Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Active Directory (Azure AD)
  3. API Docs
  4. ServicePrincipalPassword
Azure Active Directory (Azure AD) v6.2.0 published on Tuesday, Jan 21, 2025 by Pulumi
pulumi/pulumi-azuread

azuread.ServicePrincipalPassword

Explore with Pulumi AI

azuread logo
Azure Active Directory (Azure AD) v6.2.0 published on Tuesday, Jan 21, 2025 by Pulumi
pulumi/pulumi-azuread

    Example Usage

    Basic example

    import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";

const example = new azuread.Application("example", {displayName: "example"});
const exampleServicePrincipal = new azuread.ServicePrincipal("example", {clientId: example.clientId});
const exampleServicePrincipalPassword = new azuread.ServicePrincipalPassword("example", {servicePrincipalId: exampleServicePrincipal.id});

    import pulumi
import pulumi_azuread as azuread

example = azuread.Application("example", display_name="example")
example_service_principal = azuread.ServicePrincipal("example", client_id=example.client_id)
example_service_principal_password = azuread.ServicePrincipalPassword("example", service_principal_id=example_service_principal.id)

    package main

import (
	"github.com/pulumi/pulumi-azuread/sdk/v6/go/azuread"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := azuread.NewApplication(ctx, "example", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		exampleServicePrincipal, err := azuread.NewServicePrincipal(ctx, "example", &azuread.ServicePrincipalArgs{
			ClientId: example.ClientId,
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipalPassword(ctx, "example", &azuread.ServicePrincipalPasswordArgs{
			ServicePrincipalId: exampleServicePrincipal.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureAD = Pulumi.AzureAD;

return await Deployment.RunAsync(() => 
{
    var example = new AzureAD.Application("example", new()
    {
        DisplayName = "example",
    });

    var exampleServicePrincipal = new AzureAD.ServicePrincipal("example", new()
    {
        ClientId = example.ClientId,
    });

    var exampleServicePrincipalPassword = new AzureAD.ServicePrincipalPassword("example", new()
    {
        ServicePrincipalId = exampleServicePrincipal.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.Application;
import com.pulumi.azuread.ApplicationArgs;
import com.pulumi.azuread.ServicePrincipal;
import com.pulumi.azuread.ServicePrincipalArgs;
import com.pulumi.azuread.ServicePrincipalPassword;
import com.pulumi.azuread.ServicePrincipalPasswordArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Application("example", ApplicationArgs.builder()
            .displayName("example")
            .build());

        var exampleServicePrincipal = new ServicePrincipal("exampleServicePrincipal", ServicePrincipalArgs.builder()
            .clientId(example.clientId())
            .build());

        var exampleServicePrincipalPassword = new ServicePrincipalPassword("exampleServicePrincipalPassword", ServicePrincipalPasswordArgs.builder()
            .servicePrincipalId(exampleServicePrincipal.id())
            .build());

    }
}

    resources:
  example:
    type: azuread:Application
    properties:
      displayName: example
  exampleServicePrincipal:
    type: azuread:ServicePrincipal
    name: example
    properties:
      clientId: ${example.clientId}
  exampleServicePrincipalPassword:
    type: azuread:ServicePrincipalPassword
    name: example
    properties:
      servicePrincipalId: ${exampleServicePrincipal.id}

    Time-based rotation

    import * as pulumi from "@pulumi/pulumi";
import * as azuread from "@pulumi/azuread";
import * as time from "@pulumiverse/time";

const example = new azuread.Application("example", {displayName: "example"});
const exampleServicePrincipal = new azuread.ServicePrincipal("example", {clientId: example.clientId});
const exampleRotating = new time.Rotating("example", {rotationDays: 7});
const exampleServicePrincipalPassword = new azuread.ServicePrincipalPassword("example", {
    servicePrincipalId: exampleServicePrincipal.id,
    rotateWhenChanged: {
        rotation: exampleRotating.id,
    },
});

    import pulumi
import pulumi_azuread as azuread
import pulumiverse_time as time

example = azuread.Application("example", display_name="example")
example_service_principal = azuread.ServicePrincipal("example", client_id=example.client_id)
example_rotating = time.Rotating("example", rotation_days=7)
example_service_principal_password = azuread.ServicePrincipalPassword("example",
    service_principal_id=example_service_principal.id,
    rotate_when_changed={
        "rotation": example_rotating.id,
    })

    package main

import (
	"github.com/pulumi/pulumi-azuread/sdk/v6/go/azuread"
	"github.com/pulumi/pulumi-time/sdk/go/time"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := azuread.NewApplication(ctx, "example", &azuread.ApplicationArgs{
			DisplayName: pulumi.String("example"),
		})
		if err != nil {
			return err
		}
		exampleServicePrincipal, err := azuread.NewServicePrincipal(ctx, "example", &azuread.ServicePrincipalArgs{
			ClientId: example.ClientId,
		})
		if err != nil {
			return err
		}
		exampleRotating, err := time.NewRotating(ctx, "example", &time.RotatingArgs{
			RotationDays: pulumi.Int(7),
		})
		if err != nil {
			return err
		}
		_, err = azuread.NewServicePrincipalPassword(ctx, "example", &azuread.ServicePrincipalPasswordArgs{
			ServicePrincipalId: exampleServicePrincipal.ID(),
			RotateWhenChanged: pulumi.StringMap{
				"rotation": exampleRotating.ID(),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureAD = Pulumi.AzureAD;
using Time = Pulumiverse.Time;

return await Deployment.RunAsync(() => 
{
    var example = new AzureAD.Application("example", new()
    {
        DisplayName = "example",
    });

    var exampleServicePrincipal = new AzureAD.ServicePrincipal("example", new()
    {
        ClientId = example.ClientId,
    });

    var exampleRotating = new Time.Rotating("example", new()
    {
        RotationDays = 7,
    });

    var exampleServicePrincipalPassword = new AzureAD.ServicePrincipalPassword("example", new()
    {
        ServicePrincipalId = exampleServicePrincipal.Id,
        RotateWhenChanged = 
        {
            { "rotation", exampleRotating.Id },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azuread.Application;
import com.pulumi.azuread.ApplicationArgs;
import com.pulumi.azuread.ServicePrincipal;
import com.pulumi.azuread.ServicePrincipalArgs;
import com.pulumi.time.Rotating;
import com.pulumi.time.RotatingArgs;
import com.pulumi.azuread.ServicePrincipalPassword;
import com.pulumi.azuread.ServicePrincipalPasswordArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Application("example", ApplicationArgs.builder()
            .displayName("example")
            .build());

        var exampleServicePrincipal = new ServicePrincipal("exampleServicePrincipal", ServicePrincipalArgs.builder()
            .clientId(example.clientId())
            .build());

        var exampleRotating = new Rotating("exampleRotating", RotatingArgs.builder()
            .rotationDays(7)
            .build());

        var exampleServicePrincipalPassword = new ServicePrincipalPassword("exampleServicePrincipalPassword", ServicePrincipalPasswordArgs.builder()
            .servicePrincipalId(exampleServicePrincipal.id())
            .rotateWhenChanged(Map.of("rotation", exampleRotating.id()))
            .build());

    }
}

    resources:
  example:
    type: azuread:Application
    properties:
      displayName: example
  exampleServicePrincipal:
    type: azuread:ServicePrincipal
    name: example
    properties:
      clientId: ${example.clientId}
  exampleRotating:
    type: time:Rotating
    name: example
    properties:
      rotationDays: 7
  exampleServicePrincipalPassword:
    type: azuread:ServicePrincipalPassword
    name: example
    properties:
      servicePrincipalId: ${exampleServicePrincipal.id}
      rotateWhenChanged:
        rotation: ${exampleRotating.id}

    Create ServicePrincipalPassword Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ServicePrincipalPassword(name: string, args: ServicePrincipalPasswordArgs, opts?: CustomResourceOptions);
    @overload
def ServicePrincipalPassword(resource_name: str,
                             args: ServicePrincipalPasswordArgs,
                             opts: Optional[ResourceOptions] = None)

@overload
def ServicePrincipalPassword(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             service_principal_id: Optional[str] = None,
                             display_name: Optional[str] = None,
                             end_date: Optional[str] = None,
                             end_date_relative: Optional[str] = None,
                             rotate_when_changed: Optional[Mapping[str, str]] = None,
                             start_date: Optional[str] = None)
    func NewServicePrincipalPassword(ctx *Context, name string, args ServicePrincipalPasswordArgs, opts ...ResourceOption) (*ServicePrincipalPassword, error)
    public ServicePrincipalPassword(string name, ServicePrincipalPasswordArgs args, CustomResourceOptions? opts = null)
    public ServicePrincipalPassword(String name, ServicePrincipalPasswordArgs args)
public ServicePrincipalPassword(String name, ServicePrincipalPasswordArgs args, CustomResourceOptions options)

    type: azuread:ServicePrincipalPassword
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ServicePrincipalPasswordArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ServicePrincipalPasswordArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ServicePrincipalPasswordArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ServicePrincipalPasswordArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ServicePrincipalPasswordArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var servicePrincipalPasswordResource = new AzureAD.ServicePrincipalPassword("servicePrincipalPasswordResource", new()
{
    ServicePrincipalId = "string",
    DisplayName = "string",
    EndDate = "string",
    RotateWhenChanged = 
    {
        { "string", "string" },
    },
    StartDate = "string",
});

    example, err := azuread.NewServicePrincipalPassword(ctx, "servicePrincipalPasswordResource", &azuread.ServicePrincipalPasswordArgs{
	ServicePrincipalId: pulumi.String("string"),
	DisplayName:        pulumi.String("string"),
	EndDate:            pulumi.String("string"),
	RotateWhenChanged: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	StartDate: pulumi.String("string"),
})

    var servicePrincipalPasswordResource = new ServicePrincipalPassword("servicePrincipalPasswordResource", ServicePrincipalPasswordArgs.builder()
    .servicePrincipalId("string")
    .displayName("string")
    .endDate("string")
    .rotateWhenChanged(Map.of("string", "string"))
    .startDate("string")
    .build());

    service_principal_password_resource = azuread.ServicePrincipalPassword("servicePrincipalPasswordResource",
    service_principal_id="string",
    display_name="string",
    end_date="string",
    rotate_when_changed={
        "string": "string",
    },
    start_date="string")

    const servicePrincipalPasswordResource = new azuread.ServicePrincipalPassword("servicePrincipalPasswordResource", {
    servicePrincipalId: "string",
    displayName: "string",
    endDate: "string",
    rotateWhenChanged: {
        string: "string",
    },
    startDate: "string",
});

    type: azuread:ServicePrincipalPassword
properties:
    displayName: string
    endDate: string
    rotateWhenChanged:
        string: string
    servicePrincipalId: string
    startDate: string

    ServicePrincipalPassword Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ServicePrincipalPassword resource accepts the following input properties:

    ServicePrincipalId string
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    DisplayName string
    A display name for the password.
    EndDate string
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    EndDateRelative string
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    RotateWhenChanged Dictionary<string, string>
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    StartDate string
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    ServicePrincipalId string
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    DisplayName string
    A display name for the password.
    EndDate string
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    EndDateRelative string
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    RotateWhenChanged map[string]string
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    StartDate string
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    servicePrincipalId String
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    displayName String
    A display name for the password.
    endDate String
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    endDateRelative String
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    rotateWhenChanged Map<String,String>
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    startDate String
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    servicePrincipalId string
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    displayName string
    A display name for the password.
    endDate string
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    endDateRelative string
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    rotateWhenChanged {[key: string]: string}
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    startDate string
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    service_principal_id str
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    display_name str
    A display name for the password.
    end_date str
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    end_date_relative str
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    rotate_when_changed Mapping[str, str]
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    start_date str
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    servicePrincipalId String
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    displayName String
    A display name for the password.
    endDate String
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    endDateRelative String
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    rotateWhenChanged Map<String>
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    startDate String
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ServicePrincipalPassword resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    KeyId string
    A UUID used to uniquely identify this password credential.
    Value string
    The password for this service principal, which is generated by Azure Active Directory.
    Id string
    The provider-assigned unique ID for this managed resource.
    KeyId string
    A UUID used to uniquely identify this password credential.
    Value string
    The password for this service principal, which is generated by Azure Active Directory.
    id String
    The provider-assigned unique ID for this managed resource.
    keyId String
    A UUID used to uniquely identify this password credential.
    value String
    The password for this service principal, which is generated by Azure Active Directory.
    id string
    The provider-assigned unique ID for this managed resource.
    keyId string
    A UUID used to uniquely identify this password credential.
    value string
    The password for this service principal, which is generated by Azure Active Directory.
    id str
    The provider-assigned unique ID for this managed resource.
    key_id str
    A UUID used to uniquely identify this password credential.
    value str
    The password for this service principal, which is generated by Azure Active Directory.
    id String
    The provider-assigned unique ID for this managed resource.
    keyId String
    A UUID used to uniquely identify this password credential.
    value String
    The password for this service principal, which is generated by Azure Active Directory.

    Look up Existing ServicePrincipalPassword Resource

    Get an existing ServicePrincipalPassword resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ServicePrincipalPasswordState, opts?: CustomResourceOptions): ServicePrincipalPassword
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        display_name: Optional[str] = None,
        end_date: Optional[str] = None,
        end_date_relative: Optional[str] = None,
        key_id: Optional[str] = None,
        rotate_when_changed: Optional[Mapping[str, str]] = None,
        service_principal_id: Optional[str] = None,
        start_date: Optional[str] = None,
        value: Optional[str] = None) -> ServicePrincipalPassword
    func GetServicePrincipalPassword(ctx *Context, name string, id IDInput, state *ServicePrincipalPasswordState, opts ...ResourceOption) (*ServicePrincipalPassword, error)
    public static ServicePrincipalPassword Get(string name, Input<string> id, ServicePrincipalPasswordState? state, CustomResourceOptions? opts = null)
    public static ServicePrincipalPassword get(String name, Output<String> id, ServicePrincipalPasswordState state, CustomResourceOptions options)
    resources:  _:    type: azuread:ServicePrincipalPassword    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DisplayName string
    A display name for the password.
    EndDate string
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    EndDateRelative string
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    KeyId string
    A UUID used to uniquely identify this password credential.
    RotateWhenChanged Dictionary<string, string>
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    ServicePrincipalId string
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    StartDate string
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    Value string
    The password for this service principal, which is generated by Azure Active Directory.
    DisplayName string
    A display name for the password.
    EndDate string
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    EndDateRelative string
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    KeyId string
    A UUID used to uniquely identify this password credential.
    RotateWhenChanged map[string]string
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    ServicePrincipalId string
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    StartDate string
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    Value string
    The password for this service principal, which is generated by Azure Active Directory.
    displayName String
    A display name for the password.
    endDate String
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    endDateRelative String
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    keyId String
    A UUID used to uniquely identify this password credential.
    rotateWhenChanged Map<String,String>
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    servicePrincipalId String
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    startDate String
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    value String
    The password for this service principal, which is generated by Azure Active Directory.
    displayName string
    A display name for the password.
    endDate string
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    endDateRelative string
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    keyId string
    A UUID used to uniquely identify this password credential.
    rotateWhenChanged {[key: string]: string}
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    servicePrincipalId string
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    startDate string
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    value string
    The password for this service principal, which is generated by Azure Active Directory.
    display_name str
    A display name for the password.
    end_date str
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    end_date_relative str
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    key_id str
    A UUID used to uniquely identify this password credential.
    rotate_when_changed Mapping[str, str]
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    service_principal_id str
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    start_date str
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    value str
    The password for this service principal, which is generated by Azure Active Directory.
    displayName String
    A display name for the password.
    endDate String
    The end date until which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). Changing this field forces a new resource to be created.
    endDateRelative String
    A relative duration for which the password is valid until, for example 240h (10 days) or 2400h30m. Changing this field forces a new resource to be created.

    Deprecated: The end_date_relative property is deprecated and will be removed in a future version of the AzureAD provider. Please instead use the Terraform timeadd() function to calculate a value for the end_date property.

    keyId String
    A UUID used to uniquely identify this password credential.
    rotateWhenChanged Map<String>
    A map of arbitrary key/value pairs that will force recreation of the password when they change, enabling password rotation based on external conditions such as a rotating timestamp. Changing this forces a new resource to be created.
    servicePrincipalId String
    The ID of the service principal for which this password should be created. Changing this field forces a new resource to be created.
    startDate String
    The start date from which the password is valid, formatted as an RFC3339 date string (e.g. 2018-01-01T01:02:03Z). If this isn't specified, the current date is used. Changing this field forces a new resource to be created.
    value String
    The password for this service principal, which is generated by Azure Active Directory.

    Import

    This resource does not support importing.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Active Directory (Azure AD) pulumi/pulumi-azuread
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azuread Terraform Provider.
    azuread logo
    Azure Active Directory (Azure AD) v6.2.0 published on Tuesday, Jan 21, 2025 by Pulumi
    pulumi/pulumi-azuread