published on Thursday, Apr 2, 2026 by Volcengine
published on Thursday, Apr 2, 2026 by Volcengine
A user group is a collection of users. When a user group is associated with a policy, all users in the group gain the corresponding policy permissions. A user can belong to multiple user groups and have permissions from each group.
Example Usage
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
resources:
groupDemo:
type: volcenginecc:iam:Group
name: GroupDemo
properties:
userGroupName: GroupDemo
description: GroupDemo-Description
displayName: GroupDemo-DisplayName
users:
- user_name: demo
attachedPolicies:
- policy_type: System
policy_name: ECSFullAccess
policy_scope:
- attachTime: 20230810T071***Z
policyScopeType: Project
projectDisplayName: demo
projectName: Project
Create Group Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Group(name: string, args: GroupArgs, opts?: CustomResourceOptions);@overload
def Group(resource_name: str,
args: GroupArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Group(resource_name: str,
opts: Optional[ResourceOptions] = None,
user_group_name: Optional[str] = None,
attached_policies: Optional[Sequence[GroupAttachedPolicyArgs]] = None,
description: Optional[str] = None,
display_name: Optional[str] = None,
users: Optional[Sequence[GroupUserArgs]] = None)func NewGroup(ctx *Context, name string, args GroupArgs, opts ...ResourceOption) (*Group, error)public Group(string name, GroupArgs args, CustomResourceOptions? opts = null)type: volcenginecc:iam:Group
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args GroupArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var examplegroupResourceResourceFromIamgroup = new Volcenginecc.Iam.Group("examplegroupResourceResourceFromIamgroup", new()
{
UserGroupName = "string",
AttachedPolicies = new[]
{
new Volcenginecc.Iam.Inputs.GroupAttachedPolicyArgs
{
PolicyName = "string",
PolicyScopes = new[]
{
new Volcenginecc.Iam.Inputs.GroupAttachedPolicyPolicyScopeArgs
{
AttachTime = "string",
PolicyScopeType = "string",
ProjectDisplayName = "string",
ProjectName = "string",
},
},
PolicyType = "string",
},
},
Description = "string",
DisplayName = "string",
Users = new[]
{
new Volcenginecc.Iam.Inputs.GroupUserArgs
{
UserName = "string",
},
},
});
example, err := iam.NewGroup(ctx, "examplegroupResourceResourceFromIamgroup", &iam.GroupArgs{
UserGroupName: pulumi.String("string"),
AttachedPolicies: iam.GroupAttachedPolicyArray{
&iam.GroupAttachedPolicyArgs{
PolicyName: pulumi.String("string"),
PolicyScopes: iam.GroupAttachedPolicyPolicyScopeArray{
&iam.GroupAttachedPolicyPolicyScopeArgs{
AttachTime: pulumi.String("string"),
PolicyScopeType: pulumi.String("string"),
ProjectDisplayName: pulumi.String("string"),
ProjectName: pulumi.String("string"),
},
},
PolicyType: pulumi.String("string"),
},
},
Description: pulumi.String("string"),
DisplayName: pulumi.String("string"),
Users: iam.GroupUserArray{
&iam.GroupUserArgs{
UserName: pulumi.String("string"),
},
},
})
var examplegroupResourceResourceFromIamgroup = new com.volcengine.volcenginecc.iam.Group("examplegroupResourceResourceFromIamgroup", com.volcengine.volcenginecc.iam.GroupArgs.builder()
.userGroupName("string")
.attachedPolicies(GroupAttachedPolicyArgs.builder()
.policyName("string")
.policyScopes(GroupAttachedPolicyPolicyScopeArgs.builder()
.attachTime("string")
.policyScopeType("string")
.projectDisplayName("string")
.projectName("string")
.build())
.policyType("string")
.build())
.description("string")
.displayName("string")
.users(GroupUserArgs.builder()
.userName("string")
.build())
.build());
examplegroup_resource_resource_from_iamgroup = volcenginecc.iam.Group("examplegroupResourceResourceFromIamgroup",
user_group_name="string",
attached_policies=[{
"policy_name": "string",
"policy_scopes": [{
"attach_time": "string",
"policy_scope_type": "string",
"project_display_name": "string",
"project_name": "string",
}],
"policy_type": "string",
}],
description="string",
display_name="string",
users=[{
"user_name": "string",
}])
const examplegroupResourceResourceFromIamgroup = new volcenginecc.iam.Group("examplegroupResourceResourceFromIamgroup", {
userGroupName: "string",
attachedPolicies: [{
policyName: "string",
policyScopes: [{
attachTime: "string",
policyScopeType: "string",
projectDisplayName: "string",
projectName: "string",
}],
policyType: "string",
}],
description: "string",
displayName: "string",
users: [{
userName: "string",
}],
});
type: volcenginecc:iam:Group
properties:
attachedPolicies:
- policyName: string
policyScopes:
- attachTime: string
policyScopeType: string
projectDisplayName: string
projectName: string
policyType: string
description: string
displayName: string
userGroupName: string
users:
- userName: string
Group Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Group resource accepts the following input properties:
- User
Group stringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- Attached
Policies List<Volcengine.Group Attached Policy> - Description string
- User group description. Maximum length: 128 characters.
- Display
Name string - User group display name. Maximum length: 64 characters.
- Users
List<Volcengine.
Group User>
- User
Group stringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- Attached
Policies []GroupAttached Policy Args - Description string
- User group description. Maximum length: 128 characters.
- Display
Name string - User group display name. Maximum length: 64 characters.
- Users
[]Group
User Args
- user
Group StringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- attached
Policies List<GroupAttached Policy> - description String
- User group description. Maximum length: 128 characters.
- display
Name String - User group display name. Maximum length: 64 characters.
- users
List<Group
User>
- user
Group stringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- attached
Policies GroupAttached Policy[] - description string
- User group description. Maximum length: 128 characters.
- display
Name string - User group display name. Maximum length: 64 characters.
- users
Group
User[]
- user_
group_ strname - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- attached_
policies Sequence[GroupAttached Policy Args] - description str
- User group description. Maximum length: 128 characters.
- display_
name str - User group display name. Maximum length: 64 characters.
- users
Sequence[Group
User Args]
- user
Group StringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- attached
Policies List<Property Map> - description String
- User group description. Maximum length: 128 characters.
- display
Name String - User group display name. Maximum length: 64 characters.
- users List<Property Map>
Outputs
All input properties are implicitly available as output properties. Additionally, the Group resource produces the following output properties:
- Account
Id int - ID of the primary account to which the user group belongs.
- Created
Time string - User group creation time.
- Id string
- The provider-assigned unique ID for this managed resource.
- Updated
Time string - User group update time.
- User
Group intId - User group ID.
- Account
Id int - ID of the primary account to which the user group belongs.
- Created
Time string - User group creation time.
- Id string
- The provider-assigned unique ID for this managed resource.
- Updated
Time string - User group update time.
- User
Group intId - User group ID.
- account
Id Integer - ID of the primary account to which the user group belongs.
- created
Time String - User group creation time.
- id String
- The provider-assigned unique ID for this managed resource.
- updated
Time String - User group update time.
- user
Group IntegerId - User group ID.
- account
Id number - ID of the primary account to which the user group belongs.
- created
Time string - User group creation time.
- id string
- The provider-assigned unique ID for this managed resource.
- updated
Time string - User group update time.
- user
Group numberId - User group ID.
- account_
id int - ID of the primary account to which the user group belongs.
- created_
time str - User group creation time.
- id str
- The provider-assigned unique ID for this managed resource.
- updated_
time str - User group update time.
- user_
group_ intid - User group ID.
- account
Id Number - ID of the primary account to which the user group belongs.
- created
Time String - User group creation time.
- id String
- The provider-assigned unique ID for this managed resource.
- updated
Time String - User group update time.
- user
Group NumberId - User group ID.
Look up Existing Group Resource
Get an existing Group resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: GroupState, opts?: CustomResourceOptions): Group@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
account_id: Optional[int] = None,
attached_policies: Optional[Sequence[GroupAttachedPolicyArgs]] = None,
created_time: Optional[str] = None,
description: Optional[str] = None,
display_name: Optional[str] = None,
updated_time: Optional[str] = None,
user_group_id: Optional[int] = None,
user_group_name: Optional[str] = None,
users: Optional[Sequence[GroupUserArgs]] = None) -> Groupfunc GetGroup(ctx *Context, name string, id IDInput, state *GroupState, opts ...ResourceOption) (*Group, error)public static Group Get(string name, Input<string> id, GroupState? state, CustomResourceOptions? opts = null)public static Group get(String name, Output<String> id, GroupState state, CustomResourceOptions options)resources: _: type: volcenginecc:iam:Group get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Account
Id int - ID of the primary account to which the user group belongs.
- Attached
Policies List<Volcengine.Group Attached Policy> - Created
Time string - User group creation time.
- Description string
- User group description. Maximum length: 128 characters.
- Display
Name string - User group display name. Maximum length: 64 characters.
- Updated
Time string - User group update time.
- User
Group intId - User group ID.
- User
Group stringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- Users
List<Volcengine.
Group User>
- Account
Id int - ID of the primary account to which the user group belongs.
- Attached
Policies []GroupAttached Policy Args - Created
Time string - User group creation time.
- Description string
- User group description. Maximum length: 128 characters.
- Display
Name string - User group display name. Maximum length: 64 characters.
- Updated
Time string - User group update time.
- User
Group intId - User group ID.
- User
Group stringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- Users
[]Group
User Args
- account
Id Integer - ID of the primary account to which the user group belongs.
- attached
Policies List<GroupAttached Policy> - created
Time String - User group creation time.
- description String
- User group description. Maximum length: 128 characters.
- display
Name String - User group display name. Maximum length: 64 characters.
- updated
Time String - User group update time.
- user
Group IntegerId - User group ID.
- user
Group StringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- users
List<Group
User>
- account
Id number - ID of the primary account to which the user group belongs.
- attached
Policies GroupAttached Policy[] - created
Time string - User group creation time.
- description string
- User group description. Maximum length: 128 characters.
- display
Name string - User group display name. Maximum length: 64 characters.
- updated
Time string - User group update time.
- user
Group numberId - User group ID.
- user
Group stringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- users
Group
User[]
- account_
id int - ID of the primary account to which the user group belongs.
- attached_
policies Sequence[GroupAttached Policy Args] - created_
time str - User group creation time.
- description str
- User group description. Maximum length: 128 characters.
- display_
name str - User group display name. Maximum length: 64 characters.
- updated_
time str - User group update time.
- user_
group_ intid - User group ID.
- user_
group_ strname - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- users
Sequence[Group
User Args]
- account
Id Number - ID of the primary account to which the user group belongs.
- attached
Policies List<Property Map> - created
Time String - User group creation time.
- description String
- User group description. Maximum length: 128 characters.
- display
Name String - User group display name. Maximum length: 64 characters.
- updated
Time String - User group update time.
- user
Group NumberId - User group ID.
- user
Group StringName - User group name. Length: 1–64 characters. Supports English letters, numbers, and .-_ symbols.
- users List<Property Map>
Supporting Types
GroupAttachedPolicy, GroupAttachedPolicyArgs
- Policy
Name string - Policy name.
- Policy
Scopes List<Volcengine.Group Attached Policy Policy Scope> - Policy
Type string - Policy type. System indicates a system predefined policy; Custom indicates a custom policy.
- Policy
Name string - Policy name.
- Policy
Scopes []GroupAttached Policy Policy Scope - Policy
Type string - Policy type. System indicates a system predefined policy; Custom indicates a custom policy.
- policy
Name String - Policy name.
- policy
Scopes List<GroupAttached Policy Policy Scope> - policy
Type String - Policy type. System indicates a system predefined policy; Custom indicates a custom policy.
- policy
Name string - Policy name.
- policy
Scopes GroupAttached Policy Policy Scope[] - policy
Type string - Policy type. System indicates a system predefined policy; Custom indicates a custom policy.
- policy_
name str - Policy name.
- policy_
scopes Sequence[GroupAttached Policy Policy Scope] - policy_
type str - Policy type. System indicates a system predefined policy; Custom indicates a custom policy.
- policy
Name String - Policy name.
- policy
Scopes List<Property Map> - policy
Type String - Policy type. System indicates a system predefined policy; Custom indicates a custom policy.
GroupAttachedPolicyPolicyScope, GroupAttachedPolicyPolicyScopeArgs
- Attach
Time string - Project authorization time.
- Policy
Scope stringType - Authorization type. Global indicates global authorization (not limited by project); Project indicates project-based authorization.
- Project
Display stringName - Project display name for project-based authorization.
- Project
Name string - Project name for project-based authorization.
- Attach
Time string - Project authorization time.
- Policy
Scope stringType - Authorization type. Global indicates global authorization (not limited by project); Project indicates project-based authorization.
- Project
Display stringName - Project display name for project-based authorization.
- Project
Name string - Project name for project-based authorization.
- attach
Time String - Project authorization time.
- policy
Scope StringType - Authorization type. Global indicates global authorization (not limited by project); Project indicates project-based authorization.
- project
Display StringName - Project display name for project-based authorization.
- project
Name String - Project name for project-based authorization.
- attach
Time string - Project authorization time.
- policy
Scope stringType - Authorization type. Global indicates global authorization (not limited by project); Project indicates project-based authorization.
- project
Display stringName - Project display name for project-based authorization.
- project
Name string - Project name for project-based authorization.
- attach_
time str - Project authorization time.
- policy_
scope_ strtype - Authorization type. Global indicates global authorization (not limited by project); Project indicates project-based authorization.
- project_
display_ strname - Project display name for project-based authorization.
- project_
name str - Project name for project-based authorization.
- attach
Time String - Project authorization time.
- policy
Scope StringType - Authorization type. Global indicates global authorization (not limited by project); Project indicates project-based authorization.
- project
Display StringName - Project display name for project-based authorization.
- project
Name String - Project name for project-based authorization.
GroupUser, GroupUserArgs
- User
Name string - Username.
- User
Name string - Username.
- user
Name String - Username.
- user
Name string - Username.
- user_
name str - Username.
- user
Name String - Username.
Import
$ pulumi import volcenginecc:iam/group:Group example "user_group_name"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Thursday, Apr 2, 2026 by Volcengine
