yandex_organizationmanager_idp_user (Resource)

A user in the Identity Provider system.
Users are created within a userpool and can authenticate to access cloud resources.
Each user has a unique identifier, credentials, and profile information.

Example usageExample usage

//
// Create a new OrganizationManager Idp User.
//
resource "yandex_organizationmanager_idp_user" "example_user" {
  userpool_id = yandex_organizationmanager_idp_userpool.your_userpool.userpool_id
  username    = "example@your-domain.com"
  full_name   = "Test User"
  given_name  = "Test"
  family_name = "User"
  email       = "test-userov@example.com"
  is_active   = true
  password_spec = {
    password = "secret-password"
  }
}

Arguments & Attributes ReferenceArguments & Attributes Reference

• company_name (String). User's company name.
• created_at (Read-Only) (String). Timestamp when the user was created.
• department (String). User's department.
• email (String). User's email address.
• employee_id (String). User's employee ID
• expires_at (String). Timestamp when the user account expires.
• external_id (String). External identifier for federation with external identity systems.
  This ID can be used to link this user with an account in an external system.
• family_name (String). User's last name.
  Part of the user's profile information.
• full_name (Required)(String). User's full name (display name).
  This is typically shown in the UI and used for identification purposes.
• given_name (String). User's first name.
  Part of the user's profile information.
• id (String). ID of the user to return.
• is_active (Bool). Whether the user is active. Default is true.
• job_title (String). User's job title.
• password_hash [Block]. Password hash. Credentials type. Exactly one of credentials type must be specified.
  • password_hash (Required)(String). The password hash string.
  • password_hash_type (Required)(String). Type of the password hash.
• password_spec [Block]. Password specification. Credentials type. Exactly one of credentials type must be specified.
  • generation_proof (String). Proof that the password was generated by the system.
  • password (Required)(String). The password string.
• phone_number (String). User's phone number.
• status (Read-Only) (String). Current status of the user.
  Determines whether the user can authenticate and access the system.
• timeouts [Block].
  • create (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
  • delete (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
  • read (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
  • update (String). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
• updated_at (Read-Only) (String). Timestamp when the user was last updated.
• user_id (String). ID of the user to return.
• username (Required)(String). Username used for authentication.
  Usually in the format of an email address.
• userpool_id (Required)(String). ID of the userpool this user belongs to.
  To get the userpool ID, make a [UserpoolService.List] request.