Google Cloud v8.22.0 published on Thursday, Mar 13, 2025 by Pulumi
gcp.privilegedaccessmanager.getEntitlement
Explore with Pulumi AI
Use this data source to get information about a Google Cloud Privileged Access Manager Entitlement.
To get more information about Privileged Access Manager, see:
- API Documentation
- How-to guides
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const my_entitlement = gcp.privilegedaccessmanager.getEntitlement({
    parent: "projects/my-project",
    location: "global",
    entitlementId: "my-entitlement",
});
import pulumi
import pulumi_gcp as gcp
my_entitlement = gcp.privilegedaccessmanager.get_entitlement(parent="projects/my-project",
    location="global",
    entitlement_id="my-entitlement")
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/privilegedaccessmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := privilegedaccessmanager.LookupEntitlement(ctx, &privilegedaccessmanager.LookupEntitlementArgs{
			Parent:        pulumi.StringRef("projects/my-project"),
			Location:      pulumi.StringRef("global"),
			EntitlementId: pulumi.StringRef("my-entitlement"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var my_entitlement = Gcp.PrivilegedAccessManager.GetEntitlement.Invoke(new()
    {
        Parent = "projects/my-project",
        Location = "global",
        EntitlementId = "my-entitlement",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.privilegedaccessmanager.PrivilegedaccessmanagerFunctions;
import com.pulumi.gcp.privilegedaccessmanager.inputs.GetEntitlementArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var my-entitlement = PrivilegedaccessmanagerFunctions.getEntitlement(GetEntitlementArgs.builder()
            .parent("projects/my-project")
            .location("global")
            .entitlementId("my-entitlement")
            .build());
    }
}
variables:
  my-entitlement:
    fn::invoke:
      function: gcp:privilegedaccessmanager:getEntitlement
      arguments:
        parent: projects/my-project
        location: global
        entitlementId: my-entitlement
Using getEntitlement
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEntitlement(args: GetEntitlementArgs, opts?: InvokeOptions): Promise<GetEntitlementResult>
function getEntitlementOutput(args: GetEntitlementOutputArgs, opts?: InvokeOptions): Output<GetEntitlementResult>def get_entitlement(entitlement_id: Optional[str] = None,
                    location: Optional[str] = None,
                    parent: Optional[str] = None,
                    opts: Optional[InvokeOptions] = None) -> GetEntitlementResult
def get_entitlement_output(entitlement_id: Optional[pulumi.Input[str]] = None,
                    location: Optional[pulumi.Input[str]] = None,
                    parent: Optional[pulumi.Input[str]] = None,
                    opts: Optional[InvokeOptions] = None) -> Output[GetEntitlementResult]func LookupEntitlement(ctx *Context, args *LookupEntitlementArgs, opts ...InvokeOption) (*LookupEntitlementResult, error)
func LookupEntitlementOutput(ctx *Context, args *LookupEntitlementOutputArgs, opts ...InvokeOption) LookupEntitlementResultOutput> Note: This function is named LookupEntitlement in the Go SDK.
public static class GetEntitlement 
{
    public static Task<GetEntitlementResult> InvokeAsync(GetEntitlementArgs args, InvokeOptions? opts = null)
    public static Output<GetEntitlementResult> Invoke(GetEntitlementInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetEntitlementResult> getEntitlement(GetEntitlementArgs args, InvokeOptions options)
public static Output<GetEntitlementResult> getEntitlement(GetEntitlementArgs args, InvokeOptions options)
fn::invoke:
  function: gcp:privilegedaccessmanager/getEntitlement:getEntitlement
  arguments:
    # arguments dictionaryThe following arguments are supported:
- EntitlementId string
- ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format {parent}/locations/{location}/entitlements/{entitlement_id}.
- Location string
- The region of the Entitlement resource.
- Parent string
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- EntitlementId string
- ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format {parent}/locations/{location}/entitlements/{entitlement_id}.
- Location string
- The region of the Entitlement resource.
- Parent string
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlementId String
- ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format {parent}/locations/{location}/entitlements/{entitlement_id}.
- location String
- The region of the Entitlement resource.
- parent String
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlementId string
- ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format {parent}/locations/{location}/entitlements/{entitlement_id}.
- location string
- The region of the Entitlement resource.
- parent string
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlement_id str
- ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format {parent}/locations/{location}/entitlements/{entitlement_id}.
- location str
- The region of the Entitlement resource.
- parent str
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
- entitlementId String
- ID of the Entitlement resource. This is the last part of the Entitlement's full name which is of the format {parent}/locations/{location}/entitlements/{entitlement_id}.
- location String
- The region of the Entitlement resource.
- parent String
- The project or folder or organization that contains the resource. Format: projects/{project-id|project-number} or folders/{folder-number} or organizations/{organization-number}
getEntitlement Result
The following output properties are available:
- AdditionalNotification List<GetTargets Entitlement Additional Notification Target> 
- ApprovalWorkflows List<GetEntitlement Approval Workflow> 
- CreateTime string
- EligibleUsers List<GetEntitlement Eligible User> 
- Etag string
- Id string
- The provider-assigned unique ID for this managed resource.
- MaxRequest stringDuration 
- Name string
- PrivilegedAccesses List<GetEntitlement Privileged Access> 
- RequesterJustification List<GetConfigs Entitlement Requester Justification Config> 
- State string
- UpdateTime string
- EntitlementId string
- Location string
- Parent string
- AdditionalNotification []GetTargets Entitlement Additional Notification Target 
- ApprovalWorkflows []GetEntitlement Approval Workflow 
- CreateTime string
- EligibleUsers []GetEntitlement Eligible User 
- Etag string
- Id string
- The provider-assigned unique ID for this managed resource.
- MaxRequest stringDuration 
- Name string
- PrivilegedAccesses []GetEntitlement Privileged Access 
- RequesterJustification []GetConfigs Entitlement Requester Justification Config 
- State string
- UpdateTime string
- EntitlementId string
- Location string
- Parent string
- additionalNotification List<GetTargets Entitlement Additional Notification Target> 
- approvalWorkflows List<GetEntitlement Approval Workflow> 
- createTime String
- eligibleUsers List<GetEntitlement Eligible User> 
- etag String
- id String
- The provider-assigned unique ID for this managed resource.
- maxRequest StringDuration 
- name String
- privilegedAccesses List<GetEntitlement Privileged Access> 
- requesterJustification List<GetConfigs Entitlement Requester Justification Config> 
- state String
- updateTime String
- entitlementId String
- location String
- parent String
- additionalNotification GetTargets Entitlement Additional Notification Target[] 
- approvalWorkflows GetEntitlement Approval Workflow[] 
- createTime string
- eligibleUsers GetEntitlement Eligible User[] 
- etag string
- id string
- The provider-assigned unique ID for this managed resource.
- maxRequest stringDuration 
- name string
- privilegedAccesses GetEntitlement Privileged Access[] 
- requesterJustification GetConfigs Entitlement Requester Justification Config[] 
- state string
- updateTime string
- entitlementId string
- location string
- parent string
- additional_notification_ Sequence[Gettargets Entitlement Additional Notification Target] 
- approval_workflows Sequence[GetEntitlement Approval Workflow] 
- create_time str
- eligible_users Sequence[GetEntitlement Eligible User] 
- etag str
- id str
- The provider-assigned unique ID for this managed resource.
- max_request_ strduration 
- name str
- privileged_accesses Sequence[GetEntitlement Privileged Access] 
- requester_justification_ Sequence[Getconfigs Entitlement Requester Justification Config] 
- state str
- update_time str
- entitlement_id str
- location str
- parent str
- additionalNotification List<Property Map>Targets 
- approvalWorkflows List<Property Map>
- createTime String
- eligibleUsers List<Property Map>
- etag String
- id String
- The provider-assigned unique ID for this managed resource.
- maxRequest StringDuration 
- name String
- privilegedAccesses List<Property Map>
- requesterJustification List<Property Map>Configs 
- state String
- updateTime String
- entitlementId String
- location String
- parent String
Supporting Types
GetEntitlementAdditionalNotificationTarget    
- AdminEmail List<string>Recipients 
- Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- RequesterEmail List<string>Recipients 
- Optional. Additional email address to be notified about an eligible entitlement.
- AdminEmail []stringRecipients 
- Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- RequesterEmail []stringRecipients 
- Optional. Additional email address to be notified about an eligible entitlement.
- adminEmail List<String>Recipients 
- Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requesterEmail List<String>Recipients 
- Optional. Additional email address to be notified about an eligible entitlement.
- adminEmail string[]Recipients 
- Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requesterEmail string[]Recipients 
- Optional. Additional email address to be notified about an eligible entitlement.
- admin_email_ Sequence[str]recipients 
- Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requester_email_ Sequence[str]recipients 
- Optional. Additional email address to be notified about an eligible entitlement.
- adminEmail List<String>Recipients 
- Optional. Additional email addresses to be notified when a principal(requester) is granted access.
- requesterEmail List<String>Recipients 
- Optional. Additional email address to be notified about an eligible entitlement.
GetEntitlementApprovalWorkflow   
- ManualApprovals List<GetEntitlement Approval Workflow Manual Approval> 
- A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
 
- ManualApprovals []GetEntitlement Approval Workflow Manual Approval 
- A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
 
- manualApprovals List<GetEntitlement Approval Workflow Manual Approval> 
- A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
 
- manualApprovals GetEntitlement Approval Workflow Manual Approval[] 
- A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
 
- manual_approvals Sequence[GetEntitlement Approval Workflow Manual Approval] 
- A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
 
- manualApprovals List<Property Map>
- A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for an Grant.
The workflow can consist of multiple serial steps where each step defines who can act as Approver in that step and how many of those users should approve before the workflow moves to the next step.
This can be used to create approval workflows such as- Require an approval from any user in a group G.
- Require an approval from any k number of users from a Group G.
- Require an approval from any user in a group G and then from a user U. etc. A single user might be part of 'approvers' ACL for multiple steps in this workflow but they can only approve once and that approval will only be considered to satisfy the approval step at which it was granted.
 
GetEntitlementApprovalWorkflowManualApproval     
- RequireApprover boolJustification 
- Optional. Do the approvers need to provide a justification for their actions?
- Steps
List<GetEntitlement Approval Workflow Manual Approval Step> 
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- RequireApprover boolJustification 
- Optional. Do the approvers need to provide a justification for their actions?
- Steps
[]GetEntitlement Approval Workflow Manual Approval Step 
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- requireApprover BooleanJustification 
- Optional. Do the approvers need to provide a justification for their actions?
- steps
List<GetEntitlement Approval Workflow Manual Approval Step> 
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- requireApprover booleanJustification 
- Optional. Do the approvers need to provide a justification for their actions?
- steps
GetEntitlement Approval Workflow Manual Approval Step[] 
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- require_approver_ booljustification 
- Optional. Do the approvers need to provide a justification for their actions?
- steps
Sequence[GetEntitlement Approval Workflow Manual Approval Step] 
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
- requireApprover BooleanJustification 
- Optional. Do the approvers need to provide a justification for their actions?
- steps List<Property Map>
- List of approval steps in this workflow. These steps would be followed in the specified order sequentially. 1 step is supported for now.
GetEntitlementApprovalWorkflowManualApprovalStep      
- ApprovalsNeeded int
- How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- ApproverEmail List<string>Recipients 
- Optional. Additional email addresses to be notified when a grant is pending approval.
- Approvers
List<GetEntitlement Approval Workflow Manual Approval Step Approver> 
- The potential set of approvers in this step. This list should contain at only one entry.
- ApprovalsNeeded int
- How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- ApproverEmail []stringRecipients 
- Optional. Additional email addresses to be notified when a grant is pending approval.
- Approvers
[]GetEntitlement Approval Workflow Manual Approval Step Approver 
- The potential set of approvers in this step. This list should contain at only one entry.
- approvalsNeeded Integer
- How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approverEmail List<String>Recipients 
- Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers
List<GetEntitlement Approval Workflow Manual Approval Step Approver> 
- The potential set of approvers in this step. This list should contain at only one entry.
- approvalsNeeded number
- How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approverEmail string[]Recipients 
- Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers
GetEntitlement Approval Workflow Manual Approval Step Approver[] 
- The potential set of approvers in this step. This list should contain at only one entry.
- approvals_needed int
- How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approver_email_ Sequence[str]recipients 
- Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers
Sequence[GetEntitlement Approval Workflow Manual Approval Step Approver] 
- The potential set of approvers in this step. This list should contain at only one entry.
- approvalsNeeded Number
- How many users from the above list need to approve. If there are not enough distinct users in the list above then the workflow will indefinitely block. Should always be greater than 0. Currently 1 is the only supported value.
- approverEmail List<String>Recipients 
- Optional. Additional email addresses to be notified when a grant is pending approval.
- approvers List<Property Map>
- The potential set of approvers in this step. This list should contain at only one entry.
GetEntitlementApprovalWorkflowManualApprovalStepApprover       
- Principals List<string>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- Principals []string
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals string[]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals Sequence[str]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at: https://cloud.google.com/iam/docs/principal-identifiers#v1
GetEntitlementEligibleUser   
- Principals List<string>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- Principals []string
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals string[]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals Sequence[str]
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
- principals List<String>
- Users who are being allowed for the operation. Each entry should be a valid v1 IAM Principal Identifier. Format for these is documented at "https://cloud.google.com/iam/docs/principal-identifiers#v1"
GetEntitlementPrivilegedAccess   
- GcpIam List<GetAccesses Entitlement Privileged Access Gcp Iam Access> 
- GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- GcpIam []GetAccesses Entitlement Privileged Access Gcp Iam Access 
- GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcpIam List<GetAccesses Entitlement Privileged Access Gcp Iam Access> 
- GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcpIam GetAccesses Entitlement Privileged Access Gcp Iam Access[] 
- GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcp_iam_ Sequence[Getaccesses Entitlement Privileged Access Gcp Iam Access] 
- GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
- gcpIam List<Property Map>Accesses 
- GcpIamAccess represents IAM based access control on a GCP resource. Refer to https://cloud.google.com/iam/docs to understand more about IAM.
GetEntitlementPrivilegedAccessGcpIamAccess      
- Resource string
- Name of the resource.
- ResourceType string
- The type of this resource.
- RoleBindings List<GetEntitlement Privileged Access Gcp Iam Access Role Binding> 
- Role bindings to be created on successful grant.
- Resource string
- Name of the resource.
- ResourceType string
- The type of this resource.
- RoleBindings []GetEntitlement Privileged Access Gcp Iam Access Role Binding 
- Role bindings to be created on successful grant.
- resource String
- Name of the resource.
- resourceType String
- The type of this resource.
- roleBindings List<GetEntitlement Privileged Access Gcp Iam Access Role Binding> 
- Role bindings to be created on successful grant.
- resource string
- Name of the resource.
- resourceType string
- The type of this resource.
- roleBindings GetEntitlement Privileged Access Gcp Iam Access Role Binding[] 
- Role bindings to be created on successful grant.
- resource str
- Name of the resource.
- resource_type str
- The type of this resource.
- role_bindings Sequence[GetEntitlement Privileged Access Gcp Iam Access Role Binding] 
- Role bindings to be created on successful grant.
- resource String
- Name of the resource.
- resourceType String
- The type of this resource.
- roleBindings List<Property Map>
- Role bindings to be created on successful grant.
GetEntitlementPrivilegedAccessGcpIamAccessRoleBinding        
- ConditionExpression string
- The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- Role string
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- ConditionExpression string
- The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- Role string
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- conditionExpression String
- The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role String
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- conditionExpression string
- The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role string
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- condition_expression str
- The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role str
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
- conditionExpression String
- The expression field of the IAM condition to be associated with the role. If specified, a user with an active grant for this entitlement would be able to access the resource only if this condition evaluates to true for their request. https://cloud.google.com/iam/docs/conditions-overview#attributes.
- role String
- IAM role to be granted. https://cloud.google.com/iam/docs/roles-overview.
GetEntitlementRequesterJustificationConfig    
- NotMandatories List<GetEntitlement Requester Justification Config Not Mandatory> 
- The justification is not mandatory but can be provided in any of the supported formats.
- Unstructureds
List<GetEntitlement Requester Justification Config Unstructured> 
- The requester has to provide a justification in the form of free flowing text.
- NotMandatories []GetEntitlement Requester Justification Config Not Mandatory 
- The justification is not mandatory but can be provided in any of the supported formats.
- Unstructureds
[]GetEntitlement Requester Justification Config Unstructured 
- The requester has to provide a justification in the form of free flowing text.
- notMandatories List<GetEntitlement Requester Justification Config Not Mandatory> 
- The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds
List<GetEntitlement Requester Justification Config Unstructured> 
- The requester has to provide a justification in the form of free flowing text.
- notMandatories GetEntitlement Requester Justification Config Not Mandatory[] 
- The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds
GetEntitlement Requester Justification Config Unstructured[] 
- The requester has to provide a justification in the form of free flowing text.
- not_mandatories Sequence[GetEntitlement Requester Justification Config Not Mandatory] 
- The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds
Sequence[GetEntitlement Requester Justification Config Unstructured] 
- The requester has to provide a justification in the form of free flowing text.
- notMandatories List<Property Map>
- The justification is not mandatory but can be provided in any of the supported formats.
- unstructureds List<Property Map>
- The requester has to provide a justification in the form of free flowing text.
Package Details
- Repository
- Google Cloud (GCP) Classic pulumi/pulumi-gcp
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the google-betaTerraform Provider.