1. Packages
  2. Packages
  3. Volcenginecc Provider
  4. API Docs
  5. vke
  6. getPermission
Viewing docs for volcenginecc v0.0.32
published on Thursday, Apr 23, 2026 by Volcengine
volcenginecc logo
Viewing docs for volcenginecc v0.0.32
published on Thursday, Apr 23, 2026 by Volcengine

    Data Source schema for Volcengine::VKE::Permission

    Using getPermission

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getPermission(args: GetPermissionArgs, opts?: InvokeOptions): Promise<GetPermissionResult>
    function getPermissionOutput(args: GetPermissionOutputArgs, opts?: InvokeOptions): Output<GetPermissionResult>
    def get_permission(id: Optional[str] = None,
                       opts: Optional[InvokeOptions] = None) -> GetPermissionResult
    def get_permission_output(id: Optional[pulumi.Input[str]] = None,
                       opts: Optional[InvokeOptions] = None) -> Output[GetPermissionResult]
    func LookupPermission(ctx *Context, args *LookupPermissionArgs, opts ...InvokeOption) (*LookupPermissionResult, error)
    func LookupPermissionOutput(ctx *Context, args *LookupPermissionOutputArgs, opts ...InvokeOption) LookupPermissionResultOutput

    > Note: This function is named LookupPermission in the Go SDK.

    public static class GetPermission 
    {
        public static Task<GetPermissionResult> InvokeAsync(GetPermissionArgs args, InvokeOptions? opts = null)
        public static Output<GetPermissionResult> Invoke(GetPermissionInvokeArgs args, InvokeOptions? opts = null)
    }
    public static CompletableFuture<GetPermissionResult> getPermission(GetPermissionArgs args, InvokeOptions options)
    public static Output<GetPermissionResult> getPermission(GetPermissionArgs args, InvokeOptions options)
    
    fn::invoke:
      function: volcenginecc:vke/getPermission:getPermission
      arguments:
        # arguments dictionary

    The following arguments are supported:

    Id string
    Uniquely identifies the resource.
    Id string
    Uniquely identifies the resource.
    id String
    Uniquely identifies the resource.
    id string
    Uniquely identifies the resource.
    id str
    Uniquely identifies the resource.
    id String
    Uniquely identifies the resource.

    getPermission Result

    The following output properties are available:

    AuthorizedAt string
    Time when the RBAC policy resource was authorized.
    AuthorizerId int
    Grantor ID. Can be an IAM user ID or an IAM role ID.
    AuthorizerName string
    Grantor name
    AuthorizerType string
    Type of grantor. Possible values: User: IAM user. Role: IAM role. Account: account.
    ClusterId string
    Cluster ID to be authorized for the IAM user or role. This parameter is required when roleDomain is namespace or cluster.
    CreatedTime string
    Time when the RBAC policy resource was created.
    GranteeId int
    Grantee ID. Can be an IAM user ID or an IAM role ID.
    GranteeType string
    Type of grantee. Possible values: User: IAM user. Role: IAM role. Account: account.
    Id string
    Uniquely identifies the resource.
    IsCustomRole bool
    Whether the RBAC role granted to the grantee is a custom role. Possible values: true: custom role. false (default): system predefined role.
    KubeRoleBindingName string
    The object name of the RBAC policy resource in Kubernetes.
    Message string
    Authorization details message.
    Namespace string
    Namespace name to be authorized for the IAM user or role. This parameter is required when roleDomain equals namespace. If roleDomain does not equal namespace, this parameter is not effective.
    PermissionId string
    RBAC policy resource ID.
    ProjectSelector string
    Project selector
    RevokedAt string
    Time when authorization is revoked.
    RoleDomain string
    The permission type granted to an IAM user or role. Possible values: namespace: grants permissions at the namespace level. cluster: grants permissions at the cluster level. all_clusters: grants permissions at the cluster level for all clusters under the current account.
    RoleName string
    Name of the RBAC role granted to the grantee. This parameter must be specified. When roleDomain is all_clusters, custom role names are not allowed.
    Status string
    Status of the RBAC access policy resource. Possible values: Success: authorization succeeded. Failed: authorization failed. Pending: authorization in progress. PartialSuccess: partial authorization succeeded.
    AuthorizedAt string
    Time when the RBAC policy resource was authorized.
    AuthorizerId int
    Grantor ID. Can be an IAM user ID or an IAM role ID.
    AuthorizerName string
    Grantor name
    AuthorizerType string
    Type of grantor. Possible values: User: IAM user. Role: IAM role. Account: account.
    ClusterId string
    Cluster ID to be authorized for the IAM user or role. This parameter is required when roleDomain is namespace or cluster.
    CreatedTime string
    Time when the RBAC policy resource was created.
    GranteeId int
    Grantee ID. Can be an IAM user ID or an IAM role ID.
    GranteeType string
    Type of grantee. Possible values: User: IAM user. Role: IAM role. Account: account.
    Id string
    Uniquely identifies the resource.
    IsCustomRole bool
    Whether the RBAC role granted to the grantee is a custom role. Possible values: true: custom role. false (default): system predefined role.
    KubeRoleBindingName string
    The object name of the RBAC policy resource in Kubernetes.
    Message string
    Authorization details message.
    Namespace string
    Namespace name to be authorized for the IAM user or role. This parameter is required when roleDomain equals namespace. If roleDomain does not equal namespace, this parameter is not effective.
    PermissionId string
    RBAC policy resource ID.
    ProjectSelector string
    Project selector
    RevokedAt string
    Time when authorization is revoked.
    RoleDomain string
    The permission type granted to an IAM user or role. Possible values: namespace: grants permissions at the namespace level. cluster: grants permissions at the cluster level. all_clusters: grants permissions at the cluster level for all clusters under the current account.
    RoleName string
    Name of the RBAC role granted to the grantee. This parameter must be specified. When roleDomain is all_clusters, custom role names are not allowed.
    Status string
    Status of the RBAC access policy resource. Possible values: Success: authorization succeeded. Failed: authorization failed. Pending: authorization in progress. PartialSuccess: partial authorization succeeded.
    authorizedAt String
    Time when the RBAC policy resource was authorized.
    authorizerId Integer
    Grantor ID. Can be an IAM user ID or an IAM role ID.
    authorizerName String
    Grantor name
    authorizerType String
    Type of grantor. Possible values: User: IAM user. Role: IAM role. Account: account.
    clusterId String
    Cluster ID to be authorized for the IAM user or role. This parameter is required when roleDomain is namespace or cluster.
    createdTime String
    Time when the RBAC policy resource was created.
    granteeId Integer
    Grantee ID. Can be an IAM user ID or an IAM role ID.
    granteeType String
    Type of grantee. Possible values: User: IAM user. Role: IAM role. Account: account.
    id String
    Uniquely identifies the resource.
    isCustomRole Boolean
    Whether the RBAC role granted to the grantee is a custom role. Possible values: true: custom role. false (default): system predefined role.
    kubeRoleBindingName String
    The object name of the RBAC policy resource in Kubernetes.
    message String
    Authorization details message.
    namespace String
    Namespace name to be authorized for the IAM user or role. This parameter is required when roleDomain equals namespace. If roleDomain does not equal namespace, this parameter is not effective.
    permissionId String
    RBAC policy resource ID.
    projectSelector String
    Project selector
    revokedAt String
    Time when authorization is revoked.
    roleDomain String
    The permission type granted to an IAM user or role. Possible values: namespace: grants permissions at the namespace level. cluster: grants permissions at the cluster level. all_clusters: grants permissions at the cluster level for all clusters under the current account.
    roleName String
    Name of the RBAC role granted to the grantee. This parameter must be specified. When roleDomain is all_clusters, custom role names are not allowed.
    status String
    Status of the RBAC access policy resource. Possible values: Success: authorization succeeded. Failed: authorization failed. Pending: authorization in progress. PartialSuccess: partial authorization succeeded.
    authorizedAt string
    Time when the RBAC policy resource was authorized.
    authorizerId number
    Grantor ID. Can be an IAM user ID or an IAM role ID.
    authorizerName string
    Grantor name
    authorizerType string
    Type of grantor. Possible values: User: IAM user. Role: IAM role. Account: account.
    clusterId string
    Cluster ID to be authorized for the IAM user or role. This parameter is required when roleDomain is namespace or cluster.
    createdTime string
    Time when the RBAC policy resource was created.
    granteeId number
    Grantee ID. Can be an IAM user ID or an IAM role ID.
    granteeType string
    Type of grantee. Possible values: User: IAM user. Role: IAM role. Account: account.
    id string
    Uniquely identifies the resource.
    isCustomRole boolean
    Whether the RBAC role granted to the grantee is a custom role. Possible values: true: custom role. false (default): system predefined role.
    kubeRoleBindingName string
    The object name of the RBAC policy resource in Kubernetes.
    message string
    Authorization details message.
    namespace string
    Namespace name to be authorized for the IAM user or role. This parameter is required when roleDomain equals namespace. If roleDomain does not equal namespace, this parameter is not effective.
    permissionId string
    RBAC policy resource ID.
    projectSelector string
    Project selector
    revokedAt string
    Time when authorization is revoked.
    roleDomain string
    The permission type granted to an IAM user or role. Possible values: namespace: grants permissions at the namespace level. cluster: grants permissions at the cluster level. all_clusters: grants permissions at the cluster level for all clusters under the current account.
    roleName string
    Name of the RBAC role granted to the grantee. This parameter must be specified. When roleDomain is all_clusters, custom role names are not allowed.
    status string
    Status of the RBAC access policy resource. Possible values: Success: authorization succeeded. Failed: authorization failed. Pending: authorization in progress. PartialSuccess: partial authorization succeeded.
    authorized_at str
    Time when the RBAC policy resource was authorized.
    authorizer_id int
    Grantor ID. Can be an IAM user ID or an IAM role ID.
    authorizer_name str
    Grantor name
    authorizer_type str
    Type of grantor. Possible values: User: IAM user. Role: IAM role. Account: account.
    cluster_id str
    Cluster ID to be authorized for the IAM user or role. This parameter is required when roleDomain is namespace or cluster.
    created_time str
    Time when the RBAC policy resource was created.
    grantee_id int
    Grantee ID. Can be an IAM user ID or an IAM role ID.
    grantee_type str
    Type of grantee. Possible values: User: IAM user. Role: IAM role. Account: account.
    id str
    Uniquely identifies the resource.
    is_custom_role bool
    Whether the RBAC role granted to the grantee is a custom role. Possible values: true: custom role. false (default): system predefined role.
    kube_role_binding_name str
    The object name of the RBAC policy resource in Kubernetes.
    message str
    Authorization details message.
    namespace str
    Namespace name to be authorized for the IAM user or role. This parameter is required when roleDomain equals namespace. If roleDomain does not equal namespace, this parameter is not effective.
    permission_id str
    RBAC policy resource ID.
    project_selector str
    Project selector
    revoked_at str
    Time when authorization is revoked.
    role_domain str
    The permission type granted to an IAM user or role. Possible values: namespace: grants permissions at the namespace level. cluster: grants permissions at the cluster level. all_clusters: grants permissions at the cluster level for all clusters under the current account.
    role_name str
    Name of the RBAC role granted to the grantee. This parameter must be specified. When roleDomain is all_clusters, custom role names are not allowed.
    status str
    Status of the RBAC access policy resource. Possible values: Success: authorization succeeded. Failed: authorization failed. Pending: authorization in progress. PartialSuccess: partial authorization succeeded.
    authorizedAt String
    Time when the RBAC policy resource was authorized.
    authorizerId Number
    Grantor ID. Can be an IAM user ID or an IAM role ID.
    authorizerName String
    Grantor name
    authorizerType String
    Type of grantor. Possible values: User: IAM user. Role: IAM role. Account: account.
    clusterId String
    Cluster ID to be authorized for the IAM user or role. This parameter is required when roleDomain is namespace or cluster.
    createdTime String
    Time when the RBAC policy resource was created.
    granteeId Number
    Grantee ID. Can be an IAM user ID or an IAM role ID.
    granteeType String
    Type of grantee. Possible values: User: IAM user. Role: IAM role. Account: account.
    id String
    Uniquely identifies the resource.
    isCustomRole Boolean
    Whether the RBAC role granted to the grantee is a custom role. Possible values: true: custom role. false (default): system predefined role.
    kubeRoleBindingName String
    The object name of the RBAC policy resource in Kubernetes.
    message String
    Authorization details message.
    namespace String
    Namespace name to be authorized for the IAM user or role. This parameter is required when roleDomain equals namespace. If roleDomain does not equal namespace, this parameter is not effective.
    permissionId String
    RBAC policy resource ID.
    projectSelector String
    Project selector
    revokedAt String
    Time when authorization is revoked.
    roleDomain String
    The permission type granted to an IAM user or role. Possible values: namespace: grants permissions at the namespace level. cluster: grants permissions at the cluster level. all_clusters: grants permissions at the cluster level for all clusters under the current account.
    roleName String
    Name of the RBAC role granted to the grantee. This parameter must be specified. When roleDomain is all_clusters, custom role names are not allowed.
    status String
    Status of the RBAC access policy resource. Possible values: Success: authorization succeeded. Failed: authorization failed. Pending: authorization in progress. PartialSuccess: partial authorization succeeded.

    Package Details

    Repository
    volcenginecc volcengine/pulumi-volcenginecc
    License
    MPL-2.0
    Notes
    This Pulumi package is based on the volcenginecc Terraform Provider.
    volcenginecc logo
    Viewing docs for volcenginecc v0.0.32
    published on Thursday, Apr 23, 2026 by Volcengine
      Try Pulumi Cloud free. Your team will thank you.