Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Opentelekomcloud Provider
  3. API Docs
  4. IdentityUserV3
opentelekomcloud 1.36.35 published on Monday, Apr 14, 2025 by opentelekomcloud
opentelekomcloud/terraform-provider-opentelekomcloud

opentelekomcloud.IdentityUserV3

Explore with Pulumi AI

opentelekomcloud 1.36.35 published on Monday, Apr 14, 2025 by opentelekomcloud
opentelekomcloud/terraform-provider-opentelekomcloud

Up-to-date reference of API arguments for IAM user you can get at documentation portal

Manages a User resource within OpenTelekomCloud IAM service.

You need to have admin privileges in your OpenTelekomCloud cloud to use this resource.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as opentelekomcloud from "@pulumi/opentelekomcloud";

const user1 = new opentelekomcloud.IdentityUserV3("user1", {password: "password123!"});
Copy
import pulumi
import pulumi_opentelekomcloud as opentelekomcloud

user1 = opentelekomcloud.IdentityUserV3("user1", password="password123!")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/opentelekomcloud/opentelekomcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := opentelekomcloud.NewIdentityUserV3(ctx, "user1", &opentelekomcloud.IdentityUserV3Args{
			Password: pulumi.String("password123!"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Opentelekomcloud = Pulumi.Opentelekomcloud;

return await Deployment.RunAsync(() => 
{
    var user1 = new Opentelekomcloud.IdentityUserV3("user1", new()
    {
        Password = "password123!",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.opentelekomcloud.IdentityUserV3;
import com.pulumi.opentelekomcloud.IdentityUserV3Args;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var user1 = new IdentityUserV3("user1", IdentityUserV3Args.builder()
            .password("password123!")
            .build());

    }
}
Copy
resources:
  user1:
    type: opentelekomcloud:IdentityUserV3
    properties:
      password: password123!
Copy

Example with login protection

import * as pulumi from "@pulumi/pulumi";
import * as opentelekomcloud from "@pulumi/opentelekomcloud";

const user1 = new opentelekomcloud.IdentityUserV3("user1", {
    email: "test@acme.org",
    enabled: true,
    loginProtection: {
        enabled: true,
        verificationMethod: "email",
    },
    password: "password123@!",
    sendWelcomeEmail: true,
});
Copy
import pulumi
import pulumi_opentelekomcloud as opentelekomcloud

user1 = opentelekomcloud.IdentityUserV3("user1",
    email="test@acme.org",
    enabled=True,
    login_protection={
        "enabled": True,
        "verification_method": "email",
    },
    password="password123@!",
    send_welcome_email=True)
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/opentelekomcloud/opentelekomcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := opentelekomcloud.NewIdentityUserV3(ctx, "user1", &opentelekomcloud.IdentityUserV3Args{
			Email:   pulumi.String("test@acme.org"),
			Enabled: pulumi.Bool(true),
			LoginProtection: &opentelekomcloud.IdentityUserV3LoginProtectionArgs{
				Enabled:            pulumi.Bool(true),
				VerificationMethod: pulumi.String("email"),
			},
			Password:         pulumi.String("password123@!"),
			SendWelcomeEmail: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Opentelekomcloud = Pulumi.Opentelekomcloud;

return await Deployment.RunAsync(() => 
{
    var user1 = new Opentelekomcloud.IdentityUserV3("user1", new()
    {
        Email = "test@acme.org",
        Enabled = true,
        LoginProtection = new Opentelekomcloud.Inputs.IdentityUserV3LoginProtectionArgs
        {
            Enabled = true,
            VerificationMethod = "email",
        },
        Password = "password123@!",
        SendWelcomeEmail = true,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.opentelekomcloud.IdentityUserV3;
import com.pulumi.opentelekomcloud.IdentityUserV3Args;
import com.pulumi.opentelekomcloud.inputs.IdentityUserV3LoginProtectionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var user1 = new IdentityUserV3("user1", IdentityUserV3Args.builder()
            .email("test@acme.org")
            .enabled(true)
            .loginProtection(IdentityUserV3LoginProtectionArgs.builder()
                .enabled(true)
                .verificationMethod("email")
                .build())
            .password("password123@!")
            .sendWelcomeEmail(true)
            .build());

    }
}
Copy
resources:
  user1:
    type: opentelekomcloud:IdentityUserV3
    properties:
      email: test@acme.org
      enabled: true
      loginProtection:
        enabled: true
        verificationMethod: email
      password: password123@!
      sendWelcomeEmail: true
Copy

Create IdentityUserV3 Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new IdentityUserV3(name: string, args?: IdentityUserV3Args, opts?: CustomResourceOptions);
@overload
def IdentityUserV3(resource_name: str,
                   args: Optional[IdentityUserV3Args] = None,
                   opts: Optional[ResourceOptions] = None)

@overload
def IdentityUserV3(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   access_type: Optional[str] = None,
                   country_code: Optional[str] = None,
                   description: Optional[str] = None,
                   email: Optional[str] = None,
                   enabled: Optional[bool] = None,
                   identity_user_v3_id: Optional[str] = None,
                   login_protection: Optional[IdentityUserV3LoginProtectionArgs] = None,
                   name: Optional[str] = None,
                   password: Optional[str] = None,
                   phone: Optional[str] = None,
                   pwd_reset: Optional[bool] = None,
                   send_welcome_email: Optional[bool] = None)
func NewIdentityUserV3(ctx *Context, name string, args *IdentityUserV3Args, opts ...ResourceOption) (*IdentityUserV3, error)
public IdentityUserV3(string name, IdentityUserV3Args? args = null, CustomResourceOptions? opts = null)
public IdentityUserV3(String name, IdentityUserV3Args args)
public IdentityUserV3(String name, IdentityUserV3Args args, CustomResourceOptions options)

type: opentelekomcloud:IdentityUserV3
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args IdentityUserV3Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args IdentityUserV3Args
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args IdentityUserV3Args
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args IdentityUserV3Args
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. IdentityUserV3Args
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var identityUserV3Resource = new Opentelekomcloud.IdentityUserV3("identityUserV3Resource", new()
{
    AccessType = "string",
    CountryCode = "string",
    Description = "string",
    Email = "string",
    Enabled = false,
    IdentityUserV3Id = "string",
    LoginProtection = new Opentelekomcloud.Inputs.IdentityUserV3LoginProtectionArgs
    {
        Enabled = false,
        VerificationMethod = "string",
    },
    Name = "string",
    Password = "string",
    Phone = "string",
    PwdReset = false,
    SendWelcomeEmail = false,
});
Copy
example, err := opentelekomcloud.NewIdentityUserV3(ctx, "identityUserV3Resource", &opentelekomcloud.IdentityUserV3Args{
AccessType: pulumi.String("string"),
CountryCode: pulumi.String("string"),
Description: pulumi.String("string"),
Email: pulumi.String("string"),
Enabled: pulumi.Bool(false),
IdentityUserV3Id: pulumi.String("string"),
LoginProtection: &.IdentityUserV3LoginProtectionArgs{
Enabled: pulumi.Bool(false),
VerificationMethod: pulumi.String("string"),
},
Name: pulumi.String("string"),
Password: pulumi.String("string"),
Phone: pulumi.String("string"),
PwdReset: pulumi.Bool(false),
SendWelcomeEmail: pulumi.Bool(false),
})
Copy
var identityUserV3Resource = new IdentityUserV3("identityUserV3Resource", IdentityUserV3Args.builder()
    .accessType("string")
    .countryCode("string")
    .description("string")
    .email("string")
    .enabled(false)
    .identityUserV3Id("string")
    .loginProtection(IdentityUserV3LoginProtectionArgs.builder()
        .enabled(false)
        .verificationMethod("string")
        .build())
    .name("string")
    .password("string")
    .phone("string")
    .pwdReset(false)
    .sendWelcomeEmail(false)
    .build());
Copy
identity_user_v3_resource = opentelekomcloud.IdentityUserV3("identityUserV3Resource",
    access_type="string",
    country_code="string",
    description="string",
    email="string",
    enabled=False,
    identity_user_v3_id="string",
    login_protection={
        "enabled": False,
        "verification_method": "string",
    },
    name="string",
    password="string",
    phone="string",
    pwd_reset=False,
    send_welcome_email=False)
Copy
const identityUserV3Resource = new opentelekomcloud.IdentityUserV3("identityUserV3Resource", {
    accessType: "string",
    countryCode: "string",
    description: "string",
    email: "string",
    enabled: false,
    identityUserV3Id: "string",
    loginProtection: {
        enabled: false,
        verificationMethod: "string",
    },
    name: "string",
    password: "string",
    phone: "string",
    pwdReset: false,
    sendWelcomeEmail: false,
});
Copy
type: opentelekomcloud:IdentityUserV3
properties:
    accessType: string
    countryCode: string
    description: string
    email: string
    enabled: false
    identityUserV3Id: string
    loginProtection:
        enabled: false
        verificationMethod: string
    name: string
    password: string
    phone: string
    pwdReset: false
    sendWelcomeEmail: false
Copy

IdentityUserV3 Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The IdentityUserV3 resource accepts the following input properties:

AccessType string
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
CountryCode string
Specifies the country code. This parameter must be used together with phone.
Description string
Specifies the description of the user.
Email string
Specifies the email address with a maximum of 255 characters.
Enabled bool
Specifies whether the user is enabled or disabled. Valid values are true and false.
IdentityUserV3Id string
The resource ID in UUID format.
LoginProtection IdentityUserV3LoginProtection
Login protection configuration. The login_protection block supports:
Name string
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
Password string
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
Phone string
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
PwdReset bool
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
SendWelcomeEmail bool

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

AccessType string
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
CountryCode string
Specifies the country code. This parameter must be used together with phone.
Description string
Specifies the description of the user.
Email string
Specifies the email address with a maximum of 255 characters.
Enabled bool
Specifies whether the user is enabled or disabled. Valid values are true and false.
IdentityUserV3Id string
The resource ID in UUID format.
LoginProtection IdentityUserV3LoginProtectionArgs
Login protection configuration. The login_protection block supports:
Name string
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
Password string
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
Phone string
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
PwdReset bool
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
SendWelcomeEmail bool

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

accessType String
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
countryCode String
Specifies the country code. This parameter must be used together with phone.
description String
Specifies the description of the user.
email String
Specifies the email address with a maximum of 255 characters.
enabled Boolean
Specifies whether the user is enabled or disabled. Valid values are true and false.
identityUserV3Id String
The resource ID in UUID format.
loginProtection IdentityUserV3LoginProtection
Login protection configuration. The login_protection block supports:
name String
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password String
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
phone String
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwdReset Boolean
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
sendWelcomeEmail Boolean

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

accessType string
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
countryCode string
Specifies the country code. This parameter must be used together with phone.
description string
Specifies the description of the user.
email string
Specifies the email address with a maximum of 255 characters.
enabled boolean
Specifies whether the user is enabled or disabled. Valid values are true and false.
identityUserV3Id string
The resource ID in UUID format.
loginProtection IdentityUserV3LoginProtection
Login protection configuration. The login_protection block supports:
name string
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password string
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
phone string
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwdReset boolean
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
sendWelcomeEmail boolean

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

access_type str
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
country_code str
Specifies the country code. This parameter must be used together with phone.
description str
Specifies the description of the user.
email str
Specifies the email address with a maximum of 255 characters.
enabled bool
Specifies whether the user is enabled or disabled. Valid values are true and false.
identity_user_v3_id str
The resource ID in UUID format.
login_protection IdentityUserV3LoginProtectionArgs
Login protection configuration. The login_protection block supports:
name str
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password str
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
phone str
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwd_reset bool
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
send_welcome_email bool

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

accessType String
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
countryCode String
Specifies the country code. This parameter must be used together with phone.
description String
Specifies the description of the user.
email String
Specifies the email address with a maximum of 255 characters.
enabled Boolean
Specifies whether the user is enabled or disabled. Valid values are true and false.
identityUserV3Id String
The resource ID in UUID format.
loginProtection Property Map
Login protection configuration. The login_protection block supports:
name String
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password String
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
phone String
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwdReset Boolean
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
sendWelcomeEmail Boolean

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

Outputs

All input properties are implicitly available as output properties. Additionally, the IdentityUserV3 resource produces the following output properties:

CreateTime string
The time when the IAM user was created.
DomainId string
The domain user belongs to.
Id string
The provider-assigned unique ID for this managed resource.
LastLogin string
The time when the IAM user last login.
PasswordStrength string
Indicates the password strength.
XuserId string
ID of the user in the external system.
XuserType string
Type of the user in the external system.
CreateTime string
The time when the IAM user was created.
DomainId string
The domain user belongs to.
Id string
The provider-assigned unique ID for this managed resource.
LastLogin string
The time when the IAM user last login.
PasswordStrength string
Indicates the password strength.
XuserId string
ID of the user in the external system.
XuserType string
Type of the user in the external system.
createTime String
The time when the IAM user was created.
domainId String
The domain user belongs to.
id String
The provider-assigned unique ID for this managed resource.
lastLogin String
The time when the IAM user last login.
passwordStrength String
Indicates the password strength.
xuserId String
ID of the user in the external system.
xuserType String
Type of the user in the external system.
createTime string
The time when the IAM user was created.
domainId string
The domain user belongs to.
id string
The provider-assigned unique ID for this managed resource.
lastLogin string
The time when the IAM user last login.
passwordStrength string
Indicates the password strength.
xuserId string
ID of the user in the external system.
xuserType string
Type of the user in the external system.
create_time str
The time when the IAM user was created.
domain_id str
The domain user belongs to.
id str
The provider-assigned unique ID for this managed resource.
last_login str
The time when the IAM user last login.
password_strength str
Indicates the password strength.
xuser_id str
ID of the user in the external system.
xuser_type str
Type of the user in the external system.
createTime String
The time when the IAM user was created.
domainId String
The domain user belongs to.
id String
The provider-assigned unique ID for this managed resource.
lastLogin String
The time when the IAM user last login.
passwordStrength String
Indicates the password strength.
xuserId String
ID of the user in the external system.
xuserType String
Type of the user in the external system.

Look up Existing IdentityUserV3 Resource

Get an existing IdentityUserV3 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: IdentityUserV3State, opts?: CustomResourceOptions): IdentityUserV3
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_type: Optional[str] = None,
        country_code: Optional[str] = None,
        create_time: Optional[str] = None,
        description: Optional[str] = None,
        domain_id: Optional[str] = None,
        email: Optional[str] = None,
        enabled: Optional[bool] = None,
        identity_user_v3_id: Optional[str] = None,
        last_login: Optional[str] = None,
        login_protection: Optional[IdentityUserV3LoginProtectionArgs] = None,
        name: Optional[str] = None,
        password: Optional[str] = None,
        password_strength: Optional[str] = None,
        phone: Optional[str] = None,
        pwd_reset: Optional[bool] = None,
        send_welcome_email: Optional[bool] = None,
        xuser_id: Optional[str] = None,
        xuser_type: Optional[str] = None) -> IdentityUserV3
func GetIdentityUserV3(ctx *Context, name string, id IDInput, state *IdentityUserV3State, opts ...ResourceOption) (*IdentityUserV3, error)
public static IdentityUserV3 Get(string name, Input<string> id, IdentityUserV3State? state, CustomResourceOptions? opts = null)
public static IdentityUserV3 get(String name, Output<String> id, IdentityUserV3State state, CustomResourceOptions options)
resources:  _:    type: opentelekomcloud:IdentityUserV3    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AccessType string
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
CountryCode string
Specifies the country code. This parameter must be used together with phone.
CreateTime string
The time when the IAM user was created.
Description string
Specifies the description of the user.
DomainId string
The domain user belongs to.
Email string
Specifies the email address with a maximum of 255 characters.
Enabled bool
Specifies whether the user is enabled or disabled. Valid values are true and false.
IdentityUserV3Id string
The resource ID in UUID format.
LastLogin string
The time when the IAM user last login.
LoginProtection IdentityUserV3LoginProtection
Login protection configuration. The login_protection block supports:
Name string
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
Password string
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
PasswordStrength string
Indicates the password strength.
Phone string
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
PwdReset bool
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
SendWelcomeEmail bool

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

XuserId string
ID of the user in the external system.
XuserType string
Type of the user in the external system.
AccessType string
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
CountryCode string
Specifies the country code. This parameter must be used together with phone.
CreateTime string
The time when the IAM user was created.
Description string
Specifies the description of the user.
DomainId string
The domain user belongs to.
Email string
Specifies the email address with a maximum of 255 characters.
Enabled bool
Specifies whether the user is enabled or disabled. Valid values are true and false.
IdentityUserV3Id string
The resource ID in UUID format.
LastLogin string
The time when the IAM user last login.
LoginProtection IdentityUserV3LoginProtectionArgs
Login protection configuration. The login_protection block supports:
Name string
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
Password string
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
PasswordStrength string
Indicates the password strength.
Phone string
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
PwdReset bool
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
SendWelcomeEmail bool

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

XuserId string
ID of the user in the external system.
XuserType string
Type of the user in the external system.
accessType String
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
countryCode String
Specifies the country code. This parameter must be used together with phone.
createTime String
The time when the IAM user was created.
description String
Specifies the description of the user.
domainId String
The domain user belongs to.
email String
Specifies the email address with a maximum of 255 characters.
enabled Boolean
Specifies whether the user is enabled or disabled. Valid values are true and false.
identityUserV3Id String
The resource ID in UUID format.
lastLogin String
The time when the IAM user last login.
loginProtection IdentityUserV3LoginProtection
Login protection configuration. The login_protection block supports:
name String
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password String
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
passwordStrength String
Indicates the password strength.
phone String
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwdReset Boolean
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
sendWelcomeEmail Boolean

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

xuserId String
ID of the user in the external system.
xuserType String
Type of the user in the external system.
accessType string
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
countryCode string
Specifies the country code. This parameter must be used together with phone.
createTime string
The time when the IAM user was created.
description string
Specifies the description of the user.
domainId string
The domain user belongs to.
email string
Specifies the email address with a maximum of 255 characters.
enabled boolean
Specifies whether the user is enabled or disabled. Valid values are true and false.
identityUserV3Id string
The resource ID in UUID format.
lastLogin string
The time when the IAM user last login.
loginProtection IdentityUserV3LoginProtection
Login protection configuration. The login_protection block supports:
name string
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password string
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
passwordStrength string
Indicates the password strength.
phone string
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwdReset boolean
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
sendWelcomeEmail boolean

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

xuserId string
ID of the user in the external system.
xuserType string
Type of the user in the external system.
access_type str
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
country_code str
Specifies the country code. This parameter must be used together with phone.
create_time str
The time when the IAM user was created.
description str
Specifies the description of the user.
domain_id str
The domain user belongs to.
email str
Specifies the email address with a maximum of 255 characters.
enabled bool
Specifies whether the user is enabled or disabled. Valid values are true and false.
identity_user_v3_id str
The resource ID in UUID format.
last_login str
The time when the IAM user last login.
login_protection IdentityUserV3LoginProtectionArgs
Login protection configuration. The login_protection block supports:
name str
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password str
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
password_strength str
Indicates the password strength.
phone str
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwd_reset bool
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
send_welcome_email bool

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

xuser_id str
ID of the user in the external system.
xuser_type str
Type of the user in the external system.
accessType String
Specifies the access type of the user. Available values are:

  • default: support both programmatic and management console access.
  • programmatic: only support programmatic access.
  • console: only support management console access.
countryCode String
Specifies the country code. This parameter must be used together with phone.
createTime String
The time when the IAM user was created.
description String
Specifies the description of the user.
domainId String
The domain user belongs to.
email String
Specifies the email address with a maximum of 255 characters.
enabled Boolean
Specifies whether the user is enabled or disabled. Valid values are true and false.
identityUserV3Id String
The resource ID in UUID format.
lastLogin String
The time when the IAM user last login.
loginProtection Property Map
Login protection configuration. The login_protection block supports:
name String
Specifies the name of the user. The user name consists of 5 to 32 characters. It can contain only uppercase letters, lowercase letters, digits, spaces, and special characters (-_) and cannot start with a digit.
password String
Specifies the password for the user with 6 to 32 characters. It must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
passwordStrength String
Indicates the password strength.
phone String
Specifies the mobile number with a maximum of 32 digits. This parameter must be used together with country_code.
pwdReset Boolean
Specifies whether the password should be reset. By default, the password is asked to reset at the first login.
sendWelcomeEmail Boolean

Whether to send a Welcome Email or not. Possible values are true and false.

Welcome Email will be sent when email is set/changed and send_welcome_email is set to true.

xuserId String
ID of the user in the external system.
xuserType String
Type of the user in the external system.

Supporting Types

IdentityUserV3LoginProtection
, IdentityUserV3LoginProtectionArgs

Enabled This property is required. bool
Indicates whether login protection has been enabled for the user. The value can be true or false.
VerificationMethod This property is required. string
Login authentication method of the user. Options: sms, email, and vmfa.
Enabled This property is required. bool
Indicates whether login protection has been enabled for the user. The value can be true or false.
VerificationMethod This property is required. string
Login authentication method of the user. Options: sms, email, and vmfa.
enabled This property is required. Boolean
Indicates whether login protection has been enabled for the user. The value can be true or false.
verificationMethod This property is required. String
Login authentication method of the user. Options: sms, email, and vmfa.
enabled This property is required. boolean
Indicates whether login protection has been enabled for the user. The value can be true or false.
verificationMethod This property is required. string
Login authentication method of the user. Options: sms, email, and vmfa.
enabled This property is required. bool
Indicates whether login protection has been enabled for the user. The value can be true or false.
verification_method This property is required. str
Login authentication method of the user. Options: sms, email, and vmfa.
enabled This property is required. Boolean
Indicates whether login protection has been enabled for the user. The value can be true or false.
verificationMethod This property is required. String
Login authentication method of the user. Options: sms, email, and vmfa.

Import

Users can be imported using the id, e.g.

$ pulumi import opentelekomcloud:index/identityUserV3:IdentityUserV3 user_1 89c60255-9bd6-460c-822a-e2b959ede9d2
Copy

Due to the security reasons, password can not be imported. It can be ignored as shown below.

hcl

resource “opentelekomcloud_identity_user_v3” “user_1” {

lifecycle {

ignore_changes = [

  password,

]

}

}

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
opentelekomcloud opentelekomcloud/terraform-provider-opentelekomcloud
License
Notes
This Pulumi package is based on the opentelekomcloud Terraform Provider.
opentelekomcloud 1.36.35 published on Monday, Apr 14, 2025 by opentelekomcloud
opentelekomcloud/terraform-provider-opentelekomcloud