@pulumi/azuredevops
Version:
A Pulumi package for creating and managing Azure DevOps.
161 lines (160 loc) • 5.99 kB
TypeScript
import * as pulumi from "@pulumi/pulumi";
/**
* Manages permissions for tagging
*
* ## Permission levels
*
* Permissions for tagging within Azure DevOps can be applied only on Organizational and Project level.
* The project level is reflected by specifying the argument `projectId`, otherwise the permissions are set on the organizational level.
*
* ## Example Usage
*
* ```typescript
* import * as pulumi from "@pulumi/pulumi";
* import * as azuredevops from "@pulumi/azuredevops";
*
* const example = new azuredevops.Project("example", {
* name: "Example Project",
* workItemTemplate: "Agile",
* versionControl: "Git",
* visibility: "private",
* description: "Managed by Pulumi",
* });
* const example_readers = azuredevops.getGroupOutput({
* projectId: example.id,
* name: "Readers",
* });
* const example_permissions = new azuredevops.TaggingPermissions("example-permissions", {
* projectId: example.id,
* principal: example_readers.apply(example_readers => example_readers.id),
* permissions: {
* Enumerate: "allow",
* Create: "allow",
* Update: "allow",
* Delete: "allow",
* },
* });
* ```
*
* ## Relevant Links
*
* * [Azure DevOps Service REST API 7.0 - Security](https://docs.microsoft.com/en-us/rest/api/azure/devops/security/?view=azure-devops-rest-7.0)
*
* ## PAT Permissions Required
*
* - **Project & Team**: vso.security_manage - Grants the ability to read, write, and manage security permissions.
*
* ## Import
*
* The resource does not support import.
*/
export declare class TaggingPermissions extends pulumi.CustomResource {
/**
* Get an existing TaggingPermissions resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state Any extra arguments used during the lookup.
* @param opts Optional settings to control the behavior of the CustomResource.
*/
static get(name: string, id: pulumi.Input<pulumi.ID>, state?: TaggingPermissionsState, opts?: pulumi.CustomResourceOptions): TaggingPermissions;
/**
* Returns true if the given object is an instance of TaggingPermissions. This is designed to work even
* when multiple copies of the Pulumi SDK have been loaded into the same process.
*/
static isInstance(obj: any): obj is TaggingPermissions;
/**
* the permissions to assign. The following permissions are available.
*
* | Name | Permission Description |
* |-----------|---------------------------|
* | Enumerate | Enumerate tag definitions |
* | Create | Create tag definition |
* | Update | Update tag definition |
* | Delete | Delete tag definition |
*/
readonly permissions: pulumi.Output<{
[key: string]: string;
}>;
/**
* The **group or user** principal to assign the permissions.
*/
readonly principal: pulumi.Output<string>;
/**
* The ID of the project to assign the permissions. If omitted, organization wide permissions for tagging are managed.
*/
readonly projectId: pulumi.Output<string | undefined>;
/**
* Replace (`true`) or merge (`false`) the permissions. Default: `true`
*/
readonly replace: pulumi.Output<boolean | undefined>;
/**
* Create a TaggingPermissions resource with the given unique name, arguments, and options.
*
* @param name The _unique_ name of the resource.
* @param args The arguments to use to populate this resource's properties.
* @param opts A bag of options that control this resource's behavior.
*/
constructor(name: string, args: TaggingPermissionsArgs, opts?: pulumi.CustomResourceOptions);
}
/**
* Input properties used for looking up and filtering TaggingPermissions resources.
*/
export interface TaggingPermissionsState {
/**
* the permissions to assign. The following permissions are available.
*
* | Name | Permission Description |
* |-----------|---------------------------|
* | Enumerate | Enumerate tag definitions |
* | Create | Create tag definition |
* | Update | Update tag definition |
* | Delete | Delete tag definition |
*/
permissions?: pulumi.Input<{
[key: string]: pulumi.Input<string>;
}>;
/**
* The **group or user** principal to assign the permissions.
*/
principal?: pulumi.Input<string>;
/**
* The ID of the project to assign the permissions. If omitted, organization wide permissions for tagging are managed.
*/
projectId?: pulumi.Input<string>;
/**
* Replace (`true`) or merge (`false`) the permissions. Default: `true`
*/
replace?: pulumi.Input<boolean>;
}
/**
* The set of arguments for constructing a TaggingPermissions resource.
*/
export interface TaggingPermissionsArgs {
/**
* the permissions to assign. The following permissions are available.
*
* | Name | Permission Description |
* |-----------|---------------------------|
* | Enumerate | Enumerate tag definitions |
* | Create | Create tag definition |
* | Update | Update tag definition |
* | Delete | Delete tag definition |
*/
permissions: pulumi.Input<{
[key: string]: pulumi.Input<string>;
}>;
/**
* The **group or user** principal to assign the permissions.
*/
principal: pulumi.Input<string>;
/**
* The ID of the project to assign the permissions. If omitted, organization wide permissions for tagging are managed.
*/
projectId?: pulumi.Input<string>;
/**
* Replace (`true`) or merge (`false`) the permissions. Default: `true`
*/
replace?: pulumi.Input<boolean>;
}