pulumiservice.buildInsightsAccountScopedPermissions

Pulumi Cloud v0.39.0, Apr 28 26

This provider is currently in preview.

Viewing docs for Pulumi Cloud v0.39.0
published on Tuesday, Apr 28, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-pulumiservice

This provider is currently in preview.

Viewing docs for Pulumi Cloud v0.39.0
published on Tuesday, Apr 28, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-pulumiservice

Builds an OrganizationRole.permissions descriptor that grants the supplied scopes only on the named insights account. Pair with InsightsAccount.insightsAccountId (or the getInsightsAccount data source). The result is directly assignable to OrganizationRole.permissions. To grant scopes on more than one entity in a single role, hand-roll a group whose entries list pulls the output of each helper.

Using buildInsightsAccountScopedPermissions

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function buildInsightsAccountScopedPermissions(args: BuildInsightsAccountScopedPermissionsArgs, opts?: InvokeOptions): Promise<BuildInsightsAccountScopedPermissionsResult>
function buildInsightsAccountScopedPermissionsOutput(args: BuildInsightsAccountScopedPermissionsOutputArgs, opts?: InvokeOptions): Output<BuildInsightsAccountScopedPermissionsResult>

def build_insights_account_scoped_permissions(insights_account_id: Optional[str] = None,
                                              permissions: Optional[Sequence[str]] = None,
                                              opts: Optional[InvokeOptions] = None) -> BuildInsightsAccountScopedPermissionsResult
def build_insights_account_scoped_permissions_output(insights_account_id: Optional[pulumi.Input[str]] = None,
                                              permissions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                                              opts: Optional[InvokeOptions] = None) -> Output[BuildInsightsAccountScopedPermissionsResult]

func BuildInsightsAccountScopedPermissions(ctx *Context, args *BuildInsightsAccountScopedPermissionsArgs, opts ...InvokeOption) (*BuildInsightsAccountScopedPermissionsResult, error)
func BuildInsightsAccountScopedPermissionsOutput(ctx *Context, args *BuildInsightsAccountScopedPermissionsOutputArgs, opts ...InvokeOption) BuildInsightsAccountScopedPermissionsResultOutput

> Note: This function is named BuildInsightsAccountScopedPermissions in the Go SDK.

public static class BuildInsightsAccountScopedPermissions 
{
    public static Task<BuildInsightsAccountScopedPermissionsResult> InvokeAsync(BuildInsightsAccountScopedPermissionsArgs args, InvokeOptions? opts = null)
    public static Output<BuildInsightsAccountScopedPermissionsResult> Invoke(BuildInsightsAccountScopedPermissionsInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<BuildInsightsAccountScopedPermissionsResult> buildInsightsAccountScopedPermissions(BuildInsightsAccountScopedPermissionsArgs args, InvokeOptions options)
public static Output<BuildInsightsAccountScopedPermissionsResult> buildInsightsAccountScopedPermissions(BuildInsightsAccountScopedPermissionsArgs args, InvokeOptions options)

fn::invoke:
  function: pulumiservice:buildInsightsAccountScopedPermissions
  arguments:
    # arguments dictionary

The following arguments are supported:

InsightsAccountId string: The target insights account's identifier. Use the insightsAccountId output of an InsightsAccount resource or the getInsightsAccount data source.
Permissions List<string>: The set of insights-account:* scopes to grant on the target account. Discover valid scope names via the getOrganizationRoleScopes data source.

InsightsAccountId string: The target insights account's identifier. Use the insightsAccountId output of an InsightsAccount resource or the getInsightsAccount data source.
Permissions []string: The set of insights-account:* scopes to grant on the target account. Discover valid scope names via the getOrganizationRoleScopes data source.

insightsAccountId String: The target insights account's identifier. Use the insightsAccountId output of an InsightsAccount resource or the getInsightsAccount data source.
permissions List<String>: The set of insights-account:* scopes to grant on the target account. Discover valid scope names via the getOrganizationRoleScopes data source.

insightsAccountId string: The target insights account's identifier. Use the insightsAccountId output of an InsightsAccount resource or the getInsightsAccount data source.
permissions string[]: The set of insights-account:* scopes to grant on the target account. Discover valid scope names via the getOrganizationRoleScopes data source.

insights_account_id str: The target insights account's identifier. Use the insightsAccountId output of an InsightsAccount resource or the getInsightsAccount data source.
permissions Sequence[str]: The set of insights-account:* scopes to grant on the target account. Discover valid scope names via the getOrganizationRoleScopes data source.

insightsAccountId String: The target insights account's identifier. Use the insightsAccountId output of an InsightsAccount resource or the getInsightsAccount data source.
permissions List<String>: The set of insights-account:* scopes to grant on the target account. Discover valid scope names via the getOrganizationRoleScopes data source.

buildInsightsAccountScopedPermissions Result

The following output properties are available:

Permissions Dictionary<string, object>: A kind: allow descriptor with an on: { insightsAccount: <id> } modifier, ready to assign to OrganizationRole.permissions.

Permissions map[string]interface{}: A kind: allow descriptor with an on: { insightsAccount: <id> } modifier, ready to assign to OrganizationRole.permissions.

permissions Map<String,Object>: A kind: allow descriptor with an on: { insightsAccount: <id> } modifier, ready to assign to OrganizationRole.permissions.

permissions {[key: string]: any}: A kind: allow descriptor with an on: { insightsAccount: <id> } modifier, ready to assign to OrganizationRole.permissions.

permissions Mapping[str, Any]: A kind: allow descriptor with an on: { insightsAccount: <id> } modifier, ready to assign to OrganizationRole.permissions.

permissions Map<Any>: A kind: allow descriptor with an on: { insightsAccount: <id> } modifier, ready to assign to OrganizationRole.permissions.