1. Packages
  2. StrongDM
  3. API Docs
  4. getAccount
StrongDM v1.32.0 published on Monday, Oct 13, 2025 by Piers Karsenbarg
Schema (JSON)
pierskarsenbarg/pulumi-sdm

sdm.getAccount

sdm logo
StrongDM v1.32.0 published on Monday, Oct 13, 2025 by Piers Karsenbarg
Schema (JSON)
pierskarsenbarg/pulumi-sdm

    Accounts are users that have access to strongDM. The types of accounts are:

    1. Users: humans who are authenticated through username and password or SSO.
    2. Service Accounts: machines that are authenticated using a service token.
    3. Tokens are access keys with permissions that can be used for authentication.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as sdm from "@pierskarsenbarg/sdm";

const user_queries = sdm.getAccount({
    email: "*@strongdm.com",
    tags: {
        env: "dev",
        region: "us-west",
    },
    type: "user",
});
const api_key_queries = sdm.getAccount({
    name: "*-dev",
    type: "api",
});
const admin_token_queries = sdm.getAccount({
    name: "*-prod",
    type: "admin-token",
});

    import pulumi
import pulumi_sdm as sdm

user_queries = sdm.get_account(email="*@strongdm.com",
    tags={
        "env": "dev",
        "region": "us-west",
    },
    type="user")
api_key_queries = sdm.get_account(name="*-dev",
    type="api")
admin_token_queries = sdm.get_account(name="*-prod",
    type="admin-token")

    package main

import (
	"github.com/pierskarsenbarg/pulumi-sdm/sdk/go/sdm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdm.LookupAccount(ctx, &sdm.LookupAccountArgs{
			Email: pulumi.StringRef("*@strongdm.com"),
			Tags: map[string]interface{}{
				"env":    "dev",
				"region": "us-west",
			},
			Type: pulumi.StringRef("user"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = sdm.LookupAccount(ctx, &sdm.LookupAccountArgs{
			Name: pulumi.StringRef("*-dev"),
			Type: pulumi.StringRef("api"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = sdm.LookupAccount(ctx, &sdm.LookupAccountArgs{
			Name: pulumi.StringRef("*-prod"),
			Type: pulumi.StringRef("admin-token"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdm = Pulumi.Sdm;

return await Deployment.RunAsync(() => 
{
    var user_queries = Sdm.GetAccount.Invoke(new()
    {
        Email = "*@strongdm.com",
        Tags = 
        {
            { "env", "dev" },
            { "region", "us-west" },
        },
        Type = "user",
    });

    var api_key_queries = Sdm.GetAccount.Invoke(new()
    {
        Name = "*-dev",
        Type = "api",
    });

    var admin_token_queries = Sdm.GetAccount.Invoke(new()
    {
        Name = "*-prod",
        Type = "admin-token",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdm.SdmFunctions;
import com.pulumi.sdm.inputs.GetAccountArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var user-queries = SdmFunctions.getAccount(GetAccountArgs.builder()
            .email("*@strongdm.com")
            .tags(Map.ofEntries(
                Map.entry("env", "dev"),
                Map.entry("region", "us-west")
            ))
            .type("user")
            .build());

        final var api-key-queries = SdmFunctions.getAccount(GetAccountArgs.builder()
            .name("*-dev")
            .type("api")
            .build());

        final var admin-token-queries = SdmFunctions.getAccount(GetAccountArgs.builder()
            .name("*-prod")
            .type("admin-token")
            .build());

    }
}

    variables:
  user-queries:
    fn::invoke:
      function: sdm:getAccount
      arguments:
        email: '*@strongdm.com'
        tags:
          env: dev
          region: us-west
        type: user
  api-key-queries:
    fn::invoke:
      function: sdm:getAccount
      arguments:
        name: '*-dev'
        type: api
  admin-token-queries:
    fn::invoke:
      function: sdm:getAccount
      arguments:
        name: '*-prod'
        type: admin-token

    Using getAccount

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getAccount(args: GetAccountArgs, opts?: InvokeOptions): Promise<GetAccountResult>
function getAccountOutput(args: GetAccountOutputArgs, opts?: InvokeOptions): Output<GetAccountResult>
    def get_account(account_type: Optional[str] = None,
                email: Optional[str] = None,
                external_id: Optional[str] = None,
                first_name: Optional[str] = None,
                id: Optional[str] = None,
                last_name: Optional[str] = None,
                manager_id: Optional[str] = None,
                name: Optional[str] = None,
                permission_level: Optional[str] = None,
                permissions: Optional[str] = None,
                suspended: Optional[bool] = None,
                tags: Optional[Mapping[str, str]] = None,
                type: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetAccountResult
def get_account_output(account_type: Optional[pulumi.Input[str]] = None,
                email: Optional[pulumi.Input[str]] = None,
                external_id: Optional[pulumi.Input[str]] = None,
                first_name: Optional[pulumi.Input[str]] = None,
                id: Optional[pulumi.Input[str]] = None,
                last_name: Optional[pulumi.Input[str]] = None,
                manager_id: Optional[pulumi.Input[str]] = None,
                name: Optional[pulumi.Input[str]] = None,
                permission_level: Optional[pulumi.Input[str]] = None,
                permissions: Optional[pulumi.Input[str]] = None,
                suspended: Optional[pulumi.Input[bool]] = None,
                tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                type: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetAccountResult]
    func LookupAccount(ctx *Context, args *LookupAccountArgs, opts ...InvokeOption) (*LookupAccountResult, error)
func LookupAccountOutput(ctx *Context, args *LookupAccountOutputArgs, opts ...InvokeOption) LookupAccountResultOutput

    > Note: This function is named LookupAccount in the Go SDK.

    public static class GetAccount 
{
    public static Task<GetAccountResult> InvokeAsync(GetAccountArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountResult> Invoke(GetAccountInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetAccountResult> getAccount(GetAccountArgs args, InvokeOptions options)
public static Output<GetAccountResult> getAccount(GetAccountArgs args, InvokeOptions options)

    fn::invoke:
  function: sdm:index/getAccount:getAccount
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountType string
    Corresponds to the type of token, e.g. api or admin-token.
    Email string
    The User's email address. Must be unique.
    ExternalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    FirstName string
    The User's first name.
    Id string
    Unique identifier of the User.
    LastName string
    The User's last name.
    ManagerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    Name string
    Unique human-readable name of the Token.
    PermissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    Permissions string
    Permissions assigned to the token, e.g. role:create.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    Type string
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    AccountType string
    Corresponds to the type of token, e.g. api or admin-token.
    Email string
    The User's email address. Must be unique.
    ExternalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    FirstName string
    The User's first name.
    Id string
    Unique identifier of the User.
    LastName string
    The User's last name.
    ManagerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    Name string
    Unique human-readable name of the Token.
    PermissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    Permissions string
    Permissions assigned to the token, e.g. role:create.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Tags map[string]string
    Tags is a map of key, value pairs.
    Type string
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    accountType String
    Corresponds to the type of token, e.g. api or admin-token.
    email String
    The User's email address. Must be unique.
    externalId String
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName String
    The User's first name.
    id String
    Unique identifier of the User.
    lastName String
    The User's last name.
    managerId String
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name String
    Unique human-readable name of the Token.
    permissionLevel String
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions String
    Permissions assigned to the token, e.g. role:create.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    type String
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    accountType string
    Corresponds to the type of token, e.g. api or admin-token.
    email string
    The User's email address. Must be unique.
    externalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName string
    The User's first name.
    id string
    Unique identifier of the User.
    lastName string
    The User's last name.
    managerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name string
    Unique human-readable name of the Token.
    permissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions string
    Permissions assigned to the token, e.g. role:create.
    suspended boolean
    Reserved for future use. Always false for tokens.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    type string
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    account_type str
    Corresponds to the type of token, e.g. api or admin-token.
    email str
    The User's email address. Must be unique.
    external_id str
    External ID is an alternative unique ID this user is represented by within an external service.
    first_name str
    The User's first name.
    id str
    Unique identifier of the User.
    last_name str
    The User's last name.
    manager_id str
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name str
    Unique human-readable name of the Token.
    permission_level str
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions str
    Permissions assigned to the token, e.g. role:create.
    suspended bool
    Reserved for future use. Always false for tokens.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    type str
    a filter to select all items of a certain subtype. See the filter documentation for more information.
    accountType String
    Corresponds to the type of token, e.g. api or admin-token.
    email String
    The User's email address. Must be unique.
    externalId String
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName String
    The User's first name.
    id String
    Unique identifier of the User.
    lastName String
    The User's last name.
    managerId String
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name String
    Unique human-readable name of the Token.
    permissionLevel String
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions String
    Permissions assigned to the token, e.g. role:create.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    tags Map<String>
    Tags is a map of key, value pairs.
    type String
    a filter to select all items of a certain subtype. See the filter documentation for more information.

    getAccount Result

    The following output properties are available:

    Accounts List<PiersKarsenbarg.Sdm.Outputs.GetAccountAccount>
    A single element list containing a map, where each key lists one of the following objects:

    • service:
    Ids List<string>
    a list of strings of ids of data sources that match the given arguments.
    AccountType string
    Corresponds to the type of token, e.g. api or admin-token.
    Email string
    The User's email address. Must be unique.
    ExternalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    FirstName string
    The User's first name.
    Id string
    Unique identifier of the User.
    LastName string
    The User's last name.
    ManagerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    Name string
    Unique human-readable name of the Token.
    PermissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    Permissions string
    Permissions assigned to the token, e.g. role:create.
    Suspended bool
    Suspended is a read only field for the User's suspended state.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    Type string
    Accounts []GetAccountAccount
    A single element list containing a map, where each key lists one of the following objects:

    • service:
    Ids []string
    a list of strings of ids of data sources that match the given arguments.
    AccountType string
    Corresponds to the type of token, e.g. api or admin-token.
    Email string
    The User's email address. Must be unique.
    ExternalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    FirstName string
    The User's first name.
    Id string
    Unique identifier of the User.
    LastName string
    The User's last name.
    ManagerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    Name string
    Unique human-readable name of the Token.
    PermissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    Permissions string
    Permissions assigned to the token, e.g. role:create.
    Suspended bool
    Suspended is a read only field for the User's suspended state.
    Tags map[string]string
    Tags is a map of key, value pairs.
    Type string
    accounts List<GetAccountAccount>
    A single element list containing a map, where each key lists one of the following objects:

    • service:
    ids List<String>
    a list of strings of ids of data sources that match the given arguments.
    accountType String
    Corresponds to the type of token, e.g. api or admin-token.
    email String
    The User's email address. Must be unique.
    externalId String
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName String
    The User's first name.
    id String
    Unique identifier of the User.
    lastName String
    The User's last name.
    managerId String
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name String
    Unique human-readable name of the Token.
    permissionLevel String
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions String
    Permissions assigned to the token, e.g. role:create.
    suspended Boolean
    Suspended is a read only field for the User's suspended state.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    type String
    accounts GetAccountAccount[]
    A single element list containing a map, where each key lists one of the following objects:

    • service:
    ids string[]
    a list of strings of ids of data sources that match the given arguments.
    accountType string
    Corresponds to the type of token, e.g. api or admin-token.
    email string
    The User's email address. Must be unique.
    externalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName string
    The User's first name.
    id string
    Unique identifier of the User.
    lastName string
    The User's last name.
    managerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name string
    Unique human-readable name of the Token.
    permissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions string
    Permissions assigned to the token, e.g. role:create.
    suspended boolean
    Suspended is a read only field for the User's suspended state.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    type string
    accounts Sequence[GetAccountAccount]
    A single element list containing a map, where each key lists one of the following objects:

    • service:
    ids Sequence[str]
    a list of strings of ids of data sources that match the given arguments.
    account_type str
    Corresponds to the type of token, e.g. api or admin-token.
    email str
    The User's email address. Must be unique.
    external_id str
    External ID is an alternative unique ID this user is represented by within an external service.
    first_name str
    The User's first name.
    id str
    Unique identifier of the User.
    last_name str
    The User's last name.
    manager_id str
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name str
    Unique human-readable name of the Token.
    permission_level str
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions str
    Permissions assigned to the token, e.g. role:create.
    suspended bool
    Suspended is a read only field for the User's suspended state.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    type str
    accounts List<Property Map>
    A single element list containing a map, where each key lists one of the following objects:

    • service:
    ids List<String>
    a list of strings of ids of data sources that match the given arguments.
    accountType String
    Corresponds to the type of token, e.g. api or admin-token.
    email String
    The User's email address. Must be unique.
    externalId String
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName String
    The User's first name.
    id String
    Unique identifier of the User.
    lastName String
    The User's last name.
    managerId String
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    name String
    Unique human-readable name of the Token.
    permissionLevel String
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    permissions String
    Permissions assigned to the token, e.g. role:create.
    suspended Boolean
    Suspended is a read only field for the User's suspended state.
    tags Map<String>
    Tags is a map of key, value pairs.
    type String

    Supporting Types

    GetAccountAccount

    Services List<PiersKarsenbarg.Sdm.Inputs.GetAccountAccountService>
    A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
    Tokens List<PiersKarsenbarg.Sdm.Inputs.GetAccountAccountToken>
    A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
    Users List<PiersKarsenbarg.Sdm.Inputs.GetAccountAccountUser>
    A User can connect to resources they are granted directly, or granted via roles.
    Services []GetAccountAccountService
    A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
    Tokens []GetAccountAccountToken
    A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
    Users []GetAccountAccountUser
    A User can connect to resources they are granted directly, or granted via roles.
    services List<GetAccountAccountService>
    A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
    tokens List<GetAccountAccountToken>
    A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
    users List<GetAccountAccountUser>
    A User can connect to resources they are granted directly, or granted via roles.
    services GetAccountAccountService[]
    A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
    tokens GetAccountAccountToken[]
    A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
    users GetAccountAccountUser[]
    A User can connect to resources they are granted directly, or granted via roles.
    services Sequence[GetAccountAccountService]
    A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
    tokens Sequence[GetAccountAccountToken]
    A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
    users Sequence[GetAccountAccountUser]
    A User can connect to resources they are granted directly, or granted via roles.
    services List<Property Map>
    A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
    tokens List<Property Map>
    A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
    users List<Property Map>
    A User can connect to resources they are granted directly, or granted via roles.

    GetAccountAccountService

    Id string
    Unique identifier of the User.
    Name string
    Unique human-readable name of the Token.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    Id string
    Unique identifier of the User.
    Name string
    Unique human-readable name of the Token.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Tags map[string]string
    Tags is a map of key, value pairs.
    id String
    Unique identifier of the User.
    name String
    Unique human-readable name of the Token.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    id string
    Unique identifier of the User.
    name string
    Unique human-readable name of the Token.
    suspended boolean
    Reserved for future use. Always false for tokens.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    id str
    Unique identifier of the User.
    name str
    Unique human-readable name of the Token.
    suspended bool
    Reserved for future use. Always false for tokens.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    id String
    Unique identifier of the User.
    name String
    Unique human-readable name of the Token.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    tags Map<String>
    Tags is a map of key, value pairs.

    GetAccountAccountToken

    AccountType string
    Corresponds to the type of token, e.g. api or admin-token.
    Deadline string
    The timestamp when the Token will expire.
    Duration string
    Duration from token creation to expiration.
    Id string
    Unique identifier of the User.
    Name string
    Unique human-readable name of the Token.
    Permissions List<string>
    Permissions assigned to the token, e.g. role:create.
    Rekeyed string
    The timestamp when the Token was last rekeyed.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    AccountType string
    Corresponds to the type of token, e.g. api or admin-token.
    Deadline string
    The timestamp when the Token will expire.
    Duration string
    Duration from token creation to expiration.
    Id string
    Unique identifier of the User.
    Name string
    Unique human-readable name of the Token.
    Permissions []string
    Permissions assigned to the token, e.g. role:create.
    Rekeyed string
    The timestamp when the Token was last rekeyed.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Tags map[string]string
    Tags is a map of key, value pairs.
    accountType String
    Corresponds to the type of token, e.g. api or admin-token.
    deadline String
    The timestamp when the Token will expire.
    duration String
    Duration from token creation to expiration.
    id String
    Unique identifier of the User.
    name String
    Unique human-readable name of the Token.
    permissions List<String>
    Permissions assigned to the token, e.g. role:create.
    rekeyed String
    The timestamp when the Token was last rekeyed.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    accountType string
    Corresponds to the type of token, e.g. api or admin-token.
    deadline string
    The timestamp when the Token will expire.
    duration string
    Duration from token creation to expiration.
    id string
    Unique identifier of the User.
    name string
    Unique human-readable name of the Token.
    permissions string[]
    Permissions assigned to the token, e.g. role:create.
    rekeyed string
    The timestamp when the Token was last rekeyed.
    suspended boolean
    Reserved for future use. Always false for tokens.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    account_type str
    Corresponds to the type of token, e.g. api or admin-token.
    deadline str
    The timestamp when the Token will expire.
    duration str
    Duration from token creation to expiration.
    id str
    Unique identifier of the User.
    name str
    Unique human-readable name of the Token.
    permissions Sequence[str]
    Permissions assigned to the token, e.g. role:create.
    rekeyed str
    The timestamp when the Token was last rekeyed.
    suspended bool
    Reserved for future use. Always false for tokens.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    accountType String
    Corresponds to the type of token, e.g. api or admin-token.
    deadline String
    The timestamp when the Token will expire.
    duration String
    Duration from token creation to expiration.
    id String
    Unique identifier of the User.
    name String
    Unique human-readable name of the Token.
    permissions List<String>
    Permissions assigned to the token, e.g. role:create.
    rekeyed String
    The timestamp when the Token was last rekeyed.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    tags Map<String>
    Tags is a map of key, value pairs.

    GetAccountAccountUser

    ManagedBy string
    Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
    ResolvedManagerId string
    Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
    Scim string
    SCIM contains the raw SCIM metadata for the user. This is a read-only field.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Email string
    The User's email address. Must be unique.
    ExternalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    FirstName string
    The User's first name.
    Id string
    Unique identifier of the User.
    LastName string
    The User's last name.
    ManagerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    PermissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    Tags Dictionary<string, string>
    Tags is a map of key, value pairs.
    ManagedBy string
    Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
    ResolvedManagerId string
    Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
    Scim string
    SCIM contains the raw SCIM metadata for the user. This is a read-only field.
    Suspended bool
    Reserved for future use. Always false for tokens.
    Email string
    The User's email address. Must be unique.
    ExternalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    FirstName string
    The User's first name.
    Id string
    Unique identifier of the User.
    LastName string
    The User's last name.
    ManagerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    PermissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    Tags map[string]string
    Tags is a map of key, value pairs.
    managedBy String
    Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
    resolvedManagerId String
    Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
    scim String
    SCIM contains the raw SCIM metadata for the user. This is a read-only field.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    email String
    The User's email address. Must be unique.
    externalId String
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName String
    The User's first name.
    id String
    Unique identifier of the User.
    lastName String
    The User's last name.
    managerId String
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    permissionLevel String
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    tags Map<String,String>
    Tags is a map of key, value pairs.
    managedBy string
    Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
    resolvedManagerId string
    Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
    scim string
    SCIM contains the raw SCIM metadata for the user. This is a read-only field.
    suspended boolean
    Reserved for future use. Always false for tokens.
    email string
    The User's email address. Must be unique.
    externalId string
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName string
    The User's first name.
    id string
    Unique identifier of the User.
    lastName string
    The User's last name.
    managerId string
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    permissionLevel string
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    tags {[key: string]: string}
    Tags is a map of key, value pairs.
    managed_by str
    Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
    resolved_manager_id str
    Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
    scim str
    SCIM contains the raw SCIM metadata for the user. This is a read-only field.
    suspended bool
    Reserved for future use. Always false for tokens.
    email str
    The User's email address. Must be unique.
    external_id str
    External ID is an alternative unique ID this user is represented by within an external service.
    first_name str
    The User's first name.
    id str
    Unique identifier of the User.
    last_name str
    The User's last name.
    manager_id str
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    permission_level str
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    tags Mapping[str, str]
    Tags is a map of key, value pairs.
    managedBy String
    Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
    resolvedManagerId String
    Resolved Manager ID is the ID of the user's manager derived from the manager_id, if present, or from the SCIM metadata. This is a read-only field that's only populated for get and list.
    scim String
    SCIM contains the raw SCIM metadata for the user. This is a read-only field.
    suspended Boolean
    Reserved for future use. Always false for tokens.
    email String
    The User's email address. Must be unique.
    externalId String
    External ID is an alternative unique ID this user is represented by within an external service.
    firstName String
    The User's first name.
    id String
    Unique identifier of the User.
    lastName String
    The User's last name.
    managerId String
    Manager ID is the ID of the user's manager. This field is empty when the user has no manager.
    permissionLevel String
    PermissionLevel is the user's permission level e.g. admin, DBA, user.
    tags Map<String>
    Tags is a map of key, value pairs.

    Package Details

    Repository
    sdm pierskarsenbarg/pulumi-sdm
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the sdm Terraform Provider.
    sdm logo
    StrongDM v1.32.0 published on Monday, Oct 13, 2025 by Piers Karsenbarg
    Schema (JSON)
    pierskarsenbarg/pulumi-sdm
      Meet Neo: Your AI Platform Teammate