Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Intersight Provider
  3. API Docs
  4. IamAppRegistration
intersight 1.0.65 published on Wednesday, May 7, 2025 by ciscodevnet
ciscodevnet/terraform-provider-intersight

intersight.IamAppRegistration

Explore with Pulumi AI

intersight logo
intersight 1.0.65 published on Wednesday, May 7, 2025 by ciscodevnet
ciscodevnet/terraform-provider-intersight

    AppRegistration encapsulates the meta-data values of a registered OAuth2 client application, as described in https://tools.ietf.org/html/rfc7591#section-2. Registered client applications have a set of metadata values associated with their client identifier at the Intersight authorization server, including the list of valid redirection URIs or a display name. The meta-data is used to specify how a client application can retrieve a OAuth2 Access Token and subsequently invoke Intersight API on behalf of this AppRegistration. To register an OAuth2 application, the following information must be provided.

    1. Application name
    2. An icon for the application
    3. URL to the application’s home page
    4. A short description of the application
    5. A list of redirect URLs When an AppRegistration is created, a unique OAuth2 clientId is generated and returned in the HTTP response.

    Create IamAppRegistration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IamAppRegistration(name: string, args?: IamAppRegistrationArgs, opts?: CustomResourceOptions);
    @overload
def IamAppRegistration(resource_name: str,
                       args: Optional[IamAppRegistrationArgs] = None,
                       opts: Optional[ResourceOptions] = None)

@overload
def IamAppRegistration(resource_name: str,
                       opts: Optional[ResourceOptions] = None,
                       account_moid: Optional[str] = None,
                       accounts: Optional[Sequence[IamAppRegistrationAccountArgs]] = None,
                       additional_properties: Optional[str] = None,
                       admin_status: Optional[str] = None,
                       ancestors: Optional[Sequence[IamAppRegistrationAncestorArgs]] = None,
                       class_id: Optional[str] = None,
                       client_applications: Optional[Sequence[IamAppRegistrationClientApplicationArgs]] = None,
                       client_id: Optional[str] = None,
                       client_name: Optional[str] = None,
                       client_secret: Optional[str] = None,
                       client_type: Optional[str] = None,
                       create_time: Optional[str] = None,
                       description: Optional[str] = None,
                       domain_group_moid: Optional[str] = None,
                       entity_id: Optional[str] = None,
                       expiry_date_time: Optional[str] = None,
                       grant_types: Optional[Sequence[str]] = None,
                       iam_app_registration_id: Optional[str] = None,
                       is_never_expiring: Optional[bool] = None,
                       last_used_ip: Optional[str] = None,
                       last_used_time: Optional[str] = None,
                       mod_time: Optional[str] = None,
                       moid: Optional[str] = None,
                       oauth_tokens: Optional[Sequence[IamAppRegistrationOauthTokenArgs]] = None,
                       object_type: Optional[str] = None,
                       oper_status: Optional[str] = None,
                       owners: Optional[Sequence[str]] = None,
                       parents: Optional[Sequence[IamAppRegistrationParentArgs]] = None,
                       permission_resources: Optional[Sequence[IamAppRegistrationPermissionResourceArgs]] = None,
                       permissions: Optional[Sequence[IamAppRegistrationPermissionArgs]] = None,
                       redirect_uris: Optional[Sequence[str]] = None,
                       renew_client_secret: Optional[bool] = None,
                       response_types: Optional[Sequence[str]] = None,
                       revocation_timestamp: Optional[str] = None,
                       revoke: Optional[bool] = None,
                       roles: Optional[Sequence[IamAppRegistrationRoleArgs]] = None,
                       scopes: Optional[Sequence[IamAppRegistrationScopeArgs]] = None,
                       security_holders: Optional[Sequence[IamAppRegistrationSecurityHolderArgs]] = None,
                       shared_scope: Optional[str] = None,
                       show_consent_screen: Optional[bool] = None,
                       start_time: Optional[str] = None,
                       tags: Optional[Sequence[IamAppRegistrationTagArgs]] = None,
                       token_expiry: Optional[str] = None,
                       users: Optional[Sequence[IamAppRegistrationUserArgs]] = None,
                       version_contexts: Optional[Sequence[IamAppRegistrationVersionContextArgs]] = None)
    func NewIamAppRegistration(ctx *Context, name string, args *IamAppRegistrationArgs, opts ...ResourceOption) (*IamAppRegistration, error)
    public IamAppRegistration(string name, IamAppRegistrationArgs? args = null, CustomResourceOptions? opts = null)
    public IamAppRegistration(String name, IamAppRegistrationArgs args)
public IamAppRegistration(String name, IamAppRegistrationArgs args, CustomResourceOptions options)

    type: intersight:IamAppRegistration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args IamAppRegistrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IamAppRegistrationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IamAppRegistrationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IamAppRegistrationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IamAppRegistrationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var iamAppRegistrationResource = new Intersight.IamAppRegistration("iamAppRegistrationResource", new()
{
    AccountMoid = "string",
    Accounts = new[]
    {
        new Intersight.Inputs.IamAppRegistrationAccountArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    AdditionalProperties = "string",
    AdminStatus = "string",
    Ancestors = new[]
    {
        new Intersight.Inputs.IamAppRegistrationAncestorArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    ClassId = "string",
    ClientApplications = new[]
    {
        new Intersight.Inputs.IamAppRegistrationClientApplicationArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    ClientId = "string",
    ClientName = "string",
    ClientSecret = "string",
    ClientType = "string",
    CreateTime = "string",
    Description = "string",
    DomainGroupMoid = "string",
    EntityId = "string",
    ExpiryDateTime = "string",
    GrantTypes = new[]
    {
        "string",
    },
    IamAppRegistrationId = "string",
    IsNeverExpiring = false,
    LastUsedIp = "string",
    LastUsedTime = "string",
    ModTime = "string",
    Moid = "string",
    OauthTokens = new[]
    {
        new Intersight.Inputs.IamAppRegistrationOauthTokenArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    ObjectType = "string",
    OperStatus = "string",
    Owners = new[]
    {
        "string",
    },
    Parents = new[]
    {
        new Intersight.Inputs.IamAppRegistrationParentArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    PermissionResources = new[]
    {
        new Intersight.Inputs.IamAppRegistrationPermissionResourceArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    Permissions = new[]
    {
        new Intersight.Inputs.IamAppRegistrationPermissionArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    RedirectUris = new[]
    {
        "string",
    },
    RenewClientSecret = false,
    ResponseTypes = new[]
    {
        "string",
    },
    RevocationTimestamp = "string",
    Revoke = false,
    Roles = new[]
    {
        new Intersight.Inputs.IamAppRegistrationRoleArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    Scopes = new[]
    {
        new Intersight.Inputs.IamAppRegistrationScopeArgs
        {
            AccountAccessControlId = "string",
            AdditionalProperties = "string",
            ClassId = "string",
            ObjectType = "string",
            RequestIdentifier = "string",
            SwitchedFromAccounts = new[]
            {
                new Intersight.Inputs.IamAppRegistrationScopeSwitchedFromAccountArgs
                {
                    AccountId = "string",
                    AdditionalProperties = "string",
                    ClassId = "string",
                    ObjectType = "string",
                    PermissionId = "string",
                },
            },
            SwitchedToAccounts = new[]
            {
                new Intersight.Inputs.IamAppRegistrationScopeSwitchedToAccountArgs
                {
                    AccountId = "string",
                    AdditionalProperties = "string",
                    ClassId = "string",
                    ObjectType = "string",
                    PermissionId = "string",
                },
            },
        },
    },
    SecurityHolders = new[]
    {
        new Intersight.Inputs.IamAppRegistrationSecurityHolderArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    SharedScope = "string",
    ShowConsentScreen = false,
    StartTime = "string",
    Tags = new[]
    {
        new Intersight.Inputs.IamAppRegistrationTagArgs
        {
            AdditionalProperties = "string",
            Key = "string",
            Value = "string",
        },
    },
    TokenExpiry = "string",
    Users = new[]
    {
        new Intersight.Inputs.IamAppRegistrationUserArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            Moid = "string",
            ObjectType = "string",
            Selector = "string",
        },
    },
    VersionContexts = new[]
    {
        new Intersight.Inputs.IamAppRegistrationVersionContextArgs
        {
            AdditionalProperties = "string",
            ClassId = "string",
            InterestedMos = new[]
            {
                new Intersight.Inputs.IamAppRegistrationVersionContextInterestedMoArgs
                {
                    AdditionalProperties = "string",
                    ClassId = "string",
                    Moid = "string",
                    ObjectType = "string",
                    Selector = "string",
                },
            },
            MarkedForDeletion = false,
            NrVersion = "string",
            ObjectType = "string",
            RefMos = new[]
            {
                new Intersight.Inputs.IamAppRegistrationVersionContextRefMoArgs
                {
                    AdditionalProperties = "string",
                    ClassId = "string",
                    Moid = "string",
                    ObjectType = "string",
                    Selector = "string",
                },
            },
            Timestamp = "string",
            VersionType = "string",
        },
    },
});

    example, err := intersight.NewIamAppRegistration(ctx, "iamAppRegistrationResource", &intersight.IamAppRegistrationArgs{
	AccountMoid: pulumi.String("string"),
	Accounts: intersight.IamAppRegistrationAccountArray{
		&intersight.IamAppRegistrationAccountArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	AdditionalProperties: pulumi.String("string"),
	AdminStatus:          pulumi.String("string"),
	Ancestors: intersight.IamAppRegistrationAncestorArray{
		&intersight.IamAppRegistrationAncestorArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	ClassId: pulumi.String("string"),
	ClientApplications: intersight.IamAppRegistrationClientApplicationArray{
		&intersight.IamAppRegistrationClientApplicationArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	ClientId:        pulumi.String("string"),
	ClientName:      pulumi.String("string"),
	ClientSecret:    pulumi.String("string"),
	ClientType:      pulumi.String("string"),
	CreateTime:      pulumi.String("string"),
	Description:     pulumi.String("string"),
	DomainGroupMoid: pulumi.String("string"),
	EntityId:        pulumi.String("string"),
	ExpiryDateTime:  pulumi.String("string"),
	GrantTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	IamAppRegistrationId: pulumi.String("string"),
	IsNeverExpiring:      pulumi.Bool(false),
	LastUsedIp:           pulumi.String("string"),
	LastUsedTime:         pulumi.String("string"),
	ModTime:              pulumi.String("string"),
	Moid:                 pulumi.String("string"),
	OauthTokens: intersight.IamAppRegistrationOauthTokenArray{
		&intersight.IamAppRegistrationOauthTokenArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	ObjectType: pulumi.String("string"),
	OperStatus: pulumi.String("string"),
	Owners: pulumi.StringArray{
		pulumi.String("string"),
	},
	Parents: intersight.IamAppRegistrationParentArray{
		&intersight.IamAppRegistrationParentArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	PermissionResources: intersight.IamAppRegistrationPermissionResourceArray{
		&intersight.IamAppRegistrationPermissionResourceArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	Permissions: intersight.IamAppRegistrationPermissionArray{
		&intersight.IamAppRegistrationPermissionArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	RedirectUris: pulumi.StringArray{
		pulumi.String("string"),
	},
	RenewClientSecret: pulumi.Bool(false),
	ResponseTypes: pulumi.StringArray{
		pulumi.String("string"),
	},
	RevocationTimestamp: pulumi.String("string"),
	Revoke:              pulumi.Bool(false),
	Roles: intersight.IamAppRegistrationRoleArray{
		&intersight.IamAppRegistrationRoleArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	Scopes: intersight.IamAppRegistrationScopeArray{
		&intersight.IamAppRegistrationScopeArgs{
			AccountAccessControlId: pulumi.String("string"),
			AdditionalProperties:   pulumi.String("string"),
			ClassId:                pulumi.String("string"),
			ObjectType:             pulumi.String("string"),
			RequestIdentifier:      pulumi.String("string"),
			SwitchedFromAccounts: intersight.IamAppRegistrationScopeSwitchedFromAccountArray{
				&intersight.IamAppRegistrationScopeSwitchedFromAccountArgs{
					AccountId:            pulumi.String("string"),
					AdditionalProperties: pulumi.String("string"),
					ClassId:              pulumi.String("string"),
					ObjectType:           pulumi.String("string"),
					PermissionId:         pulumi.String("string"),
				},
			},
			SwitchedToAccounts: intersight.IamAppRegistrationScopeSwitchedToAccountArray{
				&intersight.IamAppRegistrationScopeSwitchedToAccountArgs{
					AccountId:            pulumi.String("string"),
					AdditionalProperties: pulumi.String("string"),
					ClassId:              pulumi.String("string"),
					ObjectType:           pulumi.String("string"),
					PermissionId:         pulumi.String("string"),
				},
			},
		},
	},
	SecurityHolders: intersight.IamAppRegistrationSecurityHolderArray{
		&intersight.IamAppRegistrationSecurityHolderArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	SharedScope:       pulumi.String("string"),
	ShowConsentScreen: pulumi.Bool(false),
	StartTime:         pulumi.String("string"),
	Tags: intersight.IamAppRegistrationTagArray{
		&intersight.IamAppRegistrationTagArgs{
			AdditionalProperties: pulumi.String("string"),
			Key:                  pulumi.String("string"),
			Value:                pulumi.String("string"),
		},
	},
	TokenExpiry: pulumi.String("string"),
	Users: intersight.IamAppRegistrationUserArray{
		&intersight.IamAppRegistrationUserArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			Moid:                 pulumi.String("string"),
			ObjectType:           pulumi.String("string"),
			Selector:             pulumi.String("string"),
		},
	},
	VersionContexts: intersight.IamAppRegistrationVersionContextArray{
		&intersight.IamAppRegistrationVersionContextArgs{
			AdditionalProperties: pulumi.String("string"),
			ClassId:              pulumi.String("string"),
			InterestedMos: intersight.IamAppRegistrationVersionContextInterestedMoArray{
				&intersight.IamAppRegistrationVersionContextInterestedMoArgs{
					AdditionalProperties: pulumi.String("string"),
					ClassId:              pulumi.String("string"),
					Moid:                 pulumi.String("string"),
					ObjectType:           pulumi.String("string"),
					Selector:             pulumi.String("string"),
				},
			},
			MarkedForDeletion: pulumi.Bool(false),
			NrVersion:         pulumi.String("string"),
			ObjectType:        pulumi.String("string"),
			RefMos: intersight.IamAppRegistrationVersionContextRefMoArray{
				&intersight.IamAppRegistrationVersionContextRefMoArgs{
					AdditionalProperties: pulumi.String("string"),
					ClassId:              pulumi.String("string"),
					Moid:                 pulumi.String("string"),
					ObjectType:           pulumi.String("string"),
					Selector:             pulumi.String("string"),
				},
			},
			Timestamp:   pulumi.String("string"),
			VersionType: pulumi.String("string"),
		},
	},
})

    var iamAppRegistrationResource = new IamAppRegistration("iamAppRegistrationResource", IamAppRegistrationArgs.builder()
    .accountMoid("string")
    .accounts(IamAppRegistrationAccountArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .additionalProperties("string")
    .adminStatus("string")
    .ancestors(IamAppRegistrationAncestorArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .classId("string")
    .clientApplications(IamAppRegistrationClientApplicationArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .clientId("string")
    .clientName("string")
    .clientSecret("string")
    .clientType("string")
    .createTime("string")
    .description("string")
    .domainGroupMoid("string")
    .entityId("string")
    .expiryDateTime("string")
    .grantTypes("string")
    .iamAppRegistrationId("string")
    .isNeverExpiring(false)
    .lastUsedIp("string")
    .lastUsedTime("string")
    .modTime("string")
    .moid("string")
    .oauthTokens(IamAppRegistrationOauthTokenArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .objectType("string")
    .operStatus("string")
    .owners("string")
    .parents(IamAppRegistrationParentArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .permissionResources(IamAppRegistrationPermissionResourceArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .permissions(IamAppRegistrationPermissionArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .redirectUris("string")
    .renewClientSecret(false)
    .responseTypes("string")
    .revocationTimestamp("string")
    .revoke(false)
    .roles(IamAppRegistrationRoleArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .scopes(IamAppRegistrationScopeArgs.builder()
        .accountAccessControlId("string")
        .additionalProperties("string")
        .classId("string")
        .objectType("string")
        .requestIdentifier("string")
        .switchedFromAccounts(IamAppRegistrationScopeSwitchedFromAccountArgs.builder()
            .accountId("string")
            .additionalProperties("string")
            .classId("string")
            .objectType("string")
            .permissionId("string")
            .build())
        .switchedToAccounts(IamAppRegistrationScopeSwitchedToAccountArgs.builder()
            .accountId("string")
            .additionalProperties("string")
            .classId("string")
            .objectType("string")
            .permissionId("string")
            .build())
        .build())
    .securityHolders(IamAppRegistrationSecurityHolderArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .sharedScope("string")
    .showConsentScreen(false)
    .startTime("string")
    .tags(IamAppRegistrationTagArgs.builder()
        .additionalProperties("string")
        .key("string")
        .value("string")
        .build())
    .tokenExpiry("string")
    .users(IamAppRegistrationUserArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .moid("string")
        .objectType("string")
        .selector("string")
        .build())
    .versionContexts(IamAppRegistrationVersionContextArgs.builder()
        .additionalProperties("string")
        .classId("string")
        .interestedMos(IamAppRegistrationVersionContextInterestedMoArgs.builder()
            .additionalProperties("string")
            .classId("string")
            .moid("string")
            .objectType("string")
            .selector("string")
            .build())
        .markedForDeletion(false)
        .nrVersion("string")
        .objectType("string")
        .refMos(IamAppRegistrationVersionContextRefMoArgs.builder()
            .additionalProperties("string")
            .classId("string")
            .moid("string")
            .objectType("string")
            .selector("string")
            .build())
        .timestamp("string")
        .versionType("string")
        .build())
    .build());

    iam_app_registration_resource = intersight.IamAppRegistration("iamAppRegistrationResource",
    account_moid="string",
    accounts=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    additional_properties="string",
    admin_status="string",
    ancestors=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    class_id="string",
    client_applications=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    client_id="string",
    client_name="string",
    client_secret="string",
    client_type="string",
    create_time="string",
    description="string",
    domain_group_moid="string",
    entity_id="string",
    expiry_date_time="string",
    grant_types=["string"],
    iam_app_registration_id="string",
    is_never_expiring=False,
    last_used_ip="string",
    last_used_time="string",
    mod_time="string",
    moid="string",
    oauth_tokens=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    object_type="string",
    oper_status="string",
    owners=["string"],
    parents=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    permission_resources=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    permissions=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    redirect_uris=["string"],
    renew_client_secret=False,
    response_types=["string"],
    revocation_timestamp="string",
    revoke=False,
    roles=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    scopes=[{
        "account_access_control_id": "string",
        "additional_properties": "string",
        "class_id": "string",
        "object_type": "string",
        "request_identifier": "string",
        "switched_from_accounts": [{
            "account_id": "string",
            "additional_properties": "string",
            "class_id": "string",
            "object_type": "string",
            "permission_id": "string",
        }],
        "switched_to_accounts": [{
            "account_id": "string",
            "additional_properties": "string",
            "class_id": "string",
            "object_type": "string",
            "permission_id": "string",
        }],
    }],
    security_holders=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    shared_scope="string",
    show_consent_screen=False,
    start_time="string",
    tags=[{
        "additional_properties": "string",
        "key": "string",
        "value": "string",
    }],
    token_expiry="string",
    users=[{
        "additional_properties": "string",
        "class_id": "string",
        "moid": "string",
        "object_type": "string",
        "selector": "string",
    }],
    version_contexts=[{
        "additional_properties": "string",
        "class_id": "string",
        "interested_mos": [{
            "additional_properties": "string",
            "class_id": "string",
            "moid": "string",
            "object_type": "string",
            "selector": "string",
        }],
        "marked_for_deletion": False,
        "nr_version": "string",
        "object_type": "string",
        "ref_mos": [{
            "additional_properties": "string",
            "class_id": "string",
            "moid": "string",
            "object_type": "string",
            "selector": "string",
        }],
        "timestamp": "string",
        "version_type": "string",
    }])

    const iamAppRegistrationResource = new intersight.IamAppRegistration("iamAppRegistrationResource", {
    accountMoid: "string",
    accounts: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    additionalProperties: "string",
    adminStatus: "string",
    ancestors: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    classId: "string",
    clientApplications: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    clientId: "string",
    clientName: "string",
    clientSecret: "string",
    clientType: "string",
    createTime: "string",
    description: "string",
    domainGroupMoid: "string",
    entityId: "string",
    expiryDateTime: "string",
    grantTypes: ["string"],
    iamAppRegistrationId: "string",
    isNeverExpiring: false,
    lastUsedIp: "string",
    lastUsedTime: "string",
    modTime: "string",
    moid: "string",
    oauthTokens: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    objectType: "string",
    operStatus: "string",
    owners: ["string"],
    parents: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    permissionResources: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    permissions: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    redirectUris: ["string"],
    renewClientSecret: false,
    responseTypes: ["string"],
    revocationTimestamp: "string",
    revoke: false,
    roles: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    scopes: [{
        accountAccessControlId: "string",
        additionalProperties: "string",
        classId: "string",
        objectType: "string",
        requestIdentifier: "string",
        switchedFromAccounts: [{
            accountId: "string",
            additionalProperties: "string",
            classId: "string",
            objectType: "string",
            permissionId: "string",
        }],
        switchedToAccounts: [{
            accountId: "string",
            additionalProperties: "string",
            classId: "string",
            objectType: "string",
            permissionId: "string",
        }],
    }],
    securityHolders: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    sharedScope: "string",
    showConsentScreen: false,
    startTime: "string",
    tags: [{
        additionalProperties: "string",
        key: "string",
        value: "string",
    }],
    tokenExpiry: "string",
    users: [{
        additionalProperties: "string",
        classId: "string",
        moid: "string",
        objectType: "string",
        selector: "string",
    }],
    versionContexts: [{
        additionalProperties: "string",
        classId: "string",
        interestedMos: [{
            additionalProperties: "string",
            classId: "string",
            moid: "string",
            objectType: "string",
            selector: "string",
        }],
        markedForDeletion: false,
        nrVersion: "string",
        objectType: "string",
        refMos: [{
            additionalProperties: "string",
            classId: "string",
            moid: "string",
            objectType: "string",
            selector: "string",
        }],
        timestamp: "string",
        versionType: "string",
    }],
});

    type: intersight:IamAppRegistration
properties:
    accountMoid: string
    accounts:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    additionalProperties: string
    adminStatus: string
    ancestors:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    classId: string
    clientApplications:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    clientId: string
    clientName: string
    clientSecret: string
    clientType: string
    createTime: string
    description: string
    domainGroupMoid: string
    entityId: string
    expiryDateTime: string
    grantTypes:
        - string
    iamAppRegistrationId: string
    isNeverExpiring: false
    lastUsedIp: string
    lastUsedTime: string
    modTime: string
    moid: string
    oauthTokens:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    objectType: string
    operStatus: string
    owners:
        - string
    parents:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    permissionResources:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    permissions:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    redirectUris:
        - string
    renewClientSecret: false
    responseTypes:
        - string
    revocationTimestamp: string
    revoke: false
    roles:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    scopes:
        - accountAccessControlId: string
          additionalProperties: string
          classId: string
          objectType: string
          requestIdentifier: string
          switchedFromAccounts:
            - accountId: string
              additionalProperties: string
              classId: string
              objectType: string
              permissionId: string
          switchedToAccounts:
            - accountId: string
              additionalProperties: string
              classId: string
              objectType: string
              permissionId: string
    securityHolders:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    sharedScope: string
    showConsentScreen: false
    startTime: string
    tags:
        - additionalProperties: string
          key: string
          value: string
    tokenExpiry: string
    users:
        - additionalProperties: string
          classId: string
          moid: string
          objectType: string
          selector: string
    versionContexts:
        - additionalProperties: string
          classId: string
          interestedMos:
            - additionalProperties: string
              classId: string
              moid: string
              objectType: string
              selector: string
          markedForDeletion: false
          nrVersion: string
          objectType: string
          refMos:
            - additionalProperties: string
              classId: string
              moid: string
              objectType: string
              selector: string
          timestamp: string
          versionType: string

    IamAppRegistration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IamAppRegistration resource accepts the following input properties:

    AccountMoid string
    (ReadOnly) The Account ID for this managed object.
    Accounts List<IamAppRegistrationAccount>
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    AdditionalProperties string
    AdminStatus string
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    Ancestors List<IamAppRegistrationAncestor>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    ClientApplications List<IamAppRegistrationClientApplication>
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    ClientId string
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    ClientName string
    App Registration name specified by user.
    ClientSecret string
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    ClientType string
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    CreateTime string
    (ReadOnly) The time when this managed object was created.
    Description string
    Description of the application.
    DomainGroupMoid string
    (ReadOnly) The DomainGroup ID for this managed object.
    EntityId string
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    ExpiryDateTime string
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    GrantTypes List<string>
    (Array of schema.TypeString) -
    IamAppRegistrationId string
    IsNeverExpiring bool
    Used to mark the App Registration as a never-expiring App Registration.
    LastUsedIp string
    (ReadOnly) The ip address from which the App Registration was last used.
    LastUsedTime string
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    ModTime string
    (ReadOnly) The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    OauthTokens List<IamAppRegistrationOauthToken>
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OperStatus string
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    Owners List<string>
    (Array of schema.TypeString) -(ReadOnly)
    Parents List<IamAppRegistrationParent>
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    PermissionResources List<IamAppRegistrationPermissionResource>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    Permissions List<IamAppRegistrationPermission>
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    RedirectUris List<string>
    (Array of schema.TypeString) -
    RenewClientSecret bool
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    ResponseTypes List<string>
    (Array of schema.TypeString) -
    RevocationTimestamp string
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    Revoke bool
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    Roles List<IamAppRegistrationRole>
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    Scopes List<IamAppRegistrationScope>
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    SecurityHolders List<IamAppRegistrationSecurityHolder>
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    SharedScope string
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    ShowConsentScreen bool
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    StartTime string
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    Tags List<IamAppRegistrationTag>
    This complex property has following sub-properties:
    TokenExpiry string
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    Users List<IamAppRegistrationUser>
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    VersionContexts List<IamAppRegistrationVersionContext>
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    AccountMoid string
    (ReadOnly) The Account ID for this managed object.
    Accounts []IamAppRegistrationAccountArgs
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    AdditionalProperties string
    AdminStatus string
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    Ancestors []IamAppRegistrationAncestorArgs
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    ClientApplications []IamAppRegistrationClientApplicationArgs
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    ClientId string
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    ClientName string
    App Registration name specified by user.
    ClientSecret string
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    ClientType string
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    CreateTime string
    (ReadOnly) The time when this managed object was created.
    Description string
    Description of the application.
    DomainGroupMoid string
    (ReadOnly) The DomainGroup ID for this managed object.
    EntityId string
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    ExpiryDateTime string
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    GrantTypes []string
    (Array of schema.TypeString) -
    IamAppRegistrationId string
    IsNeverExpiring bool
    Used to mark the App Registration as a never-expiring App Registration.
    LastUsedIp string
    (ReadOnly) The ip address from which the App Registration was last used.
    LastUsedTime string
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    ModTime string
    (ReadOnly) The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    OauthTokens []IamAppRegistrationOauthTokenArgs
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OperStatus string
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    Owners []string
    (Array of schema.TypeString) -(ReadOnly)
    Parents []IamAppRegistrationParentArgs
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    PermissionResources []IamAppRegistrationPermissionResourceArgs
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    Permissions []IamAppRegistrationPermissionArgs
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    RedirectUris []string
    (Array of schema.TypeString) -
    RenewClientSecret bool
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    ResponseTypes []string
    (Array of schema.TypeString) -
    RevocationTimestamp string
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    Revoke bool
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    Roles []IamAppRegistrationRoleArgs
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    Scopes []IamAppRegistrationScopeArgs
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    SecurityHolders []IamAppRegistrationSecurityHolderArgs
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    SharedScope string
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    ShowConsentScreen bool
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    StartTime string
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    Tags []IamAppRegistrationTagArgs
    This complex property has following sub-properties:
    TokenExpiry string
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    Users []IamAppRegistrationUserArgs
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    VersionContexts []IamAppRegistrationVersionContextArgs
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    accountMoid String
    (ReadOnly) The Account ID for this managed object.
    accounts List<IamAppRegistrationAccount>
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additionalProperties String
    adminStatus String
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors List<IamAppRegistrationAncestor>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    clientApplications List<IamAppRegistrationClientApplication>
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    clientId String
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    clientName String
    App Registration name specified by user.
    clientSecret String
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    clientType String
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    createTime String
    (ReadOnly) The time when this managed object was created.
    description String
    Description of the application.
    domainGroupMoid String
    (ReadOnly) The DomainGroup ID for this managed object.
    entityId String
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiryDateTime String
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grantTypes List<String>
    (Array of schema.TypeString) -
    iamAppRegistrationId String
    isNeverExpiring Boolean
    Used to mark the App Registration as a never-expiring App Registration.
    lastUsedIp String
    (ReadOnly) The ip address from which the App Registration was last used.
    lastUsedTime String
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    modTime String
    (ReadOnly) The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    oauthTokens List<IamAppRegistrationOauthToken>
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    operStatus String
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners List<String>
    (Array of schema.TypeString) -(ReadOnly)
    parents List<IamAppRegistrationParent>
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permissionResources List<IamAppRegistrationPermissionResource>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions List<IamAppRegistrationPermission>
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirectUris List<String>
    (Array of schema.TypeString) -
    renewClientSecret Boolean
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    responseTypes List<String>
    (Array of schema.TypeString) -
    revocationTimestamp String
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke Boolean
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles List<IamAppRegistrationRole>
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes List<IamAppRegistrationScope>
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    securityHolders List<IamAppRegistrationSecurityHolder>
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    sharedScope String
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    showConsentScreen Boolean
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    startTime String
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags List<IamAppRegistrationTag>
    This complex property has following sub-properties:
    tokenExpiry String
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users List<IamAppRegistrationUser>
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    versionContexts List<IamAppRegistrationVersionContext>
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    accountMoid string
    (ReadOnly) The Account ID for this managed object.
    accounts IamAppRegistrationAccount[]
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additionalProperties string
    adminStatus string
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors IamAppRegistrationAncestor[]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    clientApplications IamAppRegistrationClientApplication[]
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    clientId string
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    clientName string
    App Registration name specified by user.
    clientSecret string
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    clientType string
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    createTime string
    (ReadOnly) The time when this managed object was created.
    description string
    Description of the application.
    domainGroupMoid string
    (ReadOnly) The DomainGroup ID for this managed object.
    entityId string
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiryDateTime string
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grantTypes string[]
    (Array of schema.TypeString) -
    iamAppRegistrationId string
    isNeverExpiring boolean
    Used to mark the App Registration as a never-expiring App Registration.
    lastUsedIp string
    (ReadOnly) The ip address from which the App Registration was last used.
    lastUsedTime string
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    modTime string
    (ReadOnly) The time when this managed object was last modified.
    moid string
    The unique identifier of this Managed Object instance.
    oauthTokens IamAppRegistrationOauthToken[]
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    operStatus string
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners string[]
    (Array of schema.TypeString) -(ReadOnly)
    parents IamAppRegistrationParent[]
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permissionResources IamAppRegistrationPermissionResource[]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions IamAppRegistrationPermission[]
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirectUris string[]
    (Array of schema.TypeString) -
    renewClientSecret boolean
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    responseTypes string[]
    (Array of schema.TypeString) -
    revocationTimestamp string
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke boolean
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles IamAppRegistrationRole[]
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes IamAppRegistrationScope[]
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    securityHolders IamAppRegistrationSecurityHolder[]
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    sharedScope string
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    showConsentScreen boolean
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    startTime string
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags IamAppRegistrationTag[]
    This complex property has following sub-properties:
    tokenExpiry string
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users IamAppRegistrationUser[]
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    versionContexts IamAppRegistrationVersionContext[]
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    account_moid str
    (ReadOnly) The Account ID for this managed object.
    accounts Sequence[IamAppRegistrationAccountArgs]
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additional_properties str
    admin_status str
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors Sequence[IamAppRegistrationAncestorArgs]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    client_applications Sequence[IamAppRegistrationClientApplicationArgs]
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    client_id str
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    client_name str
    App Registration name specified by user.
    client_secret str
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    client_type str
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    create_time str
    (ReadOnly) The time when this managed object was created.
    description str
    Description of the application.
    domain_group_moid str
    (ReadOnly) The DomainGroup ID for this managed object.
    entity_id str
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiry_date_time str
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grant_types Sequence[str]
    (Array of schema.TypeString) -
    iam_app_registration_id str
    is_never_expiring bool
    Used to mark the App Registration as a never-expiring App Registration.
    last_used_ip str
    (ReadOnly) The ip address from which the App Registration was last used.
    last_used_time str
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    mod_time str
    (ReadOnly) The time when this managed object was last modified.
    moid str
    The unique identifier of this Managed Object instance.
    oauth_tokens Sequence[IamAppRegistrationOauthTokenArgs]
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    oper_status str
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners Sequence[str]
    (Array of schema.TypeString) -(ReadOnly)
    parents Sequence[IamAppRegistrationParentArgs]
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permission_resources Sequence[IamAppRegistrationPermissionResourceArgs]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions Sequence[IamAppRegistrationPermissionArgs]
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirect_uris Sequence[str]
    (Array of schema.TypeString) -
    renew_client_secret bool
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    response_types Sequence[str]
    (Array of schema.TypeString) -
    revocation_timestamp str
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke bool
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles Sequence[IamAppRegistrationRoleArgs]
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes Sequence[IamAppRegistrationScopeArgs]
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    security_holders Sequence[IamAppRegistrationSecurityHolderArgs]
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    shared_scope str
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    show_consent_screen bool
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    start_time str
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags Sequence[IamAppRegistrationTagArgs]
    This complex property has following sub-properties:
    token_expiry str
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users Sequence[IamAppRegistrationUserArgs]
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    version_contexts Sequence[IamAppRegistrationVersionContextArgs]
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    accountMoid String
    (ReadOnly) The Account ID for this managed object.
    accounts List<Property Map>
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additionalProperties String
    adminStatus String
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors List<Property Map>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    clientApplications List<Property Map>
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    clientId String
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    clientName String
    App Registration name specified by user.
    clientSecret String
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    clientType String
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    createTime String
    (ReadOnly) The time when this managed object was created.
    description String
    Description of the application.
    domainGroupMoid String
    (ReadOnly) The DomainGroup ID for this managed object.
    entityId String
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiryDateTime String
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grantTypes List<String>
    (Array of schema.TypeString) -
    iamAppRegistrationId String
    isNeverExpiring Boolean
    Used to mark the App Registration as a never-expiring App Registration.
    lastUsedIp String
    (ReadOnly) The ip address from which the App Registration was last used.
    lastUsedTime String
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    modTime String
    (ReadOnly) The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    oauthTokens List<Property Map>
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    operStatus String
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners List<String>
    (Array of schema.TypeString) -(ReadOnly)
    parents List<Property Map>
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permissionResources List<Property Map>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions List<Property Map>
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirectUris List<String>
    (Array of schema.TypeString) -
    renewClientSecret Boolean
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    responseTypes List<String>
    (Array of schema.TypeString) -
    revocationTimestamp String
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke Boolean
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles List<Property Map>
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes List<Property Map>
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    securityHolders List<Property Map>
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    sharedScope String
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    showConsentScreen Boolean
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    startTime String
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags List<Property Map>
    This complex property has following sub-properties:
    tokenExpiry String
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users List<Property Map>
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    versionContexts List<Property Map>
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IamAppRegistration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing IamAppRegistration Resource

    Get an existing IamAppRegistration resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IamAppRegistrationState, opts?: CustomResourceOptions): IamAppRegistration
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_moid: Optional[str] = None,
        accounts: Optional[Sequence[IamAppRegistrationAccountArgs]] = None,
        additional_properties: Optional[str] = None,
        admin_status: Optional[str] = None,
        ancestors: Optional[Sequence[IamAppRegistrationAncestorArgs]] = None,
        class_id: Optional[str] = None,
        client_applications: Optional[Sequence[IamAppRegistrationClientApplicationArgs]] = None,
        client_id: Optional[str] = None,
        client_name: Optional[str] = None,
        client_secret: Optional[str] = None,
        client_type: Optional[str] = None,
        create_time: Optional[str] = None,
        description: Optional[str] = None,
        domain_group_moid: Optional[str] = None,
        entity_id: Optional[str] = None,
        expiry_date_time: Optional[str] = None,
        grant_types: Optional[Sequence[str]] = None,
        iam_app_registration_id: Optional[str] = None,
        is_never_expiring: Optional[bool] = None,
        last_used_ip: Optional[str] = None,
        last_used_time: Optional[str] = None,
        mod_time: Optional[str] = None,
        moid: Optional[str] = None,
        oauth_tokens: Optional[Sequence[IamAppRegistrationOauthTokenArgs]] = None,
        object_type: Optional[str] = None,
        oper_status: Optional[str] = None,
        owners: Optional[Sequence[str]] = None,
        parents: Optional[Sequence[IamAppRegistrationParentArgs]] = None,
        permission_resources: Optional[Sequence[IamAppRegistrationPermissionResourceArgs]] = None,
        permissions: Optional[Sequence[IamAppRegistrationPermissionArgs]] = None,
        redirect_uris: Optional[Sequence[str]] = None,
        renew_client_secret: Optional[bool] = None,
        response_types: Optional[Sequence[str]] = None,
        revocation_timestamp: Optional[str] = None,
        revoke: Optional[bool] = None,
        roles: Optional[Sequence[IamAppRegistrationRoleArgs]] = None,
        scopes: Optional[Sequence[IamAppRegistrationScopeArgs]] = None,
        security_holders: Optional[Sequence[IamAppRegistrationSecurityHolderArgs]] = None,
        shared_scope: Optional[str] = None,
        show_consent_screen: Optional[bool] = None,
        start_time: Optional[str] = None,
        tags: Optional[Sequence[IamAppRegistrationTagArgs]] = None,
        token_expiry: Optional[str] = None,
        users: Optional[Sequence[IamAppRegistrationUserArgs]] = None,
        version_contexts: Optional[Sequence[IamAppRegistrationVersionContextArgs]] = None) -> IamAppRegistration
    func GetIamAppRegistration(ctx *Context, name string, id IDInput, state *IamAppRegistrationState, opts ...ResourceOption) (*IamAppRegistration, error)
    public static IamAppRegistration Get(string name, Input<string> id, IamAppRegistrationState? state, CustomResourceOptions? opts = null)
    public static IamAppRegistration get(String name, Output<String> id, IamAppRegistrationState state, CustomResourceOptions options)
    resources:  _:    type: intersight:IamAppRegistration    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountMoid string
    (ReadOnly) The Account ID for this managed object.
    Accounts List<IamAppRegistrationAccount>
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    AdditionalProperties string
    AdminStatus string
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    Ancestors List<IamAppRegistrationAncestor>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    ClientApplications List<IamAppRegistrationClientApplication>
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    ClientId string
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    ClientName string
    App Registration name specified by user.
    ClientSecret string
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    ClientType string
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    CreateTime string
    (ReadOnly) The time when this managed object was created.
    Description string
    Description of the application.
    DomainGroupMoid string
    (ReadOnly) The DomainGroup ID for this managed object.
    EntityId string
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    ExpiryDateTime string
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    GrantTypes List<string>
    (Array of schema.TypeString) -
    IamAppRegistrationId string
    IsNeverExpiring bool
    Used to mark the App Registration as a never-expiring App Registration.
    LastUsedIp string
    (ReadOnly) The ip address from which the App Registration was last used.
    LastUsedTime string
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    ModTime string
    (ReadOnly) The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    OauthTokens List<IamAppRegistrationOauthToken>
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OperStatus string
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    Owners List<string>
    (Array of schema.TypeString) -(ReadOnly)
    Parents List<IamAppRegistrationParent>
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    PermissionResources List<IamAppRegistrationPermissionResource>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    Permissions List<IamAppRegistrationPermission>
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    RedirectUris List<string>
    (Array of schema.TypeString) -
    RenewClientSecret bool
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    ResponseTypes List<string>
    (Array of schema.TypeString) -
    RevocationTimestamp string
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    Revoke bool
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    Roles List<IamAppRegistrationRole>
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    Scopes List<IamAppRegistrationScope>
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    SecurityHolders List<IamAppRegistrationSecurityHolder>
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    SharedScope string
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    ShowConsentScreen bool
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    StartTime string
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    Tags List<IamAppRegistrationTag>
    This complex property has following sub-properties:
    TokenExpiry string
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    Users List<IamAppRegistrationUser>
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    VersionContexts List<IamAppRegistrationVersionContext>
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    AccountMoid string
    (ReadOnly) The Account ID for this managed object.
    Accounts []IamAppRegistrationAccountArgs
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    AdditionalProperties string
    AdminStatus string
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    Ancestors []IamAppRegistrationAncestorArgs
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    ClassId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    ClientApplications []IamAppRegistrationClientApplicationArgs
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    ClientId string
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    ClientName string
    App Registration name specified by user.
    ClientSecret string
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    ClientType string
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    CreateTime string
    (ReadOnly) The time when this managed object was created.
    Description string
    Description of the application.
    DomainGroupMoid string
    (ReadOnly) The DomainGroup ID for this managed object.
    EntityId string
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    ExpiryDateTime string
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    GrantTypes []string
    (Array of schema.TypeString) -
    IamAppRegistrationId string
    IsNeverExpiring bool
    Used to mark the App Registration as a never-expiring App Registration.
    LastUsedIp string
    (ReadOnly) The ip address from which the App Registration was last used.
    LastUsedTime string
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    ModTime string
    (ReadOnly) The time when this managed object was last modified.
    Moid string
    The unique identifier of this Managed Object instance.
    OauthTokens []IamAppRegistrationOauthTokenArgs
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    ObjectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    OperStatus string
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    Owners []string
    (Array of schema.TypeString) -(ReadOnly)
    Parents []IamAppRegistrationParentArgs
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    PermissionResources []IamAppRegistrationPermissionResourceArgs
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    Permissions []IamAppRegistrationPermissionArgs
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    RedirectUris []string
    (Array of schema.TypeString) -
    RenewClientSecret bool
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    ResponseTypes []string
    (Array of schema.TypeString) -
    RevocationTimestamp string
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    Revoke bool
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    Roles []IamAppRegistrationRoleArgs
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    Scopes []IamAppRegistrationScopeArgs
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    SecurityHolders []IamAppRegistrationSecurityHolderArgs
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    SharedScope string
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    ShowConsentScreen bool
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    StartTime string
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    Tags []IamAppRegistrationTagArgs
    This complex property has following sub-properties:
    TokenExpiry string
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    Users []IamAppRegistrationUserArgs
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    VersionContexts []IamAppRegistrationVersionContextArgs
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    accountMoid String
    (ReadOnly) The Account ID for this managed object.
    accounts List<IamAppRegistrationAccount>
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additionalProperties String
    adminStatus String
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors List<IamAppRegistrationAncestor>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    clientApplications List<IamAppRegistrationClientApplication>
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    clientId String
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    clientName String
    App Registration name specified by user.
    clientSecret String
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    clientType String
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    createTime String
    (ReadOnly) The time when this managed object was created.
    description String
    Description of the application.
    domainGroupMoid String
    (ReadOnly) The DomainGroup ID for this managed object.
    entityId String
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiryDateTime String
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grantTypes List<String>
    (Array of schema.TypeString) -
    iamAppRegistrationId String
    isNeverExpiring Boolean
    Used to mark the App Registration as a never-expiring App Registration.
    lastUsedIp String
    (ReadOnly) The ip address from which the App Registration was last used.
    lastUsedTime String
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    modTime String
    (ReadOnly) The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    oauthTokens List<IamAppRegistrationOauthToken>
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    operStatus String
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners List<String>
    (Array of schema.TypeString) -(ReadOnly)
    parents List<IamAppRegistrationParent>
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permissionResources List<IamAppRegistrationPermissionResource>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions List<IamAppRegistrationPermission>
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirectUris List<String>
    (Array of schema.TypeString) -
    renewClientSecret Boolean
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    responseTypes List<String>
    (Array of schema.TypeString) -
    revocationTimestamp String
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke Boolean
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles List<IamAppRegistrationRole>
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes List<IamAppRegistrationScope>
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    securityHolders List<IamAppRegistrationSecurityHolder>
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    sharedScope String
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    showConsentScreen Boolean
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    startTime String
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags List<IamAppRegistrationTag>
    This complex property has following sub-properties:
    tokenExpiry String
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users List<IamAppRegistrationUser>
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    versionContexts List<IamAppRegistrationVersionContext>
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    accountMoid string
    (ReadOnly) The Account ID for this managed object.
    accounts IamAppRegistrationAccount[]
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additionalProperties string
    adminStatus string
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors IamAppRegistrationAncestor[]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    classId string
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    clientApplications IamAppRegistrationClientApplication[]
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    clientId string
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    clientName string
    App Registration name specified by user.
    clientSecret string
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    clientType string
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    createTime string
    (ReadOnly) The time when this managed object was created.
    description string
    Description of the application.
    domainGroupMoid string
    (ReadOnly) The DomainGroup ID for this managed object.
    entityId string
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiryDateTime string
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grantTypes string[]
    (Array of schema.TypeString) -
    iamAppRegistrationId string
    isNeverExpiring boolean
    Used to mark the App Registration as a never-expiring App Registration.
    lastUsedIp string
    (ReadOnly) The ip address from which the App Registration was last used.
    lastUsedTime string
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    modTime string
    (ReadOnly) The time when this managed object was last modified.
    moid string
    The unique identifier of this Managed Object instance.
    oauthTokens IamAppRegistrationOauthToken[]
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    objectType string
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    operStatus string
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners string[]
    (Array of schema.TypeString) -(ReadOnly)
    parents IamAppRegistrationParent[]
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permissionResources IamAppRegistrationPermissionResource[]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions IamAppRegistrationPermission[]
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirectUris string[]
    (Array of schema.TypeString) -
    renewClientSecret boolean
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    responseTypes string[]
    (Array of schema.TypeString) -
    revocationTimestamp string
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke boolean
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles IamAppRegistrationRole[]
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes IamAppRegistrationScope[]
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    securityHolders IamAppRegistrationSecurityHolder[]
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    sharedScope string
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    showConsentScreen boolean
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    startTime string
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags IamAppRegistrationTag[]
    This complex property has following sub-properties:
    tokenExpiry string
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users IamAppRegistrationUser[]
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    versionContexts IamAppRegistrationVersionContext[]
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    account_moid str
    (ReadOnly) The Account ID for this managed object.
    accounts Sequence[IamAppRegistrationAccountArgs]
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additional_properties str
    admin_status str
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors Sequence[IamAppRegistrationAncestorArgs]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    class_id str
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    client_applications Sequence[IamAppRegistrationClientApplicationArgs]
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    client_id str
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    client_name str
    App Registration name specified by user.
    client_secret str
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    client_type str
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    create_time str
    (ReadOnly) The time when this managed object was created.
    description str
    Description of the application.
    domain_group_moid str
    (ReadOnly) The DomainGroup ID for this managed object.
    entity_id str
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiry_date_time str
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grant_types Sequence[str]
    (Array of schema.TypeString) -
    iam_app_registration_id str
    is_never_expiring bool
    Used to mark the App Registration as a never-expiring App Registration.
    last_used_ip str
    (ReadOnly) The ip address from which the App Registration was last used.
    last_used_time str
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    mod_time str
    (ReadOnly) The time when this managed object was last modified.
    moid str
    The unique identifier of this Managed Object instance.
    oauth_tokens Sequence[IamAppRegistrationOauthTokenArgs]
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    object_type str
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    oper_status str
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners Sequence[str]
    (Array of schema.TypeString) -(ReadOnly)
    parents Sequence[IamAppRegistrationParentArgs]
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permission_resources Sequence[IamAppRegistrationPermissionResourceArgs]
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions Sequence[IamAppRegistrationPermissionArgs]
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirect_uris Sequence[str]
    (Array of schema.TypeString) -
    renew_client_secret bool
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    response_types Sequence[str]
    (Array of schema.TypeString) -
    revocation_timestamp str
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke bool
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles Sequence[IamAppRegistrationRoleArgs]
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes Sequence[IamAppRegistrationScopeArgs]
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    security_holders Sequence[IamAppRegistrationSecurityHolderArgs]
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    shared_scope str
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    show_consent_screen bool
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    start_time str
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags Sequence[IamAppRegistrationTagArgs]
    This complex property has following sub-properties:
    token_expiry str
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users Sequence[IamAppRegistrationUserArgs]
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    version_contexts Sequence[IamAppRegistrationVersionContextArgs]
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:
    accountMoid String
    (ReadOnly) The Account ID for this managed object.
    accounts List<Property Map>
    (ReadOnly) A reference to a iamAccount resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    additionalProperties String
    adminStatus String
    Used to trigger the enable or disable action on the App Registration. These actions change the status of an App Registration.* enable - Used to enable a disabled API key/App Registration. If the API key/App Registration is already expired, this action has no effect.* disable - Used to disable an active API key/App Registration. If the API key/App Registration is already expired, this action has no effect.
    ancestors List<Property Map>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    classId String
    The fully-qualified name of the instantiated, concrete type. This property is used as a discriminator to identify the type of the payload when marshaling and unmarshaling data.
    clientApplications List<Property Map>
    (ReadOnly) A reference to a iamAbstractClientApplication resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    clientId String
    (ReadOnly) A unique identifier for the OAuth2 client application.The client ID is auto-generated when the AppRegistration object is created.
    clientName String
    App Registration name specified by user.
    clientSecret String
    The OAuth2 client secret.The value of this property is generated when grantType includes 'client-credentials'.Otherwise, no client-secret is generated.
    clientType String
    The type of the OAuth2 client (public or confidential), as specified in https://tools.ietf.org/html/rfc6749#section-2.1.* public - Clients incapable of maintaining the confidentiality of their credentials.This includes clients executing on the device used by the resource owner,such as mobile applications, installed native application or a webbrowser-based application.* confidential - Clients capable of maintaining the confidentiality of their credentials.For example, this could be a client implemented on a secure server withrestricted access to the client credentials.To maintain the confidentiality of the OAuth2 credentials, two use cases areconsidered.1) The application is running as a service within Intersight. The application automatically obtains the OAuth2 credentials when the application starts and the credentials are not exposed to the end-user. Because end-users (even account administrators) do not have access the OAuth2 credentials, they cannot take the credentials with them when they leave their organization.2) The application is under the control of a \ trusted\ end-user. For example, the end-user may create a native application running outside Intersight. The application uses OAuth2 credentials to interact with the Intersight API. In that case, the Intersight account administrator may generate OAuth2 credentials with a registered application using \ client_credentials\ grant type. In that case, the end-user is responsible for maintaining the confidentiality of the OAuth2 credentials. If the end-user leaves the organization, you should revoke the credentials and issue new Oauth2 credentials.Here is a possible workflow for handling OAuth2 tokens.1) User Alice (Intersight Account Administrator) logins to Intersight and deploys an Intersight application that requires an OAuth2 token.2) Intersight automatically deploys the application. The application is assigned a OAuth2 token, possibly linked to Alice. The application must NOT expose the OAuth2 secret to Alice, otherwise Alice would be able to use the token after she leaves the company.3) The application can make API calls to Intersight using its assigned OAuth2 token. For example, the application could make weekly scheduled API calls to Intersight.4) Separately, Alice may also get OAuth2 tokens that she can use to make API calls from the Intersight SDK through the northbound API. In that case, Alice will get the associated OAuth2 secrets, but not the one assigned in step #2.5) Alice leaves the organization. The OAuth2 tokens assigned in step #2 must retain their validity even after Alice has left the organization. Because the OAuth2 secrets were never shared with Alice, there is no risk Alice can reuse the OAuth2 secrets. On the other hand, the OAuth2 tokens assigned in step #4 must be invalidated because Alice had the OAuth2 tokens in her possession.
    createTime String
    (ReadOnly) The time when this managed object was created.
    description String
    Description of the application.
    domainGroupMoid String
    (ReadOnly) The DomainGroup ID for this managed object.
    entityId String
    (ReadOnly) EntityId holds the Id of the client application that is using this AppRegistration.
    expiryDateTime String
    The expiration date of the App Registration which is set at the time of its creation. Its value can only be assigned a date that falls within the range determined by the maximum expiration time configured at the account level. The expiry date can be edited to be earlier or later, provided it stays within the designated expiry period. This period is determined by adding the 'startTime' property of the App Registration to the maximum expiry time configured at the account level.
    grantTypes List<String>
    (Array of schema.TypeString) -
    iamAppRegistrationId String
    isNeverExpiring Boolean
    Used to mark the App Registration as a never-expiring App Registration.
    lastUsedIp String
    (ReadOnly) The ip address from which the App Registration was last used.
    lastUsedTime String
    (ReadOnly) The time at which the App Registration was last used. It is updated every 24 hours.
    modTime String
    (ReadOnly) The time when this managed object was last modified.
    moid String
    The unique identifier of this Managed Object instance.
    oauthTokens List<Property Map>
    (ReadOnly) An array of relationships to iamOAuthToken resources. This complex property has following sub-properties:
    objectType String
    The fully-qualified name of the instantiated, concrete type. The value should be the same as the 'ClassId' property.
    operStatus String
    (ReadOnly) The current status of the App Registration that dictates the validity of the app.* enabled - An API key/App Registration having enabled status can be used for API invocation.* disabled - An API key/App Registration having disabled status cannot be used for API invocation.* expired - An API key/App Registration having expired status cannot be used for API invocation as the expiration date has passed.
    owners List<String>
    (Array of schema.TypeString) -(ReadOnly)
    parents List<Property Map>
    (ReadOnly) A reference to a moBaseMo resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    permissionResources List<Property Map>
    (ReadOnly) An array of relationships to moBaseMo resources. This complex property has following sub-properties:
    permissions List<Property Map>
    (ReadOnly) A reference to a iamPermission resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    redirectUris List<String>
    (Array of schema.TypeString) -
    renewClientSecret Boolean
    Set value to true to renew the client-secret. Applicable to client_credentials grant type.
    responseTypes List<String>
    (Array of schema.TypeString) -
    revocationTimestamp String
    (ReadOnly) Used to perform revocation for tokens of AppRegistration.Updated only internally is case Revoke property come from UI with value true.On each request with OAuth2 access token the CreationTime of the OAuth2 token will be compared to RevokationTimestamp of thecorresponding App Registration.
    revoke Boolean
    Used to trigger update the revocationTimestamp value.If UI sent updating request with the Revoke value is true, then update RevocationTimestamp.
    roles List<Property Map>
    An array of relationships to iamRole resources. This complex property has following sub-properties:
    scopes List<Property Map>
    (ReadOnly) Scope holds a collection of account Id, permission Id to which the current session is scoped to. This complex property has following sub-properties:
    securityHolders List<Property Map>
    (ReadOnly) A reference to a iamSecurityHolder resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    sharedScope String
    (ReadOnly) Intersight provides pre-built workflows, tasks and policies to end users through global catalogs.Objects that are made available through global catalogs are said to have a 'shared' ownership. Shared objects are either made globally available to all end users or restricted to end users based on their license entitlement. Users can use this property to differentiate the scope (global or a specific license tier) to which a shared MO belongs.
    showConsentScreen Boolean
    Set to true if consent screen needs to be shown during the OAuth login process.Applicable only for public AppRegistrations, means only 'authorization_code' grantType.Note that consent screen will be shown on each login.
    startTime String
    (ReadOnly) The timestamp at which an expiry date was first set on this app registration. For expiring App Registrations, this field is same as the create time of the App Registration.For never-expiring App Registrations, this field is set initially to zero time value. If a never-expiry App Registration is later changed to have an expiration, the timestamp marking the start of this transition is recorded in this field.
    tags List<Property Map>
    This complex property has following sub-properties:
    tokenExpiry String
    (ReadOnly) Defines the expiry time of the token generated via the AppRegistration.* generic - This sets the expiryTime to ten minutes from the token issuing time.* longLived - This sets the expiryTime to an year from the token issuing time.* infinite - This allows for a never-expiring token. Use with caution.
    users List<Property Map>
    (ReadOnly) A reference to a iamUser resource.When the $expand query parameter is specified, the referenced resource is returned inline. This complex property has following sub-properties:
    versionContexts List<Property Map>
    (ReadOnly) The versioning info for this managed object. This complex property has following sub-properties:

    Supporting Types

    IamAppRegistrationAccount, IamAppRegistrationAccountArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationAncestor, IamAppRegistrationAncestorArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationClientApplication, IamAppRegistrationClientApplicationArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationOauthToken, IamAppRegistrationOauthTokenArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationParent, IamAppRegistrationParentArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationPermission, IamAppRegistrationPermissionArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationPermissionResource, IamAppRegistrationPermissionResourceArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationRole, IamAppRegistrationRoleArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationScope, IamAppRegistrationScopeArgs

    AccountAccessControlId string
    (ReadOnly) Moid of the AccountAccessControl through which the access is given to switch scope.
    AdditionalProperties string
    ClassId string
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    RequestIdentifier string
    (ReadOnly) Stores the identifier of the issue for which user is trying to switch scope to another account.
    SwitchedFromAccounts List<IamAppRegistrationScopeSwitchedFromAccount>
    (ReadOnly) Permission for the Account from which user switched the scope. This complex property has following sub-properties:
    SwitchedToAccounts List<IamAppRegistrationScopeSwitchedToAccount>
    This complex property has following sub-properties:
    AccountAccessControlId string
    (ReadOnly) Moid of the AccountAccessControl through which the access is given to switch scope.
    AdditionalProperties string
    ClassId string
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    RequestIdentifier string
    (ReadOnly) Stores the identifier of the issue for which user is trying to switch scope to another account.
    SwitchedFromAccounts []IamAppRegistrationScopeSwitchedFromAccount
    (ReadOnly) Permission for the Account from which user switched the scope. This complex property has following sub-properties:
    SwitchedToAccounts []IamAppRegistrationScopeSwitchedToAccount
    This complex property has following sub-properties:
    accountAccessControlId String
    (ReadOnly) Moid of the AccountAccessControl through which the access is given to switch scope.
    additionalProperties String
    classId String
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    requestIdentifier String
    (ReadOnly) Stores the identifier of the issue for which user is trying to switch scope to another account.
    switchedFromAccounts List<IamAppRegistrationScopeSwitchedFromAccount>
    (ReadOnly) Permission for the Account from which user switched the scope. This complex property has following sub-properties:
    switchedToAccounts List<IamAppRegistrationScopeSwitchedToAccount>
    This complex property has following sub-properties:
    accountAccessControlId string
    (ReadOnly) Moid of the AccountAccessControl through which the access is given to switch scope.
    additionalProperties string
    classId string
    objectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    requestIdentifier string
    (ReadOnly) Stores the identifier of the issue for which user is trying to switch scope to another account.
    switchedFromAccounts IamAppRegistrationScopeSwitchedFromAccount[]
    (ReadOnly) Permission for the Account from which user switched the scope. This complex property has following sub-properties:
    switchedToAccounts IamAppRegistrationScopeSwitchedToAccount[]
    This complex property has following sub-properties:
    account_access_control_id str
    (ReadOnly) Moid of the AccountAccessControl through which the access is given to switch scope.
    additional_properties str
    class_id str
    object_type str
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    request_identifier str
    (ReadOnly) Stores the identifier of the issue for which user is trying to switch scope to another account.
    switched_from_accounts Sequence[IamAppRegistrationScopeSwitchedFromAccount]
    (ReadOnly) Permission for the Account from which user switched the scope. This complex property has following sub-properties:
    switched_to_accounts Sequence[IamAppRegistrationScopeSwitchedToAccount]
    This complex property has following sub-properties:
    accountAccessControlId String
    (ReadOnly) Moid of the AccountAccessControl through which the access is given to switch scope.
    additionalProperties String
    classId String
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    requestIdentifier String
    (ReadOnly) Stores the identifier of the issue for which user is trying to switch scope to another account.
    switchedFromAccounts List<Property Map>
    (ReadOnly) Permission for the Account from which user switched the scope. This complex property has following sub-properties:
    switchedToAccounts List<Property Map>
    This complex property has following sub-properties:

    IamAppRegistrationScopeSwitchedFromAccount, IamAppRegistrationScopeSwitchedFromAccountArgs

    AccountId string
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    AdditionalProperties string
    ClassId string
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    PermissionId string
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    AccountId string
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    AdditionalProperties string
    ClassId string
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    PermissionId string
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    accountId String
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additionalProperties String
    classId String
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permissionId String
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    accountId string
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additionalProperties string
    classId string
    objectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permissionId string
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    account_id str
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additional_properties str
    class_id str
    object_type str
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permission_id str
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    accountId String
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additionalProperties String
    classId String
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permissionId String
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.

    IamAppRegistrationScopeSwitchedToAccount, IamAppRegistrationScopeSwitchedToAccountArgs

    AccountId string
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    AdditionalProperties string
    ClassId string
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    PermissionId string
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    AccountId string
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    AdditionalProperties string
    ClassId string
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    PermissionId string
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    accountId String
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additionalProperties String
    classId String
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permissionId String
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    accountId string
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additionalProperties string
    classId string
    objectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permissionId string
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    account_id str
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additional_properties str
    class_id str
    object_type str
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permission_id str
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.
    accountId String
    (ReadOnly) Moid of the Account to/from which user switched the scope.
    additionalProperties String
    classId String
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    permissionId String
    (ReadOnly) Moid of the Permission for the Account to/from which user switched the scope.

    IamAppRegistrationSecurityHolder, IamAppRegistrationSecurityHolderArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationTag, IamAppRegistrationTagArgs

    AdditionalProperties string
    Key string
    The string representation of a tag key.
    Value string
    The string representation of a tag value.
    AdditionalProperties string
    Key string
    The string representation of a tag key.
    Value string
    The string representation of a tag value.
    additionalProperties String
    key String
    The string representation of a tag key.
    value String
    The string representation of a tag value.
    additionalProperties string
    key string
    The string representation of a tag key.
    value string
    The string representation of a tag value.
    additional_properties str
    key str
    The string representation of a tag key.
    value str
    The string representation of a tag value.
    additionalProperties String
    key String
    The string representation of a tag key.
    value String
    The string representation of a tag value.

    IamAppRegistrationUser, IamAppRegistrationUserArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationVersionContext, IamAppRegistrationVersionContextArgs

    AdditionalProperties string
    ClassId string
    InterestedMos List<IamAppRegistrationVersionContextInterestedMo>
    This complex property has following sub-properties:
    MarkedForDeletion bool
    (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    NrVersion string
    (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    RefMos List<IamAppRegistrationVersionContextRefMo>
    (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
    Timestamp string
    (ReadOnly) The time this versioned Managed Object was created.
    VersionType string
    (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.* Modified - Version created every time an object is modified.* Configured - Version created every time an object is configured to the service profile.* Deployed - Version created for objects related to a service profile when it is deployed.
    AdditionalProperties string
    ClassId string
    InterestedMos []IamAppRegistrationVersionContextInterestedMo
    This complex property has following sub-properties:
    MarkedForDeletion bool
    (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    NrVersion string
    (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
    ObjectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    RefMos []IamAppRegistrationVersionContextRefMo
    (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
    Timestamp string
    (ReadOnly) The time this versioned Managed Object was created.
    VersionType string
    (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.* Modified - Version created every time an object is modified.* Configured - Version created every time an object is configured to the service profile.* Deployed - Version created for objects related to a service profile when it is deployed.
    additionalProperties String
    classId String
    interestedMos List<IamAppRegistrationVersionContextInterestedMo>
    This complex property has following sub-properties:
    markedForDeletion Boolean
    (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nrVersion String
    (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    refMos List<IamAppRegistrationVersionContextRefMo>
    (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
    timestamp String
    (ReadOnly) The time this versioned Managed Object was created.
    versionType String
    (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.* Modified - Version created every time an object is modified.* Configured - Version created every time an object is configured to the service profile.* Deployed - Version created for objects related to a service profile when it is deployed.
    additionalProperties string
    classId string
    interestedMos IamAppRegistrationVersionContextInterestedMo[]
    This complex property has following sub-properties:
    markedForDeletion boolean
    (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nrVersion string
    (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
    objectType string
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    refMos IamAppRegistrationVersionContextRefMo[]
    (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
    timestamp string
    (ReadOnly) The time this versioned Managed Object was created.
    versionType string
    (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.* Modified - Version created every time an object is modified.* Configured - Version created every time an object is configured to the service profile.* Deployed - Version created for objects related to a service profile when it is deployed.
    additional_properties str
    class_id str
    interested_mos Sequence[IamAppRegistrationVersionContextInterestedMo]
    This complex property has following sub-properties:
    marked_for_deletion bool
    (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nr_version str
    (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
    object_type str
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    ref_mos Sequence[IamAppRegistrationVersionContextRefMo]
    (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
    timestamp str
    (ReadOnly) The time this versioned Managed Object was created.
    version_type str
    (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.* Modified - Version created every time an object is modified.* Configured - Version created every time an object is configured to the service profile.* Deployed - Version created for objects related to a service profile when it is deployed.
    additionalProperties String
    classId String
    interestedMos List<Property Map>
    This complex property has following sub-properties:
    markedForDeletion Boolean
    (ReadOnly) The flag to indicate if snapshot is marked for deletion or not. If flag is set then snapshot will be removed after the successful deployment of the policy.
    nrVersion String
    (ReadOnly) The version of the Managed Object, e.g. an incrementing number or a hash id.
    objectType String
    The fully-qualified name of the instantiated, concrete type.The value should be the same as the 'ClassId' property.
    refMos List<Property Map>
    (ReadOnly) A reference to the original Managed Object. This complex property has following sub-properties:
    timestamp String
    (ReadOnly) The time this versioned Managed Object was created.
    versionType String
    (ReadOnly) Specifies type of version. Currently the only supported value is \ Configured\ that is used to keep track of snapshots of policies and profiles that are intendedto be configured to target endpoints.* Modified - Version created every time an object is modified.* Configured - Version created every time an object is configured to the service profile.* Deployed - Version created for objects related to a service profile when it is deployed.

    IamAppRegistrationVersionContextInterestedMo, IamAppRegistrationVersionContextInterestedMoArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    IamAppRegistrationVersionContextRefMo, IamAppRegistrationVersionContextRefMoArgs

    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    AdditionalProperties string
    ClassId string
    Moid string
    The Moid of the referenced REST resource.
    ObjectType string
    The fully-qualified name of the remote type referred by this relationship.
    Selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties string
    classId string
    moid string
    The Moid of the referenced REST resource.
    objectType string
    The fully-qualified name of the remote type referred by this relationship.
    selector string
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additional_properties str
    class_id str
    moid str
    The Moid of the referenced REST resource.
    object_type str
    The fully-qualified name of the remote type referred by this relationship.
    selector str
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.
    additionalProperties String
    classId String
    moid String
    The Moid of the referenced REST resource.
    objectType String
    The fully-qualified name of the remote type referred by this relationship.
    selector String
    An OData $filter expression which describes the REST resource to be referenced. This field maybe set instead of 'moid' by clients.1. If 'moid' is set this field is ignored.1. If 'selector' is set and 'moid' is empty/absent from the request, Intersight determines the Moid of theresource matching the filter expression and populates it in the MoRef that is part of the objectinstance being inserted/updated to fulfill the REST request.An error is returned if the filter matches zero or more than one REST resource.An example filter string is: Serial eq '3AA8B7T11'.

    Import

    intersight_iam_app_registration can be imported using the Moid of the object, e.g.

    $ pulumi import intersight:index/iamAppRegistration:IamAppRegistration example 1234567890987654321abcde

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    intersight ciscodevnet/terraform-provider-intersight
    License
    Notes
    This Pulumi package is based on the intersight Terraform Provider.
    intersight logo
    intersight 1.0.65 published on Wednesday, May 7, 2025 by ciscodevnet
    ciscodevnet/terraform-provider-intersight