlbachler.pulumi.proxmoxve.RoleLegacyArgs;
import io.muehlbachler.pulumi.proxmoxve.Acl;
import io.muehlbachler.pulumi.proxmoxve.AclArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var operationsAutomation = new UserLegacy("operationsAutomation", UserLegacyArgs.builder()
.comment("Managed by Pulumi")
.password("a-strong-password")
.userId("operations-automation@pve")
.build());
var operationsMonitoring = new RoleLegacy("operationsMonitoring", RoleLegacyArgs.builder()
.roleId("operations-monitoring")
.privileges("VM.GuestAgent.Audit")
.build());
var operationsAutomationVms = new Acl("operationsAutomationVms", AclArgs.builder()
.userId(operationsAutomation.userId())
.path("/vms/1234")
.roleId(operationsMonitoring.roleId())
.propagate(true)
.build());
}
}
resources:
operationsAutomation:
type: proxmoxve:UserLegacy
name: operations_automation
properties:
comment: Managed by Pulumi
password: a-strong-password
userId: operations-automation@pve
operationsAutomationVms:
type: proxmoxve:Acl
name: operations_automation_vms
properties:
userId: ${operationsAutomation.userId}
path: /vms/1234
roleId: ${operationsMonitoring.roleId}
propagate: true
operationsMonitoring:
type: proxmoxve:RoleLegacy
name: operations_monitoring
properties:
roleId: operations-monitoring
privileges:
- VM.GuestAgent.Audit
pulumi {
required_providers {
proxmoxve = {
source = "pulumi/proxmoxve"
}
}
}
resource "proxmoxve_userlegacy" "operations_automation" {
comment = "Managed by Pulumi"
password = "a-strong-password"
user_id = "operations-automation@pve"
}
resource "proxmoxve_acl" "operations_automation_vms" {
user_id = proxmoxve_userlegacy.operations_automation.user_id
path = "/vms/1234"
role_id = proxmoxve_rolelegacy.operations_monitoring.role_id
propagate = true
}
resource "proxmoxve_rolelegacy" "operations_monitoring" {
role_id = "operations-monitoring"
privileges = ["VM.GuestAgent.Audit"]
}
Create UserLegacy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new UserLegacy(name: string, args: UserLegacyArgs, opts?: CustomResourceOptions);@overload
def UserLegacy(resource_name: str,
args: UserLegacyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def UserLegacy(resource_name: str,
opts: Optional[ResourceOptions] = None,
user_id: Optional[str] = None,
acls: Optional[Sequence[UserLegacyAclArgs]] = None,
comment: Optional[str] = None,
email: Optional[str] = None,
enabled: Optional[bool] = None,
expiration_date: Optional[str] = None,
first_name: Optional[str] = None,
groups: Optional[Sequence[str]] = None,
keys: Optional[str] = None,
last_name: Optional[str] = None,
password: Optional[str] = None)func NewUserLegacy(ctx *Context, name string, args UserLegacyArgs, opts ...ResourceOption) (*UserLegacy, error)public UserLegacy(string name, UserLegacyArgs args, CustomResourceOptions? opts = null)
public UserLegacy(String name, UserLegacyArgs args)
public UserLegacy(String name, UserLegacyArgs args, CustomResourceOptions options)
type: proxmoxve:UserLegacy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "proxmoxve_user_legacy" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args UserLegacyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args UserLegacyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args UserLegacyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args UserLegacyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args UserLegacyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var userLegacyResource = new ProxmoxVE.UserLegacy("userLegacyResource", new()
{
UserId = "string",
Comment = "string",
Email = "string",
Enabled = false,
ExpirationDate = "string",
FirstName = "string",
Groups = new[]
{
"string",
},
Keys = "string",
LastName = "string",
Password = "string",
});
example, err := proxmoxve.NewUserLegacy(ctx, "userLegacyResource", &proxmoxve.UserLegacyArgs{
UserId: pulumi.String("string"),
Comment: pulumi.String("string"),
Email: pulumi.String("string"),
Enabled: pulumi.Bool(false),
ExpirationDate: pulumi.String("string"),
FirstName: pulumi.String("string"),
Groups: pulumi.StringArray{
pulumi.String("string"),
},
Keys: pulumi.String("string"),
LastName: pulumi.String("string"),
Password: pulumi.String("string"),
})
resource "proxmoxve_user_legacy" "userLegacyResource" {
lifecycle {
create_before_destroy = true
}
user_id = "string"
comment = "string"
email = "string"
enabled = false
expiration_date = "string"
first_name = "string"
groups = ["string"]
keys = "string"
last_name = "string"
password = "string"
}
var userLegacyResource = new UserLegacy("userLegacyResource", UserLegacyArgs.builder()
.userId("string")
.comment("string")
.email("string")
.enabled(false)
.expirationDate("string")
.firstName("string")
.groups("string")
.keys("string")
.lastName("string")
.password("string")
.build());
user_legacy_resource = proxmoxve.UserLegacy("userLegacyResource",
user_id="string",
comment="string",
email="string",
enabled=False,
expiration_date="string",
first_name="string",
groups=["string"],
keys="string",
last_name="string",
password="string")
const userLegacyResource = new proxmoxve.UserLegacy("userLegacyResource", {
userId: "string",
comment: "string",
email: "string",
enabled: false,
expirationDate: "string",
firstName: "string",
groups: ["string"],
keys: "string",
lastName: "string",
password: "string",
});
type: proxmoxve:UserLegacy
properties:
comment: string
email: string
enabled: false
expirationDate: string
firstName: string
groups:
- string
keys: string
lastName: string
password: string
userId: string
UserLegacy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The UserLegacy resource accepts the following input properties:
- User
Id string - The user identifier.
- Acls
List<Pulumi.
Proxmox VE. Inputs. User Legacy Acl> - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - Comment string
- The user comment.
- Email string
- The user's email address.
- Enabled bool
- Whether the user account is enabled.
- Expiration
Date string - The user account's expiration date (RFC 3339).
- First
Name string - The user's first name.
- Groups List<string>
- The user's groups.
- Keys string
- The user's keys.
- Last
Name string - The user's last name.
- Password string
- The user's password. Required for PVE or PAM realms.
- User
Id string - The user identifier.
- Acls
[]User
Legacy Acl Args - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - Comment string
- The user comment.
- Email string
- The user's email address.
- Enabled bool
- Whether the user account is enabled.
- Expiration
Date string - The user account's expiration date (RFC 3339).
- First
Name string - The user's first name.
- Groups []string
- The user's groups.
- Keys string
- The user's keys.
- Last
Name string - The user's last name.
- Password string
- The user's password. Required for PVE or PAM realms.
- user_
id string - The user identifier.
- acls list(object)
- The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment string
- The user comment.
- email string
- The user's email address.
- enabled bool
- Whether the user account is enabled.
- expiration_
date string - The user account's expiration date (RFC 3339).
- first_
name string - The user's first name.
- groups list(string)
- The user's groups.
- keys string
- The user's keys.
- last_
name string - The user's last name.
- password string
- The user's password. Required for PVE or PAM realms.
- user
Id String - The user identifier.
- acls
List<User
Legacy Acl> - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment String
- The user comment.
- email String
- The user's email address.
- enabled Boolean
- Whether the user account is enabled.
- expiration
Date String - The user account's expiration date (RFC 3339).
- first
Name String - The user's first name.
- groups List<String>
- The user's groups.
- keys String
- The user's keys.
- last
Name String - The user's last name.
- password String
- The user's password. Required for PVE or PAM realms.
- user
Id string - The user identifier.
- acls
User
Legacy Acl[] - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment string
- The user comment.
- email string
- The user's email address.
- enabled boolean
- Whether the user account is enabled.
- expiration
Date string - The user account's expiration date (RFC 3339).
- first
Name string - The user's first name.
- groups string[]
- The user's groups.
- keys string
- The user's keys.
- last
Name string - The user's last name.
- password string
- The user's password. Required for PVE or PAM realms.
- user_
id str - The user identifier.
- acls
Sequence[User
Legacy Acl Args] - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment str
- The user comment.
- email str
- The user's email address.
- enabled bool
- Whether the user account is enabled.
- expiration_
date str - The user account's expiration date (RFC 3339).
- first_
name str - The user's first name.
- groups Sequence[str]
- The user's groups.
- keys str
- The user's keys.
- last_
name str - The user's last name.
- password str
- The user's password. Required for PVE or PAM realms.
- user
Id String - The user identifier.
- acls List<Property Map>
- The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment String
- The user comment.
- email String
- The user's email address.
- enabled Boolean
- Whether the user account is enabled.
- expiration
Date String - The user account's expiration date (RFC 3339).
- first
Name String - The user's first name.
- groups List<String>
- The user's groups.
- keys String
- The user's keys.
- last
Name String - The user's last name.
- password String
- The user's password. Required for PVE or PAM realms.
Outputs
All input properties are implicitly available as output properties. Additionally, the UserLegacy resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing UserLegacy Resource
Get an existing UserLegacy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: UserLegacyState, opts?: CustomResourceOptions): UserLegacy@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
acls: Optional[Sequence[UserLegacyAclArgs]] = None,
comment: Optional[str] = None,
email: Optional[str] = None,
enabled: Optional[bool] = None,
expiration_date: Optional[str] = None,
first_name: Optional[str] = None,
groups: Optional[Sequence[str]] = None,
keys: Optional[str] = None,
last_name: Optional[str] = None,
password: Optional[str] = None,
user_id: Optional[str] = None) -> UserLegacyfunc GetUserLegacy(ctx *Context, name string, id IDInput, state *UserLegacyState, opts ...ResourceOption) (*UserLegacy, error)public static UserLegacy Get(string name, Input<string> id, UserLegacyState? state, CustomResourceOptions? opts = null)public static UserLegacy get(String name, Output<String> id, UserLegacyState state, CustomResourceOptions options)resources: _: type: proxmoxve:UserLegacy get: id: ${id}import {
to = proxmoxve_user_legacy.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Acls
List<Pulumi.
Proxmox VE. Inputs. User Legacy Acl> - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - Comment string
- The user comment.
- Email string
- The user's email address.
- Enabled bool
- Whether the user account is enabled.
- Expiration
Date string - The user account's expiration date (RFC 3339).
- First
Name string - The user's first name.
- Groups List<string>
- The user's groups.
- Keys string
- The user's keys.
- Last
Name string - The user's last name.
- Password string
- The user's password. Required for PVE or PAM realms.
- User
Id string - The user identifier.
- Acls
[]User
Legacy Acl Args - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - Comment string
- The user comment.
- Email string
- The user's email address.
- Enabled bool
- Whether the user account is enabled.
- Expiration
Date string - The user account's expiration date (RFC 3339).
- First
Name string - The user's first name.
- Groups []string
- The user's groups.
- Keys string
- The user's keys.
- Last
Name string - The user's last name.
- Password string
- The user's password. Required for PVE or PAM realms.
- User
Id string - The user identifier.
- acls list(object)
- The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment string
- The user comment.
- email string
- The user's email address.
- enabled bool
- Whether the user account is enabled.
- expiration_
date string - The user account's expiration date (RFC 3339).
- first_
name string - The user's first name.
- groups list(string)
- The user's groups.
- keys string
- The user's keys.
- last_
name string - The user's last name.
- password string
- The user's password. Required for PVE or PAM realms.
- user_
id string - The user identifier.
- acls
List<User
Legacy Acl> - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment String
- The user comment.
- email String
- The user's email address.
- enabled Boolean
- Whether the user account is enabled.
- expiration
Date String - The user account's expiration date (RFC 3339).
- first
Name String - The user's first name.
- groups List<String>
- The user's groups.
- keys String
- The user's keys.
- last
Name String - The user's last name.
- password String
- The user's password. Required for PVE or PAM realms.
- user
Id String - The user identifier.
- acls
User
Legacy Acl[] - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment string
- The user comment.
- email string
- The user's email address.
- enabled boolean
- Whether the user account is enabled.
- expiration
Date string - The user account's expiration date (RFC 3339).
- first
Name string - The user's first name.
- groups string[]
- The user's groups.
- keys string
- The user's keys.
- last
Name string - The user's last name.
- password string
- The user's password. Required for PVE or PAM realms.
- user
Id string - The user identifier.
- acls
Sequence[User
Legacy Acl Args] - The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment str
- The user comment.
- email str
- The user's email address.
- enabled bool
- Whether the user account is enabled.
- expiration_
date str - The user account's expiration date (RFC 3339).
- first_
name str - The user's first name.
- groups Sequence[str]
- The user's groups.
- keys str
- The user's keys.
- last_
name str - The user's last name.
- password str
- The user's password. Required for PVE or PAM realms.
- user_
id str - The user identifier.
- acls List<Property Map>
- The access control list (multiple blocks supported). Use
proxmoxve.Aclinstead. - comment String
- The user comment.
- email String
- The user's email address.
- enabled Boolean
- Whether the user account is enabled.
- expiration
Date String - The user account's expiration date (RFC 3339).
- first
Name String - The user's first name.
- groups List<String>
- The user's groups.
- keys String
- The user's keys.
- last
Name String - The user's last name.
- password String
- The user's password. Required for PVE or PAM realms.
- user
Id String - The user identifier.
Supporting Types
UserLegacyAcl, UserLegacyAclArgs
Import
Instances can be imported using the userId, e.g.,
$ pulumi import proxmoxve:index/userLegacy:UserLegacy operations_automation operations-automation@pve
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- proxmoxve muhlba91/pulumi-proxmoxve
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
proxmoxTerraform Provider.
published on Saturday, Aug 15, 2026 by Daniel Muehlbachler-Pietrzykowski