published on Monday, Apr 27, 2026 by akeyless-community
published on Monday, Apr 27, 2026 by akeyless-community
Google Workspace dynamic secret resource
Create DynamicSecretGoogleWorkspace Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new DynamicSecretGoogleWorkspace(name: string, args: DynamicSecretGoogleWorkspaceArgs, opts?: CustomResourceOptions);@overload
def DynamicSecretGoogleWorkspace(resource_name: str,
args: DynamicSecretGoogleWorkspaceArgs,
opts: Optional[ResourceOptions] = None)
@overload
def DynamicSecretGoogleWorkspace(resource_name: str,
opts: Optional[ResourceOptions] = None,
access_mode: Optional[str] = None,
admin_email: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
dynamic_secret_google_workspace_id: Optional[str] = None,
fixed_user_claim_keyname: Optional[str] = None,
gcp_key: Optional[str] = None,
group_email: Optional[str] = None,
group_role: Optional[str] = None,
item_custom_fields: Optional[Mapping[str, str]] = None,
name: Optional[str] = None,
producer_encryption_key_name: Optional[str] = None,
role_name: Optional[str] = None,
role_scope: Optional[str] = None,
secure_access_enable: Optional[str] = None,
secure_access_url: Optional[str] = None,
secure_access_web: Optional[bool] = None,
secure_access_web_browsing: Optional[bool] = None,
secure_access_web_proxy: Optional[bool] = None,
tags: Optional[Sequence[str]] = None,
target_name: Optional[str] = None,
user_ttl: Optional[str] = None)func NewDynamicSecretGoogleWorkspace(ctx *Context, name string, args DynamicSecretGoogleWorkspaceArgs, opts ...ResourceOption) (*DynamicSecretGoogleWorkspace, error)public DynamicSecretGoogleWorkspace(string name, DynamicSecretGoogleWorkspaceArgs args, CustomResourceOptions? opts = null)
public DynamicSecretGoogleWorkspace(String name, DynamicSecretGoogleWorkspaceArgs args)
public DynamicSecretGoogleWorkspace(String name, DynamicSecretGoogleWorkspaceArgs args, CustomResourceOptions options)
type: akeyless:DynamicSecretGoogleWorkspace
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args DynamicSecretGoogleWorkspaceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DynamicSecretGoogleWorkspaceArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DynamicSecretGoogleWorkspaceArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DynamicSecretGoogleWorkspaceArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DynamicSecretGoogleWorkspaceArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var dynamicSecretGoogleWorkspaceResource = new Akeyless.DynamicSecretGoogleWorkspace("dynamicSecretGoogleWorkspaceResource", new()
{
AccessMode = "string",
AdminEmail = "string",
DeleteProtection = "string",
Description = "string",
DynamicSecretGoogleWorkspaceId = "string",
FixedUserClaimKeyname = "string",
GcpKey = "string",
GroupEmail = "string",
GroupRole = "string",
ItemCustomFields =
{
{ "string", "string" },
},
Name = "string",
ProducerEncryptionKeyName = "string",
RoleName = "string",
RoleScope = "string",
SecureAccessEnable = "string",
SecureAccessUrl = "string",
SecureAccessWeb = false,
SecureAccessWebBrowsing = false,
SecureAccessWebProxy = false,
Tags = new[]
{
"string",
},
TargetName = "string",
UserTtl = "string",
});
example, err := akeyless.NewDynamicSecretGoogleWorkspace(ctx, "dynamicSecretGoogleWorkspaceResource", &akeyless.DynamicSecretGoogleWorkspaceArgs{
AccessMode: pulumi.String("string"),
AdminEmail: pulumi.String("string"),
DeleteProtection: pulumi.String("string"),
Description: pulumi.String("string"),
DynamicSecretGoogleWorkspaceId: pulumi.String("string"),
FixedUserClaimKeyname: pulumi.String("string"),
GcpKey: pulumi.String("string"),
GroupEmail: pulumi.String("string"),
GroupRole: pulumi.String("string"),
ItemCustomFields: pulumi.StringMap{
"string": pulumi.String("string"),
},
Name: pulumi.String("string"),
ProducerEncryptionKeyName: pulumi.String("string"),
RoleName: pulumi.String("string"),
RoleScope: pulumi.String("string"),
SecureAccessEnable: pulumi.String("string"),
SecureAccessUrl: pulumi.String("string"),
SecureAccessWeb: pulumi.Bool(false),
SecureAccessWebBrowsing: pulumi.Bool(false),
SecureAccessWebProxy: pulumi.Bool(false),
Tags: pulumi.StringArray{
pulumi.String("string"),
},
TargetName: pulumi.String("string"),
UserTtl: pulumi.String("string"),
})
var dynamicSecretGoogleWorkspaceResource = new DynamicSecretGoogleWorkspace("dynamicSecretGoogleWorkspaceResource", DynamicSecretGoogleWorkspaceArgs.builder()
.accessMode("string")
.adminEmail("string")
.deleteProtection("string")
.description("string")
.dynamicSecretGoogleWorkspaceId("string")
.fixedUserClaimKeyname("string")
.gcpKey("string")
.groupEmail("string")
.groupRole("string")
.itemCustomFields(Map.of("string", "string"))
.name("string")
.producerEncryptionKeyName("string")
.roleName("string")
.roleScope("string")
.secureAccessEnable("string")
.secureAccessUrl("string")
.secureAccessWeb(false)
.secureAccessWebBrowsing(false)
.secureAccessWebProxy(false)
.tags("string")
.targetName("string")
.userTtl("string")
.build());
dynamic_secret_google_workspace_resource = akeyless.DynamicSecretGoogleWorkspace("dynamicSecretGoogleWorkspaceResource",
access_mode="string",
admin_email="string",
delete_protection="string",
description="string",
dynamic_secret_google_workspace_id="string",
fixed_user_claim_keyname="string",
gcp_key="string",
group_email="string",
group_role="string",
item_custom_fields={
"string": "string",
},
name="string",
producer_encryption_key_name="string",
role_name="string",
role_scope="string",
secure_access_enable="string",
secure_access_url="string",
secure_access_web=False,
secure_access_web_browsing=False,
secure_access_web_proxy=False,
tags=["string"],
target_name="string",
user_ttl="string")
const dynamicSecretGoogleWorkspaceResource = new akeyless.DynamicSecretGoogleWorkspace("dynamicSecretGoogleWorkspaceResource", {
accessMode: "string",
adminEmail: "string",
deleteProtection: "string",
description: "string",
dynamicSecretGoogleWorkspaceId: "string",
fixedUserClaimKeyname: "string",
gcpKey: "string",
groupEmail: "string",
groupRole: "string",
itemCustomFields: {
string: "string",
},
name: "string",
producerEncryptionKeyName: "string",
roleName: "string",
roleScope: "string",
secureAccessEnable: "string",
secureAccessUrl: "string",
secureAccessWeb: false,
secureAccessWebBrowsing: false,
secureAccessWebProxy: false,
tags: ["string"],
targetName: "string",
userTtl: "string",
});
type: akeyless:DynamicSecretGoogleWorkspace
properties:
accessMode: string
adminEmail: string
deleteProtection: string
description: string
dynamicSecretGoogleWorkspaceId: string
fixedUserClaimKeyname: string
gcpKey: string
groupEmail: string
groupRole: string
itemCustomFields:
string: string
name: string
producerEncryptionKeyName: string
roleName: string
roleScope: string
secureAccessEnable: string
secureAccessUrl: string
secureAccessWeb: false
secureAccessWebBrowsing: false
secureAccessWebProxy: false
tags:
- string
targetName: string
userTtl: string
DynamicSecretGoogleWorkspace Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The DynamicSecretGoogleWorkspace resource accepts the following input properties:
- Access
Mode string - Adding a user to an existing group or assign an admin role to a user [group/role]
- Admin
Email string - Admin user email
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Dynamic
Secret stringGoogle Workspace Id - The ID of this resource.
- Fixed
User stringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- Gcp
Key string - Base64-encoded service account private key text
- Group
Email string - A group email, relevant only for group access-mode
- Group
Role string - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- Item
Custom Dictionary<string, string>Fields - Additional custom fields to associate with the item
- Name string
- Dynamic secret name
- Producer
Encryption stringKey Name - Dynamic producer encryption key
- Role
Name string - Name of the admin role to assign to the user, relevant only for role access-mode
- Role
Scope string - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<string>
- Add tags attached to this object
- Target
Name string - Name of existing target to use in dynamic secret creation
- User
Ttl string - User TTL
- Access
Mode string - Adding a user to an existing group or assign an admin role to a user [group/role]
- Admin
Email string - Admin user email
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Dynamic
Secret stringGoogle Workspace Id - The ID of this resource.
- Fixed
User stringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- Gcp
Key string - Base64-encoded service account private key text
- Group
Email string - A group email, relevant only for group access-mode
- Group
Role string - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- Item
Custom map[string]stringFields - Additional custom fields to associate with the item
- Name string
- Dynamic secret name
- Producer
Encryption stringKey Name - Dynamic producer encryption key
- Role
Name string - Name of the admin role to assign to the user, relevant only for role access-mode
- Role
Scope string - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- []string
- Add tags attached to this object
- Target
Name string - Name of existing target to use in dynamic secret creation
- User
Ttl string - User TTL
- access
Mode String - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin
Email String - Admin user email
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- dynamic
Secret StringGoogle Workspace Id - The ID of this resource.
- fixed
User StringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp
Key String - Base64-encoded service account private key text
- group
Email String - A group email, relevant only for group access-mode
- group
Role String - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item
Custom Map<String,String>Fields - Additional custom fields to associate with the item
- name String
- Dynamic secret name
- producer
Encryption StringKey Name - Dynamic producer encryption key
- role
Name String - Name of the admin role to assign to the user, relevant only for role access-mode
- role
Scope String - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- Add tags attached to this object
- target
Name String - Name of existing target to use in dynamic secret creation
- user
Ttl String - User TTL
- access
Mode string - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin
Email string - Admin user email
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- dynamic
Secret stringGoogle Workspace Id - The ID of this resource.
- fixed
User stringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp
Key string - Base64-encoded service account private key text
- group
Email string - A group email, relevant only for group access-mode
- group
Role string - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item
Custom {[key: string]: string}Fields - Additional custom fields to associate with the item
- name string
- Dynamic secret name
- producer
Encryption stringKey Name - Dynamic producer encryption key
- role
Name string - Name of the admin role to assign to the user, relevant only for role access-mode
- role
Scope string - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- secure
Access stringUrl - Destination URL to inject secrets
- secure
Access booleanWeb - Enable Web Secure Remote Access
- secure
Access booleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access booleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- string[]
- Add tags attached to this object
- target
Name string - Name of existing target to use in dynamic secret creation
- user
Ttl string - User TTL
- access_
mode str - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin_
email str - Admin user email
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- dynamic_
secret_ strgoogle_ workspace_ id - The ID of this resource.
- fixed_
user_ strclaim_ keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp_
key str - Base64-encoded service account private key text
- group_
email str - A group email, relevant only for group access-mode
- group_
role str - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item_
custom_ Mapping[str, str]fields - Additional custom fields to associate with the item
- name str
- Dynamic secret name
- producer_
encryption_ strkey_ name - Dynamic producer encryption key
- role_
name str - Name of the admin role to assign to the user, relevant only for role access-mode
- role_
scope str - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure_
access_ strenable - Enable/Disable secure remote access [true/false]
- secure_
access_ strurl - Destination URL to inject secrets
- secure_
access_ boolweb - Enable Web Secure Remote Access
- secure_
access_ boolweb_ browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure_
access_ boolweb_ proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- Sequence[str]
- Add tags attached to this object
- target_
name str - Name of existing target to use in dynamic secret creation
- user_
ttl str - User TTL
- access
Mode String - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin
Email String - Admin user email
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- dynamic
Secret StringGoogle Workspace Id - The ID of this resource.
- fixed
User StringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp
Key String - Base64-encoded service account private key text
- group
Email String - A group email, relevant only for group access-mode
- group
Role String - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item
Custom Map<String>Fields - Additional custom fields to associate with the item
- name String
- Dynamic secret name
- producer
Encryption StringKey Name - Dynamic producer encryption key
- role
Name String - Name of the admin role to assign to the user, relevant only for role access-mode
- role
Scope String - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- Add tags attached to this object
- target
Name String - Name of existing target to use in dynamic secret creation
- user
Ttl String - User TTL
Outputs
All input properties are implicitly available as output properties. Additionally, the DynamicSecretGoogleWorkspace resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing DynamicSecretGoogleWorkspace Resource
Get an existing DynamicSecretGoogleWorkspace resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DynamicSecretGoogleWorkspaceState, opts?: CustomResourceOptions): DynamicSecretGoogleWorkspace@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
access_mode: Optional[str] = None,
admin_email: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
dynamic_secret_google_workspace_id: Optional[str] = None,
fixed_user_claim_keyname: Optional[str] = None,
gcp_key: Optional[str] = None,
group_email: Optional[str] = None,
group_role: Optional[str] = None,
item_custom_fields: Optional[Mapping[str, str]] = None,
name: Optional[str] = None,
producer_encryption_key_name: Optional[str] = None,
role_name: Optional[str] = None,
role_scope: Optional[str] = None,
secure_access_enable: Optional[str] = None,
secure_access_url: Optional[str] = None,
secure_access_web: Optional[bool] = None,
secure_access_web_browsing: Optional[bool] = None,
secure_access_web_proxy: Optional[bool] = None,
tags: Optional[Sequence[str]] = None,
target_name: Optional[str] = None,
user_ttl: Optional[str] = None) -> DynamicSecretGoogleWorkspacefunc GetDynamicSecretGoogleWorkspace(ctx *Context, name string, id IDInput, state *DynamicSecretGoogleWorkspaceState, opts ...ResourceOption) (*DynamicSecretGoogleWorkspace, error)public static DynamicSecretGoogleWorkspace Get(string name, Input<string> id, DynamicSecretGoogleWorkspaceState? state, CustomResourceOptions? opts = null)public static DynamicSecretGoogleWorkspace get(String name, Output<String> id, DynamicSecretGoogleWorkspaceState state, CustomResourceOptions options)resources: _: type: akeyless:DynamicSecretGoogleWorkspace get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Access
Mode string - Adding a user to an existing group or assign an admin role to a user [group/role]
- Admin
Email string - Admin user email
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Dynamic
Secret stringGoogle Workspace Id - The ID of this resource.
- Fixed
User stringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- Gcp
Key string - Base64-encoded service account private key text
- Group
Email string - A group email, relevant only for group access-mode
- Group
Role string - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- Item
Custom Dictionary<string, string>Fields - Additional custom fields to associate with the item
- Name string
- Dynamic secret name
- Producer
Encryption stringKey Name - Dynamic producer encryption key
- Role
Name string - Name of the admin role to assign to the user, relevant only for role access-mode
- Role
Scope string - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<string>
- Add tags attached to this object
- Target
Name string - Name of existing target to use in dynamic secret creation
- User
Ttl string - User TTL
- Access
Mode string - Adding a user to an existing group or assign an admin role to a user [group/role]
- Admin
Email string - Admin user email
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Dynamic
Secret stringGoogle Workspace Id - The ID of this resource.
- Fixed
User stringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- Gcp
Key string - Base64-encoded service account private key text
- Group
Email string - A group email, relevant only for group access-mode
- Group
Role string - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- Item
Custom map[string]stringFields - Additional custom fields to associate with the item
- Name string
- Dynamic secret name
- Producer
Encryption stringKey Name - Dynamic producer encryption key
- Role
Name string - Name of the admin role to assign to the user, relevant only for role access-mode
- Role
Scope string - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- Secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- Secure
Access stringUrl - Destination URL to inject secrets
- Secure
Access boolWeb - Enable Web Secure Remote Access
- Secure
Access boolWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- Secure
Access boolWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- []string
- Add tags attached to this object
- Target
Name string - Name of existing target to use in dynamic secret creation
- User
Ttl string - User TTL
- access
Mode String - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin
Email String - Admin user email
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- dynamic
Secret StringGoogle Workspace Id - The ID of this resource.
- fixed
User StringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp
Key String - Base64-encoded service account private key text
- group
Email String - A group email, relevant only for group access-mode
- group
Role String - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item
Custom Map<String,String>Fields - Additional custom fields to associate with the item
- name String
- Dynamic secret name
- producer
Encryption StringKey Name - Dynamic producer encryption key
- role
Name String - Name of the admin role to assign to the user, relevant only for role access-mode
- role
Scope String - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- Add tags attached to this object
- target
Name String - Name of existing target to use in dynamic secret creation
- user
Ttl String - User TTL
- access
Mode string - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin
Email string - Admin user email
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- dynamic
Secret stringGoogle Workspace Id - The ID of this resource.
- fixed
User stringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp
Key string - Base64-encoded service account private key text
- group
Email string - A group email, relevant only for group access-mode
- group
Role string - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item
Custom {[key: string]: string}Fields - Additional custom fields to associate with the item
- name string
- Dynamic secret name
- producer
Encryption stringKey Name - Dynamic producer encryption key
- role
Name string - Name of the admin role to assign to the user, relevant only for role access-mode
- role
Scope string - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure
Access stringEnable - Enable/Disable secure remote access [true/false]
- secure
Access stringUrl - Destination URL to inject secrets
- secure
Access booleanWeb - Enable Web Secure Remote Access
- secure
Access booleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access booleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- string[]
- Add tags attached to this object
- target
Name string - Name of existing target to use in dynamic secret creation
- user
Ttl string - User TTL
- access_
mode str - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin_
email str - Admin user email
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- dynamic_
secret_ strgoogle_ workspace_ id - The ID of this resource.
- fixed_
user_ strclaim_ keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp_
key str - Base64-encoded service account private key text
- group_
email str - A group email, relevant only for group access-mode
- group_
role str - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item_
custom_ Mapping[str, str]fields - Additional custom fields to associate with the item
- name str
- Dynamic secret name
- producer_
encryption_ strkey_ name - Dynamic producer encryption key
- role_
name str - Name of the admin role to assign to the user, relevant only for role access-mode
- role_
scope str - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure_
access_ strenable - Enable/Disable secure remote access [true/false]
- secure_
access_ strurl - Destination URL to inject secrets
- secure_
access_ boolweb - Enable Web Secure Remote Access
- secure_
access_ boolweb_ browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure_
access_ boolweb_ proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- Sequence[str]
- Add tags attached to this object
- target_
name str - Name of existing target to use in dynamic secret creation
- user_
ttl str - User TTL
- access
Mode String - Adding a user to an existing group or assign an admin role to a user [group/role]
- admin
Email String - Admin user email
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- dynamic
Secret StringGoogle Workspace Id - The ID of this resource.
- fixed
User StringClaim Keyname - For externally provided users, denotes the key-name of IdP claim to extract the username from
- gcp
Key String - Base64-encoded service account private key text
- group
Email String - A group email, relevant only for group access-mode
- group
Role String - Group role [OWNER/MANAGER/MEMBER], relevant only for group access-mode
- item
Custom Map<String>Fields - Additional custom fields to associate with the item
- name String
- Dynamic secret name
- producer
Encryption StringKey Name - Dynamic producer encryption key
- role
Name String - Name of the admin role to assign to the user, relevant only for role access-mode
- role
Scope String - The scope in which this role is assigned [CUSTOMER/ORG_UNIT], relevant only for role access-mode
- secure
Access StringEnable - Enable/Disable secure remote access [true/false]
- secure
Access StringUrl - Destination URL to inject secrets
- secure
Access BooleanWeb - Enable Web Secure Remote Access
- secure
Access BooleanWeb Browsing - Secure browser via Akeyless's Secure Remote Access (SRA)
- secure
Access BooleanWeb Proxy - Web-Proxy via Akeyless's Secure Remote Access (SRA)
- List<String>
- Add tags attached to this object
- target
Name String - Name of existing target to use in dynamic secret creation
- user
Ttl String - User TTL
Package Details
- Repository
- akeyless akeyless-community/terraform-provider-akeyless
- License
- Notes
- This Pulumi package is based on the
akeylessTerraform Provider.
published on Monday, Apr 27, 2026 by akeyless-community
