Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Zscaler Private Access (ZPA)
  4. API Docs
  5. ServiceEdgeGroup
Viewing docs for Zscaler Private Access v1.0.4
published on Monday, Jun 29, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zpa

zpa.ServiceEdgeGroup

zpa logo
Viewing docs for Zscaler Private Access v1.0.4
published on Monday, Jun 29, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zpa

    The zpa_service_edge_group resource creates a service edge group in the Zscaler Private Access cloud. This resource can then be referenced in a service edge connector.

    Service Edge Onboarding Methods

    ZPA Private Service Edges can be onboarded into ZPA in two ways. This resource supports both:

    1. OAuth2 user codes (recommended for new deployments) - Set userCodes with the codes generated on each Service Edge VM. The provider creates the group and then calls the OAuth2 user code verification API to enroll the Service Edges.
    2. Provisioning key (legacy / still supported) - Create the group with this resource, then create a zpa.ProvisioningKey referencing it. The key is then injected into the Service Edge VM at deployment time.

    In both methods, the Service Edge enrollment requires an enrollmentCertId. You can either:

    • Set enrollmentCertId explicitly using the zpa.getEnrollmentCert data source, or
    • Omit it entirely - the provider will automatically look up the “Service Edge” enrollment certificate by name and populate the ID for you.

    Example Usage

    OAuth2 Enrollment With User Codes (Explicit Enrollment Certificate)

    Set the enrollment certificate explicitly and provide the user codes displayed on the Service Edge VMs after deployment. The provider will create the group and then call the user code verification API to complete enrollment.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const serviceEdge = zpa.getEnrollmentCert({
    name: "Service Edge",
});
const example = new zpa.ServiceEdgeGroup("example", {
    name: "Service Edge Group San Jose",
    description: "Service Edge Group in San Jose",
    enabled: true,
    isPublic: true,
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    latitude: "37.3382082",
    longitude: "-121.8863286",
    location: "San Jose, CA, USA",
    versionProfileName: "New Release",
    enrollmentCertId: serviceEdge.then(serviceEdge => serviceEdge.id),
    userCodes: [
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ],
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

service_edge = zpa.get_enrollment_cert(name="Service Edge")
example = zpa.ServiceEdgeGroup("example",
    name="Service Edge Group San Jose",
    description="Service Edge Group in San Jose",
    enabled=True,
    is_public=True,
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    latitude="37.3382082",
    longitude="-121.8863286",
    location="San Jose, CA, USA",
    version_profile_name="New Release",
    enrollment_cert_id=service_edge.id,
    user_codes=[
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		serviceEdge, err := zpa.GetEnrollmentCert(ctx, &zpa.GetEnrollmentCertArgs{
			Name: pulumi.StringRef("Service Edge"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = zpa.NewServiceEdgeGroup(ctx, "example", &zpa.ServiceEdgeGroupArgs{
			Name:               pulumi.String("Service Edge Group San Jose"),
			Description:        pulumi.String("Service Edge Group in San Jose"),
			Enabled:            pulumi.Bool(true),
			IsPublic:           pulumi.Bool(true),
			UpgradeDay:         pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:  pulumi.String("66600"),
			Latitude:           pulumi.String("37.3382082"),
			Longitude:          pulumi.String("-121.8863286"),
			Location:           pulumi.String("San Jose, CA, USA"),
			VersionProfileName: pulumi.String("New Release"),
			EnrollmentCertId:   pulumi.String(serviceEdge.Id),
			UserCodes: pulumi.StringArray{
				pulumi.String("CODE_FROM_VM_1"),
				pulumi.String("CODE_FROM_VM_2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var serviceEdge = Zpa.GetEnrollmentCert.Invoke(new()
    {
        Name = "Service Edge",
    });

    var example = new Zpa.ServiceEdgeGroup("example", new()
    {
        Name = "Service Edge Group San Jose",
        Description = "Service Edge Group in San Jose",
        Enabled = true,
        IsPublic = true,
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        Latitude = "37.3382082",
        Longitude = "-121.8863286",
        Location = "San Jose, CA, USA",
        VersionProfileName = "New Release",
        EnrollmentCertId = serviceEdge.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
        UserCodes = new[]
        {
            "CODE_FROM_VM_1",
            "CODE_FROM_VM_2",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetEnrollmentCertArgs;
import com.pulumi.zpa.ServiceEdgeGroup;
import com.pulumi.zpa.ServiceEdgeGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var serviceEdge = ZpaFunctions.getEnrollmentCert(GetEnrollmentCertArgs.builder()
            .name("Service Edge")
            .build());

        var example = new ServiceEdgeGroup("example", ServiceEdgeGroupArgs.builder()
            .name("Service Edge Group San Jose")
            .description("Service Edge Group in San Jose")
            .enabled(true)
            .isPublic(true)
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .latitude("37.3382082")
            .longitude("-121.8863286")
            .location("San Jose, CA, USA")
            .versionProfileName("New Release")
            .enrollmentCertId(serviceEdge.id())
            .userCodes(            
                "CODE_FROM_VM_1",
                "CODE_FROM_VM_2")
            .build());

    }
}

    resources:
  example:
    type: zpa:ServiceEdgeGroup
    properties:
      name: Service Edge Group San Jose
      description: Service Edge Group in San Jose
      enabled: true
      isPublic: true
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      latitude: '37.3382082'
      longitude: '-121.8863286'
      location: San Jose, CA, USA
      versionProfileName: New Release
      enrollmentCertId: ${serviceEdge.id}
      userCodes:
        - CODE_FROM_VM_1
        - CODE_FROM_VM_2
variables:
  serviceEdge:
    fn::invoke:
      function: zpa:getEnrollmentCert
      arguments:
        name: Service Edge

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getenrollmentcert" "serviceEdge" {
  name = "Service Edge"
}

resource "zpa_serviceedgegroup" "example" {
  name                 = "Service Edge Group San Jose"
  description          = "Service Edge Group in San Jose"
  enabled              = true
  is_public            = true
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  latitude             = "37.3382082"
  longitude            = "-121.8863286"
  location             = "San Jose, CA, USA"
  version_profile_name = "New Release"
  enrollment_cert_id   = data.zpa_getenrollmentcert.serviceEdge.id
  user_codes           = ["CODE_FROM_VM_1", "CODE_FROM_VM_2"]
}

    OAuth2 Enrollment With User Codes (Auto-Resolved Enrollment Certificate)

    Omit enrollmentCertId entirely and the provider will automatically resolve the “Service Edge” enrollment certificate for you. This is the simplest configuration and is functionally equivalent to the explicit example above.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const example = new zpa.ServiceEdgeGroup("example", {
    name: "Service Edge Group San Jose",
    description: "Service Edge Group in San Jose",
    enabled: true,
    isPublic: true,
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    latitude: "37.3382082",
    longitude: "-121.8863286",
    location: "San Jose, CA, USA",
    versionProfileName: "New Release",
    userCodes: [
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ],
});

    import pulumi
import zscaler_pulumi_zpa as zpa

example = zpa.ServiceEdgeGroup("example",
    name="Service Edge Group San Jose",
    description="Service Edge Group in San Jose",
    enabled=True,
    is_public=True,
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    latitude="37.3382082",
    longitude="-121.8863286",
    location="San Jose, CA, USA",
    version_profile_name="New Release",
    user_codes=[
        "CODE_FROM_VM_1",
        "CODE_FROM_VM_2",
    ])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := zpa.NewServiceEdgeGroup(ctx, "example", &zpa.ServiceEdgeGroupArgs{
			Name:               pulumi.String("Service Edge Group San Jose"),
			Description:        pulumi.String("Service Edge Group in San Jose"),
			Enabled:            pulumi.Bool(true),
			IsPublic:           pulumi.Bool(true),
			UpgradeDay:         pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:  pulumi.String("66600"),
			Latitude:           pulumi.String("37.3382082"),
			Longitude:          pulumi.String("-121.8863286"),
			Location:           pulumi.String("San Jose, CA, USA"),
			VersionProfileName: pulumi.String("New Release"),
			UserCodes: pulumi.StringArray{
				pulumi.String("CODE_FROM_VM_1"),
				pulumi.String("CODE_FROM_VM_2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var example = new Zpa.ServiceEdgeGroup("example", new()
    {
        Name = "Service Edge Group San Jose",
        Description = "Service Edge Group in San Jose",
        Enabled = true,
        IsPublic = true,
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        Latitude = "37.3382082",
        Longitude = "-121.8863286",
        Location = "San Jose, CA, USA",
        VersionProfileName = "New Release",
        UserCodes = new[]
        {
            "CODE_FROM_VM_1",
            "CODE_FROM_VM_2",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ServiceEdgeGroup;
import com.pulumi.zpa.ServiceEdgeGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ServiceEdgeGroup("example", ServiceEdgeGroupArgs.builder()
            .name("Service Edge Group San Jose")
            .description("Service Edge Group in San Jose")
            .enabled(true)
            .isPublic(true)
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .latitude("37.3382082")
            .longitude("-121.8863286")
            .location("San Jose, CA, USA")
            .versionProfileName("New Release")
            .userCodes(            
                "CODE_FROM_VM_1",
                "CODE_FROM_VM_2")
            .build());

    }
}

    resources:
  example:
    type: zpa:ServiceEdgeGroup
    properties:
      name: Service Edge Group San Jose
      description: Service Edge Group in San Jose
      enabled: true
      isPublic: true
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      latitude: '37.3382082'
      longitude: '-121.8863286'
      location: San Jose, CA, USA
      versionProfileName: New Release
      userCodes:
        - CODE_FROM_VM_1
        - CODE_FROM_VM_2

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

resource "zpa_serviceedgegroup" "example" {
  name                 = "Service Edge Group San Jose"
  description          = "Service Edge Group in San Jose"
  enabled              = true
  is_public            = true
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  latitude             = "37.3382082"
  longitude            = "-121.8863286"
  location             = "San Jose, CA, USA"
  version_profile_name = "New Release"
  user_codes           = ["CODE_FROM_VM_1", "CODE_FROM_VM_2"]
}

    Enrolling Service Edges Via Provisioning Key (Explicit Enrollment Certificate)

    Create the Service Edge Group, then create a zpa.ProvisioningKey that references the group’s ID. The provisioning key is then injected into the Service Edge VM at deployment time.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const serviceEdge = zpa.getEnrollmentCert({
    name: "Service Edge",
});
const example = new zpa.ServiceEdgeGroup("example", {
    name: "Service Edge Group San Jose",
    description: "Service Edge Group in San Jose",
    enabled: true,
    isPublic: true,
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    latitude: "37.3382082",
    longitude: "-121.8863286",
    location: "San Jose, CA, USA",
    versionProfileName: "New Release",
    enrollmentCertId: serviceEdge.then(serviceEdge => serviceEdge.id),
});
const exampleProvisioningKey = new zpa.ProvisioningKey("example", {
    name: "ProvisioningKey01",
    associationType: "SERVICE_EDGE_GRP",
    maxUsage: "10",
    enrollmentCertId: serviceEdge.then(serviceEdge => serviceEdge.id),
    zcomponentId: example.id,
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

service_edge = zpa.get_enrollment_cert(name="Service Edge")
example = zpa.ServiceEdgeGroup("example",
    name="Service Edge Group San Jose",
    description="Service Edge Group in San Jose",
    enabled=True,
    is_public=True,
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    latitude="37.3382082",
    longitude="-121.8863286",
    location="San Jose, CA, USA",
    version_profile_name="New Release",
    enrollment_cert_id=service_edge.id)
example_provisioning_key = zpa.ProvisioningKey("example",
    name="ProvisioningKey01",
    association_type="SERVICE_EDGE_GRP",
    max_usage="10",
    enrollment_cert_id=service_edge.id,
    zcomponent_id=example.id)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		serviceEdge, err := zpa.GetEnrollmentCert(ctx, &zpa.GetEnrollmentCertArgs{
			Name: pulumi.StringRef("Service Edge"),
		}, nil)
		if err != nil {
			return err
		}
		example, err := zpa.NewServiceEdgeGroup(ctx, "example", &zpa.ServiceEdgeGroupArgs{
			Name:               pulumi.String("Service Edge Group San Jose"),
			Description:        pulumi.String("Service Edge Group in San Jose"),
			Enabled:            pulumi.Bool(true),
			IsPublic:           pulumi.Bool(true),
			UpgradeDay:         pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:  pulumi.String("66600"),
			Latitude:           pulumi.String("37.3382082"),
			Longitude:          pulumi.String("-121.8863286"),
			Location:           pulumi.String("San Jose, CA, USA"),
			VersionProfileName: pulumi.String("New Release"),
			EnrollmentCertId:   pulumi.String(serviceEdge.Id),
		})
		if err != nil {
			return err
		}
		_, err = zpa.NewProvisioningKey(ctx, "example", &zpa.ProvisioningKeyArgs{
			Name:             pulumi.String("ProvisioningKey01"),
			AssociationType:  pulumi.String("SERVICE_EDGE_GRP"),
			MaxUsage:         pulumi.String("10"),
			EnrollmentCertId: pulumi.String(serviceEdge.Id),
			ZcomponentId:     example.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var serviceEdge = Zpa.GetEnrollmentCert.Invoke(new()
    {
        Name = "Service Edge",
    });

    var example = new Zpa.ServiceEdgeGroup("example", new()
    {
        Name = "Service Edge Group San Jose",
        Description = "Service Edge Group in San Jose",
        Enabled = true,
        IsPublic = true,
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        Latitude = "37.3382082",
        Longitude = "-121.8863286",
        Location = "San Jose, CA, USA",
        VersionProfileName = "New Release",
        EnrollmentCertId = serviceEdge.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
    });

    var exampleProvisioningKey = new Zpa.ProvisioningKey("example", new()
    {
        Name = "ProvisioningKey01",
        AssociationType = "SERVICE_EDGE_GRP",
        MaxUsage = "10",
        EnrollmentCertId = serviceEdge.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
        ZcomponentId = example.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetEnrollmentCertArgs;
import com.pulumi.zpa.ServiceEdgeGroup;
import com.pulumi.zpa.ServiceEdgeGroupArgs;
import com.pulumi.zpa.ProvisioningKey;
import com.pulumi.zpa.ProvisioningKeyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var serviceEdge = ZpaFunctions.getEnrollmentCert(GetEnrollmentCertArgs.builder()
            .name("Service Edge")
            .build());

        var example = new ServiceEdgeGroup("example", ServiceEdgeGroupArgs.builder()
            .name("Service Edge Group San Jose")
            .description("Service Edge Group in San Jose")
            .enabled(true)
            .isPublic(true)
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .latitude("37.3382082")
            .longitude("-121.8863286")
            .location("San Jose, CA, USA")
            .versionProfileName("New Release")
            .enrollmentCertId(serviceEdge.id())
            .build());

        var exampleProvisioningKey = new ProvisioningKey("exampleProvisioningKey", ProvisioningKeyArgs.builder()
            .name("ProvisioningKey01")
            .associationType("SERVICE_EDGE_GRP")
            .maxUsage("10")
            .enrollmentCertId(serviceEdge.id())
            .zcomponentId(example.id())
            .build());

    }
}

    resources:
  example:
    type: zpa:ServiceEdgeGroup
    properties:
      name: Service Edge Group San Jose
      description: Service Edge Group in San Jose
      enabled: true
      isPublic: true
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      latitude: '37.3382082'
      longitude: '-121.8863286'
      location: San Jose, CA, USA
      versionProfileName: New Release
      enrollmentCertId: ${serviceEdge.id}
  exampleProvisioningKey:
    type: zpa:ProvisioningKey
    name: example
    properties:
      name: ProvisioningKey01
      associationType: SERVICE_EDGE_GRP
      maxUsage: '10'
      enrollmentCertId: ${serviceEdge.id}
      zcomponentId: ${example.id}
variables:
  serviceEdge:
    fn::invoke:
      function: zpa:getEnrollmentCert
      arguments:
        name: Service Edge

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getenrollmentcert" "serviceEdge" {
  name = "Service Edge"
}

resource "zpa_serviceedgegroup" "example" {
  name                 = "Service Edge Group San Jose"
  description          = "Service Edge Group in San Jose"
  enabled              = true
  is_public            = true
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  latitude             = "37.3382082"
  longitude            = "-121.8863286"
  location             = "San Jose, CA, USA"
  version_profile_name = "New Release"
  enrollment_cert_id   = data.zpa_getenrollmentcert.serviceEdge.id
}
resource "zpa_provisioningkey" "example" {
  name               = "ProvisioningKey01"
  association_type   = "SERVICE_EDGE_GRP"
  max_usage          = "10"
  enrollment_cert_id = data.zpa_getenrollmentcert.serviceEdge.id
  zcomponent_id      = zpa_serviceedgegroup.example.id
}

    Enrolling Service Edges Via Provisioning Key (Auto-Resolved Enrollment Certificate)

    For the Service Edge Group, you can omit enrollmentCertId and let the provider auto-resolve it. The zpa.ProvisioningKey resource still requires enrollmentCertId to be set explicitly.

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const serviceEdge = zpa.getEnrollmentCert({
    name: "Service Edge",
});
const example = new zpa.ServiceEdgeGroup("example", {
    name: "Service Edge Group San Jose",
    description: "Service Edge Group in San Jose",
    enabled: true,
    isPublic: true,
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    latitude: "37.3382082",
    longitude: "-121.8863286",
    location: "San Jose, CA, USA",
    versionProfileName: "New Release",
});
const exampleProvisioningKey = new zpa.ProvisioningKey("example", {
    name: "ProvisioningKey01",
    associationType: "SERVICE_EDGE_GRP",
    maxUsage: "10",
    enrollmentCertId: serviceEdge.then(serviceEdge => serviceEdge.id),
    zcomponentId: example.id,
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

service_edge = zpa.get_enrollment_cert(name="Service Edge")
example = zpa.ServiceEdgeGroup("example",
    name="Service Edge Group San Jose",
    description="Service Edge Group in San Jose",
    enabled=True,
    is_public=True,
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    latitude="37.3382082",
    longitude="-121.8863286",
    location="San Jose, CA, USA",
    version_profile_name="New Release")
example_provisioning_key = zpa.ProvisioningKey("example",
    name="ProvisioningKey01",
    association_type="SERVICE_EDGE_GRP",
    max_usage="10",
    enrollment_cert_id=service_edge.id,
    zcomponent_id=example.id)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		serviceEdge, err := zpa.GetEnrollmentCert(ctx, &zpa.GetEnrollmentCertArgs{
			Name: pulumi.StringRef("Service Edge"),
		}, nil)
		if err != nil {
			return err
		}
		example, err := zpa.NewServiceEdgeGroup(ctx, "example", &zpa.ServiceEdgeGroupArgs{
			Name:               pulumi.String("Service Edge Group San Jose"),
			Description:        pulumi.String("Service Edge Group in San Jose"),
			Enabled:            pulumi.Bool(true),
			IsPublic:           pulumi.Bool(true),
			UpgradeDay:         pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:  pulumi.String("66600"),
			Latitude:           pulumi.String("37.3382082"),
			Longitude:          pulumi.String("-121.8863286"),
			Location:           pulumi.String("San Jose, CA, USA"),
			VersionProfileName: pulumi.String("New Release"),
		})
		if err != nil {
			return err
		}
		_, err = zpa.NewProvisioningKey(ctx, "example", &zpa.ProvisioningKeyArgs{
			Name:             pulumi.String("ProvisioningKey01"),
			AssociationType:  pulumi.String("SERVICE_EDGE_GRP"),
			MaxUsage:         pulumi.String("10"),
			EnrollmentCertId: pulumi.String(serviceEdge.Id),
			ZcomponentId:     example.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var serviceEdge = Zpa.GetEnrollmentCert.Invoke(new()
    {
        Name = "Service Edge",
    });

    var example = new Zpa.ServiceEdgeGroup("example", new()
    {
        Name = "Service Edge Group San Jose",
        Description = "Service Edge Group in San Jose",
        Enabled = true,
        IsPublic = true,
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        Latitude = "37.3382082",
        Longitude = "-121.8863286",
        Location = "San Jose, CA, USA",
        VersionProfileName = "New Release",
    });

    var exampleProvisioningKey = new Zpa.ProvisioningKey("example", new()
    {
        Name = "ProvisioningKey01",
        AssociationType = "SERVICE_EDGE_GRP",
        MaxUsage = "10",
        EnrollmentCertId = serviceEdge.Apply(getEnrollmentCertResult => getEnrollmentCertResult.Id),
        ZcomponentId = example.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetEnrollmentCertArgs;
import com.pulumi.zpa.ServiceEdgeGroup;
import com.pulumi.zpa.ServiceEdgeGroupArgs;
import com.pulumi.zpa.ProvisioningKey;
import com.pulumi.zpa.ProvisioningKeyArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var serviceEdge = ZpaFunctions.getEnrollmentCert(GetEnrollmentCertArgs.builder()
            .name("Service Edge")
            .build());

        var example = new ServiceEdgeGroup("example", ServiceEdgeGroupArgs.builder()
            .name("Service Edge Group San Jose")
            .description("Service Edge Group in San Jose")
            .enabled(true)
            .isPublic(true)
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .latitude("37.3382082")
            .longitude("-121.8863286")
            .location("San Jose, CA, USA")
            .versionProfileName("New Release")
            .build());

        var exampleProvisioningKey = new ProvisioningKey("exampleProvisioningKey", ProvisioningKeyArgs.builder()
            .name("ProvisioningKey01")
            .associationType("SERVICE_EDGE_GRP")
            .maxUsage("10")
            .enrollmentCertId(serviceEdge.id())
            .zcomponentId(example.id())
            .build());

    }
}

    resources:
  example:
    type: zpa:ServiceEdgeGroup
    properties:
      name: Service Edge Group San Jose
      description: Service Edge Group in San Jose
      enabled: true
      isPublic: true
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      latitude: '37.3382082'
      longitude: '-121.8863286'
      location: San Jose, CA, USA
      versionProfileName: New Release
  exampleProvisioningKey:
    type: zpa:ProvisioningKey
    name: example
    properties:
      name: ProvisioningKey01
      associationType: SERVICE_EDGE_GRP
      maxUsage: '10'
      enrollmentCertId: ${serviceEdge.id}
      zcomponentId: ${example.id}
variables:
  serviceEdge:
    fn::invoke:
      function: zpa:getEnrollmentCert
      arguments:
        name: Service Edge

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getenrollmentcert" "serviceEdge" {
  name = "Service Edge"
}

resource "zpa_serviceedgegroup" "example" {
  name                 = "Service Edge Group San Jose"
  description          = "Service Edge Group in San Jose"
  enabled              = true
  is_public            = true
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  latitude             = "37.3382082"
  longitude            = "-121.8863286"
  location             = "San Jose, CA, USA"
  version_profile_name = "New Release"
}
resource "zpa_provisioningkey" "example" {
  name               = "ProvisioningKey01"
  association_type   = "SERVICE_EDGE_GRP"
  max_usage          = "10"
  enrollment_cert_id = data.zpa_getenrollmentcert.serviceEdge.id
  zcomponent_id      = zpa_serviceedgegroup.example.id
}

    Using Version Profile Name

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

// ZPA Service Edge Group resource - Trusted Network
const serviceEdgeGroupSjc = new zpa.ServiceEdgeGroup("service_edge_group_sjc", {
    name: "Service Edge Group San Jose",
    description: "Service Edge Group in San Jose",
    enabled: true,
    isPublic: true,
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    latitude: "37.3382082",
    longitude: "-121.8863286",
    location: "San Jose, CA, USA",
    versionProfileName: "New Release",
    trustedNetworks: [{
        ids: [example.id],
    }],
});

    import pulumi
import zscaler_pulumi_zpa as zpa

# ZPA Service Edge Group resource - Trusted Network
service_edge_group_sjc = zpa.ServiceEdgeGroup("service_edge_group_sjc",
    name="Service Edge Group San Jose",
    description="Service Edge Group in San Jose",
    enabled=True,
    is_public=True,
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    latitude="37.3382082",
    longitude="-121.8863286",
    location="San Jose, CA, USA",
    version_profile_name="New Release",
    trusted_networks=[{
        "ids": [example["id"]],
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// ZPA Service Edge Group resource - Trusted Network
		_, err := zpa.NewServiceEdgeGroup(ctx, "service_edge_group_sjc", &zpa.ServiceEdgeGroupArgs{
			Name:               pulumi.String("Service Edge Group San Jose"),
			Description:        pulumi.String("Service Edge Group in San Jose"),
			Enabled:            pulumi.Bool(true),
			IsPublic:           pulumi.Bool(true),
			UpgradeDay:         pulumi.String("SUNDAY"),
			UpgradeTimeInSecs:  pulumi.String("66600"),
			Latitude:           pulumi.String("37.3382082"),
			Longitude:          pulumi.String("-121.8863286"),
			Location:           pulumi.String("San Jose, CA, USA"),
			VersionProfileName: pulumi.String("New Release"),
			TrustedNetworks: zpa.ServiceEdgeGroupTrustedNetworkArray{
				&zpa.ServiceEdgeGroupTrustedNetworkArgs{
					Ids: pulumi.StringArray{
						example.Id,
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    // ZPA Service Edge Group resource - Trusted Network
    var serviceEdgeGroupSjc = new Zpa.ServiceEdgeGroup("service_edge_group_sjc", new()
    {
        Name = "Service Edge Group San Jose",
        Description = "Service Edge Group in San Jose",
        Enabled = true,
        IsPublic = true,
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        Latitude = "37.3382082",
        Longitude = "-121.8863286",
        Location = "San Jose, CA, USA",
        VersionProfileName = "New Release",
        TrustedNetworks = new[]
        {
            new Zpa.Inputs.ServiceEdgeGroupTrustedNetworkArgs
            {
                Ids = new[]
                {
                    example.Id,
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ServiceEdgeGroup;
import com.pulumi.zpa.ServiceEdgeGroupArgs;
import com.pulumi.zpa.inputs.ServiceEdgeGroupTrustedNetworkArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // ZPA Service Edge Group resource - Trusted Network
        var serviceEdgeGroupSjc = new ServiceEdgeGroup("serviceEdgeGroupSjc", ServiceEdgeGroupArgs.builder()
            .name("Service Edge Group San Jose")
            .description("Service Edge Group in San Jose")
            .enabled(true)
            .isPublic(true)
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .latitude("37.3382082")
            .longitude("-121.8863286")
            .location("San Jose, CA, USA")
            .versionProfileName("New Release")
            .trustedNetworks(ServiceEdgeGroupTrustedNetworkArgs.builder()
                .ids(example.id())
                .build())
            .build());

    }
}

    resources:
  # ZPA Service Edge Group resource - Trusted Network
  serviceEdgeGroupSjc:
    type: zpa:ServiceEdgeGroup
    name: service_edge_group_sjc
    properties:
      name: Service Edge Group San Jose
      description: Service Edge Group in San Jose
      enabled: true
      isPublic: true
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      latitude: '37.3382082'
      longitude: '-121.8863286'
      location: San Jose, CA, USA
      versionProfileName: New Release
      trustedNetworks:
        - ids:
            - ${example.id}

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

# ZPA Service Edge Group resource - Trusted Network
resource "zpa_serviceedgegroup" "service_edge_group_sjc" {
  name                 = "Service Edge Group San Jose"
  description          = "Service Edge Group in San Jose"
  enabled              = true
  is_public            = true
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  latitude             = "37.3382082"
  longitude            = "-121.8863286"
  location             = "San Jose, CA, USA"
  version_profile_name = "New Release"
  trusted_networks {
    ids = [example.id]
  }
}

    Using Version Profile ID

    import * as pulumi from "@pulumi/pulumi";
import * as zpa from "@bdzscaler/pulumi-zpa";

const _this = zpa.getCustomerVersionProfile({
    name: "New Release",
});
// ZPA Service Edge Group resource - No Trusted Network
const serviceEdgeGroupNyc = new zpa.ServiceEdgeGroup("service_edge_group_nyc", {
    name: "Service Edge Group New York",
    description: "Service Edge Group in New York",
    enabled: true,
    isPublic: true,
    upgradeDay: "SUNDAY",
    upgradeTimeInSecs: "66600",
    latitude: "40.7128",
    longitude: "-73.935242",
    location: "New York, NY, USA",
    versionProfileId: _this.then(_this => _this.id),
});

    import pulumi
import pulumi_zpa as zpa
import zscaler_pulumi_zpa as zpa

this = zpa.get_customer_version_profile(name="New Release")
# ZPA Service Edge Group resource - No Trusted Network
service_edge_group_nyc = zpa.ServiceEdgeGroup("service_edge_group_nyc",
    name="Service Edge Group New York",
    description="Service Edge Group in New York",
    enabled=True,
    is_public=True,
    upgrade_day="SUNDAY",
    upgrade_time_in_secs="66600",
    latitude="40.7128",
    longitude="-73.935242",
    location="New York, NY, USA",
    version_profile_id=this.id)

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/zscaler/pulumi-zpa/sdk/go/zpa"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		this, err := zpa.GetCustomerVersionProfile(ctx, &zpa.GetCustomerVersionProfileArgs{
			Name: "New Release",
		}, nil)
		if err != nil {
			return err
		}
		// ZPA Service Edge Group resource - No Trusted Network
		_, err = zpa.NewServiceEdgeGroup(ctx, "service_edge_group_nyc", &zpa.ServiceEdgeGroupArgs{
			Name:              pulumi.String("Service Edge Group New York"),
			Description:       pulumi.String("Service Edge Group in New York"),
			Enabled:           pulumi.Bool(true),
			IsPublic:          pulumi.Bool(true),
			UpgradeDay:        pulumi.String("SUNDAY"),
			UpgradeTimeInSecs: pulumi.String("66600"),
			Latitude:          pulumi.String("40.7128"),
			Longitude:         pulumi.String("-73.935242"),
			Location:          pulumi.String("New York, NY, USA"),
			VersionProfileId:  pulumi.String(this.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Zpa = zscaler.PulumiPackage.Zpa;

return await Deployment.RunAsync(() => 
{
    var @this = Zpa.GetCustomerVersionProfile.Invoke(new()
    {
        Name = "New Release",
    });

    // ZPA Service Edge Group resource - No Trusted Network
    var serviceEdgeGroupNyc = new Zpa.ServiceEdgeGroup("service_edge_group_nyc", new()
    {
        Name = "Service Edge Group New York",
        Description = "Service Edge Group in New York",
        Enabled = true,
        IsPublic = true,
        UpgradeDay = "SUNDAY",
        UpgradeTimeInSecs = "66600",
        Latitude = "40.7128",
        Longitude = "-73.935242",
        Location = "New York, NY, USA",
        VersionProfileId = @this.Apply(@this => @this.Apply(getCustomerVersionProfileResult => getCustomerVersionProfileResult.Id)),
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.zpa.ZpaFunctions;
import com.pulumi.zpa.inputs.GetCustomerVersionProfileArgs;
import com.pulumi.zpa.ServiceEdgeGroup;
import com.pulumi.zpa.ServiceEdgeGroupArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var this = ZpaFunctions.getCustomerVersionProfile(GetCustomerVersionProfileArgs.builder()
            .name("New Release")
            .build());

        // ZPA Service Edge Group resource - No Trusted Network
        var serviceEdgeGroupNyc = new ServiceEdgeGroup("serviceEdgeGroupNyc", ServiceEdgeGroupArgs.builder()
            .name("Service Edge Group New York")
            .description("Service Edge Group in New York")
            .enabled(true)
            .isPublic(true)
            .upgradeDay("SUNDAY")
            .upgradeTimeInSecs("66600")
            .latitude("40.7128")
            .longitude("-73.935242")
            .location("New York, NY, USA")
            .versionProfileId(this_.id())
            .build());

    }
}

    resources:
  # ZPA Service Edge Group resource - No Trusted Network
  serviceEdgeGroupNyc:
    type: zpa:ServiceEdgeGroup
    name: service_edge_group_nyc
    properties:
      name: Service Edge Group New York
      description: Service Edge Group in New York
      enabled: true
      isPublic: true
      upgradeDay: SUNDAY
      upgradeTimeInSecs: '66600'
      latitude: '40.7128'
      longitude: '-73.935242'
      location: New York, NY, USA
      versionProfileId: ${this.id}
variables:
  this:
    fn::invoke:
      function: zpa:getCustomerVersionProfile
      arguments:
        name: New Release

    pulumi {
  required_providers {
    zpa = {
      source = "pulumi/zpa"
    }
  }
}

data "zpa_getcustomerversionprofile" "this" {
  name = "New Release"
}

# ZPA Service Edge Group resource - No Trusted Network
resource "zpa_serviceedgegroup" "service_edge_group_nyc" {
  name                 = "Service Edge Group New York"
  description          = "Service Edge Group in New York"
  enabled              = true
  is_public            = true
  upgrade_day          = "SUNDAY"
  upgrade_time_in_secs = "66600"
  latitude             = "40.7128"
  longitude            = "-73.935242"
  location             = "New York, NY, USA"
  version_profile_id   = data.zpa_getcustomerversionprofile.this.id
}

    Create ServiceEdgeGroup Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ServiceEdgeGroup(name: string, args: ServiceEdgeGroupArgs, opts?: CustomResourceOptions);
    @overload
def ServiceEdgeGroup(resource_name: str,
                     args: ServiceEdgeGroupArgs,
                     opts: Optional[ResourceOptions] = None)

@overload
def ServiceEdgeGroup(resource_name: str,
                     opts: Optional[ResourceOptions] = None,
                     latitude: Optional[str] = None,
                     longitude: Optional[str] = None,
                     location: Optional[str] = None,
                     exclusive_for_business_continuity: Optional[bool] = None,
                     microtenant_id: Optional[str] = None,
                     enrollment_cert_id: Optional[str] = None,
                     city: Optional[str] = None,
                     grace_distance_enabled: Optional[bool] = None,
                     grace_distance_value: Optional[str] = None,
                     grace_distance_value_unit: Optional[str] = None,
                     is_public: Optional[bool] = None,
                     description: Optional[str] = None,
                     country_code: Optional[str] = None,
                     city_country: Optional[str] = None,
                     enabled: Optional[bool] = None,
                     name: Optional[str] = None,
                     override_version_profile: Optional[bool] = None,
                     service_edges: Optional[ServiceEdgeGroupServiceEdgesArgs] = None,
                     trusted_networks: Optional[Sequence[ServiceEdgeGroupTrustedNetworkArgs]] = None,
                     upgrade_day: Optional[str] = None,
                     upgrade_time_in_secs: Optional[str] = None,
                     use_in_dr_mode: Optional[bool] = None,
                     user_codes: Optional[Sequence[str]] = None,
                     version_profile_id: Optional[str] = None,
                     version_profile_name: Optional[str] = None,
                     version_profile_visibility_scope: Optional[str] = None)
    func NewServiceEdgeGroup(ctx *Context, name string, args ServiceEdgeGroupArgs, opts ...ResourceOption) (*ServiceEdgeGroup, error)
    public ServiceEdgeGroup(string name, ServiceEdgeGroupArgs args, CustomResourceOptions? opts = null)
    public ServiceEdgeGroup(String name, ServiceEdgeGroupArgs args)
public ServiceEdgeGroup(String name, ServiceEdgeGroupArgs args, CustomResourceOptions options)

    type: zpa:ServiceEdgeGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "zpa_serviceedgegroup" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ServiceEdgeGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ServiceEdgeGroupArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ServiceEdgeGroupArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ServiceEdgeGroupArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ServiceEdgeGroupArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var serviceEdgeGroupResource = new Zpa.ServiceEdgeGroup("serviceEdgeGroupResource", new()
{
    Latitude = "string",
    Longitude = "string",
    Location = "string",
    ExclusiveForBusinessContinuity = false,
    MicrotenantId = "string",
    EnrollmentCertId = "string",
    City = "string",
    GraceDistanceEnabled = false,
    GraceDistanceValue = "string",
    GraceDistanceValueUnit = "string",
    IsPublic = false,
    Description = "string",
    CountryCode = "string",
    CityCountry = "string",
    Enabled = false,
    Name = "string",
    OverrideVersionProfile = false,
    ServiceEdges = new Zpa.Inputs.ServiceEdgeGroupServiceEdgesArgs
    {
        Ids = new[]
        {
            "string",
        },
    },
    TrustedNetworks = new[]
    {
        new Zpa.Inputs.ServiceEdgeGroupTrustedNetworkArgs
        {
            Ids = new[]
            {
                "string",
            },
        },
    },
    UpgradeDay = "string",
    UpgradeTimeInSecs = "string",
    UseInDrMode = false,
    UserCodes = new[]
    {
        "string",
    },
    VersionProfileId = "string",
    VersionProfileName = "string",
    VersionProfileVisibilityScope = "string",
});

    example, err := zpa.NewServiceEdgeGroup(ctx, "serviceEdgeGroupResource", &zpa.ServiceEdgeGroupArgs{
	Latitude:                       pulumi.String("string"),
	Longitude:                      pulumi.String("string"),
	Location:                       pulumi.String("string"),
	ExclusiveForBusinessContinuity: pulumi.Bool(false),
	MicrotenantId:                  pulumi.String("string"),
	EnrollmentCertId:               pulumi.String("string"),
	City:                           pulumi.String("string"),
	GraceDistanceEnabled:           pulumi.Bool(false),
	GraceDistanceValue:             pulumi.String("string"),
	GraceDistanceValueUnit:         pulumi.String("string"),
	IsPublic:                       pulumi.Bool(false),
	Description:                    pulumi.String("string"),
	CountryCode:                    pulumi.String("string"),
	CityCountry:                    pulumi.String("string"),
	Enabled:                        pulumi.Bool(false),
	Name:                           pulumi.String("string"),
	OverrideVersionProfile:         pulumi.Bool(false),
	ServiceEdges: &zpa.ServiceEdgeGroupServiceEdgesArgs{
		Ids: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	TrustedNetworks: zpa.ServiceEdgeGroupTrustedNetworkArray{
		&zpa.ServiceEdgeGroupTrustedNetworkArgs{
			Ids: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	UpgradeDay:        pulumi.String("string"),
	UpgradeTimeInSecs: pulumi.String("string"),
	UseInDrMode:       pulumi.Bool(false),
	UserCodes: pulumi.StringArray{
		pulumi.String("string"),
	},
	VersionProfileId:              pulumi.String("string"),
	VersionProfileName:            pulumi.String("string"),
	VersionProfileVisibilityScope: pulumi.String("string"),
})

    resource "zpa_serviceedgegroup" "serviceEdgeGroupResource" {
  latitude                          = "string"
  longitude                         = "string"
  location                          = "string"
  exclusive_for_business_continuity = false
  microtenant_id                    = "string"
  enrollment_cert_id                = "string"
  city                              = "string"
  grace_distance_enabled            = false
  grace_distance_value              = "string"
  grace_distance_value_unit         = "string"
  is_public                         = false
  description                       = "string"
  country_code                      = "string"
  city_country                      = "string"
  enabled                           = false
  name                              = "string"
  override_version_profile          = false
  service_edges = {
    ids = ["string"]
  }
  trusted_networks {
    ids = ["string"]
  }
  upgrade_day                      = "string"
  upgrade_time_in_secs             = "string"
  use_in_dr_mode                   = false
  user_codes                       = ["string"]
  version_profile_id               = "string"
  version_profile_name             = "string"
  version_profile_visibility_scope = "string"
}

    var serviceEdgeGroupResource = new ServiceEdgeGroup("serviceEdgeGroupResource", ServiceEdgeGroupArgs.builder()
    .latitude("string")
    .longitude("string")
    .location("string")
    .exclusiveForBusinessContinuity(false)
    .microtenantId("string")
    .enrollmentCertId("string")
    .city("string")
    .graceDistanceEnabled(false)
    .graceDistanceValue("string")
    .graceDistanceValueUnit("string")
    .isPublic(false)
    .description("string")
    .countryCode("string")
    .cityCountry("string")
    .enabled(false)
    .name("string")
    .overrideVersionProfile(false)
    .serviceEdges(ServiceEdgeGroupServiceEdgesArgs.builder()
        .ids("string")
        .build())
    .trustedNetworks(ServiceEdgeGroupTrustedNetworkArgs.builder()
        .ids("string")
        .build())
    .upgradeDay("string")
    .upgradeTimeInSecs("string")
    .useInDrMode(false)
    .userCodes("string")
    .versionProfileId("string")
    .versionProfileName("string")
    .versionProfileVisibilityScope("string")
    .build());

    service_edge_group_resource = zpa.ServiceEdgeGroup("serviceEdgeGroupResource",
    latitude="string",
    longitude="string",
    location="string",
    exclusive_for_business_continuity=False,
    microtenant_id="string",
    enrollment_cert_id="string",
    city="string",
    grace_distance_enabled=False,
    grace_distance_value="string",
    grace_distance_value_unit="string",
    is_public=False,
    description="string",
    country_code="string",
    city_country="string",
    enabled=False,
    name="string",
    override_version_profile=False,
    service_edges={
        "ids": ["string"],
    },
    trusted_networks=[{
        "ids": ["string"],
    }],
    upgrade_day="string",
    upgrade_time_in_secs="string",
    use_in_dr_mode=False,
    user_codes=["string"],
    version_profile_id="string",
    version_profile_name="string",
    version_profile_visibility_scope="string")

    const serviceEdgeGroupResource = new zpa.ServiceEdgeGroup("serviceEdgeGroupResource", {
    latitude: "string",
    longitude: "string",
    location: "string",
    exclusiveForBusinessContinuity: false,
    microtenantId: "string",
    enrollmentCertId: "string",
    city: "string",
    graceDistanceEnabled: false,
    graceDistanceValue: "string",
    graceDistanceValueUnit: "string",
    isPublic: false,
    description: "string",
    countryCode: "string",
    cityCountry: "string",
    enabled: false,
    name: "string",
    overrideVersionProfile: false,
    serviceEdges: {
        ids: ["string"],
    },
    trustedNetworks: [{
        ids: ["string"],
    }],
    upgradeDay: "string",
    upgradeTimeInSecs: "string",
    useInDrMode: false,
    userCodes: ["string"],
    versionProfileId: "string",
    versionProfileName: "string",
    versionProfileVisibilityScope: "string",
});

    type: zpa:ServiceEdgeGroup
properties:
    city: string
    cityCountry: string
    countryCode: string
    description: string
    enabled: false
    enrollmentCertId: string
    exclusiveForBusinessContinuity: false
    graceDistanceEnabled: false
    graceDistanceValue: string
    graceDistanceValueUnit: string
    isPublic: false
    latitude: string
    location: string
    longitude: string
    microtenantId: string
    name: string
    overrideVersionProfile: false
    serviceEdges:
        ids:
            - string
    trustedNetworks:
        - ids:
            - string
    upgradeDay: string
    upgradeTimeInSecs: string
    useInDrMode: false
    userCodes:
        - string
    versionProfileId: string
    versionProfileName: string
    versionProfileVisibilityScope: string

    ServiceEdgeGroup Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ServiceEdgeGroup resource accepts the following input properties:

    Latitude string
    Latitude for the Service Edge Group.
    Location string
    Location for the Service Edge Group.
    Longitude string
    Longitude for the Service Edge Group.
    City string
    City for the Service Edge Group.
    CityCountry string
    CountryCode string
    Description string
    Description of the Service Edge Group.
    Enabled bool
    Whether this Service Edge Group is enabled or not.
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    ExclusiveForBusinessContinuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    GraceDistanceEnabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    GraceDistanceValue string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    GraceDistanceValueUnit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    IsPublic bool
    Enable or disable public access for the Service Edge Group.
    MicrotenantId string
    Name string
    Name of the Service Edge Group.
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    ServiceEdges zscaler.PulumiPackage.Zpa.Inputs.ServiceEdgeGroupServiceEdges
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    TrustedNetworks List<zscaler.PulumiPackage.Zpa.Inputs.ServiceEdgeGroupTrustedNetwork>
    List of trusted network IDs.
    UpgradeDay string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    UpgradeTimeInSecs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    UseInDrMode bool
    UserCodes List<string>
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    VersionProfileId string
    ID of the version profile.
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileVisibilityScope string
    ID of the version profile.
    Latitude string
    Latitude for the Service Edge Group.
    Location string
    Location for the Service Edge Group.
    Longitude string
    Longitude for the Service Edge Group.
    City string
    City for the Service Edge Group.
    CityCountry string
    CountryCode string
    Description string
    Description of the Service Edge Group.
    Enabled bool
    Whether this Service Edge Group is enabled or not.
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    ExclusiveForBusinessContinuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    GraceDistanceEnabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    GraceDistanceValue string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    GraceDistanceValueUnit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    IsPublic bool
    Enable or disable public access for the Service Edge Group.
    MicrotenantId string
    Name string
    Name of the Service Edge Group.
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    ServiceEdges ServiceEdgeGroupServiceEdgesArgs
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    TrustedNetworks []ServiceEdgeGroupTrustedNetworkArgs
    List of trusted network IDs.
    UpgradeDay string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    UpgradeTimeInSecs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    UseInDrMode bool
    UserCodes []string
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    VersionProfileId string
    ID of the version profile.
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileVisibilityScope string
    ID of the version profile.
    latitude string
    Latitude for the Service Edge Group.
    location string
    Location for the Service Edge Group.
    longitude string
    Longitude for the Service Edge Group.
    city string
    City for the Service Edge Group.
    city_country string
    country_code string
    description string
    Description of the Service Edge Group.
    enabled bool
    Whether this Service Edge Group is enabled or not.
    enrollment_cert_id string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusive_for_business_continuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    grace_distance_enabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    grace_distance_value string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    grace_distance_value_unit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    is_public bool
    Enable or disable public access for the Service Edge Group.
    microtenant_id string
    name string
    Name of the Service Edge Group.
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    service_edges object
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trusted_networks list(object)
    List of trusted network IDs.
    upgrade_day string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgrade_time_in_secs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    use_in_dr_mode bool
    user_codes list(string)
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    version_profile_id string
    ID of the version profile.
    version_profile_name string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_visibility_scope string
    ID of the version profile.
    latitude String
    Latitude for the Service Edge Group.
    location String
    Location for the Service Edge Group.
    longitude String
    Longitude for the Service Edge Group.
    city String
    City for the Service Edge Group.
    cityCountry String
    countryCode String
    description String
    Description of the Service Edge Group.
    enabled Boolean
    Whether this Service Edge Group is enabled or not.
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusiveForBusinessContinuity Boolean
    Indicates whether the Service Edge Group is exclusive for business continuity.
    graceDistanceEnabled Boolean
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    graceDistanceValue String
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    graceDistanceValueUnit String
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    isPublic Boolean
    Enable or disable public access for the Service Edge Group.
    microtenantId String
    name String
    Name of the Service Edge Group.
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden.
    serviceEdges ServiceEdgeGroupServiceEdges
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trustedNetworks List<ServiceEdgeGroupTrustedNetwork>
    List of trusted network IDs.
    upgradeDay String
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgradeTimeInSecs String
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    versionProfileId String
    ID of the version profile.
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileVisibilityScope String
    ID of the version profile.
    latitude string
    Latitude for the Service Edge Group.
    location string
    Location for the Service Edge Group.
    longitude string
    Longitude for the Service Edge Group.
    city string
    City for the Service Edge Group.
    cityCountry string
    countryCode string
    description string
    Description of the Service Edge Group.
    enabled boolean
    Whether this Service Edge Group is enabled or not.
    enrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusiveForBusinessContinuity boolean
    Indicates whether the Service Edge Group is exclusive for business continuity.
    graceDistanceEnabled boolean
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    graceDistanceValue string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    graceDistanceValueUnit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    isPublic boolean
    Enable or disable public access for the Service Edge Group.
    microtenantId string
    name string
    Name of the Service Edge Group.
    overrideVersionProfile boolean
    Whether the default version profile of the App Connector Group is applied or overridden.
    serviceEdges ServiceEdgeGroupServiceEdges
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trustedNetworks ServiceEdgeGroupTrustedNetwork[]
    List of trusted network IDs.
    upgradeDay string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgradeTimeInSecs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    useInDrMode boolean
    userCodes string[]
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    versionProfileId string
    ID of the version profile.
    versionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileVisibilityScope string
    ID of the version profile.
    latitude str
    Latitude for the Service Edge Group.
    location str
    Location for the Service Edge Group.
    longitude str
    Longitude for the Service Edge Group.
    city str
    City for the Service Edge Group.
    city_country str
    country_code str
    description str
    Description of the Service Edge Group.
    enabled bool
    Whether this Service Edge Group is enabled or not.
    enrollment_cert_id str
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusive_for_business_continuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    grace_distance_enabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    grace_distance_value str
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    grace_distance_value_unit str
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    is_public bool
    Enable or disable public access for the Service Edge Group.
    microtenant_id str
    name str
    Name of the Service Edge Group.
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    service_edges ServiceEdgeGroupServiceEdgesArgs
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trusted_networks Sequence[ServiceEdgeGroupTrustedNetworkArgs]
    List of trusted network IDs.
    upgrade_day str
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgrade_time_in_secs str
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    use_in_dr_mode bool
    user_codes Sequence[str]
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    version_profile_id str
    ID of the version profile.
    version_profile_name str
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_visibility_scope str
    ID of the version profile.
    latitude String
    Latitude for the Service Edge Group.
    location String
    Location for the Service Edge Group.
    longitude String
    Longitude for the Service Edge Group.
    city String
    City for the Service Edge Group.
    cityCountry String
    countryCode String
    description String
    Description of the Service Edge Group.
    enabled Boolean
    Whether this Service Edge Group is enabled or not.
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusiveForBusinessContinuity Boolean
    Indicates whether the Service Edge Group is exclusive for business continuity.
    graceDistanceEnabled Boolean
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    graceDistanceValue String
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    graceDistanceValueUnit String
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    isPublic Boolean
    Enable or disable public access for the Service Edge Group.
    microtenantId String
    name String
    Name of the Service Edge Group.
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden.
    serviceEdges Property Map
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trustedNetworks List<Property Map>
    List of trusted network IDs.
    upgradeDay String
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgradeTimeInSecs String
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    versionProfileId String
    ID of the version profile.
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileVisibilityScope String
    ID of the version profile.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ServiceEdgeGroup resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ServiceEdgeGroup Resource

    Get an existing ServiceEdgeGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ServiceEdgeGroupState, opts?: CustomResourceOptions): ServiceEdgeGroup
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        city: Optional[str] = None,
        city_country: Optional[str] = None,
        country_code: Optional[str] = None,
        description: Optional[str] = None,
        enabled: Optional[bool] = None,
        enrollment_cert_id: Optional[str] = None,
        exclusive_for_business_continuity: Optional[bool] = None,
        grace_distance_enabled: Optional[bool] = None,
        grace_distance_value: Optional[str] = None,
        grace_distance_value_unit: Optional[str] = None,
        is_public: Optional[bool] = None,
        latitude: Optional[str] = None,
        location: Optional[str] = None,
        longitude: Optional[str] = None,
        microtenant_id: Optional[str] = None,
        name: Optional[str] = None,
        override_version_profile: Optional[bool] = None,
        service_edges: Optional[ServiceEdgeGroupServiceEdgesArgs] = None,
        trusted_networks: Optional[Sequence[ServiceEdgeGroupTrustedNetworkArgs]] = None,
        upgrade_day: Optional[str] = None,
        upgrade_time_in_secs: Optional[str] = None,
        use_in_dr_mode: Optional[bool] = None,
        user_codes: Optional[Sequence[str]] = None,
        version_profile_id: Optional[str] = None,
        version_profile_name: Optional[str] = None,
        version_profile_visibility_scope: Optional[str] = None) -> ServiceEdgeGroup
    func GetServiceEdgeGroup(ctx *Context, name string, id IDInput, state *ServiceEdgeGroupState, opts ...ResourceOption) (*ServiceEdgeGroup, error)
    public static ServiceEdgeGroup Get(string name, Input<string> id, ServiceEdgeGroupState? state, CustomResourceOptions? opts = null)
    public static ServiceEdgeGroup get(String name, Output<String> id, ServiceEdgeGroupState state, CustomResourceOptions options)
    resources:  _:    type: zpa:ServiceEdgeGroup    get:      id: ${id}
    import {
  to = zpa_serviceedgegroup.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    City string
    City for the Service Edge Group.
    CityCountry string
    CountryCode string
    Description string
    Description of the Service Edge Group.
    Enabled bool
    Whether this Service Edge Group is enabled or not.
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    ExclusiveForBusinessContinuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    GraceDistanceEnabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    GraceDistanceValue string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    GraceDistanceValueUnit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    IsPublic bool
    Enable or disable public access for the Service Edge Group.
    Latitude string
    Latitude for the Service Edge Group.
    Location string
    Location for the Service Edge Group.
    Longitude string
    Longitude for the Service Edge Group.
    MicrotenantId string
    Name string
    Name of the Service Edge Group.
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    ServiceEdges zscaler.PulumiPackage.Zpa.Inputs.ServiceEdgeGroupServiceEdges
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    TrustedNetworks List<zscaler.PulumiPackage.Zpa.Inputs.ServiceEdgeGroupTrustedNetwork>
    List of trusted network IDs.
    UpgradeDay string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    UpgradeTimeInSecs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    UseInDrMode bool
    UserCodes List<string>
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    VersionProfileId string
    ID of the version profile.
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileVisibilityScope string
    ID of the version profile.
    City string
    City for the Service Edge Group.
    CityCountry string
    CountryCode string
    Description string
    Description of the Service Edge Group.
    Enabled bool
    Whether this Service Edge Group is enabled or not.
    EnrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    ExclusiveForBusinessContinuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    GraceDistanceEnabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    GraceDistanceValue string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    GraceDistanceValueUnit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    IsPublic bool
    Enable or disable public access for the Service Edge Group.
    Latitude string
    Latitude for the Service Edge Group.
    Location string
    Location for the Service Edge Group.
    Longitude string
    Longitude for the Service Edge Group.
    MicrotenantId string
    Name string
    Name of the Service Edge Group.
    OverrideVersionProfile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    ServiceEdges ServiceEdgeGroupServiceEdgesArgs
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    TrustedNetworks []ServiceEdgeGroupTrustedNetworkArgs
    List of trusted network IDs.
    UpgradeDay string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    UpgradeTimeInSecs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    UseInDrMode bool
    UserCodes []string
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    VersionProfileId string
    ID of the version profile.
    VersionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    VersionProfileVisibilityScope string
    ID of the version profile.
    city string
    City for the Service Edge Group.
    city_country string
    country_code string
    description string
    Description of the Service Edge Group.
    enabled bool
    Whether this Service Edge Group is enabled or not.
    enrollment_cert_id string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusive_for_business_continuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    grace_distance_enabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    grace_distance_value string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    grace_distance_value_unit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    is_public bool
    Enable or disable public access for the Service Edge Group.
    latitude string
    Latitude for the Service Edge Group.
    location string
    Location for the Service Edge Group.
    longitude string
    Longitude for the Service Edge Group.
    microtenant_id string
    name string
    Name of the Service Edge Group.
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    service_edges object
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trusted_networks list(object)
    List of trusted network IDs.
    upgrade_day string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgrade_time_in_secs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    use_in_dr_mode bool
    user_codes list(string)
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    version_profile_id string
    ID of the version profile.
    version_profile_name string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_visibility_scope string
    ID of the version profile.
    city String
    City for the Service Edge Group.
    cityCountry String
    countryCode String
    description String
    Description of the Service Edge Group.
    enabled Boolean
    Whether this Service Edge Group is enabled or not.
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusiveForBusinessContinuity Boolean
    Indicates whether the Service Edge Group is exclusive for business continuity.
    graceDistanceEnabled Boolean
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    graceDistanceValue String
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    graceDistanceValueUnit String
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    isPublic Boolean
    Enable or disable public access for the Service Edge Group.
    latitude String
    Latitude for the Service Edge Group.
    location String
    Location for the Service Edge Group.
    longitude String
    Longitude for the Service Edge Group.
    microtenantId String
    name String
    Name of the Service Edge Group.
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden.
    serviceEdges ServiceEdgeGroupServiceEdges
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trustedNetworks List<ServiceEdgeGroupTrustedNetwork>
    List of trusted network IDs.
    upgradeDay String
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgradeTimeInSecs String
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    versionProfileId String
    ID of the version profile.
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileVisibilityScope String
    ID of the version profile.
    city string
    City for the Service Edge Group.
    cityCountry string
    countryCode string
    description string
    Description of the Service Edge Group.
    enabled boolean
    Whether this Service Edge Group is enabled or not.
    enrollmentCertId string
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusiveForBusinessContinuity boolean
    Indicates whether the Service Edge Group is exclusive for business continuity.
    graceDistanceEnabled boolean
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    graceDistanceValue string
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    graceDistanceValueUnit string
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    isPublic boolean
    Enable or disable public access for the Service Edge Group.
    latitude string
    Latitude for the Service Edge Group.
    location string
    Location for the Service Edge Group.
    longitude string
    Longitude for the Service Edge Group.
    microtenantId string
    name string
    Name of the Service Edge Group.
    overrideVersionProfile boolean
    Whether the default version profile of the App Connector Group is applied or overridden.
    serviceEdges ServiceEdgeGroupServiceEdges
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trustedNetworks ServiceEdgeGroupTrustedNetwork[]
    List of trusted network IDs.
    upgradeDay string
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgradeTimeInSecs string
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    useInDrMode boolean
    userCodes string[]
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    versionProfileId string
    ID of the version profile.
    versionProfileName string
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileVisibilityScope string
    ID of the version profile.
    city str
    City for the Service Edge Group.
    city_country str
    country_code str
    description str
    Description of the Service Edge Group.
    enabled bool
    Whether this Service Edge Group is enabled or not.
    enrollment_cert_id str
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusive_for_business_continuity bool
    Indicates whether the Service Edge Group is exclusive for business continuity.
    grace_distance_enabled bool
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    grace_distance_value str
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    grace_distance_value_unit str
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    is_public bool
    Enable or disable public access for the Service Edge Group.
    latitude str
    Latitude for the Service Edge Group.
    location str
    Location for the Service Edge Group.
    longitude str
    Longitude for the Service Edge Group.
    microtenant_id str
    name str
    Name of the Service Edge Group.
    override_version_profile bool
    Whether the default version profile of the App Connector Group is applied or overridden.
    service_edges ServiceEdgeGroupServiceEdgesArgs
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trusted_networks Sequence[ServiceEdgeGroupTrustedNetworkArgs]
    List of trusted network IDs.
    upgrade_day str
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgrade_time_in_secs str
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    use_in_dr_mode bool
    user_codes Sequence[str]
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    version_profile_id str
    ID of the version profile.
    version_profile_name str
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    version_profile_visibility_scope str
    ID of the version profile.
    city String
    City for the Service Edge Group.
    cityCountry String
    countryCode String
    description String
    Description of the Service Edge Group.
    enabled Boolean
    Whether this Service Edge Group is enabled or not.
    enrollmentCertId String
    ID of the enrollment certificate that can be used for OAuth2 enrollment. If not set, the provider will automatically look up the 'Service Edge' enrollment certificate by name.
    exclusiveForBusinessContinuity Boolean
    Indicates whether the Service Edge Group is exclusive for business continuity.
    graceDistanceEnabled Boolean
    If enabled, allows ZPA Private Service Edge Groups within the specified distance to be prioritized over a closer ZPA Public Service Edge.
    graceDistanceValue String
    Indicates the maximum distance in miles or kilometers to ZPA Private Service Edge groups that would override a ZPA Public Service Edge
    graceDistanceValueUnit String
    Indicates the grace distance unit of measure in miles or kilometers. This value is only required if graceDistanceValue is set to true
    isPublic Boolean
    Enable or disable public access for the Service Edge Group.
    latitude String
    Latitude for the Service Edge Group.
    location String
    Location for the Service Edge Group.
    longitude String
    Longitude for the Service Edge Group.
    microtenantId String
    name String
    Name of the Service Edge Group.
    overrideVersionProfile Boolean
    Whether the default version profile of the App Connector Group is applied or overridden.
    serviceEdges Property Map
    WARNING: Service edge membership is managed externally. Specifying this field will enforce exact membership matching.This field will be deprecated in future versions
    trustedNetworks List<Property Map>
    List of trusted network IDs.
    upgradeDay String
    Service Edges in this group will attempt to update to a newer version of the software during this specified day.
    upgradeTimeInSecs String
    Service Edges in this group will attempt to update to a newer version of the software during this specified time.
    useInDrMode Boolean
    userCodes List<String>
    User codes from deployed Service Edge VMs for OAuth2 enrollment. When provided, the provider will call the user code verification API to enroll the service edges. These codes are obtained from the Service Edge VM after deployment.
    versionProfileId String
    ID of the version profile.
    versionProfileName String
    Name of the version profile. To learn more, see Version Profile Use Cases. This value is required, if the value for overrideVersionProfile is set to true
    versionProfileVisibilityScope String
    ID of the version profile.

    Supporting Types

    ServiceEdgeGroupServiceEdges, ServiceEdgeGroupServiceEdgesArgs

    Ids List<string>
    Ids []string
    ids list(string)
    ids List<String>
    ids string[]
    ids Sequence[str]
    ids List<String>

    ServiceEdgeGroupTrustedNetwork, ServiceEdgeGroupTrustedNetworkArgs

    Ids List<string>
    Ids []string
    ids list(string)
    ids List<String>
    ids string[]
    ids Sequence[str]
    ids List<String>

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZPA configurations into Terraform-compliant HashiCorp Configuration Language. Visit

    Service Edge Group can be imported; use <SERVER EDGE GROUP ID> or <SERVER EDGE GROUP NAME> as the import ID.

    For example:

    $ pulumi import zpa:index/serviceEdgeGroup:ServiceEdgeGroup example <service_edge_group_id>

    or

    $ pulumi import zpa:index/serviceEdgeGroup:ServiceEdgeGroup example <service_edge_group_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zpa zscaler/pulumi-zpa
    License
    MIT
    Notes
    This Pulumi package is based on the zpa Terraform Provider.
    zpa logo
    Viewing docs for Zscaler Private Access v1.0.4
    published on Monday, Jun 29, 2026 by Zscaler
    Schema (JSON)
    zscaler/pulumi-zpa

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial