Skip to main content

Accessprofile

Properties

NameTypeDescriptionNotes
IdStringAccess profile ID.[optional] [readonly]
NameStringAccess profile name.[required]
DescriptionStringAccess profile description.[optional]
CreatedSystem.DateTimeDate and time when the access profile was created.[optional] [readonly]
ModifiedSystem.DateTimeDate and time when the access profile was last modified.[optional] [readonly]
EnabledBooleanIndicates whether the access profile is enabled. If it's enabled, you must include at least one entitlement.[optional] [default to $false]
OwnerOwnerreference[required]
SourceAccessprofilesourceref[required]
Entitlements[]EntitlementrefList of entitlements associated with the access profile. If enabled is false, this can be empty. Otherwise, it must contain at least one entitlement.[optional]
RequestableBooleanIndicates whether the access profile is requestable by access request. Currently, making an access profile non-requestable is only supported for customers enabled with the new Request Center. Otherwise, attempting to create an access profile with a value false in this field results in a 400 error.[optional] [default to $true]
AccessRequestConfigRequestability[optional]
RevocationRequestConfigRevocability[optional]
Segments[]StringList of segment IDs, if any, that the access profile is assigned to.[optional]
AccessModelMetadataAttributedtolist[optional]
ProvisioningCriteriaProvisioningcriterialevel1[optional]
AdditionalOwners[]AdditionalownerrefList of additional owner references beyond the primary owner. Each entry may be an identity (IDENTITY) or a governance group (GOVERNANCE_GROUP).[optional]

Examples

  • Prepare the resource
$Accessprofile = Initialize-Accessprofile  -Id 2c91808a7190d06e01719938fcd20792 `
-Name Employee-database-read-write `
-Description Collection of entitlements to read/write the employee database `
-Created 2021-03-01T22:32:58.104Z `
-Modified 2021-03-02T20:22:28.104Z `
-Enabled true `
-Owner null `
-Source null `
-Entitlements null `
-Requestable true `
-AccessRequestConfig null `
-RevocationRequestConfig null `
-Segments ["f7b1b8a3-5fed-4fd4-ad29-82014e137e19","29cb6c06-1da8-43ea-8be4-b3125f248f2a"] `
-AccessModelMetadata null `
-ProvisioningCriteria null `
-AdditionalOwners null
  • Convert the resource to JSON
$Accessprofile | ConvertTo-JSON

[Back to top]