Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. StrongDM
  3. API Docs
  4. getAccount
StrongDM v1.26.0 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-sdm

sdm.getAccount

Explore with Pulumi AI

StrongDM v1.26.0 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-sdm

Accounts are users that have access to strongDM. The types of accounts are:

  1. Users: humans who are authenticated through username and password or SSO.
  2. Service Accounts: machines that are authenticated using a service token.
  3. Tokens are access keys with permissions that can be used for authentication.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as sdm from "@pulumi/sdm";

const user_queries = sdm.getAccount({
    email: "*@strongdm.com",
    tags: {
        env: "dev",
        region: "us-west",
    },
    type: "user",
});
const api_key_queries = sdm.getAccount({
    name: "*-dev",
    type: "api",
});
const admin_token_queries = sdm.getAccount({
    name: "*-prod",
    type: "admin-token",
});
Copy
import pulumi
import pulumi_sdm as sdm

user_queries = sdm.get_account(email="*@strongdm.com",
    tags={
        "env": "dev",
        "region": "us-west",
    },
    type="user")
api_key_queries = sdm.get_account(name="*-dev",
    type="api")
admin_token_queries = sdm.get_account(name="*-prod",
    type="admin-token")
Copy
package main

import (
	"github.com/pierskarsenbarg/pulumi-sdm/sdk/go/sdm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sdm.LookupAccount(ctx, &sdm.LookupAccountArgs{
			Email: pulumi.StringRef("*@strongdm.com"),
			Tags: map[string]interface{}{
				"env":    "dev",
				"region": "us-west",
			},
			Type: pulumi.StringRef("user"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = sdm.LookupAccount(ctx, &sdm.LookupAccountArgs{
			Name: pulumi.StringRef("*-dev"),
			Type: pulumi.StringRef("api"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = sdm.LookupAccount(ctx, &sdm.LookupAccountArgs{
			Name: pulumi.StringRef("*-prod"),
			Type: pulumi.StringRef("admin-token"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Sdm = Pulumi.Sdm;

return await Deployment.RunAsync(() => 
{
    var user_queries = Sdm.GetAccount.Invoke(new()
    {
        Email = "*@strongdm.com",
        Tags = 
        {
            { "env", "dev" },
            { "region", "us-west" },
        },
        Type = "user",
    });

    var api_key_queries = Sdm.GetAccount.Invoke(new()
    {
        Name = "*-dev",
        Type = "api",
    });

    var admin_token_queries = Sdm.GetAccount.Invoke(new()
    {
        Name = "*-prod",
        Type = "admin-token",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.sdm.SdmFunctions;
import com.pulumi.sdm.inputs.GetAccountArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var user-queries = SdmFunctions.getAccount(GetAccountArgs.builder()
            .email("*@strongdm.com")
            .tags(Map.ofEntries(
                Map.entry("env", "dev"),
                Map.entry("region", "us-west")
            ))
            .type("user")
            .build());

        final var api-key-queries = SdmFunctions.getAccount(GetAccountArgs.builder()
            .name("*-dev")
            .type("api")
            .build());

        final var admin-token-queries = SdmFunctions.getAccount(GetAccountArgs.builder()
            .name("*-prod")
            .type("admin-token")
            .build());

    }
}
Copy
variables:
  user-queries:
    fn::invoke:
      function: sdm:getAccount
      arguments:
        email: '*@strongdm.com'
        tags:
          env: dev
          region: us-west
        type: user
  api-key-queries:
    fn::invoke:
      function: sdm:getAccount
      arguments:
        name: '*-dev'
        type: api
  admin-token-queries:
    fn::invoke:
      function: sdm:getAccount
      arguments:
        name: '*-prod'
        type: admin-token
Copy

Using getAccount

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getAccount(args: GetAccountArgs, opts?: InvokeOptions): Promise<GetAccountResult>
function getAccountOutput(args: GetAccountOutputArgs, opts?: InvokeOptions): Output<GetAccountResult>
Copy
def get_account(account_type: Optional[str] = None,
                email: Optional[str] = None,
                external_id: Optional[str] = None,
                first_name: Optional[str] = None,
                id: Optional[str] = None,
                last_name: Optional[str] = None,
                name: Optional[str] = None,
                permission_level: Optional[str] = None,
                permissions: Optional[str] = None,
                suspended: Optional[bool] = None,
                tags: Optional[Mapping[str, str]] = None,
                type: Optional[str] = None,
                opts: Optional[InvokeOptions] = None) -> GetAccountResult
def get_account_output(account_type: Optional[pulumi.Input[str]] = None,
                email: Optional[pulumi.Input[str]] = None,
                external_id: Optional[pulumi.Input[str]] = None,
                first_name: Optional[pulumi.Input[str]] = None,
                id: Optional[pulumi.Input[str]] = None,
                last_name: Optional[pulumi.Input[str]] = None,
                name: Optional[pulumi.Input[str]] = None,
                permission_level: Optional[pulumi.Input[str]] = None,
                permissions: Optional[pulumi.Input[str]] = None,
                suspended: Optional[pulumi.Input[bool]] = None,
                tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                type: Optional[pulumi.Input[str]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetAccountResult]
Copy
func LookupAccount(ctx *Context, args *LookupAccountArgs, opts ...InvokeOption) (*LookupAccountResult, error)
func LookupAccountOutput(ctx *Context, args *LookupAccountOutputArgs, opts ...InvokeOption) LookupAccountResultOutput
Copy

> Note: This function is named LookupAccount in the Go SDK.

public static class GetAccount 
{
    public static Task<GetAccountResult> InvokeAsync(GetAccountArgs args, InvokeOptions? opts = null)
    public static Output<GetAccountResult> Invoke(GetAccountInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetAccountResult> getAccount(GetAccountArgs args, InvokeOptions options)
public static Output<GetAccountResult> getAccount(GetAccountArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: sdm:index/getAccount:getAccount
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

AccountType string
Corresponds to the type of token, e.g. api or admin-token.
Email string
The User's email address. Must be unique.
ExternalId string
External ID is an alternative unique ID this user is represented by within an external service.
FirstName string
The User's first name.
Id string
Unique identifier of the User.
LastName string
The User's last name.
Name string
Unique human-readable name of the Token.
PermissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
Permissions string
Permissions assigned to the token, e.g. role:create.
Suspended bool
Reserved for future use. Always false for tokens.
Tags Dictionary<string, string>
Tags is a map of key, value pairs.
Type string
a filter to select all items of a certain subtype. See the filter documentation for more information.
AccountType string
Corresponds to the type of token, e.g. api or admin-token.
Email string
The User's email address. Must be unique.
ExternalId string
External ID is an alternative unique ID this user is represented by within an external service.
FirstName string
The User's first name.
Id string
Unique identifier of the User.
LastName string
The User's last name.
Name string
Unique human-readable name of the Token.
PermissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
Permissions string
Permissions assigned to the token, e.g. role:create.
Suspended bool
Reserved for future use. Always false for tokens.
Tags map[string]string
Tags is a map of key, value pairs.
Type string
a filter to select all items of a certain subtype. See the filter documentation for more information.
accountType String
Corresponds to the type of token, e.g. api or admin-token.
email String
The User's email address. Must be unique.
externalId String
External ID is an alternative unique ID this user is represented by within an external service.
firstName String
The User's first name.
id String
Unique identifier of the User.
lastName String
The User's last name.
name String
Unique human-readable name of the Token.
permissionLevel String
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions String
Permissions assigned to the token, e.g. role:create.
suspended Boolean
Reserved for future use. Always false for tokens.
tags Map<String,String>
Tags is a map of key, value pairs.
type String
a filter to select all items of a certain subtype. See the filter documentation for more information.
accountType string
Corresponds to the type of token, e.g. api or admin-token.
email string
The User's email address. Must be unique.
externalId string
External ID is an alternative unique ID this user is represented by within an external service.
firstName string
The User's first name.
id string
Unique identifier of the User.
lastName string
The User's last name.
name string
Unique human-readable name of the Token.
permissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions string
Permissions assigned to the token, e.g. role:create.
suspended boolean
Reserved for future use. Always false for tokens.
tags {[key: string]: string}
Tags is a map of key, value pairs.
type string
a filter to select all items of a certain subtype. See the filter documentation for more information.
account_type str
Corresponds to the type of token, e.g. api or admin-token.
email str
The User's email address. Must be unique.
external_id str
External ID is an alternative unique ID this user is represented by within an external service.
first_name str
The User's first name.
id str
Unique identifier of the User.
last_name str
The User's last name.
name str
Unique human-readable name of the Token.
permission_level str
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions str
Permissions assigned to the token, e.g. role:create.
suspended bool
Reserved for future use. Always false for tokens.
tags Mapping[str, str]
Tags is a map of key, value pairs.
type str
a filter to select all items of a certain subtype. See the filter documentation for more information.
accountType String
Corresponds to the type of token, e.g. api or admin-token.
email String
The User's email address. Must be unique.
externalId String
External ID is an alternative unique ID this user is represented by within an external service.
firstName String
The User's first name.
id String
Unique identifier of the User.
lastName String
The User's last name.
name String
Unique human-readable name of the Token.
permissionLevel String
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions String
Permissions assigned to the token, e.g. role:create.
suspended Boolean
Reserved for future use. Always false for tokens.
tags Map<String>
Tags is a map of key, value pairs.
type String
a filter to select all items of a certain subtype. See the filter documentation for more information.

getAccount Result

The following output properties are available:

Accounts List<PiersKarsenbarg.Sdm.Outputs.GetAccountAccount>
A single element list containing a map, where each key lists one of the following objects:

  • service:
Ids List<string>
a list of strings of ids of data sources that match the given arguments.
AccountType string
Corresponds to the type of token, e.g. api or admin-token.
Email string
The User's email address. Must be unique.
ExternalId string
External ID is an alternative unique ID this user is represented by within an external service.
FirstName string
The User's first name.
Id string
Unique identifier of the User.
LastName string
The User's last name.
Name string
Unique human-readable name of the Token.
PermissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
Permissions string
Permissions assigned to the token, e.g. role:create.
Suspended bool
Suspended is a read only field for the User's suspended state.
Tags Dictionary<string, string>
Tags is a map of key, value pairs.
Type string
Accounts []GetAccountAccount
A single element list containing a map, where each key lists one of the following objects:

  • service:
Ids []string
a list of strings of ids of data sources that match the given arguments.
AccountType string
Corresponds to the type of token, e.g. api or admin-token.
Email string
The User's email address. Must be unique.
ExternalId string
External ID is an alternative unique ID this user is represented by within an external service.
FirstName string
The User's first name.
Id string
Unique identifier of the User.
LastName string
The User's last name.
Name string
Unique human-readable name of the Token.
PermissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
Permissions string
Permissions assigned to the token, e.g. role:create.
Suspended bool
Suspended is a read only field for the User's suspended state.
Tags map[string]string
Tags is a map of key, value pairs.
Type string
accounts List<GetAccountAccount>
A single element list containing a map, where each key lists one of the following objects:

  • service:
ids List<String>
a list of strings of ids of data sources that match the given arguments.
accountType String
Corresponds to the type of token, e.g. api or admin-token.
email String
The User's email address. Must be unique.
externalId String
External ID is an alternative unique ID this user is represented by within an external service.
firstName String
The User's first name.
id String
Unique identifier of the User.
lastName String
The User's last name.
name String
Unique human-readable name of the Token.
permissionLevel String
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions String
Permissions assigned to the token, e.g. role:create.
suspended Boolean
Suspended is a read only field for the User's suspended state.
tags Map<String,String>
Tags is a map of key, value pairs.
type String
accounts GetAccountAccount[]
A single element list containing a map, where each key lists one of the following objects:

  • service:
ids string[]
a list of strings of ids of data sources that match the given arguments.
accountType string
Corresponds to the type of token, e.g. api or admin-token.
email string
The User's email address. Must be unique.
externalId string
External ID is an alternative unique ID this user is represented by within an external service.
firstName string
The User's first name.
id string
Unique identifier of the User.
lastName string
The User's last name.
name string
Unique human-readable name of the Token.
permissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions string
Permissions assigned to the token, e.g. role:create.
suspended boolean
Suspended is a read only field for the User's suspended state.
tags {[key: string]: string}
Tags is a map of key, value pairs.
type string
accounts Sequence[GetAccountAccount]
A single element list containing a map, where each key lists one of the following objects:

  • service:
ids Sequence[str]
a list of strings of ids of data sources that match the given arguments.
account_type str
Corresponds to the type of token, e.g. api or admin-token.
email str
The User's email address. Must be unique.
external_id str
External ID is an alternative unique ID this user is represented by within an external service.
first_name str
The User's first name.
id str
Unique identifier of the User.
last_name str
The User's last name.
name str
Unique human-readable name of the Token.
permission_level str
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions str
Permissions assigned to the token, e.g. role:create.
suspended bool
Suspended is a read only field for the User's suspended state.
tags Mapping[str, str]
Tags is a map of key, value pairs.
type str
accounts List<Property Map>
A single element list containing a map, where each key lists one of the following objects:

  • service:
ids List<String>
a list of strings of ids of data sources that match the given arguments.
accountType String
Corresponds to the type of token, e.g. api or admin-token.
email String
The User's email address. Must be unique.
externalId String
External ID is an alternative unique ID this user is represented by within an external service.
firstName String
The User's first name.
id String
Unique identifier of the User.
lastName String
The User's last name.
name String
Unique human-readable name of the Token.
permissionLevel String
PermissionLevel is the user's permission level e.g. admin, DBA, user.
permissions String
Permissions assigned to the token, e.g. role:create.
suspended Boolean
Suspended is a read only field for the User's suspended state.
tags Map<String>
Tags is a map of key, value pairs.
type String

Supporting Types

GetAccountAccount

Services This property is required. List<PiersKarsenbarg.Sdm.Inputs.GetAccountAccountService>
A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
Tokens This property is required. List<PiersKarsenbarg.Sdm.Inputs.GetAccountAccountToken>
A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
Users This property is required. List<PiersKarsenbarg.Sdm.Inputs.GetAccountAccountUser>
A User can connect to resources they are granted directly, or granted via roles.
Services This property is required. []GetAccountAccountService
A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
Tokens This property is required. []GetAccountAccountToken
A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
Users This property is required. []GetAccountAccountUser
A User can connect to resources they are granted directly, or granted via roles.
services This property is required. List<GetAccountAccountService>
A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
tokens This property is required. List<GetAccountAccountToken>
A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
users This property is required. List<GetAccountAccountUser>
A User can connect to resources they are granted directly, or granted via roles.
services This property is required. GetAccountAccountService[]
A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
tokens This property is required. GetAccountAccountToken[]
A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
users This property is required. GetAccountAccountUser[]
A User can connect to resources they are granted directly, or granted via roles.
services This property is required. Sequence[GetAccountAccountService]
A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
tokens This property is required. Sequence[GetAccountAccountToken]
A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
users This property is required. Sequence[GetAccountAccountUser]
A User can connect to resources they are granted directly, or granted via roles.
services This property is required. List<Property Map>
A Service is a service account that can connect to resources they are granted directly, or granted via roles. Services are typically automated jobs.
tokens This property is required. List<Property Map>
A Token is an account providing tokenized access for automation or integration use. Tokens include admin tokens, API keys, and SCIM tokens.
users This property is required. List<Property Map>
A User can connect to resources they are granted directly, or granted via roles.

GetAccountAccountService

Id string
Unique identifier of the User.
Name string
Unique human-readable name of the Token.
Suspended bool
Reserved for future use. Always false for tokens.
Tags Dictionary<string, string>
Tags is a map of key, value pairs.
Id string
Unique identifier of the User.
Name string
Unique human-readable name of the Token.
Suspended bool
Reserved for future use. Always false for tokens.
Tags map[string]string
Tags is a map of key, value pairs.
id String
Unique identifier of the User.
name String
Unique human-readable name of the Token.
suspended Boolean
Reserved for future use. Always false for tokens.
tags Map<String,String>
Tags is a map of key, value pairs.
id string
Unique identifier of the User.
name string
Unique human-readable name of the Token.
suspended boolean
Reserved for future use. Always false for tokens.
tags {[key: string]: string}
Tags is a map of key, value pairs.
id str
Unique identifier of the User.
name str
Unique human-readable name of the Token.
suspended bool
Reserved for future use. Always false for tokens.
tags Mapping[str, str]
Tags is a map of key, value pairs.
id String
Unique identifier of the User.
name String
Unique human-readable name of the Token.
suspended Boolean
Reserved for future use. Always false for tokens.
tags Map<String>
Tags is a map of key, value pairs.

GetAccountAccountToken

AccountType string
Corresponds to the type of token, e.g. api or admin-token.
Deadline string
The timestamp when the Token will expire.
Duration string
Duration from token creation to expiration.
Id string
Unique identifier of the User.
Name string
Unique human-readable name of the Token.
Permissions List<string>
Permissions assigned to the token, e.g. role:create.
Rekeyed string
The timestamp when the Token was last rekeyed.
Suspended bool
Reserved for future use. Always false for tokens.
Tags Dictionary<string, string>
Tags is a map of key, value pairs.
AccountType string
Corresponds to the type of token, e.g. api or admin-token.
Deadline string
The timestamp when the Token will expire.
Duration string
Duration from token creation to expiration.
Id string
Unique identifier of the User.
Name string
Unique human-readable name of the Token.
Permissions []string
Permissions assigned to the token, e.g. role:create.
Rekeyed string
The timestamp when the Token was last rekeyed.
Suspended bool
Reserved for future use. Always false for tokens.
Tags map[string]string
Tags is a map of key, value pairs.
accountType String
Corresponds to the type of token, e.g. api or admin-token.
deadline String
The timestamp when the Token will expire.
duration String
Duration from token creation to expiration.
id String
Unique identifier of the User.
name String
Unique human-readable name of the Token.
permissions List<String>
Permissions assigned to the token, e.g. role:create.
rekeyed String
The timestamp when the Token was last rekeyed.
suspended Boolean
Reserved for future use. Always false for tokens.
tags Map<String,String>
Tags is a map of key, value pairs.
accountType string
Corresponds to the type of token, e.g. api or admin-token.
deadline string
The timestamp when the Token will expire.
duration string
Duration from token creation to expiration.
id string
Unique identifier of the User.
name string
Unique human-readable name of the Token.
permissions string[]
Permissions assigned to the token, e.g. role:create.
rekeyed string
The timestamp when the Token was last rekeyed.
suspended boolean
Reserved for future use. Always false for tokens.
tags {[key: string]: string}
Tags is a map of key, value pairs.
account_type str
Corresponds to the type of token, e.g. api or admin-token.
deadline str
The timestamp when the Token will expire.
duration str
Duration from token creation to expiration.
id str
Unique identifier of the User.
name str
Unique human-readable name of the Token.
permissions Sequence[str]
Permissions assigned to the token, e.g. role:create.
rekeyed str
The timestamp when the Token was last rekeyed.
suspended bool
Reserved for future use. Always false for tokens.
tags Mapping[str, str]
Tags is a map of key, value pairs.
accountType String
Corresponds to the type of token, e.g. api or admin-token.
deadline String
The timestamp when the Token will expire.
duration String
Duration from token creation to expiration.
id String
Unique identifier of the User.
name String
Unique human-readable name of the Token.
permissions List<String>
Permissions assigned to the token, e.g. role:create.
rekeyed String
The timestamp when the Token was last rekeyed.
suspended Boolean
Reserved for future use. Always false for tokens.
tags Map<String>
Tags is a map of key, value pairs.

GetAccountAccountUser

ManagedBy This property is required. string
Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
Suspended This property is required. bool
Reserved for future use. Always false for tokens.
Email string
The User's email address. Must be unique.
ExternalId string
External ID is an alternative unique ID this user is represented by within an external service.
FirstName string
The User's first name.
Id string
Unique identifier of the User.
LastName string
The User's last name.
PermissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
Tags Dictionary<string, string>
Tags is a map of key, value pairs.
ManagedBy This property is required. string
Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
Suspended This property is required. bool
Reserved for future use. Always false for tokens.
Email string
The User's email address. Must be unique.
ExternalId string
External ID is an alternative unique ID this user is represented by within an external service.
FirstName string
The User's first name.
Id string
Unique identifier of the User.
LastName string
The User's last name.
PermissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
Tags map[string]string
Tags is a map of key, value pairs.
managedBy This property is required. String
Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
suspended This property is required. Boolean
Reserved for future use. Always false for tokens.
email String
The User's email address. Must be unique.
externalId String
External ID is an alternative unique ID this user is represented by within an external service.
firstName String
The User's first name.
id String
Unique identifier of the User.
lastName String
The User's last name.
permissionLevel String
PermissionLevel is the user's permission level e.g. admin, DBA, user.
tags Map<String,String>
Tags is a map of key, value pairs.
managedBy This property is required. string
Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
suspended This property is required. boolean
Reserved for future use. Always false for tokens.
email string
The User's email address. Must be unique.
externalId string
External ID is an alternative unique ID this user is represented by within an external service.
firstName string
The User's first name.
id string
Unique identifier of the User.
lastName string
The User's last name.
permissionLevel string
PermissionLevel is the user's permission level e.g. admin, DBA, user.
tags {[key: string]: string}
Tags is a map of key, value pairs.
managed_by This property is required. str
Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
suspended This property is required. bool
Reserved for future use. Always false for tokens.
email str
The User's email address. Must be unique.
external_id str
External ID is an alternative unique ID this user is represented by within an external service.
first_name str
The User's first name.
id str
Unique identifier of the User.
last_name str
The User's last name.
permission_level str
PermissionLevel is the user's permission level e.g. admin, DBA, user.
tags Mapping[str, str]
Tags is a map of key, value pairs.
managedBy This property is required. String
Managed By is a read only field for what service manages this user, e.g. StrongDM, Okta, Azure.
suspended This property is required. Boolean
Reserved for future use. Always false for tokens.
email String
The User's email address. Must be unique.
externalId String
External ID is an alternative unique ID this user is represented by within an external service.
firstName String
The User's first name.
id String
Unique identifier of the User.
lastName String
The User's last name.
permissionLevel String
PermissionLevel is the user's permission level e.g. admin, DBA, user.
tags Map<String>
Tags is a map of key, value pairs.

Package Details

Repository
sdm pierskarsenbarg/pulumi-sdm
License
Apache-2.0
Notes
This Pulumi package is based on the sdm Terraform Provider.
StrongDM v1.26.0 published on Friday, Mar 21, 2025 by Piers Karsenbarg
pierskarsenbarg/pulumi-sdm