Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectUserGroup
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectUserGroup

Explore with Pulumi AI

fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure user groups.

The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.

  • dynamic_mapping: fortimanager.ObjectUserGroupDynamicMapping
  • guest: fortimanager_object_user_group_guest
  • match: fortimanager.ObjectUserGroupMatch

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trname = new fortimanager.ObjectUserGroup("trname", {
    password: "specify",
    userId: "email",
});
Copy
import pulumi
import pulumi_fortimanager as fortimanager

trname = fortimanager.ObjectUserGroup("trname",
    password="specify",
    user_id="email")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewObjectUserGroup(ctx, "trname", &fortimanager.ObjectUserGroupArgs{
			Password: pulumi.String("specify"),
			UserId:   pulumi.String("email"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortimanager.ObjectUserGroup("trname", new()
    {
        Password = "specify",
        UserId = "email",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectUserGroup;
import com.pulumi.fortimanager.ObjectUserGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new ObjectUserGroup("trname", ObjectUserGroupArgs.builder()
            .password("specify")
            .userId("email")
            .build());

    }
}
Copy
resources:
  trname:
    type: fortimanager:ObjectUserGroup
    properties:
      password: specify
      userId: email
Copy

Create ObjectUserGroup Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ObjectUserGroup(name: string, args?: ObjectUserGroupArgs, opts?: CustomResourceOptions);
@overload
def ObjectUserGroup(resource_name: str,
                    args: Optional[ObjectUserGroupArgs] = None,
                    opts: Optional[ResourceOptions] = None)

@overload
def ObjectUserGroup(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    adom: Optional[str] = None,
                    auth_concurrent_override: Optional[str] = None,
                    auth_concurrent_value: Optional[float] = None,
                    authtimeout: Optional[float] = None,
                    company: Optional[str] = None,
                    dynamic_mappings: Optional[Sequence[ObjectUserGroupDynamicMappingArgs]] = None,
                    dynamic_sort_subtable: Optional[str] = None,
                    email: Optional[str] = None,
                    expire: Optional[float] = None,
                    expire_type: Optional[str] = None,
                    fosid: Optional[float] = None,
                    group_type: Optional[str] = None,
                    guests: Optional[Sequence[ObjectUserGroupGuestArgs]] = None,
                    http_digest_realm: Optional[str] = None,
                    matches: Optional[Sequence[ObjectUserGroupMatchArgs]] = None,
                    max_accounts: Optional[float] = None,
                    members: Optional[Sequence[str]] = None,
                    mobile_phone: Optional[str] = None,
                    multiple_guest_add: Optional[str] = None,
                    name: Optional[str] = None,
                    object_user_group_id: Optional[str] = None,
                    password: Optional[str] = None,
                    scopetype: Optional[str] = None,
                    sms_custom_server: Optional[str] = None,
                    sms_server: Optional[str] = None,
                    sponsor: Optional[str] = None,
                    sso_attribute_value: Optional[str] = None,
                    user_id: Optional[str] = None,
                    user_name: Optional[str] = None)
func NewObjectUserGroup(ctx *Context, name string, args *ObjectUserGroupArgs, opts ...ResourceOption) (*ObjectUserGroup, error)
public ObjectUserGroup(string name, ObjectUserGroupArgs? args = null, CustomResourceOptions? opts = null)
public ObjectUserGroup(String name, ObjectUserGroupArgs args)
public ObjectUserGroup(String name, ObjectUserGroupArgs args, CustomResourceOptions options)

type: fortimanager:ObjectUserGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args ObjectUserGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args ObjectUserGroupArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args ObjectUserGroupArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args ObjectUserGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ObjectUserGroupArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var objectUserGroupResource = new Fortimanager.ObjectUserGroup("objectUserGroupResource", new()
{
    Adom = "string",
    AuthConcurrentOverride = "string",
    AuthConcurrentValue = 0,
    Authtimeout = 0,
    Company = "string",
    DynamicMappings = new[]
    {
        new Fortimanager.Inputs.ObjectUserGroupDynamicMappingArgs
        {
            _scopes = new[]
            {
                new Fortimanager.Inputs.ObjectUserGroupDynamicMapping_ScopeArgs
                {
                    Name = "string",
                    Vdom = "string",
                },
            },
            AuthConcurrentOverride = "string",
            AuthConcurrentValue = 0,
            Authtimeout = 0,
            Company = "string",
            Email = "string",
            Expire = 0,
            ExpireType = "string",
            GroupType = "string",
            Guests = new[]
            {
                new Fortimanager.Inputs.ObjectUserGroupDynamicMappingGuestArgs
                {
                    Comment = "string",
                    Company = "string",
                    Email = "string",
                    Expiration = "string",
                    Group = "string",
                    Id = 0,
                    MobilePhone = "string",
                    Name = "string",
                    Passwords = new[]
                    {
                        "string",
                    },
                    Sponsor = "string",
                    UserId = "string",
                },
            },
            HttpDigestRealm = "string",
            Id = 0,
            LdapMemberof = "string",
            LogicType = "string",
            Matches = new[]
            {
                new Fortimanager.Inputs.ObjectUserGroupDynamicMappingMatchArgs
                {
                    _guiMeta = "string",
                    GroupName = "string",
                    Id = 0,
                    ServerName = "string",
                },
            },
            MaxAccounts = 0,
            Member = "string",
            MobilePhone = "string",
            MultipleGuestAdd = "string",
            Password = "string",
            RedirUrl = "string",
            SmsCustomServer = "string",
            SmsServer = "string",
            Sponsor = "string",
            SslvpnBookmarksGroup = "string",
            SslvpnCacheCleaner = "string",
            SslvpnClientChecks = new[]
            {
                "string",
            },
            SslvpnFtp = "string",
            SslvpnHttp = "string",
            SslvpnOsCheck = "string",
            SslvpnOsCheckList = new Fortimanager.Inputs.ObjectUserGroupDynamicMappingSslvpnOsCheckListArgs
            {
                Action = "string",
                LatestPatchLevel = "string",
                Name = "string",
                Tolerance = 0,
            },
            SslvpnPortal = "string",
            SslvpnPortalHeading = "string",
            SslvpnRdp = "string",
            SslvpnSamba = "string",
            SslvpnSplitTunneling = "string",
            SslvpnSsh = "string",
            SslvpnTelnet = "string",
            SslvpnTunnel = "string",
            SslvpnTunnelEndip = "string",
            SslvpnTunnelIpMode = "string",
            SslvpnTunnelStartip = "string",
            SslvpnVirtualDesktop = "string",
            SslvpnVnc = "string",
            SslvpnWebapp = "string",
            SsoAttributeValue = "string",
            UserId = "string",
            UserName = "string",
        },
    },
    DynamicSortSubtable = "string",
    Email = "string",
    Expire = 0,
    ExpireType = "string",
    Fosid = 0,
    GroupType = "string",
    Guests = new[]
    {
        new Fortimanager.Inputs.ObjectUserGroupGuestArgs
        {
            Comment = "string",
            Company = "string",
            Email = "string",
            Expiration = "string",
            Id = 0,
            MobilePhone = "string",
            Name = "string",
            Passwords = new[]
            {
                "string",
            },
            Sponsor = "string",
            UserId = "string",
        },
    },
    HttpDigestRealm = "string",
    Matches = new[]
    {
        new Fortimanager.Inputs.ObjectUserGroupMatchArgs
        {
            _guiMeta = "string",
            GroupName = "string",
            Id = 0,
            ServerName = "string",
        },
    },
    MaxAccounts = 0,
    Members = new[]
    {
        "string",
    },
    MobilePhone = "string",
    MultipleGuestAdd = "string",
    Name = "string",
    ObjectUserGroupId = "string",
    Password = "string",
    Scopetype = "string",
    SmsCustomServer = "string",
    SmsServer = "string",
    Sponsor = "string",
    SsoAttributeValue = "string",
    UserId = "string",
    UserName = "string",
});
Copy
example, err := fortimanager.NewObjectUserGroup(ctx, "objectUserGroupResource", &fortimanager.ObjectUserGroupArgs{
Adom: pulumi.String("string"),
AuthConcurrentOverride: pulumi.String("string"),
AuthConcurrentValue: pulumi.Float64(0),
Authtimeout: pulumi.Float64(0),
Company: pulumi.String("string"),
DynamicMappings: .ObjectUserGroupDynamicMappingTypeArray{
&.ObjectUserGroupDynamicMappingTypeArgs{
_scopes: .ObjectUserGroupDynamicMapping_ScopeArray{
&.ObjectUserGroupDynamicMapping_ScopeArgs{
Name: pulumi.String("string"),
Vdom: pulumi.String("string"),
},
},
AuthConcurrentOverride: pulumi.String("string"),
AuthConcurrentValue: pulumi.Float64(0),
Authtimeout: pulumi.Float64(0),
Company: pulumi.String("string"),
Email: pulumi.String("string"),
Expire: pulumi.Float64(0),
ExpireType: pulumi.String("string"),
GroupType: pulumi.String("string"),
Guests: .ObjectUserGroupDynamicMappingGuestArray{
&.ObjectUserGroupDynamicMappingGuestArgs{
Comment: pulumi.String("string"),
Company: pulumi.String("string"),
Email: pulumi.String("string"),
Expiration: pulumi.String("string"),
Group: pulumi.String("string"),
Id: pulumi.Float64(0),
MobilePhone: pulumi.String("string"),
Name: pulumi.String("string"),
Passwords: pulumi.StringArray{
pulumi.String("string"),
},
Sponsor: pulumi.String("string"),
UserId: pulumi.String("string"),
},
},
HttpDigestRealm: pulumi.String("string"),
Id: pulumi.Float64(0),
LdapMemberof: pulumi.String("string"),
LogicType: pulumi.String("string"),
Matches: .ObjectUserGroupDynamicMappingMatchTypeArray{
&.ObjectUserGroupDynamicMappingMatchTypeArgs{
_guiMeta: pulumi.String("string"),
GroupName: pulumi.String("string"),
Id: pulumi.Float64(0),
ServerName: pulumi.String("string"),
},
},
MaxAccounts: pulumi.Float64(0),
Member: pulumi.String("string"),
MobilePhone: pulumi.String("string"),
MultipleGuestAdd: pulumi.String("string"),
Password: pulumi.String("string"),
RedirUrl: pulumi.String("string"),
SmsCustomServer: pulumi.String("string"),
SmsServer: pulumi.String("string"),
Sponsor: pulumi.String("string"),
SslvpnBookmarksGroup: pulumi.String("string"),
SslvpnCacheCleaner: pulumi.String("string"),
SslvpnClientChecks: pulumi.StringArray{
pulumi.String("string"),
},
SslvpnFtp: pulumi.String("string"),
SslvpnHttp: pulumi.String("string"),
SslvpnOsCheck: pulumi.String("string"),
SslvpnOsCheckList: &.ObjectUserGroupDynamicMappingSslvpnOsCheckListArgs{
Action: pulumi.String("string"),
LatestPatchLevel: pulumi.String("string"),
Name: pulumi.String("string"),
Tolerance: pulumi.Float64(0),
},
SslvpnPortal: pulumi.String("string"),
SslvpnPortalHeading: pulumi.String("string"),
SslvpnRdp: pulumi.String("string"),
SslvpnSamba: pulumi.String("string"),
SslvpnSplitTunneling: pulumi.String("string"),
SslvpnSsh: pulumi.String("string"),
SslvpnTelnet: pulumi.String("string"),
SslvpnTunnel: pulumi.String("string"),
SslvpnTunnelEndip: pulumi.String("string"),
SslvpnTunnelIpMode: pulumi.String("string"),
SslvpnTunnelStartip: pulumi.String("string"),
SslvpnVirtualDesktop: pulumi.String("string"),
SslvpnVnc: pulumi.String("string"),
SslvpnWebapp: pulumi.String("string"),
SsoAttributeValue: pulumi.String("string"),
UserId: pulumi.String("string"),
UserName: pulumi.String("string"),
},
},
DynamicSortSubtable: pulumi.String("string"),
Email: pulumi.String("string"),
Expire: pulumi.Float64(0),
ExpireType: pulumi.String("string"),
Fosid: pulumi.Float64(0),
GroupType: pulumi.String("string"),
Guests: .ObjectUserGroupGuestArray{
&.ObjectUserGroupGuestArgs{
Comment: pulumi.String("string"),
Company: pulumi.String("string"),
Email: pulumi.String("string"),
Expiration: pulumi.String("string"),
Id: pulumi.Float64(0),
MobilePhone: pulumi.String("string"),
Name: pulumi.String("string"),
Passwords: pulumi.StringArray{
pulumi.String("string"),
},
Sponsor: pulumi.String("string"),
UserId: pulumi.String("string"),
},
},
HttpDigestRealm: pulumi.String("string"),
Matches: .ObjectUserGroupMatchTypeArray{
&.ObjectUserGroupMatchTypeArgs{
_guiMeta: pulumi.String("string"),
GroupName: pulumi.String("string"),
Id: pulumi.Float64(0),
ServerName: pulumi.String("string"),
},
},
MaxAccounts: pulumi.Float64(0),
Members: pulumi.StringArray{
pulumi.String("string"),
},
MobilePhone: pulumi.String("string"),
MultipleGuestAdd: pulumi.String("string"),
Name: pulumi.String("string"),
ObjectUserGroupId: pulumi.String("string"),
Password: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SmsCustomServer: pulumi.String("string"),
SmsServer: pulumi.String("string"),
Sponsor: pulumi.String("string"),
SsoAttributeValue: pulumi.String("string"),
UserId: pulumi.String("string"),
UserName: pulumi.String("string"),
})
Copy
var objectUserGroupResource = new ObjectUserGroup("objectUserGroupResource", ObjectUserGroupArgs.builder()
    .adom("string")
    .authConcurrentOverride("string")
    .authConcurrentValue(0)
    .authtimeout(0)
    .company("string")
    .dynamicMappings(ObjectUserGroupDynamicMappingArgs.builder()
        ._scopes(ObjectUserGroupDynamicMapping_ScopeArgs.builder()
            .name("string")
            .vdom("string")
            .build())
        .authConcurrentOverride("string")
        .authConcurrentValue(0)
        .authtimeout(0)
        .company("string")
        .email("string")
        .expire(0)
        .expireType("string")
        .groupType("string")
        .guests(ObjectUserGroupDynamicMappingGuestArgs.builder()
            .comment("string")
            .company("string")
            .email("string")
            .expiration("string")
            .group("string")
            .id(0)
            .mobilePhone("string")
            .name("string")
            .passwords("string")
            .sponsor("string")
            .userId("string")
            .build())
        .httpDigestRealm("string")
        .id(0)
        .ldapMemberof("string")
        .logicType("string")
        .matches(ObjectUserGroupDynamicMappingMatchArgs.builder()
            ._guiMeta("string")
            .groupName("string")
            .id(0)
            .serverName("string")
            .build())
        .maxAccounts(0)
        .member("string")
        .mobilePhone("string")
        .multipleGuestAdd("string")
        .password("string")
        .redirUrl("string")
        .smsCustomServer("string")
        .smsServer("string")
        .sponsor("string")
        .sslvpnBookmarksGroup("string")
        .sslvpnCacheCleaner("string")
        .sslvpnClientChecks("string")
        .sslvpnFtp("string")
        .sslvpnHttp("string")
        .sslvpnOsCheck("string")
        .sslvpnOsCheckList(ObjectUserGroupDynamicMappingSslvpnOsCheckListArgs.builder()
            .action("string")
            .latestPatchLevel("string")
            .name("string")
            .tolerance(0)
            .build())
        .sslvpnPortal("string")
        .sslvpnPortalHeading("string")
        .sslvpnRdp("string")
        .sslvpnSamba("string")
        .sslvpnSplitTunneling("string")
        .sslvpnSsh("string")
        .sslvpnTelnet("string")
        .sslvpnTunnel("string")
        .sslvpnTunnelEndip("string")
        .sslvpnTunnelIpMode("string")
        .sslvpnTunnelStartip("string")
        .sslvpnVirtualDesktop("string")
        .sslvpnVnc("string")
        .sslvpnWebapp("string")
        .ssoAttributeValue("string")
        .userId("string")
        .userName("string")
        .build())
    .dynamicSortSubtable("string")
    .email("string")
    .expire(0)
    .expireType("string")
    .fosid(0)
    .groupType("string")
    .guests(ObjectUserGroupGuestArgs.builder()
        .comment("string")
        .company("string")
        .email("string")
        .expiration("string")
        .id(0)
        .mobilePhone("string")
        .name("string")
        .passwords("string")
        .sponsor("string")
        .userId("string")
        .build())
    .httpDigestRealm("string")
    .matches(ObjectUserGroupMatchArgs.builder()
        ._guiMeta("string")
        .groupName("string")
        .id(0)
        .serverName("string")
        .build())
    .maxAccounts(0)
    .members("string")
    .mobilePhone("string")
    .multipleGuestAdd("string")
    .name("string")
    .objectUserGroupId("string")
    .password("string")
    .scopetype("string")
    .smsCustomServer("string")
    .smsServer("string")
    .sponsor("string")
    .ssoAttributeValue("string")
    .userId("string")
    .userName("string")
    .build());
Copy
object_user_group_resource = fortimanager.ObjectUserGroup("objectUserGroupResource",
    adom="string",
    auth_concurrent_override="string",
    auth_concurrent_value=0,
    authtimeout=0,
    company="string",
    dynamic_mappings=[{
        "_scopes": [{
            "name": "string",
            "vdom": "string",
        }],
        "auth_concurrent_override": "string",
        "auth_concurrent_value": 0,
        "authtimeout": 0,
        "company": "string",
        "email": "string",
        "expire": 0,
        "expire_type": "string",
        "group_type": "string",
        "guests": [{
            "comment": "string",
            "company": "string",
            "email": "string",
            "expiration": "string",
            "group": "string",
            "id": 0,
            "mobile_phone": "string",
            "name": "string",
            "passwords": ["string"],
            "sponsor": "string",
            "user_id": "string",
        }],
        "http_digest_realm": "string",
        "id": 0,
        "ldap_memberof": "string",
        "logic_type": "string",
        "matches": [{
            "_gui_meta": "string",
            "group_name": "string",
            "id": 0,
            "server_name": "string",
        }],
        "max_accounts": 0,
        "member": "string",
        "mobile_phone": "string",
        "multiple_guest_add": "string",
        "password": "string",
        "redir_url": "string",
        "sms_custom_server": "string",
        "sms_server": "string",
        "sponsor": "string",
        "sslvpn_bookmarks_group": "string",
        "sslvpn_cache_cleaner": "string",
        "sslvpn_client_checks": ["string"],
        "sslvpn_ftp": "string",
        "sslvpn_http": "string",
        "sslvpn_os_check": "string",
        "sslvpn_os_check_list": {
            "action": "string",
            "latest_patch_level": "string",
            "name": "string",
            "tolerance": 0,
        },
        "sslvpn_portal": "string",
        "sslvpn_portal_heading": "string",
        "sslvpn_rdp": "string",
        "sslvpn_samba": "string",
        "sslvpn_split_tunneling": "string",
        "sslvpn_ssh": "string",
        "sslvpn_telnet": "string",
        "sslvpn_tunnel": "string",
        "sslvpn_tunnel_endip": "string",
        "sslvpn_tunnel_ip_mode": "string",
        "sslvpn_tunnel_startip": "string",
        "sslvpn_virtual_desktop": "string",
        "sslvpn_vnc": "string",
        "sslvpn_webapp": "string",
        "sso_attribute_value": "string",
        "user_id": "string",
        "user_name": "string",
    }],
    dynamic_sort_subtable="string",
    email="string",
    expire=0,
    expire_type="string",
    fosid=0,
    group_type="string",
    guests=[{
        "comment": "string",
        "company": "string",
        "email": "string",
        "expiration": "string",
        "id": 0,
        "mobile_phone": "string",
        "name": "string",
        "passwords": ["string"],
        "sponsor": "string",
        "user_id": "string",
    }],
    http_digest_realm="string",
    matches=[{
        "_gui_meta": "string",
        "group_name": "string",
        "id": 0,
        "server_name": "string",
    }],
    max_accounts=0,
    members=["string"],
    mobile_phone="string",
    multiple_guest_add="string",
    name="string",
    object_user_group_id="string",
    password="string",
    scopetype="string",
    sms_custom_server="string",
    sms_server="string",
    sponsor="string",
    sso_attribute_value="string",
    user_id="string",
    user_name="string")
Copy
const objectUserGroupResource = new fortimanager.ObjectUserGroup("objectUserGroupResource", {
    adom: "string",
    authConcurrentOverride: "string",
    authConcurrentValue: 0,
    authtimeout: 0,
    company: "string",
    dynamicMappings: [{
        _scopes: [{
            name: "string",
            vdom: "string",
        }],
        authConcurrentOverride: "string",
        authConcurrentValue: 0,
        authtimeout: 0,
        company: "string",
        email: "string",
        expire: 0,
        expireType: "string",
        groupType: "string",
        guests: [{
            comment: "string",
            company: "string",
            email: "string",
            expiration: "string",
            group: "string",
            id: 0,
            mobilePhone: "string",
            name: "string",
            passwords: ["string"],
            sponsor: "string",
            userId: "string",
        }],
        httpDigestRealm: "string",
        id: 0,
        ldapMemberof: "string",
        logicType: "string",
        matches: [{
            _guiMeta: "string",
            groupName: "string",
            id: 0,
            serverName: "string",
        }],
        maxAccounts: 0,
        member: "string",
        mobilePhone: "string",
        multipleGuestAdd: "string",
        password: "string",
        redirUrl: "string",
        smsCustomServer: "string",
        smsServer: "string",
        sponsor: "string",
        sslvpnBookmarksGroup: "string",
        sslvpnCacheCleaner: "string",
        sslvpnClientChecks: ["string"],
        sslvpnFtp: "string",
        sslvpnHttp: "string",
        sslvpnOsCheck: "string",
        sslvpnOsCheckList: {
            action: "string",
            latestPatchLevel: "string",
            name: "string",
            tolerance: 0,
        },
        sslvpnPortal: "string",
        sslvpnPortalHeading: "string",
        sslvpnRdp: "string",
        sslvpnSamba: "string",
        sslvpnSplitTunneling: "string",
        sslvpnSsh: "string",
        sslvpnTelnet: "string",
        sslvpnTunnel: "string",
        sslvpnTunnelEndip: "string",
        sslvpnTunnelIpMode: "string",
        sslvpnTunnelStartip: "string",
        sslvpnVirtualDesktop: "string",
        sslvpnVnc: "string",
        sslvpnWebapp: "string",
        ssoAttributeValue: "string",
        userId: "string",
        userName: "string",
    }],
    dynamicSortSubtable: "string",
    email: "string",
    expire: 0,
    expireType: "string",
    fosid: 0,
    groupType: "string",
    guests: [{
        comment: "string",
        company: "string",
        email: "string",
        expiration: "string",
        id: 0,
        mobilePhone: "string",
        name: "string",
        passwords: ["string"],
        sponsor: "string",
        userId: "string",
    }],
    httpDigestRealm: "string",
    matches: [{
        _guiMeta: "string",
        groupName: "string",
        id: 0,
        serverName: "string",
    }],
    maxAccounts: 0,
    members: ["string"],
    mobilePhone: "string",
    multipleGuestAdd: "string",
    name: "string",
    objectUserGroupId: "string",
    password: "string",
    scopetype: "string",
    smsCustomServer: "string",
    smsServer: "string",
    sponsor: "string",
    ssoAttributeValue: "string",
    userId: "string",
    userName: "string",
});
Copy
type: fortimanager:ObjectUserGroup
properties:
    adom: string
    authConcurrentOverride: string
    authConcurrentValue: 0
    authtimeout: 0
    company: string
    dynamicMappings:
        - _scopes:
            - name: string
              vdom: string
          authConcurrentOverride: string
          authConcurrentValue: 0
          authtimeout: 0
          company: string
          email: string
          expire: 0
          expireType: string
          groupType: string
          guests:
            - comment: string
              company: string
              email: string
              expiration: string
              group: string
              id: 0
              mobilePhone: string
              name: string
              passwords:
                - string
              sponsor: string
              userId: string
          httpDigestRealm: string
          id: 0
          ldapMemberof: string
          logicType: string
          matches:
            - _guiMeta: string
              groupName: string
              id: 0
              serverName: string
          maxAccounts: 0
          member: string
          mobilePhone: string
          multipleGuestAdd: string
          password: string
          redirUrl: string
          smsCustomServer: string
          smsServer: string
          sponsor: string
          sslvpnBookmarksGroup: string
          sslvpnCacheCleaner: string
          sslvpnClientChecks:
            - string
          sslvpnFtp: string
          sslvpnHttp: string
          sslvpnOsCheck: string
          sslvpnOsCheckList:
            action: string
            latestPatchLevel: string
            name: string
            tolerance: 0
          sslvpnPortal: string
          sslvpnPortalHeading: string
          sslvpnRdp: string
          sslvpnSamba: string
          sslvpnSplitTunneling: string
          sslvpnSsh: string
          sslvpnTelnet: string
          sslvpnTunnel: string
          sslvpnTunnelEndip: string
          sslvpnTunnelIpMode: string
          sslvpnTunnelStartip: string
          sslvpnVirtualDesktop: string
          sslvpnVnc: string
          sslvpnWebapp: string
          ssoAttributeValue: string
          userId: string
          userName: string
    dynamicSortSubtable: string
    email: string
    expire: 0
    expireType: string
    fosid: 0
    groupType: string
    guests:
        - comment: string
          company: string
          email: string
          expiration: string
          id: 0
          mobilePhone: string
          name: string
          passwords:
            - string
          sponsor: string
          userId: string
    httpDigestRealm: string
    matches:
        - _guiMeta: string
          groupName: string
          id: 0
          serverName: string
    maxAccounts: 0
    members:
        - string
    mobilePhone: string
    multipleGuestAdd: string
    name: string
    objectUserGroupId: string
    password: string
    scopetype: string
    smsCustomServer: string
    smsServer: string
    sponsor: string
    ssoAttributeValue: string
    userId: string
    userName: string
Copy

ObjectUserGroup Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ObjectUserGroup resource accepts the following input properties:

Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AuthConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
AuthConcurrentValue double
Maximum number of concurrent authenticated connections per user (0 - 100).
Authtimeout double
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
Company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
DynamicMappings List<ObjectUserGroupDynamicMapping>
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Email string
Enable/disable the guest user email address field. Valid values: disable, enable.
Expire double
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
ExpireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
Fosid double
Id.
GroupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
Guests List<ObjectUserGroupGuest>
Guest. The structure of guest block is documented below.
HttpDigestRealm string
Realm attribute for MD5-digest authentication.
Matches List<ObjectUserGroupMatch>
Match. The structure of match block is documented below.
MaxAccounts double
Maximum number of guest accounts that can be created for this group (0 means unlimited).
Members List<string>
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
MobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
MultipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
Name string
Group name.
ObjectUserGroupId string
an identifier for the resource with format {{name}}.
Password string
Guest user password type. Valid values: auto-generate, specify, disable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SmsCustomServer string
SMS server.
SmsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
SsoAttributeValue string
Name of the RADIUS user group that this local user group represents.
UserId string
Guest user ID type. Valid values: email, auto-generate, specify.
UserName string
Enable/disable the guest user name entry. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AuthConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
AuthConcurrentValue float64
Maximum number of concurrent authenticated connections per user (0 - 100).
Authtimeout float64
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
Company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
DynamicMappings []ObjectUserGroupDynamicMappingTypeArgs
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Email string
Enable/disable the guest user email address field. Valid values: disable, enable.
Expire float64
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
ExpireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
Fosid float64
Id.
GroupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
Guests []ObjectUserGroupGuestArgs
Guest. The structure of guest block is documented below.
HttpDigestRealm string
Realm attribute for MD5-digest authentication.
Matches []ObjectUserGroupMatchTypeArgs
Match. The structure of match block is documented below.
MaxAccounts float64
Maximum number of guest accounts that can be created for this group (0 means unlimited).
Members []string
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
MobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
MultipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
Name string
Group name.
ObjectUserGroupId string
an identifier for the resource with format {{name}}.
Password string
Guest user password type. Valid values: auto-generate, specify, disable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SmsCustomServer string
SMS server.
SmsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
SsoAttributeValue string
Name of the RADIUS user group that this local user group represents.
UserId string
Guest user ID type. Valid values: email, auto-generate, specify.
UserName string
Enable/disable the guest user name entry. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
authConcurrentOverride String
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue Double
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout Double
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company String
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamicMappings List<ObjectUserGroupDynamicMapping>
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email String
Enable/disable the guest user email address field. Valid values: disable, enable.
expire Double
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType String
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid Double
Id.
groupType String
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests List<ObjectUserGroupGuest>
Guest. The structure of guest block is documented below.
httpDigestRealm String
Realm attribute for MD5-digest authentication.
matches List<ObjectUserGroupMatch>
Match. The structure of match block is documented below.
maxAccounts Double
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members List<String>
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone String
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd String
Enable/disable addition of multiple guests. Valid values: disable, enable.
name String
Group name.
objectUserGroupId String
an identifier for the resource with format {{name}}.
password String
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
smsCustomServer String
SMS server.
smsServer String
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
String
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
ssoAttributeValue String
Name of the RADIUS user group that this local user group represents.
userId String
Guest user ID type. Valid values: email, auto-generate, specify.
userName String
Enable/disable the guest user name entry. Valid values: disable, enable.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
authConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue number
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout number
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamicMappings ObjectUserGroupDynamicMapping[]
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email string
Enable/disable the guest user email address field. Valid values: disable, enable.
expire number
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid number
Id.
groupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests ObjectUserGroupGuest[]
Guest. The structure of guest block is documented below.
httpDigestRealm string
Realm attribute for MD5-digest authentication.
matches ObjectUserGroupMatch[]
Match. The structure of match block is documented below.
maxAccounts number
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members string[]
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
name string
Group name.
objectUserGroupId string
an identifier for the resource with format {{name}}.
password string
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
smsCustomServer string
SMS server.
smsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
ssoAttributeValue string
Name of the RADIUS user group that this local user group represents.
userId string
Guest user ID type. Valid values: email, auto-generate, specify.
userName string
Enable/disable the guest user name entry. Valid values: disable, enable.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
auth_concurrent_override str
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
auth_concurrent_value float
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout float
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company str
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamic_mappings Sequence[ObjectUserGroupDynamicMappingArgs]
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email str
Enable/disable the guest user email address field. Valid values: disable, enable.
expire float
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expire_type str
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid float
Id.
group_type str
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests Sequence[ObjectUserGroupGuestArgs]
Guest. The structure of guest block is documented below.
http_digest_realm str
Realm attribute for MD5-digest authentication.
matches Sequence[ObjectUserGroupMatchArgs]
Match. The structure of match block is documented below.
max_accounts float
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members Sequence[str]
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobile_phone str
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multiple_guest_add str
Enable/disable addition of multiple guests. Valid values: disable, enable.
name str
Group name.
object_user_group_id str
an identifier for the resource with format {{name}}.
password str
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sms_custom_server str
SMS server.
sms_server str
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
str
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
sso_attribute_value str
Name of the RADIUS user group that this local user group represents.
user_id str
Guest user ID type. Valid values: email, auto-generate, specify.
user_name str
Enable/disable the guest user name entry. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
authConcurrentOverride String
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue Number
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout Number
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company String
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamicMappings List<Property Map>
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email String
Enable/disable the guest user email address field. Valid values: disable, enable.
expire Number
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType String
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid Number
Id.
groupType String
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests List<Property Map>
Guest. The structure of guest block is documented below.
httpDigestRealm String
Realm attribute for MD5-digest authentication.
matches List<Property Map>
Match. The structure of match block is documented below.
maxAccounts Number
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members List<String>
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone String
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd String
Enable/disable addition of multiple guests. Valid values: disable, enable.
name String
Group name.
objectUserGroupId String
an identifier for the resource with format {{name}}.
password String
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
smsCustomServer String
SMS server.
smsServer String
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
String
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
ssoAttributeValue String
Name of the RADIUS user group that this local user group represents.
userId String
Guest user ID type. Valid values: email, auto-generate, specify.
userName String
Enable/disable the guest user name entry. Valid values: disable, enable.

Outputs

All input properties are implicitly available as output properties. Additionally, the ObjectUserGroup resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing ObjectUserGroup Resource

Get an existing ObjectUserGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ObjectUserGroupState, opts?: CustomResourceOptions): ObjectUserGroup
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adom: Optional[str] = None,
        auth_concurrent_override: Optional[str] = None,
        auth_concurrent_value: Optional[float] = None,
        authtimeout: Optional[float] = None,
        company: Optional[str] = None,
        dynamic_mappings: Optional[Sequence[ObjectUserGroupDynamicMappingArgs]] = None,
        dynamic_sort_subtable: Optional[str] = None,
        email: Optional[str] = None,
        expire: Optional[float] = None,
        expire_type: Optional[str] = None,
        fosid: Optional[float] = None,
        group_type: Optional[str] = None,
        guests: Optional[Sequence[ObjectUserGroupGuestArgs]] = None,
        http_digest_realm: Optional[str] = None,
        matches: Optional[Sequence[ObjectUserGroupMatchArgs]] = None,
        max_accounts: Optional[float] = None,
        members: Optional[Sequence[str]] = None,
        mobile_phone: Optional[str] = None,
        multiple_guest_add: Optional[str] = None,
        name: Optional[str] = None,
        object_user_group_id: Optional[str] = None,
        password: Optional[str] = None,
        scopetype: Optional[str] = None,
        sms_custom_server: Optional[str] = None,
        sms_server: Optional[str] = None,
        sponsor: Optional[str] = None,
        sso_attribute_value: Optional[str] = None,
        user_id: Optional[str] = None,
        user_name: Optional[str] = None) -> ObjectUserGroup
func GetObjectUserGroup(ctx *Context, name string, id IDInput, state *ObjectUserGroupState, opts ...ResourceOption) (*ObjectUserGroup, error)
public static ObjectUserGroup Get(string name, Input<string> id, ObjectUserGroupState? state, CustomResourceOptions? opts = null)
public static ObjectUserGroup get(String name, Output<String> id, ObjectUserGroupState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:ObjectUserGroup    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AuthConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
AuthConcurrentValue double
Maximum number of concurrent authenticated connections per user (0 - 100).
Authtimeout double
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
Company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
DynamicMappings List<ObjectUserGroupDynamicMapping>
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Email string
Enable/disable the guest user email address field. Valid values: disable, enable.
Expire double
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
ExpireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
Fosid double
Id.
GroupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
Guests List<ObjectUserGroupGuest>
Guest. The structure of guest block is documented below.
HttpDigestRealm string
Realm attribute for MD5-digest authentication.
Matches List<ObjectUserGroupMatch>
Match. The structure of match block is documented below.
MaxAccounts double
Maximum number of guest accounts that can be created for this group (0 means unlimited).
Members List<string>
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
MobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
MultipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
Name string
Group name.
ObjectUserGroupId string
an identifier for the resource with format {{name}}.
Password string
Guest user password type. Valid values: auto-generate, specify, disable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SmsCustomServer string
SMS server.
SmsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
Sponsor string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
SsoAttributeValue string
Name of the RADIUS user group that this local user group represents.
UserId string
Guest user ID type. Valid values: email, auto-generate, specify.
UserName string
Enable/disable the guest user name entry. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
AuthConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
AuthConcurrentValue float64
Maximum number of concurrent authenticated connections per user (0 - 100).
Authtimeout float64
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
Company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
DynamicMappings []ObjectUserGroupDynamicMappingTypeArgs
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Email string
Enable/disable the guest user email address field. Valid values: disable, enable.
Expire float64
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
ExpireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
Fosid float64
Id.
GroupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
Guests []ObjectUserGroupGuestArgs
Guest. The structure of guest block is documented below.
HttpDigestRealm string
Realm attribute for MD5-digest authentication.
Matches []ObjectUserGroupMatchTypeArgs
Match. The structure of match block is documented below.
MaxAccounts float64
Maximum number of guest accounts that can be created for this group (0 means unlimited).
Members []string
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
MobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
MultipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
Name string
Group name.
ObjectUserGroupId string
an identifier for the resource with format {{name}}.
Password string
Guest user password type. Valid values: auto-generate, specify, disable.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
SmsCustomServer string
SMS server.
SmsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
Sponsor string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
SsoAttributeValue string
Name of the RADIUS user group that this local user group represents.
UserId string
Guest user ID type. Valid values: email, auto-generate, specify.
UserName string
Enable/disable the guest user name entry. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
authConcurrentOverride String
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue Double
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout Double
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company String
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamicMappings List<ObjectUserGroupDynamicMapping>
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email String
Enable/disable the guest user email address field. Valid values: disable, enable.
expire Double
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType String
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid Double
Id.
groupType String
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests List<ObjectUserGroupGuest>
Guest. The structure of guest block is documented below.
httpDigestRealm String
Realm attribute for MD5-digest authentication.
matches List<ObjectUserGroupMatch>
Match. The structure of match block is documented below.
maxAccounts Double
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members List<String>
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone String
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd String
Enable/disable addition of multiple guests. Valid values: disable, enable.
name String
Group name.
objectUserGroupId String
an identifier for the resource with format {{name}}.
password String
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
smsCustomServer String
SMS server.
smsServer String
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
sponsor String
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
ssoAttributeValue String
Name of the RADIUS user group that this local user group represents.
userId String
Guest user ID type. Valid values: email, auto-generate, specify.
userName String
Enable/disable the guest user name entry. Valid values: disable, enable.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
authConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue number
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout number
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamicMappings ObjectUserGroupDynamicMapping[]
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email string
Enable/disable the guest user email address field. Valid values: disable, enable.
expire number
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid number
Id.
groupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests ObjectUserGroupGuest[]
Guest. The structure of guest block is documented below.
httpDigestRealm string
Realm attribute for MD5-digest authentication.
matches ObjectUserGroupMatch[]
Match. The structure of match block is documented below.
maxAccounts number
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members string[]
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
name string
Group name.
objectUserGroupId string
an identifier for the resource with format {{name}}.
password string
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
smsCustomServer string
SMS server.
smsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
sponsor string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
ssoAttributeValue string
Name of the RADIUS user group that this local user group represents.
userId string
Guest user ID type. Valid values: email, auto-generate, specify.
userName string
Enable/disable the guest user name entry. Valid values: disable, enable.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
auth_concurrent_override str
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
auth_concurrent_value float
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout float
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company str
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamic_mappings Sequence[ObjectUserGroupDynamicMappingArgs]
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email str
Enable/disable the guest user email address field. Valid values: disable, enable.
expire float
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expire_type str
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid float
Id.
group_type str
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests Sequence[ObjectUserGroupGuestArgs]
Guest. The structure of guest block is documented below.
http_digest_realm str
Realm attribute for MD5-digest authentication.
matches Sequence[ObjectUserGroupMatchArgs]
Match. The structure of match block is documented below.
max_accounts float
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members Sequence[str]
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobile_phone str
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multiple_guest_add str
Enable/disable addition of multiple guests. Valid values: disable, enable.
name str
Group name.
object_user_group_id str
an identifier for the resource with format {{name}}.
password str
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
sms_custom_server str
SMS server.
sms_server str
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
sponsor str
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
sso_attribute_value str
Name of the RADIUS user group that this local user group represents.
user_id str
Guest user ID type. Valid values: email, auto-generate, specify.
user_name str
Enable/disable the guest user name entry. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
authConcurrentOverride String
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue Number
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout Number
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company String
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
dynamicMappings List<Property Map>
Dynamic_Mapping. The structure of dynamic_mapping block is documented below.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
email String
Enable/disable the guest user email address field. Valid values: disable, enable.
expire Number
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType String
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
fosid Number
Id.
groupType String
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests List<Property Map>
Guest. The structure of guest block is documented below.
httpDigestRealm String
Realm attribute for MD5-digest authentication.
matches List<Property Map>
Match. The structure of match block is documented below.
maxAccounts Number
Maximum number of guest accounts that can be created for this group (0 means unlimited).
members List<String>
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone String
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd String
Enable/disable addition of multiple guests. Valid values: disable, enable.
name String
Group name.
objectUserGroupId String
an identifier for the resource with format {{name}}.
password String
Guest user password type. Valid values: auto-generate, specify, disable.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
smsCustomServer String
SMS server.
smsServer String
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
sponsor String
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
ssoAttributeValue String
Name of the RADIUS user group that this local user group represents.
userId String
Guest user ID type. Valid values: email, auto-generate, specify.
userName String
Enable/disable the guest user name entry. Valid values: disable, enable.

Supporting Types

ObjectUserGroupDynamicMapping
, ObjectUserGroupDynamicMappingArgs

AuthConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
AuthConcurrentValue double
Maximum number of concurrent authenticated connections per user (0 - 100).
Authtimeout double
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
Company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
Email string
Enable/disable the guest user email address field. Valid values: disable, enable.
Expire double
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
ExpireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
GroupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
Guests List<ObjectUserGroupDynamicMappingGuest>
Guest. The structure of guest block is documented below.
HttpDigestRealm string
Realm attribute for MD5-digest authentication.
Id double
Id.
LdapMemberof string
Ldap-Memberof.
LogicType string
Logic-Type. Valid values: or, and.
Matches List<ObjectUserGroupDynamicMappingMatch>
Match. The structure of match block is documented below.
MaxAccounts double
Maximum number of guest accounts that can be created for this group (0 means unlimited).
Member string
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
MobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
MultipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
Password string
Guest user password type. Valid values: auto-generate, specify, disable.
RedirUrl string
Redir-Url.
SmsCustomServer string
SMS server.
SmsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
SslvpnBookmarksGroup string
Sslvpn-Bookmarks-Group.
SslvpnCacheCleaner string
Sslvpn-Cache-Cleaner. Valid values: disable, enable.
SslvpnClientChecks List<string>
Sslvpn-Client-Check. Valid values: forticlient, forticlient-av, forticlient-fw, 3rdAV, 3rdFW.
SslvpnFtp string
Sslvpn-Ftp. Valid values: disable, enable.
SslvpnHttp string
Sslvpn-Http. Valid values: disable, enable.
SslvpnOsCheck string
Sslvpn-Os-Check. Valid values: disable, enable.
SslvpnOsCheckList ObjectUserGroupDynamicMappingSslvpnOsCheckList
Sslvpn-Os-Check-List. The structure of sslvpn_os_check_list block is documented below.
SslvpnPortal string
Sslvpn-Portal.
SslvpnPortalHeading string
Sslvpn-Portal-Heading.
SslvpnRdp string
Sslvpn-Rdp. Valid values: disable, enable.
SslvpnSamba string
Sslvpn-Samba. Valid values: disable, enable.
SslvpnSplitTunneling string
Sslvpn-Split-Tunneling. Valid values: disable, enable.
SslvpnSsh string
Sslvpn-Ssh. Valid values: disable, enable.
SslvpnTelnet string
Sslvpn-Telnet. Valid values: disable, enable.
SslvpnTunnel string
Sslvpn-Tunnel. Valid values: disable, enable.
SslvpnTunnelEndip string
Sslvpn-Tunnel-Endip.
SslvpnTunnelIpMode string
Sslvpn-Tunnel-Ip-Mode. Valid values: range, usrgrp.
SslvpnTunnelStartip string
Sslvpn-Tunnel-Startip.
SslvpnVirtualDesktop string
Sslvpn-Virtual-Desktop. Valid values: disable, enable.
SslvpnVnc string
Sslvpn-Vnc. Valid values: disable, enable.
SslvpnWebapp string
Sslvpn-Webapp. Valid values: disable, enable.
SsoAttributeValue string
Name of the RADIUS user group that this local user group represents.
UserId string
Guest user ID type. Valid values: email, auto-generate, specify.
UserName string
Enable/disable the guest user name entry. Valid values: disable, enable.
_scopes List<ObjectUserGroupDynamicMapping_Scope>
_Scope. The structure of _scope block is documented below.
AuthConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
AuthConcurrentValue float64
Maximum number of concurrent authenticated connections per user (0 - 100).
Authtimeout float64
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
Company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
Email string
Enable/disable the guest user email address field. Valid values: disable, enable.
Expire float64
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
ExpireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
GroupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
Guests []ObjectUserGroupDynamicMappingGuest
Guest. The structure of guest block is documented below.
HttpDigestRealm string
Realm attribute for MD5-digest authentication.
Id float64
Id.
LdapMemberof string
Ldap-Memberof.
LogicType string
Logic-Type. Valid values: or, and.
Matches []ObjectUserGroupDynamicMappingMatchType
Match. The structure of match block is documented below.
MaxAccounts float64
Maximum number of guest accounts that can be created for this group (0 means unlimited).
Member string
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
MobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
MultipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
Password string
Guest user password type. Valid values: auto-generate, specify, disable.
RedirUrl string
Redir-Url.
SmsCustomServer string
SMS server.
SmsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
SslvpnBookmarksGroup string
Sslvpn-Bookmarks-Group.
SslvpnCacheCleaner string
Sslvpn-Cache-Cleaner. Valid values: disable, enable.
SslvpnClientChecks []string
Sslvpn-Client-Check. Valid values: forticlient, forticlient-av, forticlient-fw, 3rdAV, 3rdFW.
SslvpnFtp string
Sslvpn-Ftp. Valid values: disable, enable.
SslvpnHttp string
Sslvpn-Http. Valid values: disable, enable.
SslvpnOsCheck string
Sslvpn-Os-Check. Valid values: disable, enable.
SslvpnOsCheckList ObjectUserGroupDynamicMappingSslvpnOsCheckList
Sslvpn-Os-Check-List. The structure of sslvpn_os_check_list block is documented below.
SslvpnPortal string
Sslvpn-Portal.
SslvpnPortalHeading string
Sslvpn-Portal-Heading.
SslvpnRdp string
Sslvpn-Rdp. Valid values: disable, enable.
SslvpnSamba string
Sslvpn-Samba. Valid values: disable, enable.
SslvpnSplitTunneling string
Sslvpn-Split-Tunneling. Valid values: disable, enable.
SslvpnSsh string
Sslvpn-Ssh. Valid values: disable, enable.
SslvpnTelnet string
Sslvpn-Telnet. Valid values: disable, enable.
SslvpnTunnel string
Sslvpn-Tunnel. Valid values: disable, enable.
SslvpnTunnelEndip string
Sslvpn-Tunnel-Endip.
SslvpnTunnelIpMode string
Sslvpn-Tunnel-Ip-Mode. Valid values: range, usrgrp.
SslvpnTunnelStartip string
Sslvpn-Tunnel-Startip.
SslvpnVirtualDesktop string
Sslvpn-Virtual-Desktop. Valid values: disable, enable.
SslvpnVnc string
Sslvpn-Vnc. Valid values: disable, enable.
SslvpnWebapp string
Sslvpn-Webapp. Valid values: disable, enable.
SsoAttributeValue string
Name of the RADIUS user group that this local user group represents.
UserId string
Guest user ID type. Valid values: email, auto-generate, specify.
UserName string
Enable/disable the guest user name entry. Valid values: disable, enable.
_scopes []ObjectUserGroupDynamicMapping_Scope
_Scope. The structure of _scope block is documented below.
_scopes List<ObjectUserGroupDynamicMapping_Scope>
_Scope. The structure of _scope block is documented below.
authConcurrentOverride String
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue Double
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout Double
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company String
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
email String
Enable/disable the guest user email address field. Valid values: disable, enable.
expire Double
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType String
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
groupType String
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests List<ObjectUserGroupDynamicMappingGuest>
Guest. The structure of guest block is documented below.
httpDigestRealm String
Realm attribute for MD5-digest authentication.
id Double
Id.
ldapMemberof String
Ldap-Memberof.
logicType String
Logic-Type. Valid values: or, and.
matches List<ObjectUserGroupDynamicMappingMatch>
Match. The structure of match block is documented below.
maxAccounts Double
Maximum number of guest accounts that can be created for this group (0 means unlimited).
member String
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone String
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd String
Enable/disable addition of multiple guests. Valid values: disable, enable.
password String
Guest user password type. Valid values: auto-generate, specify, disable.
redirUrl String
Redir-Url.
smsCustomServer String
SMS server.
smsServer String
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
String
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
sslvpnBookmarksGroup String
Sslvpn-Bookmarks-Group.
sslvpnCacheCleaner String
Sslvpn-Cache-Cleaner. Valid values: disable, enable.
sslvpnClientChecks List<String>
Sslvpn-Client-Check. Valid values: forticlient, forticlient-av, forticlient-fw, 3rdAV, 3rdFW.
sslvpnFtp String
Sslvpn-Ftp. Valid values: disable, enable.
sslvpnHttp String
Sslvpn-Http. Valid values: disable, enable.
sslvpnOsCheck String
Sslvpn-Os-Check. Valid values: disable, enable.
sslvpnOsCheckList ObjectUserGroupDynamicMappingSslvpnOsCheckList
Sslvpn-Os-Check-List. The structure of sslvpn_os_check_list block is documented below.
sslvpnPortal String
Sslvpn-Portal.
sslvpnPortalHeading String
Sslvpn-Portal-Heading.
sslvpnRdp String
Sslvpn-Rdp. Valid values: disable, enable.
sslvpnSamba String
Sslvpn-Samba. Valid values: disable, enable.
sslvpnSplitTunneling String
Sslvpn-Split-Tunneling. Valid values: disable, enable.
sslvpnSsh String
Sslvpn-Ssh. Valid values: disable, enable.
sslvpnTelnet String
Sslvpn-Telnet. Valid values: disable, enable.
sslvpnTunnel String
Sslvpn-Tunnel. Valid values: disable, enable.
sslvpnTunnelEndip String
Sslvpn-Tunnel-Endip.
sslvpnTunnelIpMode String
Sslvpn-Tunnel-Ip-Mode. Valid values: range, usrgrp.
sslvpnTunnelStartip String
Sslvpn-Tunnel-Startip.
sslvpnVirtualDesktop String
Sslvpn-Virtual-Desktop. Valid values: disable, enable.
sslvpnVnc String
Sslvpn-Vnc. Valid values: disable, enable.
sslvpnWebapp String
Sslvpn-Webapp. Valid values: disable, enable.
ssoAttributeValue String
Name of the RADIUS user group that this local user group represents.
userId String
Guest user ID type. Valid values: email, auto-generate, specify.
userName String
Enable/disable the guest user name entry. Valid values: disable, enable.
_scopes ObjectUserGroupDynamicMapping_Scope[]
_Scope. The structure of _scope block is documented below.
authConcurrentOverride string
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue number
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout number
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company string
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
email string
Enable/disable the guest user email address field. Valid values: disable, enable.
expire number
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType string
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
groupType string
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests ObjectUserGroupDynamicMappingGuest[]
Guest. The structure of guest block is documented below.
httpDigestRealm string
Realm attribute for MD5-digest authentication.
id number
Id.
ldapMemberof string
Ldap-Memberof.
logicType string
Logic-Type. Valid values: or, and.
matches ObjectUserGroupDynamicMappingMatch[]
Match. The structure of match block is documented below.
maxAccounts number
Maximum number of guest accounts that can be created for this group (0 means unlimited).
member string
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone string
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd string
Enable/disable addition of multiple guests. Valid values: disable, enable.
password string
Guest user password type. Valid values: auto-generate, specify, disable.
redirUrl string
Redir-Url.
smsCustomServer string
SMS server.
smsServer string
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
string
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
sslvpnBookmarksGroup string
Sslvpn-Bookmarks-Group.
sslvpnCacheCleaner string
Sslvpn-Cache-Cleaner. Valid values: disable, enable.
sslvpnClientChecks string[]
Sslvpn-Client-Check. Valid values: forticlient, forticlient-av, forticlient-fw, 3rdAV, 3rdFW.
sslvpnFtp string
Sslvpn-Ftp. Valid values: disable, enable.
sslvpnHttp string
Sslvpn-Http. Valid values: disable, enable.
sslvpnOsCheck string
Sslvpn-Os-Check. Valid values: disable, enable.
sslvpnOsCheckList ObjectUserGroupDynamicMappingSslvpnOsCheckList
Sslvpn-Os-Check-List. The structure of sslvpn_os_check_list block is documented below.
sslvpnPortal string
Sslvpn-Portal.
sslvpnPortalHeading string
Sslvpn-Portal-Heading.
sslvpnRdp string
Sslvpn-Rdp. Valid values: disable, enable.
sslvpnSamba string
Sslvpn-Samba. Valid values: disable, enable.
sslvpnSplitTunneling string
Sslvpn-Split-Tunneling. Valid values: disable, enable.
sslvpnSsh string
Sslvpn-Ssh. Valid values: disable, enable.
sslvpnTelnet string
Sslvpn-Telnet. Valid values: disable, enable.
sslvpnTunnel string
Sslvpn-Tunnel. Valid values: disable, enable.
sslvpnTunnelEndip string
Sslvpn-Tunnel-Endip.
sslvpnTunnelIpMode string
Sslvpn-Tunnel-Ip-Mode. Valid values: range, usrgrp.
sslvpnTunnelStartip string
Sslvpn-Tunnel-Startip.
sslvpnVirtualDesktop string
Sslvpn-Virtual-Desktop. Valid values: disable, enable.
sslvpnVnc string
Sslvpn-Vnc. Valid values: disable, enable.
sslvpnWebapp string
Sslvpn-Webapp. Valid values: disable, enable.
ssoAttributeValue string
Name of the RADIUS user group that this local user group represents.
userId string
Guest user ID type. Valid values: email, auto-generate, specify.
userName string
Enable/disable the guest user name entry. Valid values: disable, enable.
_scopes Sequence[ObjectUserGroupDynamicMapping_Scope]
_Scope. The structure of _scope block is documented below.
auth_concurrent_override str
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
auth_concurrent_value float
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout float
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company str
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
email str
Enable/disable the guest user email address field. Valid values: disable, enable.
expire float
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expire_type str
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
group_type str
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests Sequence[ObjectUserGroupDynamicMappingGuest]
Guest. The structure of guest block is documented below.
http_digest_realm str
Realm attribute for MD5-digest authentication.
id float
Id.
ldap_memberof str
Ldap-Memberof.
logic_type str
Logic-Type. Valid values: or, and.
matches Sequence[ObjectUserGroupDynamicMappingMatch]
Match. The structure of match block is documented below.
max_accounts float
Maximum number of guest accounts that can be created for this group (0 means unlimited).
member str
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobile_phone str
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multiple_guest_add str
Enable/disable addition of multiple guests. Valid values: disable, enable.
password str
Guest user password type. Valid values: auto-generate, specify, disable.
redir_url str
Redir-Url.
sms_custom_server str
SMS server.
sms_server str
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
str
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
sslvpn_bookmarks_group str
Sslvpn-Bookmarks-Group.
sslvpn_cache_cleaner str
Sslvpn-Cache-Cleaner. Valid values: disable, enable.
sslvpn_client_checks Sequence[str]
Sslvpn-Client-Check. Valid values: forticlient, forticlient-av, forticlient-fw, 3rdAV, 3rdFW.
sslvpn_ftp str
Sslvpn-Ftp. Valid values: disable, enable.
sslvpn_http str
Sslvpn-Http. Valid values: disable, enable.
sslvpn_os_check str
Sslvpn-Os-Check. Valid values: disable, enable.
sslvpn_os_check_list ObjectUserGroupDynamicMappingSslvpnOsCheckList
Sslvpn-Os-Check-List. The structure of sslvpn_os_check_list block is documented below.
sslvpn_portal str
Sslvpn-Portal.
sslvpn_portal_heading str
Sslvpn-Portal-Heading.
sslvpn_rdp str
Sslvpn-Rdp. Valid values: disable, enable.
sslvpn_samba str
Sslvpn-Samba. Valid values: disable, enable.
sslvpn_split_tunneling str
Sslvpn-Split-Tunneling. Valid values: disable, enable.
sslvpn_ssh str
Sslvpn-Ssh. Valid values: disable, enable.
sslvpn_telnet str
Sslvpn-Telnet. Valid values: disable, enable.
sslvpn_tunnel str
Sslvpn-Tunnel. Valid values: disable, enable.
sslvpn_tunnel_endip str
Sslvpn-Tunnel-Endip.
sslvpn_tunnel_ip_mode str
Sslvpn-Tunnel-Ip-Mode. Valid values: range, usrgrp.
sslvpn_tunnel_startip str
Sslvpn-Tunnel-Startip.
sslvpn_virtual_desktop str
Sslvpn-Virtual-Desktop. Valid values: disable, enable.
sslvpn_vnc str
Sslvpn-Vnc. Valid values: disable, enable.
sslvpn_webapp str
Sslvpn-Webapp. Valid values: disable, enable.
sso_attribute_value str
Name of the RADIUS user group that this local user group represents.
user_id str
Guest user ID type. Valid values: email, auto-generate, specify.
user_name str
Enable/disable the guest user name entry. Valid values: disable, enable.
_scopes List<Property Map>
_Scope. The structure of _scope block is documented below.
authConcurrentOverride String
Enable/disable overriding the global number of concurrent authentication sessions for this user group. Valid values: disable, enable.
authConcurrentValue Number
Maximum number of concurrent authenticated connections per user (0 - 100).
authtimeout Number
Authentication timeout in minutes for this user group. 0 to use the global user setting auth-timeout.
company String
Set the action for the company guest user field. Valid values: optional, mandatory, disabled.
email String
Enable/disable the guest user email address field. Valid values: disable, enable.
expire Number
Time in seconds before guest user accounts expire. (1 - 31536000 sec)
expireType String
Determine when the expiration countdown begins. Valid values: immediately, first-successful-login.
groupType String
Set the group to be for firewall authentication, FSSO, RSSO, or guest users. Valid values: firewall, directory-service, fsso-service, guest, rsso.
guests List<Property Map>
Guest. The structure of guest block is documented below.
httpDigestRealm String
Realm attribute for MD5-digest authentication.
id Number
Id.
ldapMemberof String
Ldap-Memberof.
logicType String
Logic-Type. Valid values: or, and.
matches List<Property Map>
Match. The structure of match block is documented below.
maxAccounts Number
Maximum number of guest accounts that can be created for this group (0 means unlimited).
member String
Names of users, peers, LDAP severs, or RADIUS servers to add to the user group.
mobilePhone String
Enable/disable the guest user mobile phone number field. Valid values: disable, enable.
multipleGuestAdd String
Enable/disable addition of multiple guests. Valid values: disable, enable.
password String
Guest user password type. Valid values: auto-generate, specify, disable.
redirUrl String
Redir-Url.
smsCustomServer String
SMS server.
smsServer String
Send SMS through FortiGuard or other external server. Valid values: fortiguard, custom.
String
Set the action for the sponsor guest user field. Valid values: optional, mandatory, disabled.
sslvpnBookmarksGroup String
Sslvpn-Bookmarks-Group.
sslvpnCacheCleaner String
Sslvpn-Cache-Cleaner. Valid values: disable, enable.
sslvpnClientChecks List<String>
Sslvpn-Client-Check. Valid values: forticlient, forticlient-av, forticlient-fw, 3rdAV, 3rdFW.
sslvpnFtp String
Sslvpn-Ftp. Valid values: disable, enable.
sslvpnHttp String
Sslvpn-Http. Valid values: disable, enable.
sslvpnOsCheck String
Sslvpn-Os-Check. Valid values: disable, enable.
sslvpnOsCheckList Property Map
Sslvpn-Os-Check-List. The structure of sslvpn_os_check_list block is documented below.
sslvpnPortal String
Sslvpn-Portal.
sslvpnPortalHeading String
Sslvpn-Portal-Heading.
sslvpnRdp String
Sslvpn-Rdp. Valid values: disable, enable.
sslvpnSamba String
Sslvpn-Samba. Valid values: disable, enable.
sslvpnSplitTunneling String
Sslvpn-Split-Tunneling. Valid values: disable, enable.
sslvpnSsh String
Sslvpn-Ssh. Valid values: disable, enable.
sslvpnTelnet String
Sslvpn-Telnet. Valid values: disable, enable.
sslvpnTunnel String
Sslvpn-Tunnel. Valid values: disable, enable.
sslvpnTunnelEndip String
Sslvpn-Tunnel-Endip.
sslvpnTunnelIpMode String
Sslvpn-Tunnel-Ip-Mode. Valid values: range, usrgrp.
sslvpnTunnelStartip String
Sslvpn-Tunnel-Startip.
sslvpnVirtualDesktop String
Sslvpn-Virtual-Desktop. Valid values: disable, enable.
sslvpnVnc String
Sslvpn-Vnc. Valid values: disable, enable.
sslvpnWebapp String
Sslvpn-Webapp. Valid values: disable, enable.
ssoAttributeValue String
Name of the RADIUS user group that this local user group represents.
userId String
Guest user ID type. Valid values: email, auto-generate, specify.
userName String
Enable/disable the guest user name entry. Valid values: disable, enable.

ObjectUserGroupDynamicMappingGuest
, ObjectUserGroupDynamicMappingGuestArgs

Comment string
Comment.
Company string
Set the action for the company guest user field.
Email string
Email.
Expiration string
Expire time.
Group string
Group.
Id double
Guest ID.
MobilePhone string
Mobile phone.
Name string
Guest name.
Passwords List<string>
Guest password.
string
Set the action for the sponsor guest user field.
UserId string
Guest ID.
Comment string
Comment.
Company string
Set the action for the company guest user field.
Email string
Email.
Expiration string
Expire time.
Group string
Group.
Id float64
Guest ID.
MobilePhone string
Mobile phone.
Name string
Guest name.
Passwords []string
Guest password.
string
Set the action for the sponsor guest user field.
UserId string
Guest ID.
comment String
Comment.
company String
Set the action for the company guest user field.
email String
Email.
expiration String
Expire time.
group String
Group.
id Double
Guest ID.
mobilePhone String
Mobile phone.
name String
Guest name.
passwords List<String>
Guest password.
String
Set the action for the sponsor guest user field.
userId String
Guest ID.
comment string
Comment.
company string
Set the action for the company guest user field.
email string
Email.
expiration string
Expire time.
group string
Group.
id number
Guest ID.
mobilePhone string
Mobile phone.
name string
Guest name.
passwords string[]
Guest password.
string
Set the action for the sponsor guest user field.
userId string
Guest ID.
comment str
Comment.
company str
Set the action for the company guest user field.
email str
Email.
expiration str
Expire time.
group str
Group.
id float
Guest ID.
mobile_phone str
Mobile phone.
name str
Guest name.
passwords Sequence[str]
Guest password.
str
Set the action for the sponsor guest user field.
user_id str
Guest ID.
comment String
Comment.
company String
Set the action for the company guest user field.
email String
Email.
expiration String
Expire time.
group String
Group.
id Number
Guest ID.
mobilePhone String
Mobile phone.
name String
Guest name.
passwords List<String>
Guest password.
String
Set the action for the sponsor guest user field.
userId String
Guest ID.

ObjectUserGroupDynamicMappingMatch
, ObjectUserGroupDynamicMappingMatchArgs

GroupName string
Name of matching user or group on remote authentication server.
Id double
ID.
ServerName string
Name of remote auth server.
_guiMeta string
_Gui_Meta.
GroupName string
Name of matching user or group on remote authentication server.
Id float64
ID.
ServerName string
Name of remote auth server.
_guiMeta string
_Gui_Meta.
_guiMeta String
_Gui_Meta.
groupName String
Name of matching user or group on remote authentication server.
id Double
ID.
serverName String
Name of remote auth server.
_guiMeta string
_Gui_Meta.
groupName string
Name of matching user or group on remote authentication server.
id number
ID.
serverName string
Name of remote auth server.
_gui_meta str
_Gui_Meta.
group_name str
Name of matching user or group on remote authentication server.
id float
ID.
server_name str
Name of remote auth server.
_guiMeta String
_Gui_Meta.
groupName String
Name of matching user or group on remote authentication server.
id Number
ID.
serverName String
Name of remote auth server.

ObjectUserGroupDynamicMappingSslvpnOsCheckList
, ObjectUserGroupDynamicMappingSslvpnOsCheckListArgs

Action string
Action. Valid values: allow, check-up-to-date, deny.
LatestPatchLevel string
Latest-Patch-Level.
Name string
Name.
Tolerance double
Tolerance.
Action string
Action. Valid values: allow, check-up-to-date, deny.
LatestPatchLevel string
Latest-Patch-Level.
Name string
Name.
Tolerance float64
Tolerance.
action String
Action. Valid values: allow, check-up-to-date, deny.
latestPatchLevel String
Latest-Patch-Level.
name String
Name.
tolerance Double
Tolerance.
action string
Action. Valid values: allow, check-up-to-date, deny.
latestPatchLevel string
Latest-Patch-Level.
name string
Name.
tolerance number
Tolerance.
action str
Action. Valid values: allow, check-up-to-date, deny.
latest_patch_level str
Latest-Patch-Level.
name str
Name.
tolerance float
Tolerance.
action String
Action. Valid values: allow, check-up-to-date, deny.
latestPatchLevel String
Latest-Patch-Level.
name String
Name.
tolerance Number
Tolerance.

ObjectUserGroupDynamicMapping_Scope
, ObjectUserGroupDynamicMapping_ScopeArgs

Name string
Name.
Vdom string
Vdom.
Name string
Name.
Vdom string
Vdom.
name String
Name.
vdom String
Vdom.
name string
Name.
vdom string
Vdom.
name str
Name.
vdom str
Vdom.
name String
Name.
vdom String
Vdom.

ObjectUserGroupGuest
, ObjectUserGroupGuestArgs

Comment string
Comment.
Company string
Set the action for the company guest user field.
Email string
Email.
Expiration string
Expire time.
Id double
Guest ID.
MobilePhone string
Mobile phone.
Name string
Guest name.
Passwords List<string>
Guest password.
string
Set the action for the sponsor guest user field.
UserId string
Guest ID.
Comment string
Comment.
Company string
Set the action for the company guest user field.
Email string
Email.
Expiration string
Expire time.
Id float64
Guest ID.
MobilePhone string
Mobile phone.
Name string
Guest name.
Passwords []string
Guest password.
string
Set the action for the sponsor guest user field.
UserId string
Guest ID.
comment String
Comment.
company String
Set the action for the company guest user field.
email String
Email.
expiration String
Expire time.
id Double
Guest ID.
mobilePhone String
Mobile phone.
name String
Guest name.
passwords List<String>
Guest password.
String
Set the action for the sponsor guest user field.
userId String
Guest ID.
comment string
Comment.
company string
Set the action for the company guest user field.
email string
Email.
expiration string
Expire time.
id number
Guest ID.
mobilePhone string
Mobile phone.
name string
Guest name.
passwords string[]
Guest password.
string
Set the action for the sponsor guest user field.
userId string
Guest ID.
comment str
Comment.
company str
Set the action for the company guest user field.
email str
Email.
expiration str
Expire time.
id float
Guest ID.
mobile_phone str
Mobile phone.
name str
Guest name.
passwords Sequence[str]
Guest password.
str
Set the action for the sponsor guest user field.
user_id str
Guest ID.
comment String
Comment.
company String
Set the action for the company guest user field.
email String
Email.
expiration String
Expire time.
id Number
Guest ID.
mobilePhone String
Mobile phone.
name String
Guest name.
passwords List<String>
Guest password.
String
Set the action for the sponsor guest user field.
userId String
Guest ID.

ObjectUserGroupMatch
, ObjectUserGroupMatchArgs

GroupName string
Name of matching user or group on remote authentication server.
Id double
ID.
ServerName string
Name of remote auth server.
_guiMeta string
_Gui_Meta.
GroupName string
Name of matching user or group on remote authentication server.
Id float64
ID.
ServerName string
Name of remote auth server.
_guiMeta string
_Gui_Meta.
_guiMeta String
_Gui_Meta.
groupName String
Name of matching user or group on remote authentication server.
id Double
ID.
serverName String
Name of remote auth server.
_guiMeta string
_Gui_Meta.
groupName string
Name of matching user or group on remote authentication server.
id number
ID.
serverName string
Name of remote auth server.
_gui_meta str
_Gui_Meta.
group_name str
Name of matching user or group on remote authentication server.
id float
ID.
server_name str
Name of remote auth server.
_guiMeta String
_Gui_Meta.
groupName String
Name of matching user or group on remote authentication server.
id Number
ID.
serverName String
Name of remote auth server.

Import

ObjectUser Group can be imported using any of these accepted formats:

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/objectUserGroup:ObjectUserGroup labelname {{name}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager