Docs Packages
  1. Packages
  2. dbt Cloud
  3. API Docs
  4. GroupPartialPermissions
dbt Cloud v0.1.8 published on Tuesday, Jun 11, 2024 by Pulumi
pulumi/pulumi-dbtcloud

dbtcloud.GroupPartialPermissions

Explore with Pulumi AI

dbtcloud logo
dbt Cloud v0.1.8 published on Tuesday, Jun 11, 2024 by Pulumi
pulumi/pulumi-dbtcloud

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dbtcloud.GroupPartialPermissions;
import com.pulumi.dbtcloud.GroupPartialPermissionsArgs;
import com.pulumi.dbtcloud.inputs.GroupPartialPermissionsGroupPermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // we add some permissions to the group "TF Group 1" (existing or not) to  a new project 
        var tfGroup1 = new GroupPartialPermissions("tfGroup1", GroupPartialPermissionsArgs.builder()
            .name("TF Group 1")
            .groupPermissions(            
                GroupPartialPermissionsGroupPermissionArgs.builder()
                    .permission_set("developer")
                    .project_id(dbtProject.id())
                    .all_projects(false)
                    .writable_environment_categories(                    
                        "development",
                        "staging")
                    .build(),
                GroupPartialPermissionsGroupPermissionArgs.builder()
                    .permission_set("git_admin")
                    .project_id(dbtProject.id())
                    .all_projects(false)
                    .build())
            .build());

        // we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
        // it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
        var tfGroup2 = new GroupPartialPermissions("tfGroup2", GroupPartialPermissionsArgs.builder()
            .name("TF Group 2")
            .ssoMappingGroups("group2")
            .groupPermissions(GroupPartialPermissionsGroupPermissionArgs.builder()
                .permission_set("admin")
                .project_id(dbtProject.id())
                .all_projects(false)
                .build())
            .build());

    }
}

    resources:
  # we add some permissions to the group "TF Group 1" (existing or not) to  a new project
  tfGroup1:
    type: dbtcloud:GroupPartialPermissions
    name: tf_group_1
    properties:
      name: TF Group 1
      groupPermissions:
        - permission_set: developer
          project_id: ${dbtProject.id}
          all_projects: false
          writable_environment_categories:
            - development
            - staging
        - permission_set: git_admin
          project_id: ${dbtProject.id}
          all_projects: false
  # we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
  # // it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
  tfGroup2:
    type: dbtcloud:GroupPartialPermissions
    name: tf_group_2
    properties:
      name: TF Group 2
      ssoMappingGroups:
        - group2
      groupPermissions:
        - permission_set: admin
          project_id: ${dbtProject.id}
          all_projects: false

    Create GroupPartialPermissions Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GroupPartialPermissions(name: string, args?: GroupPartialPermissionsArgs, opts?: CustomResourceOptions);
    @overload
def GroupPartialPermissions(resource_name: str,
                            args: Optional[GroupPartialPermissionsArgs] = None,
                            opts: Optional[ResourceOptions] = None)

@overload
def GroupPartialPermissions(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            assign_by_default: Optional[bool] = None,
                            group_permissions: Optional[Sequence[GroupPartialPermissionsGroupPermissionArgs]] = None,
                            name: Optional[str] = None,
                            sso_mapping_groups: Optional[Sequence[str]] = None)
    func NewGroupPartialPermissions(ctx *Context, name string, args *GroupPartialPermissionsArgs, opts ...ResourceOption) (*GroupPartialPermissions, error)
    public GroupPartialPermissions(string name, GroupPartialPermissionsArgs? args = null, CustomResourceOptions? opts = null)
    public GroupPartialPermissions(String name, GroupPartialPermissionsArgs args)
public GroupPartialPermissions(String name, GroupPartialPermissionsArgs args, CustomResourceOptions options)

    type: dbtcloud:GroupPartialPermissions
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var groupPartialPermissionsResource = new DbtCloud.GroupPartialPermissions("groupPartialPermissionsResource", new()
{
    AssignByDefault = false,
    GroupPermissions = new[]
    {
        new DbtCloud.Inputs.GroupPartialPermissionsGroupPermissionArgs
        {
            AllProjects = false,
            PermissionSet = "string",
            ProjectId = 0,
            WritableEnvironmentCategories = new[]
            {
                "string",
            },
        },
    },
    Name = "string",
    SsoMappingGroups = new[]
    {
        "string",
    },
});

    example, err := dbtcloud.NewGroupPartialPermissions(ctx, "groupPartialPermissionsResource", &dbtcloud.GroupPartialPermissionsArgs{
	AssignByDefault: pulumi.Bool(false),
	GroupPermissions: dbtcloud.GroupPartialPermissionsGroupPermissionArray{
		&dbtcloud.GroupPartialPermissionsGroupPermissionArgs{
			AllProjects:   pulumi.Bool(false),
			PermissionSet: pulumi.String("string"),
			ProjectId:     pulumi.Int(0),
			WritableEnvironmentCategories: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Name: pulumi.String("string"),
	SsoMappingGroups: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var groupPartialPermissionsResource = new GroupPartialPermissions("groupPartialPermissionsResource", GroupPartialPermissionsArgs.builder()
    .assignByDefault(false)
    .groupPermissions(GroupPartialPermissionsGroupPermissionArgs.builder()
        .allProjects(false)
        .permissionSet("string")
        .projectId(0)
        .writableEnvironmentCategories("string")
        .build())
    .name("string")
    .ssoMappingGroups("string")
    .build());

    group_partial_permissions_resource = dbtcloud.GroupPartialPermissions("groupPartialPermissionsResource",
    assign_by_default=False,
    group_permissions=[dbtcloud.GroupPartialPermissionsGroupPermissionArgs(
        all_projects=False,
        permission_set="string",
        project_id=0,
        writable_environment_categories=["string"],
    )],
    name="string",
    sso_mapping_groups=["string"])

    const groupPartialPermissionsResource = new dbtcloud.GroupPartialPermissions("groupPartialPermissionsResource", {
    assignByDefault: false,
    groupPermissions: [{
        allProjects: false,
        permissionSet: "string",
        projectId: 0,
        writableEnvironmentCategories: ["string"],
    }],
    name: "string",
    ssoMappingGroups: ["string"],
});

    type: dbtcloud:GroupPartialPermissions
properties:
    assignByDefault: false
    groupPermissions:
        - allProjects: false
          permissionSet: string
          projectId: 0
          writableEnvironmentCategories:
            - string
    name: string
    ssoMappingGroups:
        - string

    GroupPartialPermissions Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The GroupPartialPermissions resource accepts the following input properties:

    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions List<Pulumi.DbtCloud.Inputs.GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups List<string>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions []GroupPartialPermissionsGroupPermissionArgs
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups []string
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions GroupPartialPermissionsGroupPermission[]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name string
    The name of the group. This is used to identify an existing group
    ssoMappingGroups string[]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assign_by_default bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    group_permissions Sequence[GroupPartialPermissionsGroupPermissionArgs]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name str
    The name of the group. This is used to identify an existing group
    sso_mapping_groups Sequence[str]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<Property Map>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GroupPartialPermissions resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GroupPartialPermissions Resource

    Get an existing GroupPartialPermissions resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GroupPartialPermissionsState, opts?: CustomResourceOptions): GroupPartialPermissions
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        assign_by_default: Optional[bool] = None,
        group_permissions: Optional[Sequence[GroupPartialPermissionsGroupPermissionArgs]] = None,
        name: Optional[str] = None,
        sso_mapping_groups: Optional[Sequence[str]] = None) -> GroupPartialPermissions
    func GetGroupPartialPermissions(ctx *Context, name string, id IDInput, state *GroupPartialPermissionsState, opts ...ResourceOption) (*GroupPartialPermissions, error)
    public static GroupPartialPermissions Get(string name, Input<string> id, GroupPartialPermissionsState? state, CustomResourceOptions? opts = null)
    public static GroupPartialPermissions get(String name, Output<String> id, GroupPartialPermissionsState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions List<Pulumi.DbtCloud.Inputs.GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups List<string>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions []GroupPartialPermissionsGroupPermissionArgs
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups []string
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions GroupPartialPermissionsGroupPermission[]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name string
    The name of the group. This is used to identify an existing group
    ssoMappingGroups string[]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assign_by_default bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    group_permissions Sequence[GroupPartialPermissionsGroupPermissionArgs]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name str
    The name of the group. This is used to identify an existing group
    sso_mapping_groups Sequence[str]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<Property Map>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.

    Supporting Types

    GroupPartialPermissionsGroupPermission, GroupPartialPermissionsGroupPermissionArgs

    AllProjects bool
    Whether access should be provided for all projects or not.
    PermissionSet string
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    ProjectId int
    Project ID to apply this permission to for this group.
    WritableEnvironmentCategories List<string>
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    AllProjects bool
    Whether access should be provided for all projects or not.
    PermissionSet string
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    ProjectId int
    Project ID to apply this permission to for this group.
    WritableEnvironmentCategories []string
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    allProjects Boolean
    Whether access should be provided for all projects or not.
    permissionSet String
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    projectId Integer
    Project ID to apply this permission to for this group.
    writableEnvironmentCategories List<String>
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    allProjects boolean
    Whether access should be provided for all projects or not.
    permissionSet string
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    projectId number
    Project ID to apply this permission to for this group.
    writableEnvironmentCategories string[]
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    all_projects bool
    Whether access should be provided for all projects or not.
    permission_set str
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    project_id int
    Project ID to apply this permission to for this group.
    writable_environment_categories Sequence[str]
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    allProjects Boolean
    Whether access should be provided for all projects or not.
    permissionSet String
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    projectId Number
    Project ID to apply this permission to for this group.
    writableEnvironmentCategories List<String>
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.

    Package Details

    Repository
    dbtcloud pulumi/pulumi-dbtcloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the dbtcloud Terraform Provider.
    dbtcloud logo
    dbt Cloud v0.1.8 published on Tuesday, Jun 11, 2024 by Pulumi
    pulumi/pulumi-dbtcloud