Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Cisco ISE Provider
  3. API Docs
  4. identitymanagement
  5. InternalUser
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

ise.identitymanagement.InternalUser

Explore with Pulumi AI

Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise

This resource can manage an Internal User.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as ise from "@pulumi/ise";

const example = new ise.identitymanagement.InternalUser("example", {
    name: "UserTF",
    password: "Cisco123",
    changePassword: true,
    email: "aaa@cisco.com",
    accountNameAlias: "User 1",
    enablePassword: "Cisco123",
    enabled: true,
    passwordNeverExpires: false,
    firstName: "John",
    lastName: "Doe",
    passwordIdStore: "Internal Users",
    description: "My first Terraform user",
});
Copy
import pulumi
import pulumi_ise as ise

example = ise.identitymanagement.InternalUser("example",
    name="UserTF",
    password="Cisco123",
    change_password=True,
    email="aaa@cisco.com",
    account_name_alias="User 1",
    enable_password="Cisco123",
    enabled=True,
    password_never_expires=False,
    first_name="John",
    last_name="Doe",
    password_id_store="Internal Users",
    description="My first Terraform user")
Copy
package main

import (
	"github.com/pulumi/pulumi-ise/sdk/go/ise/identitymanagement"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := identitymanagement.NewInternalUser(ctx, "example", &identitymanagement.InternalUserArgs{
			Name:                 pulumi.String("UserTF"),
			Password:             pulumi.String("Cisco123"),
			ChangePassword:       pulumi.Bool(true),
			Email:                pulumi.String("aaa@cisco.com"),
			AccountNameAlias:     pulumi.String("User 1"),
			EnablePassword:       pulumi.String("Cisco123"),
			Enabled:              pulumi.Bool(true),
			PasswordNeverExpires: pulumi.Bool(false),
			FirstName:            pulumi.String("John"),
			LastName:             pulumi.String("Doe"),
			PasswordIdStore:      pulumi.String("Internal Users"),
			Description:          pulumi.String("My first Terraform user"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ise = Pulumi.Ise;

return await Deployment.RunAsync(() => 
{
    var example = new Ise.IdentityManagement.InternalUser("example", new()
    {
        Name = "UserTF",
        Password = "Cisco123",
        ChangePassword = true,
        Email = "aaa@cisco.com",
        AccountNameAlias = "User 1",
        EnablePassword = "Cisco123",
        Enabled = true,
        PasswordNeverExpires = false,
        FirstName = "John",
        LastName = "Doe",
        PasswordIdStore = "Internal Users",
        Description = "My first Terraform user",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ise.identitymanagement.InternalUser;
import com.pulumi.ise.identitymanagement.InternalUserArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new InternalUser("example", InternalUserArgs.builder()
            .name("UserTF")
            .password("Cisco123")
            .changePassword(true)
            .email("aaa@cisco.com")
            .accountNameAlias("User 1")
            .enablePassword("Cisco123")
            .enabled(true)
            .passwordNeverExpires(false)
            .firstName("John")
            .lastName("Doe")
            .passwordIdStore("Internal Users")
            .description("My first Terraform user")
            .build());

    }
}
Copy
resources:
  example:
    type: ise:identitymanagement:InternalUser
    properties:
      name: UserTF
      password: Cisco123
      changePassword: true
      email: aaa@cisco.com
      accountNameAlias: User 1
      enablePassword: Cisco123
      enabled: true
      passwordNeverExpires: false
      firstName: John
      lastName: Doe
      passwordIdStore: Internal Users
      description: My first Terraform user
Copy

Create InternalUser Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new InternalUser(name: string, args: InternalUserArgs, opts?: CustomResourceOptions);
@overload
def InternalUser(resource_name: str,
                 args: InternalUserArgs,
                 opts: Optional[ResourceOptions] = None)

@overload
def InternalUser(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 password: Optional[str] = None,
                 enabled: Optional[bool] = None,
                 custom_attributes: Optional[str] = None,
                 description: Optional[str] = None,
                 email: Optional[str] = None,
                 enable_password: Optional[str] = None,
                 account_name_alias: Optional[str] = None,
                 first_name: Optional[str] = None,
                 identity_groups: Optional[str] = None,
                 last_name: Optional[str] = None,
                 name: Optional[str] = None,
                 change_password: Optional[bool] = None,
                 password_id_store: Optional[str] = None,
                 password_never_expires: Optional[bool] = None)
func NewInternalUser(ctx *Context, name string, args InternalUserArgs, opts ...ResourceOption) (*InternalUser, error)
public InternalUser(string name, InternalUserArgs args, CustomResourceOptions? opts = null)
public InternalUser(String name, InternalUserArgs args)
public InternalUser(String name, InternalUserArgs args, CustomResourceOptions options)

type: ise:identitymanagement:InternalUser
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. InternalUserArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. InternalUserArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. InternalUserArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. InternalUserArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. InternalUserArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var internalUserResource = new Ise.IdentityManagement.InternalUser("internalUserResource", new()
{
    Password = "string",
    Enabled = false,
    CustomAttributes = "string",
    Description = "string",
    Email = "string",
    EnablePassword = "string",
    AccountNameAlias = "string",
    FirstName = "string",
    IdentityGroups = "string",
    LastName = "string",
    Name = "string",
    ChangePassword = false,
    PasswordIdStore = "string",
    PasswordNeverExpires = false,
});
Copy
example, err := identitymanagement.NewInternalUser(ctx, "internalUserResource", &identitymanagement.InternalUserArgs{
	Password:             pulumi.String("string"),
	Enabled:              pulumi.Bool(false),
	CustomAttributes:     pulumi.String("string"),
	Description:          pulumi.String("string"),
	Email:                pulumi.String("string"),
	EnablePassword:       pulumi.String("string"),
	AccountNameAlias:     pulumi.String("string"),
	FirstName:            pulumi.String("string"),
	IdentityGroups:       pulumi.String("string"),
	LastName:             pulumi.String("string"),
	Name:                 pulumi.String("string"),
	ChangePassword:       pulumi.Bool(false),
	PasswordIdStore:      pulumi.String("string"),
	PasswordNeverExpires: pulumi.Bool(false),
})
Copy
var internalUserResource = new InternalUser("internalUserResource", InternalUserArgs.builder()
    .password("string")
    .enabled(false)
    .customAttributes("string")
    .description("string")
    .email("string")
    .enablePassword("string")
    .accountNameAlias("string")
    .firstName("string")
    .identityGroups("string")
    .lastName("string")
    .name("string")
    .changePassword(false)
    .passwordIdStore("string")
    .passwordNeverExpires(false)
    .build());
Copy
internal_user_resource = ise.identitymanagement.InternalUser("internalUserResource",
    password="string",
    enabled=False,
    custom_attributes="string",
    description="string",
    email="string",
    enable_password="string",
    account_name_alias="string",
    first_name="string",
    identity_groups="string",
    last_name="string",
    name="string",
    change_password=False,
    password_id_store="string",
    password_never_expires=False)
Copy
const internalUserResource = new ise.identitymanagement.InternalUser("internalUserResource", {
    password: "string",
    enabled: false,
    customAttributes: "string",
    description: "string",
    email: "string",
    enablePassword: "string",
    accountNameAlias: "string",
    firstName: "string",
    identityGroups: "string",
    lastName: "string",
    name: "string",
    changePassword: false,
    passwordIdStore: "string",
    passwordNeverExpires: false,
});
Copy
type: ise:identitymanagement:InternalUser
properties:
    accountNameAlias: string
    changePassword: false
    customAttributes: string
    description: string
    email: string
    enablePassword: string
    enabled: false
    firstName: string
    identityGroups: string
    lastName: string
    name: string
    password: string
    passwordIdStore: string
    passwordNeverExpires: false
Copy

InternalUser Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The InternalUser resource accepts the following input properties:

Password This property is required. string
The password of the internal user
AccountNameAlias string
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
ChangePassword bool
Requires the user to change the password - Default value: true
CustomAttributes string
Key value map
Description string
Description
Email string
Email address
EnablePassword string
This field is added in ISE 2.0 to support TACACS+
Enabled bool
Whether the user is enabled/disabled
FirstName string
First name of the internal user
IdentityGroups string
Comma separated list of identity group IDs.
LastName string
Last name of the internal user
Name string
The name of the internal user
PasswordIdStore string
The ID store where the internal user's password is kept - Default value: Internal Users
PasswordNeverExpires bool
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
Password This property is required. string
The password of the internal user
AccountNameAlias string
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
ChangePassword bool
Requires the user to change the password - Default value: true
CustomAttributes string
Key value map
Description string
Description
Email string
Email address
EnablePassword string
This field is added in ISE 2.0 to support TACACS+
Enabled bool
Whether the user is enabled/disabled
FirstName string
First name of the internal user
IdentityGroups string
Comma separated list of identity group IDs.
LastName string
Last name of the internal user
Name string
The name of the internal user
PasswordIdStore string
The ID store where the internal user's password is kept - Default value: Internal Users
PasswordNeverExpires bool
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
password This property is required. String
The password of the internal user
accountNameAlias String
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
changePassword Boolean
Requires the user to change the password - Default value: true
customAttributes String
Key value map
description String
Description
email String
Email address
enablePassword String
This field is added in ISE 2.0 to support TACACS+
enabled Boolean
Whether the user is enabled/disabled
firstName String
First name of the internal user
identityGroups String
Comma separated list of identity group IDs.
lastName String
Last name of the internal user
name String
The name of the internal user
passwordIdStore String
The ID store where the internal user's password is kept - Default value: Internal Users
passwordNeverExpires Boolean
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
password This property is required. string
The password of the internal user
accountNameAlias string
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
changePassword boolean
Requires the user to change the password - Default value: true
customAttributes string
Key value map
description string
Description
email string
Email address
enablePassword string
This field is added in ISE 2.0 to support TACACS+
enabled boolean
Whether the user is enabled/disabled
firstName string
First name of the internal user
identityGroups string
Comma separated list of identity group IDs.
lastName string
Last name of the internal user
name string
The name of the internal user
passwordIdStore string
The ID store where the internal user's password is kept - Default value: Internal Users
passwordNeverExpires boolean
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
password This property is required. str
The password of the internal user
account_name_alias str
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
change_password bool
Requires the user to change the password - Default value: true
custom_attributes str
Key value map
description str
Description
email str
Email address
enable_password str
This field is added in ISE 2.0 to support TACACS+
enabled bool
Whether the user is enabled/disabled
first_name str
First name of the internal user
identity_groups str
Comma separated list of identity group IDs.
last_name str
Last name of the internal user
name str
The name of the internal user
password_id_store str
The ID store where the internal user's password is kept - Default value: Internal Users
password_never_expires bool
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
password This property is required. String
The password of the internal user
accountNameAlias String
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
changePassword Boolean
Requires the user to change the password - Default value: true
customAttributes String
Key value map
description String
Description
email String
Email address
enablePassword String
This field is added in ISE 2.0 to support TACACS+
enabled Boolean
Whether the user is enabled/disabled
firstName String
First name of the internal user
identityGroups String
Comma separated list of identity group IDs.
lastName String
Last name of the internal user
name String
The name of the internal user
passwordIdStore String
The ID store where the internal user's password is kept - Default value: Internal Users
passwordNeverExpires Boolean
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false

Outputs

All input properties are implicitly available as output properties. Additionally, the InternalUser resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing InternalUser Resource

Get an existing InternalUser resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: InternalUserState, opts?: CustomResourceOptions): InternalUser
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_name_alias: Optional[str] = None,
        change_password: Optional[bool] = None,
        custom_attributes: Optional[str] = None,
        description: Optional[str] = None,
        email: Optional[str] = None,
        enable_password: Optional[str] = None,
        enabled: Optional[bool] = None,
        first_name: Optional[str] = None,
        identity_groups: Optional[str] = None,
        last_name: Optional[str] = None,
        name: Optional[str] = None,
        password: Optional[str] = None,
        password_id_store: Optional[str] = None,
        password_never_expires: Optional[bool] = None) -> InternalUser
func GetInternalUser(ctx *Context, name string, id IDInput, state *InternalUserState, opts ...ResourceOption) (*InternalUser, error)
public static InternalUser Get(string name, Input<string> id, InternalUserState? state, CustomResourceOptions? opts = null)
public static InternalUser get(String name, Output<String> id, InternalUserState state, CustomResourceOptions options)
resources:  _:    type: ise:identitymanagement:InternalUser    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AccountNameAlias string
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
ChangePassword bool
Requires the user to change the password - Default value: true
CustomAttributes string
Key value map
Description string
Description
Email string
Email address
EnablePassword string
This field is added in ISE 2.0 to support TACACS+
Enabled bool
Whether the user is enabled/disabled
FirstName string
First name of the internal user
IdentityGroups string
Comma separated list of identity group IDs.
LastName string
Last name of the internal user
Name string
The name of the internal user
Password string
The password of the internal user
PasswordIdStore string
The ID store where the internal user's password is kept - Default value: Internal Users
PasswordNeverExpires bool
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
AccountNameAlias string
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
ChangePassword bool
Requires the user to change the password - Default value: true
CustomAttributes string
Key value map
Description string
Description
Email string
Email address
EnablePassword string
This field is added in ISE 2.0 to support TACACS+
Enabled bool
Whether the user is enabled/disabled
FirstName string
First name of the internal user
IdentityGroups string
Comma separated list of identity group IDs.
LastName string
Last name of the internal user
Name string
The name of the internal user
Password string
The password of the internal user
PasswordIdStore string
The ID store where the internal user's password is kept - Default value: Internal Users
PasswordNeverExpires bool
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
accountNameAlias String
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
changePassword Boolean
Requires the user to change the password - Default value: true
customAttributes String
Key value map
description String
Description
email String
Email address
enablePassword String
This field is added in ISE 2.0 to support TACACS+
enabled Boolean
Whether the user is enabled/disabled
firstName String
First name of the internal user
identityGroups String
Comma separated list of identity group IDs.
lastName String
Last name of the internal user
name String
The name of the internal user
password String
The password of the internal user
passwordIdStore String
The ID store where the internal user's password is kept - Default value: Internal Users
passwordNeverExpires Boolean
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
accountNameAlias string
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
changePassword boolean
Requires the user to change the password - Default value: true
customAttributes string
Key value map
description string
Description
email string
Email address
enablePassword string
This field is added in ISE 2.0 to support TACACS+
enabled boolean
Whether the user is enabled/disabled
firstName string
First name of the internal user
identityGroups string
Comma separated list of identity group IDs.
lastName string
Last name of the internal user
name string
The name of the internal user
password string
The password of the internal user
passwordIdStore string
The ID store where the internal user's password is kept - Default value: Internal Users
passwordNeverExpires boolean
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
account_name_alias str
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
change_password bool
Requires the user to change the password - Default value: true
custom_attributes str
Key value map
description str
Description
email str
Email address
enable_password str
This field is added in ISE 2.0 to support TACACS+
enabled bool
Whether the user is enabled/disabled
first_name str
First name of the internal user
identity_groups str
Comma separated list of identity group IDs.
last_name str
Last name of the internal user
name str
The name of the internal user
password str
The password of the internal user
password_id_store str
The ID store where the internal user's password is kept - Default value: Internal Users
password_never_expires bool
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false
accountNameAlias String
The Account Name Alias will be used to send email notifications about password expiration. This field is only supported from ISE 3.2.
changePassword Boolean
Requires the user to change the password - Default value: true
customAttributes String
Key value map
description String
Description
email String
Email address
enablePassword String
This field is added in ISE 2.0 to support TACACS+
enabled Boolean
Whether the user is enabled/disabled
firstName String
First name of the internal user
identityGroups String
Comma separated list of identity group IDs.
lastName String
Last name of the internal user
name String
The name of the internal user
password String
The password of the internal user
passwordIdStore String
The ID store where the internal user's password is kept - Default value: Internal Users
passwordNeverExpires Boolean
Set to true to indicate the user password never expires. This will not apply to Users who are also ISE Admins. This field is only supported from ISE 3.2. - Default value: false

Import

$ pulumi import ise:identitymanagement/internalUser:InternalUser example "76d24097-41c4-4558-a4d0-a8c07ac08470"
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
ise pulumi/pulumi-ise
License
Apache-2.0
Notes
This Pulumi package is based on the ise Terraform Provider.
Cisco ISE v0.2.1 published on Saturday, Mar 15, 2025 by Pulumi
pulumi/pulumi-ise