pulumiservice.buildAllowPermissions

Pulumi Cloud v0.40.0, May 11 26

This provider is currently in preview.

Viewing docs for Pulumi Cloud v0.40.0
published on Monday, May 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-pulumiservice

This provider is currently in preview.

Viewing docs for Pulumi Cloud v0.40.0
published on Monday, May 11, 2026 by Pulumi

Schema (JSON)

pulumi/pulumi-pulumiservice

Builds an OrganizationRole.permissions descriptor that grants the supplied scopes globally — i.e. on every entity of the matching resource type. This is the simplest descriptor: a flat PermissionDescriptorAllow. Use this helper instead of hand-authoring the descriptor literal so the wire-format __type discriminator stays an implementation detail. For grants scoped to a specific entity, see buildEnvironmentScopedPermissions, buildStackScopedPermissions, or buildInsightsAccountScopedPermissions. The result is directly assignable to OrganizationRole.permissions. To grant scopes on more than one entity in a single role, hand-roll a PermissionDescriptorGroup whose entries list pulls the output of each helper.

Using buildAllowPermissions

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function buildAllowPermissions(args: BuildAllowPermissionsArgs, opts?: InvokeOptions): Promise<BuildAllowPermissionsResult>
function buildAllowPermissionsOutput(args: BuildAllowPermissionsOutputArgs, opts?: InvokeOptions): Output<BuildAllowPermissionsResult>

def build_allow_permissions(permissions: Optional[Sequence[str]] = None,
                            opts: Optional[InvokeOptions] = None) -> BuildAllowPermissionsResult
def build_allow_permissions_output(permissions: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                            opts: Optional[InvokeOptions] = None) -> Output[BuildAllowPermissionsResult]

func BuildAllowPermissions(ctx *Context, args *BuildAllowPermissionsArgs, opts ...InvokeOption) (*BuildAllowPermissionsResult, error)
func BuildAllowPermissionsOutput(ctx *Context, args *BuildAllowPermissionsOutputArgs, opts ...InvokeOption) BuildAllowPermissionsResultOutput

> Note: This function is named BuildAllowPermissions in the Go SDK.

public static class BuildAllowPermissions 
{
    public static Task<BuildAllowPermissionsResult> InvokeAsync(BuildAllowPermissionsArgs args, InvokeOptions? opts = null)
    public static Output<BuildAllowPermissionsResult> Invoke(BuildAllowPermissionsInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<BuildAllowPermissionsResult> buildAllowPermissions(BuildAllowPermissionsArgs args, InvokeOptions options)
public static Output<BuildAllowPermissionsResult> buildAllowPermissions(BuildAllowPermissionsArgs args, InvokeOptions options)

fn::invoke:
  function: pulumiservice:buildAllowPermissions
  arguments:
    # arguments dictionary

data "pulumiservice_buildallowpermissions" "name" {
    # arguments
}

The following arguments are supported:

Permissions List<string>: The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

Permissions []string: The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

permissions list(string): The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

permissions List<String>: The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

permissions string[]: The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

permissions Sequence[str]: The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

permissions List<String>: The set of scopes to grant globally (e.g. stack:read, environment:open, organization:billingManager). Discover valid scope names via the getOrganizationRoleScopes data source.

buildAllowPermissions Result

The following output properties are available:

Permissions Dictionary<string, object>: A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.

Permissions map[string]interface{}: A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.

permissions map(any): A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.

permissions Map<String,Object>: A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.

permissions {[key: string]: any}: A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.

permissions Mapping[str, Any]: A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.

permissions Map<Any>: A PermissionDescriptorAllow granting the supplied scopes on every entity of the matching resource type, ready to assign to OrganizationRole.permissions.