published on Thursday, Apr 23, 2026 by Volcengine
published on Thursday, Apr 23, 2026 by Volcengine
After you create a Cloud Identity Center user, you need to grant the user login access permissions to each account. When access permissions to Volcano Engine cloud resources share common characteristics, such as network operations permissions or security management permissions, you can predefine permission sets in the Cloud Identity Center as templates. You can achieve centralized authorization based on these permission sets. The Cloud Identity Center will synchronize and distribute permission sets to each account, reducing enterprise permission operation and maintenance costs
Example Usage
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
resources:
cloudIdentityPermissionSetDemo:
type: volcenginecc:cloudidentity:PermissionSet
name: CloudIdentityPermissionSetDemo
properties:
description: cc-test
name: cctest-test
relayState: https://console.xxxxx.com/xxxxx
sessionDuration: 3600
permissionPolicies:
- permission_policy_name: AdministratorAccess
permission_policy_type: System
permission_policy_document: ""
- permission_policy_name: IAMFullAccess
permission_policy_type: System
permission_policy_document: ""
- permission_policy_name: InlinePolicy
permission_policy_type: Inline
permission_policy_document: |-
{
"Statement": [
{
"Effect": "Allow",
"Action": [
"vpc:*"
],
"Resource": [
"*"
]
}
]
}
Create PermissionSet Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new PermissionSet(name: string, args: PermissionSetArgs, opts?: CustomResourceOptions);@overload
def PermissionSet(resource_name: str,
args: PermissionSetArgs,
opts: Optional[ResourceOptions] = None)
@overload
def PermissionSet(resource_name: str,
opts: Optional[ResourceOptions] = None,
name: Optional[str] = None,
description: Optional[str] = None,
permission_policies: Optional[Sequence[PermissionSetPermissionPolicyArgs]] = None,
relay_state: Optional[str] = None,
session_duration: Optional[int] = None)func NewPermissionSet(ctx *Context, name string, args PermissionSetArgs, opts ...ResourceOption) (*PermissionSet, error)public PermissionSet(string name, PermissionSetArgs args, CustomResourceOptions? opts = null)
public PermissionSet(String name, PermissionSetArgs args)
public PermissionSet(String name, PermissionSetArgs args, CustomResourceOptions options)
type: volcenginecc:cloudidentity:PermissionSet
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args PermissionSetArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PermissionSetArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PermissionSetArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PermissionSetArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PermissionSetArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
PermissionSet Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The PermissionSet resource accepts the following input properties:
- Name string
- Permission Set Name
- Description string
- Permission Set Description
- Permission
Policies List<Volcengine.Permission Set Permission Policy> - Relay
State string - Console Redirect URL
- Session
Duration int - Session Expiration Time (seconds)
- Name string
- Permission Set Name
- Description string
- Permission Set Description
- Permission
Policies []PermissionSet Permission Policy Args - Relay
State string - Console Redirect URL
- Session
Duration int - Session Expiration Time (seconds)
- name String
- Permission Set Name
- description String
- Permission Set Description
- permission
Policies List<PermissionSet Permission Policy> - relay
State String - Console Redirect URL
- session
Duration Integer - Session Expiration Time (seconds)
- name string
- Permission Set Name
- description string
- Permission Set Description
- permission
Policies PermissionSet Permission Policy[] - relay
State string - Console Redirect URL
- session
Duration number - Session Expiration Time (seconds)
- name str
- Permission Set Name
- description str
- Permission Set Description
- permission_
policies Sequence[PermissionSet Permission Policy Args] - relay_
state str - Console Redirect URL
- session_
duration int - Session Expiration Time (seconds)
- name String
- Permission Set Name
- description String
- Permission Set Description
- permission
Policies List<Property Map> - relay
State String - Console Redirect URL
- session
Duration Number - Session Expiration Time (seconds)
Outputs
All input properties are implicitly available as output properties. Additionally, the PermissionSet resource produces the following output properties:
- Created
Time string - Creation Time
- Id string
- The provider-assigned unique ID for this managed resource.
- Permission
Set stringId - Permission Set ID
- Status
Notifications List<string> - Status Notification Configuration
- Updated
Time string - Update Time
- Created
Time string - Creation Time
- Id string
- The provider-assigned unique ID for this managed resource.
- Permission
Set stringId - Permission Set ID
- Status
Notifications []string - Status Notification Configuration
- Updated
Time string - Update Time
- created
Time String - Creation Time
- id String
- The provider-assigned unique ID for this managed resource.
- permission
Set StringId - Permission Set ID
- status
Notifications List<String> - Status Notification Configuration
- updated
Time String - Update Time
- created
Time string - Creation Time
- id string
- The provider-assigned unique ID for this managed resource.
- permission
Set stringId - Permission Set ID
- status
Notifications string[] - Status Notification Configuration
- updated
Time string - Update Time
- created_
time str - Creation Time
- id str
- The provider-assigned unique ID for this managed resource.
- permission_
set_ strid - Permission Set ID
- status_
notifications Sequence[str] - Status Notification Configuration
- updated_
time str - Update Time
- created
Time String - Creation Time
- id String
- The provider-assigned unique ID for this managed resource.
- permission
Set StringId - Permission Set ID
- status
Notifications List<String> - Status Notification Configuration
- updated
Time String - Update Time
Look up Existing PermissionSet Resource
Get an existing PermissionSet resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: PermissionSetState, opts?: CustomResourceOptions): PermissionSet@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
created_time: Optional[str] = None,
description: Optional[str] = None,
name: Optional[str] = None,
permission_policies: Optional[Sequence[PermissionSetPermissionPolicyArgs]] = None,
permission_set_id: Optional[str] = None,
relay_state: Optional[str] = None,
session_duration: Optional[int] = None,
status_notifications: Optional[Sequence[str]] = None,
updated_time: Optional[str] = None) -> PermissionSetfunc GetPermissionSet(ctx *Context, name string, id IDInput, state *PermissionSetState, opts ...ResourceOption) (*PermissionSet, error)public static PermissionSet Get(string name, Input<string> id, PermissionSetState? state, CustomResourceOptions? opts = null)public static PermissionSet get(String name, Output<String> id, PermissionSetState state, CustomResourceOptions options)resources: _: type: volcenginecc:cloudidentity:PermissionSet get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Created
Time string - Creation Time
- Description string
- Permission Set Description
- Name string
- Permission Set Name
- Permission
Policies List<Volcengine.Permission Set Permission Policy> - Permission
Set stringId - Permission Set ID
- Relay
State string - Console Redirect URL
- Session
Duration int - Session Expiration Time (seconds)
- Status
Notifications List<string> - Status Notification Configuration
- Updated
Time string - Update Time
- Created
Time string - Creation Time
- Description string
- Permission Set Description
- Name string
- Permission Set Name
- Permission
Policies []PermissionSet Permission Policy Args - Permission
Set stringId - Permission Set ID
- Relay
State string - Console Redirect URL
- Session
Duration int - Session Expiration Time (seconds)
- Status
Notifications []string - Status Notification Configuration
- Updated
Time string - Update Time
- created
Time String - Creation Time
- description String
- Permission Set Description
- name String
- Permission Set Name
- permission
Policies List<PermissionSet Permission Policy> - permission
Set StringId - Permission Set ID
- relay
State String - Console Redirect URL
- session
Duration Integer - Session Expiration Time (seconds)
- status
Notifications List<String> - Status Notification Configuration
- updated
Time String - Update Time
- created
Time string - Creation Time
- description string
- Permission Set Description
- name string
- Permission Set Name
- permission
Policies PermissionSet Permission Policy[] - permission
Set stringId - Permission Set ID
- relay
State string - Console Redirect URL
- session
Duration number - Session Expiration Time (seconds)
- status
Notifications string[] - Status Notification Configuration
- updated
Time string - Update Time
- created_
time str - Creation Time
- description str
- Permission Set Description
- name str
- Permission Set Name
- permission_
policies Sequence[PermissionSet Permission Policy Args] - permission_
set_ strid - Permission Set ID
- relay_
state str - Console Redirect URL
- session_
duration int - Session Expiration Time (seconds)
- status_
notifications Sequence[str] - Status Notification Configuration
- updated_
time str - Update Time
- created
Time String - Creation Time
- description String
- Permission Set Description
- name String
- Permission Set Name
- permission
Policies List<Property Map> - permission
Set StringId - Permission Set ID
- relay
State String - Console Redirect URL
- session
Duration Number - Session Expiration Time (seconds)
- status
Notifications List<String> - Status Notification Configuration
- updated
Time String - Update Time
Supporting Types
PermissionSetPermissionPolicy, PermissionSetPermissionPolicyArgs
- Permission
Policy stringDocument - Policy syntax content. Refer to policy syntax documentation
- Permission
Policy stringName - Policy Name
- Permission
Policy stringType - Policy Type: System or Inline
- Permission
Policy stringDocument - Policy syntax content. Refer to policy syntax documentation
- Permission
Policy stringName - Policy Name
- Permission
Policy stringType - Policy Type: System or Inline
- permission
Policy StringDocument - Policy syntax content. Refer to policy syntax documentation
- permission
Policy StringName - Policy Name
- permission
Policy StringType - Policy Type: System or Inline
- permission
Policy stringDocument - Policy syntax content. Refer to policy syntax documentation
- permission
Policy stringName - Policy Name
- permission
Policy stringType - Policy Type: System or Inline
- permission_
policy_ strdocument - Policy syntax content. Refer to policy syntax documentation
- permission_
policy_ strname - Policy Name
- permission_
policy_ strtype - Policy Type: System or Inline
- permission
Policy StringDocument - Policy syntax content. Refer to policy syntax documentation
- permission
Policy StringName - Policy Name
- permission
Policy StringType - Policy Type: System or Inline
Import
$ pulumi import volcenginecc:cloudidentity/permissionSet:PermissionSet example "permission_set_id"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Thursday, Apr 23, 2026 by Volcengine
