Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Zscaler Private Access (ZPA)
  4. API Docs
  5. ConnectorGroup
Viewing docs for Zscaler Private Access v1.0.4
published on Monday, Jun 29, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zpa

zpa.ConnectorGroup

zpa logo
Viewing docs for Zscaler Private Access v1.0.4
published on Monday, Jun 29, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zpa

    The zpa_app_connector_group resource creates a and manages app connector groups in the Zscaler Private Access (ZPA) cloud. This resource can then be associated with the following resources: server groups, log receivers and access policies.

    Zenith Community - ZPA App Connector Group

    ZPA Terraform provider Video Series Ep2 - Connector Groups

    App Connector Onboarding Methods

    App Connectors can be onboarded into ZPA in two ways. This resource supports both:

    1. OAuth2 user codes (recommended for new deployments) - Set userCodes with the codes generated on each App Connector VM. The provider creates the group and then calls the OAuth2 user code verification API to enroll the connectors.
    2. Provisioning key (legacy / still supported) - Create the group with this resource, then create a zpa.ProvisioningKey referencing it. The key is then injected into the App Connector VM at deployment time.

    In both methods, the App Connector enrollment requires an enrollmentCertId. You can either:

    • Set enrollmentCertId explicitly using the zpa.getEnrollmentCert data source, or
    • Omit it entirely - the provider will automatically look up the “Connector” enrollment certificate by name and populate the ID for you.

    Example Usage

    OAuth2 Enrollment With User Codes (Explicit Enrollment Certificate)

    Set the enrollment certificate explicitly and provide the user codes displayed on the App Connector VMs after deployment. The provider will create the group and then call the user code verification API to complete enrollment.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const connector = zpa.getEnrollmentCert({
    name: "Connector",
});
const example = new zpa.ConnectorGroup("example", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    dnsQueryType: "IPV4_IPV6",
    enrollmentCertId: connector.then(connector => connector.id),
    userCodes: [
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ],
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

connector = zpa.get_enrollment_cert(name="Connector")
example = zpa.ConnectorGroup("example",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    dns_query_type="IPV4_IPV6",
    enrollment_cert_id=connector.id,
    user_codes=[
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		connector, err := zpa.GetEnrollmentCert(ctx, &zpa.GetEnrollmentCertArgs{
			Name: pulumi.StringRef("Connector"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = zpa.NewConnectorGroup(ctx, "example", &zpa.ConnectorGroupArgs{
			Name:              pulumi.String("Example"),
			Description:       pulumi.String("Example"),
			Enabled:           pulumi.Bool(true),
			CityCountry:       pulumi.String("San Jose, CA"),
			CountryCode:       pulumi.String("US"),
			Latitude:          pulumi.String("37.338"),
			Longitude:         pulumi.String("-121.8863"),
			Location:          pulumi.String("San Jose, CA, US"),
			UpgradeDay:        pulumi.String("SUNDAY"),
			UpgradeTimeInSecs: pulumi.String("66600"),
			DnsQueryType:      pulumi.String("IPV4_IPV6"),
			EnrollmentCertId:  pulumi.String(connector.Id),
			UserCodes: pulumi.StringArray{
				pulumi.String("CODE_FROM_VM_1"),
				pulumi.String("CODE_FROM_VM_2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var connector = Zpa.GetEnrollmentCert.Invoke(new()
    {
        Name = "Connector",
    });

    var example = new Zpa.ConnectorGroup("example", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        DnsQueryType = "IPV4_IPV6",
        EnrollmentCertId = connector.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
        UserCodes = new[]
        {
            "CODE_FROM_VM_1",
            "CODE_FROM_VM_2",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetEnrollmentCertArgs;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var connector = ZpaFunctions.getEnrollmentCert(GetEnrollmentCertArgs.builder()
            .name("Connector")
            .build());

        var example = new ConnectorGroup("example", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .dnsQueryType("IPV4_IPV6")
            .enrollmentCertId(connector.id())
            .userCodes(            
                "CODE_FROM_VM_1",
                "CODE_FROM_VM_2")
            .build());

    }
}

    resources:
  example:
    type: zpa:ConnectorGroup
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      dnsQueryType: IPV4_IPV6
      enrollmentCertId: ${connector.id}
      userCodes:
        - CODE_FROM_VM_1
        - CODE_FROM_VM_2
variables:
  connector:
    fn::invoke:
      function: zpa:getEnrollmentCert
      arguments:
        name: Connector

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getenrollmentcert" "connector" {
  name = "Connector"
}

resource "zpa_connectorgroup" "example" {
  name                 = "Example"
  description          = "Example"
  enabled              = true
  city_country         = "San Jose, CA"
  country_code         = "US"
  latitude             = "37.338"
  longitude            = "-121.8863"
  location             = "San Jose, CA, US"
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  dns_query_type       = "IPV4_IPV6"
  enrollment_cert_id   = data.zpa_getenrollmentcert.connector.id
  user_codes           = ["CODE_FROM_VM_1", "CODE_FROM_VM_2"]
}

    OAuth2 Enrollment With User Codes (Auto-Resolved Enrollment Certificate)

    Omit enrollmentCertId entirely and the provider will automatically resolve the “Connector” enrollment certificate for you. This is the simplest configuration and is functionally equivalent to the explicit example above.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const example = new zpa.ConnectorGroup("example", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    dnsQueryType: "IPV4_IPV6",
    userCodes: [
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ],
});

    import pulumi
import zscaler_pulumi_zpa as zpa

example = zpa.ConnectorGroup("example",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    dns_query_type="IPV4_IPV6",
    user_codes=[
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := zpa.NewConnectorGroup(ctx, "example", &zpa.ConnectorGroupArgs{
			Name:              pulumi.String("Example"),
			Description:       pulumi.String("Example"),
			Enabled:           pulumi.Bool(true),
			CityCountry:       pulumi.String("San Jose, CA"),
			CountryCode:       pulumi.String("US"),
			Latitude:          pulumi.String("37.338"),
			Longitude:         pulumi.String("-121.8863"),
			Location:          pulumi.String("San Jose, CA, US"),
			UpgradeDay:        pulumi.String("SUNDAY"),
			UpgradeTimeInSecs: pulumi.String("66600"),
			DnsQueryType:      pulumi.String("IPV4_IPV6"),
			UserCodes: pulumi.StringArray{
				pulumi.String("CODE_FROM_VM_1"),
				pulumi.String("CODE_FROM_VM_2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var example = new Zpa.ConnectorGroup("example", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        DnsQueryType = "IPV4_IPV6",
        UserCodes = new[]
        {
            "CODE_FROM_VM_1",
            "CODE_FROM_VM_2",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ConnectorGroup("example", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .dnsQueryType("IPV4_IPV6")
            .userCodes(            
                "CODE_FROM_VM_1",
                "CODE_FROM_VM_2")
            .build());

    }
}

    resources:
  example:
    type: zpa:ConnectorGroup
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      dnsQueryType: IPV4_IPV6
      userCodes:
        - CODE_FROM_VM_1
        - CODE_FROM_VM_2

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

resource "zpa_connectorgroup" "example" {
  name                 = "Example"
  description          = "Example"
  enabled              = true
  city_country         = "San Jose, CA"
  country_code         = "US"
  latitude             = "37.338"
  longitude            = "-121.8863"
  location             = "San Jose, CA, US"
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  dns_query_type       = "IPV4_IPV6"
  user_codes           = ["CODE_FROM_VM_1", "CODE_FROM_VM_2"]
}

    Enrolling App Connectors Via Provisioning Key (Explicit Enrollment Certificate)

    Create the App Connector Group, then create a zpa.ProvisioningKey that references the group’s ID. The provisioning key is then injected into the App Connector VM at deployment time.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const connector = zpa.getEnrollmentCert({
    name: "Connector",
});
const example = new zpa.ConnectorGroup("example", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    dnsQueryType: "IPV4_IPV6",
    enrollmentCertId: connector.then(connector => connector.id),
});
const exampleProvisioningKey = new zpa.ProvisioningKey("example", {
    name: "ProvisioningKey01",
    associationType: "CONNECTOR_GRP",
    maxUsage: "10",
    enrollmentCertId: connector.then(connector => connector.id),
    zcomponentId: example.id,
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

connector = zpa.get_enrollment_cert(name="Connector")
example = zpa.ConnectorGroup("example",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    dns_query_type="IPV4_IPV6",
    enrollment_cert_id=connector.id)
example_provisioning_key = zpa.ProvisioningKey("example",
    name="ProvisioningKey01",
    association_type="CONNECTOR_GRP",
    max_usage="10",
    enrollment_cert_id=connector.id,
    zcomponent_id=example.id)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		connector, err := zpa.GetEnrollmentCert(ctx, &zpa.GetEnrollmentCertArgs{
			Name: pulumi.StringRef("Connector"),
		}, nil)
		if err != nil {
			return err
		}
		example, err := zpa.NewConnectorGroup(ctx, "example", &zpa.ConnectorGroupArgs{
			Name:              pulumi.String("Example"),
			Description:       pulumi.String("Example"),
			Enabled:           pulumi.Bool(true),
			CityCountry:       pulumi.String("San Jose, CA"),
			CountryCode:       pulumi.String("US"),
			Latitude:          pulumi.String("37.338"),
			Longitude:         pulumi.String("-121.8863"),
			Location:          pulumi.String("San Jose, CA, US"),
			UpgradeDay:        pulumi.String("SUNDAY"),
			UpgradeTimeInSecs: pulumi.String("66600"),
			DnsQueryType:      pulumi.String("IPV4_IPV6"),
			EnrollmentCertId:  pulumi.String(connector.Id),
		})
		if err != nil {
			return err
		}
		_, err = zpa.NewProvisioningKey(ctx, "example", &zpa.ProvisioningKeyArgs{
			Name:             pulumi.String("ProvisioningKey01"),
			AssociationType:  pulumi.String("CONNECTOR_GRP"),
			MaxUsage:         pulumi.String("10"),
			EnrollmentCertId: pulumi.String(connector.Id),
			ZcomponentId:     example.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var connector = Zpa.GetEnrollmentCert.Invoke(new()
    {
        Name = "Connector",
    });

    var example = new Zpa.ConnectorGroup("example", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        DnsQueryType = "IPV4_IPV6",
        EnrollmentCertId = connector.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
    });

    var exampleProvisioningKey = new Zpa.ProvisioningKey("example", new()
    {
        Name = "ProvisioningKey01",
        AssociationType = "CONNECTOR_GRP",
        MaxUsage = "10",
        EnrollmentCertId = connector.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
        ZcomponentId = example.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetEnrollmentCertArgs;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import com.pulumi.zpa.ProvisioningKey;
import com.pulumi.zpa.ProvisioningKeyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var connector = ZpaFunctions.getEnrollmentCert(GetEnrollmentCertArgs.builder()
            .name("Connector")
            .build());

        var example = new ConnectorGroup("example", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .dnsQueryType("IPV4_IPV6")
            .enrollmentCertId(connector.id())
            .build());

        var exampleProvisioningKey = new ProvisioningKey("exampleProvisioningKey", ProvisioningKeyArgs.builder()
            .name("ProvisioningKey01")
            .associationType("CONNECTOR_GRP")
            .maxUsage("10")
            .enrollmentCertId(connector.id())
            .zcomponentId(example.id())
            .build());

    }
}

    resources:
  example:
    type: zpa:ConnectorGroup
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      dnsQueryType: IPV4_IPV6
      enrollmentCertId: ${connector.id}
  exampleProvisioningKey:
    type: zpa:ProvisioningKey
    name: example
    properties:
      name: ProvisioningKey01
      associationType: CONNECTOR_GRP
      maxUsage: '10'
      enrollmentCertId: ${connector.id}
      zcomponentId: ${example.id}
variables:
  connector:
    fn::invoke:
      function: zpa:getEnrollmentCert
      arguments:
        name: Connector

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getenrollmentcert" "connector" {
  name = "Connector"
}

resource "zpa_connectorgroup" "example" {
  name                 = "Example"
  description          = "Example"
  enabled              = true
  city_country         = "San Jose, CA"
  country_code         = "US"
  latitude             = "37.338"
  longitude            = "-121.8863"
  location             = "San Jose, CA, US"
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  dns_query_type       = "IPV4_IPV6"
  enrollment_cert_id   = data.zpa_getenrollmentcert.connector.id
}
resource "zpa_provisioningkey" "example" {
  name               = "ProvisioningKey01"
  association_type   = "CONNECTOR_GRP"
  max_usage          = "10"
  enrollment_cert_id = data.zpa_getenrollmentcert.connector.id
  zcomponent_id      = zpa_connectorgroup.example.id
}

    Enrolling App Connectors Via Provisioning Key (Auto-Resolved Enrollment Certificate)

    For the App Connector Group, you can omit enrollmentCertId and let the provider auto-resolve it. The zpa.ProvisioningKey resource still requires enrollmentCertId to be set explicitly.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const connector = zpa.getEnrollmentCert({
    name: "Connector",
});
const example = new zpa.ConnectorGroup("example", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    dnsQueryType: "IPV4_IPV6",
});
const exampleProvisioningKey = new zpa.ProvisioningKey("example", {
    name: "ProvisioningKey01",
    associationType: "CONNECTOR_GRP",
    maxUsage: "10",
    enrollmentCertId: connector.then(connector => connector.id),
    zcomponentId: example.id,
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

connector = zpa.get_enrollment_cert(name="Connector")
example = zpa.ConnectorGroup("example",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    dns_query_type="IPV4_IPV6")
example_provisioning_key = zpa.ProvisioningKey("example",
    name="ProvisioningKey01",
    association_type="CONNECTOR_GRP",
    max_usage="10",
    enrollment_cert_id=connector.id,
    zcomponent_id=example.id)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		connector, err := zpa.GetEnrollmentCert(ctx, &zpa.GetEnrollmentCertArgs{
			Name: pulumi.StringRef("Connector"),
		}, nil)
		if err != nil {
			return err
		}
		example, err := zpa.NewConnectorGroup(ctx, "example", &zpa.ConnectorGroupArgs{
			Name:              pulumi.String("Example"),
			Description:       pulumi.String("Example"),
			Enabled:           pulumi.Bool(true),
			CityCountry:       pulumi.String("San Jose, CA"),
			CountryCode:       pulumi.String("US"),
			Latitude:          pulumi.String("37.338"),
			Longitude:         pulumi.String("-121.8863"),
			Location:          pulumi.String("San Jose, CA, US"),
			UpgradeDay:        pulumi.String("SUNDAY"),
			UpgradeTimeInSecs: pulumi.String("66600"),
			DnsQueryType:      pulumi.String("IPV4_IPV6"),
		})
		if err != nil {
			return err
		}
		_, err = zpa.NewProvisioningKey(ctx, "example", &zpa.ProvisioningKeyArgs{
			Name:             pulumi.String("ProvisioningKey01"),
			AssociationType:  pulumi.String("CONNECTOR_GRP"),
			MaxUsage:         pulumi.String("10"),
			EnrollmentCertId: pulumi.String(connector.Id),
			ZcomponentId:     example.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var connector = Zpa.GetEnrollmentCert.Invoke(new()
    {
        Name = "Connector",
    });

    var example = new Zpa.ConnectorGroup("example", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        DnsQueryType = "IPV4_IPV6",
    });

    var exampleProvisioningKey = new Zpa.ProvisioningKey("example", new()
    {
        Name = "ProvisioningKey01",
        AssociationType = "CONNECTOR_GRP",
        MaxUsage = "10",
        EnrollmentCertId = connector.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
        ZcomponentId = example.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetEnrollmentCertArgs;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import com.pulumi.zpa.ProvisioningKey;
import com.pulumi.zpa.ProvisioningKeyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var connector = ZpaFunctions.getEnrollmentCert(GetEnrollmentCertArgs.builder()
            .name("Connector")
            .build());

        var example = new ConnectorGroup("example", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .dnsQueryType("IPV4_IPV6")
            .build());

        var exampleProvisioningKey = new ProvisioningKey("exampleProvisioningKey", ProvisioningKeyArgs.builder()
            .name("ProvisioningKey01")
            .associationType("CONNECTOR_GRP")
            .maxUsage("10")
            .enrollmentCertId(connector.id())
            .zcomponentId(example.id())
            .build());

    }
}

    resources:
  example:
    type: zpa:ConnectorGroup
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      dnsQueryType: IPV4_IPV6
  exampleProvisioningKey:
    type: zpa:ProvisioningKey
    name: example
    properties:
      name: ProvisioningKey01
      associationType: CONNECTOR_GRP
      maxUsage: '10'
      enrollmentCertId: ${connector.id}
      zcomponentId: ${example.id}
variables:
  connector:
    fn::invoke:
      function: zpa:getEnrollmentCert
      arguments:
        name: Connector

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getenrollmentcert" "connector" {
  name = "Connector"
}

resource "zpa_connectorgroup" "example" {
  name                 = "Example"
  description          = "Example"
  enabled              = true
  city_country         = "San Jose, CA"
  country_code         = "US"
  latitude             = "37.338"
  longitude            = "-121.8863"
  location             = "San Jose, CA, US"
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  dns_query_type       = "IPV4_IPV6"
}
resource "zpa_provisioningkey" "example" {
  name               = "ProvisioningKey01"
  association_type   = "CONNECTOR_GRP"
  max_usage          = "10"
  enrollment_cert_id = data.zpa_getenrollmentcert.connector.id
  zcomponent_id      = zpa_connectorgroup.example.id
}

    Using Version Profile Name

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

// Create a App Connector Group
const example = new zpa.ConnectorGroup("example", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    overrideVersionProfile: true,
    versionProfileName: "New Release",
    dnsQueryType: "IPV4_IPV6",
    useInDrMode: true,
});

    import pulumi
import zscaler_pulumi_zpa as zpa

# Create a App Connector Group
example = zpa.ConnectorGroup("example",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    override_version_profile=True,
    version_profile_name="New Release",
    dns_query_type="IPV4_IPV6",
    use_in_dr_mode=True)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Create a App Connector Group
		_, err := zpa.NewConnectorGroup(ctx, "example", &zpa.ConnectorGroupArgs{
			Name:                   pulumi.String("Example"),
			Description:            pulumi.String("Example"),
			Enabled:                pulumi.Bool(true),
			CityCountry:            pulumi.String("San Jose, CA"),
			CountryCode:            pulumi.String("US"),
			Latitude:               pulumi.String("37.338"),
			Longitude:              pulumi.String("-121.8863"),
			Location:               pulumi.String("San Jose, CA, US"),
			UpgradeDay:             pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:      pulumi.String("66600"),
			OverrideVersionProfile: pulumi.Bool(true),
			VersionProfileName:     pulumi.String("New Release"),
			DnsQueryType:           pulumi.String("IPV4_IPV6"),
			UseInDrMode:            pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    // Create a App Connector Group
    var example = new Zpa.ConnectorGroup("example", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        OverrideVersionProfile = true,
        VersionProfileName = "New Release",
        DnsQueryType = "IPV4_IPV6",
        UseInDrMode = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Create a App Connector Group
        var example = new ConnectorGroup("example", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .overrideVersionProfile(true)
            .versionProfileName("New Release")
            .dnsQueryType("IPV4_IPV6")
            .useInDrMode(true)
            .build());

    }
}

    resources:
  # Create a App Connector Group
  example:
    type: zpa:ConnectorGroup
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      overrideVersionProfile: true
      versionProfileName: New Release
      dnsQueryType: IPV4_IPV6
      useInDrMode: true

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

# Create a App Connector Group
resource "zpa_connectorgroup" "example" {
  name                     = "Example"
  description              = "Example"
  enabled                  = true
  city_country             = "San Jose, CA"
  country_code             = "US"
  latitude                 = "37.338"
  longitude                = "-121.8863"
  location                 = "San Jose, CA, US"
  upgrade_day              = "SUNDAY"
  upgrade_time_in_secs     = "66600"
  override_version_profile = true
  version_profile_name     = "New Release"
  dns_query_type           = "IPV4_IPV6"
  use_in_dr_mode           = true
}

    Using Version Profile ID

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const _this = zpa.getCustomerVersionProfile({
    name: "New Release",
});
// Create a App Connector Group
const example = new zpa.ConnectorGroup("example", {
    name: "Example",
    description: "Example",
    enabled: true,
    cityCountry: "San Jose, CA",
    countryCode: "US",
    latitude: "37.338",
    longitude: "-121.8863",
    location: "San Jose, CA, US",
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    overrideVersionProfile: true,
    versionProfileId: _this.then(_this => _this.id),
    dnsQueryType: "IPV4_IPV6",
    useInDrMode: true,
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

this = zpa.get_customer_version_profile(name="New Release")
# Create a App Connector Group
example = zpa.ConnectorGroup("example",
    name="Example",
    description="Example",
    enabled=True,
    city_country="San Jose, CA",
    country_code="US",
    latitude="37.338",
    longitude="-121.8863",
    location="San Jose, CA, US",
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    override_version_profile=True,
    version_profile_id=this.id,
    dns_query_type="IPV4_IPV6",
    use_in_dr_mode=True)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		this, err := zpa.GetCustomerVersionProfile(ctx, &zpa.GetCustomerVersionProfileArgs{
			Name: "New Release",
		}, nil)
		if err != nil {
			return err
		}
		// Create a App Connector Group
		_, err = zpa.NewConnectorGroup(ctx, "example", &zpa.ConnectorGroupArgs{
			Name:                   pulumi.String("Example"),
			Description:            pulumi.String("Example"),
			Enabled:                pulumi.Bool(true),
			CityCountry:            pulumi.String("San Jose, CA"),
			CountryCode:            pulumi.String("US"),
			Latitude:               pulumi.String("37.338"),
			Longitude:              pulumi.String("-121.8863"),
			Location:               pulumi.String("San Jose, CA, US"),
			UpgradeDay:             pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:      pulumi.String("66600"),
			OverrideVersionProfile: pulumi.Bool(true),
			VersionProfileId:       pulumi.String(this.Id),
			DnsQueryType:           pulumi.String("IPV4_IPV6"),
			UseInDrMode:            pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var @this = Zpa.GetCustomerVersionProfile.Invoke(new()
    {
        Name = "New Release",
    });

    // Create a App Connector Group
    var example = new Zpa.ConnectorGroup("example", new()
    {
        Name = "Example",
        Description = "Example",
        Enabled = true,
        CityCountry = "San Jose, CA",
        CountryCode = "US",
        Latitude = "37.338",
        Longitude = "-121.8863",
        Location = "San Jose, CA, US",
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        OverrideVersionProfile = true,
        VersionProfileId = @this.Apply(@this => @this.Apply(getCustomerVersionProfileResult => getCustomerVersionProfileResult.Id)),
        DnsQueryType = "IPV4_IPV6",
        UseInDrMode = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetCustomerVersionProfileArgs;
import com.pulumi.zpa.ConnectorGroup;
import com.pulumi.zpa.ConnectorGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var this = ZpaFunctions.getCustomerVersionProfile(GetCustomerVersionProfileArgs.builder()
            .name("New Release")
            .build());

        // Create a App Connector Group
        var example = new ConnectorGroup("example", ConnectorGroupArgs.builder()
            .name("Example")
            .description("Example")
            .enabled(true)
            .cityCountry("San Jose, CA")
            .countryCode("US")
            .latitude("37.338")
            .longitude("-121.8863")
            .location("San Jose, CA, US")
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .overrideVersionProfile(true)
            .versionProfileId(this_.id())
            .dnsQueryType("IPV4_IPV6")
            .useInDrMode(true)
            .build());

    }
}

    resources:
  # Create a App Connector Group
  example:
    type: zpa:ConnectorGroup
    properties:
      name: Example
      description: Example
      enabled: true
      cityCountry: San Jose, CA
      countryCode: US
      latitude: '37.338'
      longitude: '-121.8863'
      location: San Jose, CA, US
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      overrideVersionProfile: true
      versionProfileId: ${this.id}
      dnsQueryType: IPV4_IPV6
      useInDrMode: true
variables:
  this:
    fn::invoke:
      function: zpa:getCustomerVersionProfile
      arguments:
        name: New Release

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getcustomerversionprofile" "this" {
  name = "New Release"
}

# Create a App Connector Group
resource "zpa_connectorgroup" "example" {
  name                     = "Example"
  description              = "Example"
  enabled                  = true
  city_country             = "San Jose, CA"
  country_code             = "US"
  latitude                 = "37.338"
  longitude                = "-121.8863"
  location                 = "San Jose, CA, US"
  upgrade_day              = "SUNDAY"
  upgrade_time_in_secs     = "66600"
  override_version_profile = true
  version_profile_id       = data.zpa_getcustomerversionprofile.this.id
  dns_query_type           = "IPV4_IPV6"
  use_in_dr_mode           = true
}

    Create ConnectorGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ConnectorGroup(name: string, args: ConnectorGroupArgs, opts?: CustomResourceOptions);
    @overload
def ConnectorGroup(resource_name: str,
                   args: ConnectorGroupArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def ConnectorGroup(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   latitude: Optional[str] = None,
                   longitude: Optional[str] = None,
                   location: Optional[str] = None,
                   name: Optional[str] = None,
                   pra_enabled: Optional[bool] = None,
                   enabled: Optional[bool] = None,
                   enrollment_cert_id: Optional[str] = None,
                   description: Optional[str] = None,
                   dc_hosting_info: Optional[str] = None,
                   country_code: Optional[str] = None,
                   lss_app_connector_group: Optional[bool] = None,
                   microtenant_id: Optional[str] = None,
                   city_country: Optional[str] = None,
                   override_version_profile: Optional[bool] = None,
                   dns_query_type: Optional[str] = None,
                   tcp_quick_ack_app: Optional[bool] = None,
                   tcp_quick_ack_assistant: Optional[bool] = None,
                   tcp_quick_ack_read_assistant: Optional[bool] = None,
                   upgrade_day: Optional[str] = None,
                   upgrade_time_in_secs: Optional[str] = None,
                   use_in_dr_mode: Optional[bool] = None,
                   user_codes: Optional[Sequence[str]] = None,
                   version_profile_id: Optional[str] = None,
                   version_profile_name: Optional[str] = None,
                   waf_disabled: Optional[bool] = None)
    func NewConnectorGroup(ctx *Context, name string, args ConnectorGroupArgs, opts ...ResourceOption) (*ConnectorGroup, error)
    public ConnectorGroup(string name, ConnectorGroupArgs args, CustomResourceOptions? opts = null)
    public ConnectorGroup(String name, ConnectorGroupArgs args)
public ConnectorGroup(String name, ConnectorGroupArgs args, CustomResourceOptions options)

    type: zpa:ConnectorGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "zpa_connectorgroup" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ConnectorGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ConnectorGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ConnectorGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ConnectorGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ConnectorGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var connectorGroupResource = new Zpa.ConnectorGroup("connectorGroupResource", new()
{
    Latitude = "string",
    Longitude = "string",
    Location = "string",
    Name = "string",
    PraEnabled = false,
    Enabled = false,
    EnrollmentCertId = "string",
    Description = "string",
    DcHostingInfo = "string",
    CountryCode = "string",
    LssAppConnectorGroup = false,
    MicrotenantId = "string",
    CityCountry = "string",
    OverrideVersionProfile = false,
    DnsQueryType = "string",
    TcpQuickAckApp = false,
    TcpQuickAckAssistant = false,
    TcpQuickAckReadAssistant = false,
    UpgradeDay = "string",
    UpgradeTimeInSecs = "string",
    UseInDrMode = false,
    UserCodes = new[]
    {
        "string",
    },
    VersionProfileId = "string",
    VersionProfileName = "string",
    WafDisabled = false,
});

    example, err := zpa.NewConnectorGroup(ctx, "connectorGroupResource", &zpa.ConnectorGroupArgs{
	Latitude:                 pulumi.String("string"),
	Longitude:                pulumi.String("string"),
	Location:                 pulumi.String("string"),
	Name:                     pulumi.String("string"),
	PraEnabled:               pulumi.Bool(false),
	Enabled:                  pulumi.Bool(false),
	EnrollmentCertId:         pulumi.String("string"),
	Description:              pulumi.String("string"),
	DcHostingInfo:            pulumi.String("string"),
	CountryCode:              pulumi.String("string"),
	LssAppConnectorGroup:     pulumi.Bool(false),
	MicrotenantId:            pulumi.String("string"),
	CityCountry:              pulumi.String("string"),
	OverrideVersionProfile:   pulumi.Bool(false),
	DnsQueryType:             pulumi.String("string"),
	TcpQuickAckApp:           pulumi.Bool(false),
	TcpQuickAckAssistant:     pulumi.Bool(false),
	TcpQuickAckReadAssistant: pulumi.Bool(false),
	UpgradeDay:               pulumi.String("string"),
	UpgradeTimeInSecs:        pulumi.String("string"),
	UseInDrMode:              pulumi.Bool(false),
	UserCodes: pulumi.StringArray{
		pulumi.String("string"),
	},
	VersionProfileId:   pulumi.String("string"),
	VersionProfileName: pulumi.String("string"),
	WafDisabled:        pulumi.Bool(false),
})

    resource "zpa_connectorgroup" "connectorGroupResource" {
  latitude                     = "string"
  longitude                    = "string"
  location                     = "string"
  name                         = "string"
  pra_enabled                  = false
  enabled                      = false
  enrollment_cert_id           = "string"
  description                  = "string"
  dc_hosting_info              = "string"
  country_code                 = "string"
  lss_app_connector_group      = false
  microtenant_id               = "string"
  city_country                 = "string"
  override_version_profile     = false
  dns_query_type               = "string"
  tcp_quick_ack_app            = false
  tcp_quick_ack_assistant      = false
  tcp_quick_ack_read_assistant = false
  upgrade_day                  = "string"
  upgrade_time_in_secs         = "string"
  use_in_dr_mode               = false
  user_codes                   = ["string"]
  version_profile_id           = "string"
  version_profile_name         = "string"
  waf_disabled                 = false
}

    var connectorGroupResource = new ConnectorGroup("connectorGroupResource", ConnectorGroupArgs.builder()
    .latitude("string")
    .longitude("string")
    .location("string")
    .name("string")
    .praEnabled(false)
    .enabled(false)
    .enrollmentCertId("string")
    .description("string")
    .dcHostingInfo("string")
    .countryCode("string")
    .lssAppConnectorGroup(false)
    .microtenantId("string")
    .cityCountry("string")
    .overrideVersionProfile(false)
    .dnsQueryType("string")
    .tcpQuickAckApp(false)
    .tcpQuickAckAssistant(false)
    .tcpQuickAckReadAssistant(false)
    .upgradeDay("string")
    .upgradeTimeInSecs("string")
    .useInDrMode(false)
    .userCodes("string")
    .versionProfileId("string")
    .versionProfileName("string")
    .wafDisabled(false)
    .build());

    connector_group_resource = zpa.ConnectorGroup("connectorGroupResource",
    latitude="string",
    longitude="string",
    location="string",
    name="string",
    pra_enabled=False,
    enabled=False,
    enrollment_cert_id="string",
    description="string",
    dc_hosting_info="string",
    country_code="string",
    lss_app_connector_group=False,
    microtenant_id="string",
    city_country="string",
    override_version_profile=False,
    dns_query_type="string",
    tcp_quick_ack_app=False,
    tcp_quick_ack_assistant=False,
    tcp_quick_ack_read_assistant=False,
    upgrade_day="string",
    upgrade_time_in_secs="string",
    use_in_dr_mode=False,
    user_codes=["string"],
    version_profile_id="string",
    version_profile_name="string",
    waf_disabled=False)

    const connectorGroupResource = new zpa.ConnectorGroup("connectorGroupResource", {
    latitude: "string",
    longitude: "string",
    location: "string",
    name: "string",
    praEnabled: false,
    enabled: false,
    enrollmentCertId: "string",
    description: "string",
    dcHostingInfo: "string",
    countryCode: "string",
    lssAppConnectorGroup: false,
    microtenantId: "string",
    cityCountry: "string",
    overrideVersionProfile: false,
    dnsQueryType: "string",
    tcpQuickAckApp: false,
    tcpQuickAckAssistant: false,
    tcpQuickAckReadAssistant: false,
    upgradeDay: "string",
    upgradeTimeInSecs: "string",
    useInDrMode: false,
    userCodes: ["string"],
    versionProfileId: "string",
    versionProfileName: "string",
    wafDisabled: false,
});

    type: zpa:ConnectorGroup
properties:
    cityCountry: string
    countryCode: string
    dcHostingInfo: string
    description: string
    dnsQueryType: string
    enabled: false
    enrollmentCertId: string
    latitude: string
    location: string
    longitude: string
    lssAppConnectorGroup: false
    microtenantId: string
    name: string
    overrideVersionProfile: false
    praEnabled: false
    tcpQuickAckApp: false
    tcpQuickAckAssistant: false
    tcpQuickAckReadAssistant: false
    upgradeDay: string
    upgradeTimeInSecs: string
    useInDrMode: false
    userCodes:
        - string
    versionProfileId: string
    versionProfileName: string
    wafDisabled: false

    ConnectorGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ConnectorGroup resource accepts the following input properties:

    Latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    Location string
    Location of the App Connector Group
    Longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    CityCountry string
    CountryCode string
    DcHostingInfo string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    Description string
    Description of the App Connector Group
    DnsQueryType string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    Enabled bool
    Whether this App Connector Group is enabled or not
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    LssAppConnectorGroup bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    MicrotenantId string
    Name string
    Name of the App Connector Group
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    PraEnabled bool
    TcpQuickAckApp bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckReadAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    UpgradeDay string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    UpgradeTimeInSecs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    UseInDrMode bool
    UserCodes List<string>
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    VersionProfileId string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    WafDisabled bool
    Latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    Location string
    Location of the App Connector Group
    Longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    CityCountry string
    CountryCode string
    DcHostingInfo string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    Description string
    Description of the App Connector Group
    DnsQueryType string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    Enabled bool
    Whether this App Connector Group is enabled or not
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    LssAppConnectorGroup bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    MicrotenantId string
    Name string
    Name of the App Connector Group
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    PraEnabled bool
    TcpQuickAckApp bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckReadAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    UpgradeDay string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    UpgradeTimeInSecs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    UseInDrMode bool
    UserCodes []string
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    VersionProfileId string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    WafDisabled bool
    latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location string
    Location of the App Connector Group
    longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    city_country string
    country_code string
    dc_hosting_info string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description string
    Description of the App Connector Group
    dns_query_type string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled bool
    Whether this App Connector Group is enabled or not
    enrollment_cert_id string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    lss_app_connector_group bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenant_id string
    name string
    Name of the App Connector Group
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    pra_enabled bool
    tcp_quick_ack_app bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_read_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgrade_day string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgrade_time_in_secs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    use_in_dr_mode bool
    user_codes list(string)
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    version_profile_id string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_name string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    waf_disabled bool
    latitude String
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location String
    Location of the App Connector Group
    longitude String
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    cityCountry String
    countryCode String
    dcHostingInfo String
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description String
    Description of the App Connector Group
    dnsQueryType String
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled Boolean
    Whether this App Connector Group is enabled or not
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    lssAppConnectorGroup Boolean
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenantId String
    name String
    Name of the App Connector Group
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    praEnabled Boolean
    tcpQuickAckApp Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckReadAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgradeDay String
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgradeTimeInSecs String
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    versionProfileId String
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    wafDisabled Boolean
    latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location string
    Location of the App Connector Group
    longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    cityCountry string
    countryCode string
    dcHostingInfo string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description string
    Description of the App Connector Group
    dnsQueryType string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled boolean
    Whether this App Connector Group is enabled or not
    enrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    lssAppConnectorGroup boolean
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenantId string
    name string
    Name of the App Connector Group
    overrideVersionProfile boolean
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    praEnabled boolean
    tcpQuickAckApp boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckAssistant boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckReadAssistant boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgradeDay string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgradeTimeInSecs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    useInDrMode boolean
    userCodes string[]
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    versionProfileId string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    wafDisabled boolean
    latitude str
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location str
    Location of the App Connector Group
    longitude str
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    city_country str
    country_code str
    dc_hosting_info str
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description str
    Description of the App Connector Group
    dns_query_type str
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled bool
    Whether this App Connector Group is enabled or not
    enrollment_cert_id str
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    lss_app_connector_group bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenant_id str
    name str
    Name of the App Connector Group
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    pra_enabled bool
    tcp_quick_ack_app bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_read_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgrade_day str
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgrade_time_in_secs str
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    use_in_dr_mode bool
    user_codes Sequence[str]
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    version_profile_id str
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_name str
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    waf_disabled bool
    latitude String
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location String
    Location of the App Connector Group
    longitude String
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    cityCountry String
    countryCode String
    dcHostingInfo String
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description String
    Description of the App Connector Group
    dnsQueryType String
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled Boolean
    Whether this App Connector Group is enabled or not
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    lssAppConnectorGroup Boolean
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenantId String
    name String
    Name of the App Connector Group
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    praEnabled Boolean
    tcpQuickAckApp Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckReadAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgradeDay String
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgradeTimeInSecs String
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    versionProfileId String
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    wafDisabled Boolean

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ConnectorGroup resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ConnectorGroup Resource

    Get an existing ConnectorGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ConnectorGroupState, opts?: CustomResourceOptions): ConnectorGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        city_country: Optional[str] = None,
        country_code: Optional[str] = None,
        dc_hosting_info: Optional[str] = None,
        description: Optional[str] = None,
        dns_query_type: Optional[str] = None,
        enabled: Optional[bool] = None,
        enrollment_cert_id: Optional[str] = None,
        latitude: Optional[str] = None,
        location: Optional[str] = None,
        longitude: Optional[str] = None,
        lss_app_connector_group: Optional[bool] = None,
        microtenant_id: Optional[str] = None,
        name: Optional[str] = None,
        override_version_profile: Optional[bool] = None,
        pra_enabled: Optional[bool] = None,
        tcp_quick_ack_app: Optional[bool] = None,
        tcp_quick_ack_assistant: Optional[bool] = None,
        tcp_quick_ack_read_assistant: Optional[bool] = None,
        upgrade_day: Optional[str] = None,
        upgrade_time_in_secs: Optional[str] = None,
        use_in_dr_mode: Optional[bool] = None,
        user_codes: Optional[Sequence[str]] = None,
        version_profile_id: Optional[str] = None,
        version_profile_name: Optional[str] = None,
        waf_disabled: Optional[bool] = None) -> ConnectorGroup
    func GetConnectorGroup(ctx *Context, name string, id IDInput, state *ConnectorGroupState, opts ...ResourceOption) (*ConnectorGroup, error)
    public static ConnectorGroup Get(string name, Input<string> id, ConnectorGroupState? state, CustomResourceOptions? opts = null)
    public static ConnectorGroup get(String name, Output<String> id, ConnectorGroupState state, CustomResourceOptions options)
    resources:  _:    type: zpa:ConnectorGroup    get:      id: ${id}
    import {
  to = zpa_connectorgroup.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CityCountry string
    CountryCode string
    DcHostingInfo string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    Description string
    Description of the App Connector Group
    DnsQueryType string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    Enabled bool
    Whether this App Connector Group is enabled or not
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    Latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    Location string
    Location of the App Connector Group
    Longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    LssAppConnectorGroup bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    MicrotenantId string
    Name string
    Name of the App Connector Group
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    PraEnabled bool
    TcpQuickAckApp bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckReadAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    UpgradeDay string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    UpgradeTimeInSecs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    UseInDrMode bool
    UserCodes List<string>
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    VersionProfileId string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    WafDisabled bool
    CityCountry string
    CountryCode string
    DcHostingInfo string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    Description string
    Description of the App Connector Group
    DnsQueryType string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    Enabled bool
    Whether this App Connector Group is enabled or not
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    Latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    Location string
    Location of the App Connector Group
    Longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    LssAppConnectorGroup bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    MicrotenantId string
    Name string
    Name of the App Connector Group
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    PraEnabled bool
    TcpQuickAckApp bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    TcpQuickAckReadAssistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    UpgradeDay string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    UpgradeTimeInSecs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    UseInDrMode bool
    UserCodes []string
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    VersionProfileId string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    WafDisabled bool
    city_country string
    country_code string
    dc_hosting_info string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description string
    Description of the App Connector Group
    dns_query_type string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled bool
    Whether this App Connector Group is enabled or not
    enrollment_cert_id string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location string
    Location of the App Connector Group
    longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    lss_app_connector_group bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenant_id string
    name string
    Name of the App Connector Group
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    pra_enabled bool
    tcp_quick_ack_app bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_read_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgrade_day string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgrade_time_in_secs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    use_in_dr_mode bool
    user_codes list(string)
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    version_profile_id string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_name string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    waf_disabled bool
    cityCountry String
    countryCode String
    dcHostingInfo String
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description String
    Description of the App Connector Group
    dnsQueryType String
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled Boolean
    Whether this App Connector Group is enabled or not
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    latitude String
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location String
    Location of the App Connector Group
    longitude String
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    lssAppConnectorGroup Boolean
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenantId String
    name String
    Name of the App Connector Group
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    praEnabled Boolean
    tcpQuickAckApp Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckReadAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgradeDay String
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgradeTimeInSecs String
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    versionProfileId String
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    wafDisabled Boolean
    cityCountry string
    countryCode string
    dcHostingInfo string
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description string
    Description of the App Connector Group
    dnsQueryType string
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled boolean
    Whether this App Connector Group is enabled or not
    enrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    latitude string
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location string
    Location of the App Connector Group
    longitude string
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    lssAppConnectorGroup boolean
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenantId string
    name string
    Name of the App Connector Group
    overrideVersionProfile boolean
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    praEnabled boolean
    tcpQuickAckApp boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckAssistant boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckReadAssistant boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgradeDay string
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgradeTimeInSecs string
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    useInDrMode boolean
    userCodes string[]
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    versionProfileId string
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    wafDisabled boolean
    city_country str
    country_code str
    dc_hosting_info str
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description str
    Description of the App Connector Group
    dns_query_type str
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled bool
    Whether this App Connector Group is enabled or not
    enrollment_cert_id str
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    latitude str
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location str
    Location of the App Connector Group
    longitude str
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    lss_app_connector_group bool
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenant_id str
    name str
    Name of the App Connector Group
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    pra_enabled bool
    tcp_quick_ack_app bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcp_quick_ack_read_assistant bool
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgrade_day str
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgrade_time_in_secs str
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    use_in_dr_mode bool
    user_codes Sequence[str]
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    version_profile_id str
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_name str
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    waf_disabled bool
    cityCountry String
    countryCode String
    dcHostingInfo String
    Indicates the host data center information using a maximum of 64 characters. The Data Center Hosting information is used for the Quarterly Business Review Insights.
    description String
    Description of the App Connector Group
    dnsQueryType String
    Whether to enable IPv4 or IPv6, or both, for DNS resolution of all applications in the App Connector Group
    enabled Boolean
    Whether this App Connector Group is enabled or not
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Connector' enrollment certificate by name.
    latitude String
    Latitude of the App Connector Group. Integer or decimal. With values in the range of -90 to 90
    location String
    Location of the App Connector Group
    longitude String
    Longitude of the App Connector Group. Integer or decimal. With values in the range of -180 to 180
    lssAppConnectorGroup Boolean
    Whether or not the App Connector Group is configured for the Log Streaming Service (LSS)
    microtenantId String
    name String
    Name of the App Connector Group
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden. Supported values: true, false
    praEnabled Boolean
    tcpQuickAckApp Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    tcpQuickAckReadAssistant Boolean
    Whether TCP Quick Acknowledgement is enabled or disabled for the application. The tcpQuickAckApp, tcpQuickAckAssistant, and tcpQuickAckReadAssistant fields must all share the same value.
    upgradeDay String
    App Connectors in this group will attempt to update to a newer version of the software during this specified day. List of valid days (i.e., Sunday, Monday)
    upgradeTimeInSecs String
    App Connectors in this group will attempt to update to a newer version of the software during this specified time. Integer in seconds (i.e., -66600). The integer should be greater than or equal to 0 and less than 86400, in 15 minute intervals
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed App Connector VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the connectors. These codes are obtained from the App Connector VM after deployment.
    versionProfileId String
    ID of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    wafDisabled Boolean

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language. Visit

    App Connector Group can be imported by using <APP CONNECTOR GROUP ID> or <APP CONNECTOR GROUP NAME>as the import ID.

    $ pulumi import zpa:index/connectorGroup:ConnectorGroup example <app_connector_group_id>

    or

    $ pulumi import zpa:index/connectorGroup:ConnectorGroup example <app_connector_group_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zpa zscaler/pulumi-zpa
    License
    MIT
    Notes
    This Pulumi package is based on the zpa Terraform Provider.
    zpa logo
    Viewing docs for Zscaler Private Access v1.0.4
    published on Monday, Jun 29, 2026 by Zscaler
    Schema (JSON)
    zscaler/pulumi-zpa

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial