import * as pulumi from "@pulumi/pulumi";
/**
 * `astra.Role` resource represents custom roles for a particular Astra Org. Custom roles can be assigned to an Astra user is to grant them granular permissions when the default roles in the UI are not specific enough. Roles are composed of policies which are granted to resources.
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as astra from "@pulumi/astra";
 *
 * const example = new astra.Role("example", {
 *     description: "test role",
 *     effect: "allow",
 *     policies: ["db-all-keyspace-create"],
 *     resources: ["drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73"],
 *     roleName: "puppies",
 * });
 * const example2 = new astra.Role("example2", {
 *     description: "complex role",
 *     effect: "allow",
 *     policies: [
 *         "accesslist-read",
 *         "db-all-keyspace-describe",
 *         "db-keyspace-describe",
 *         "db-table-select",
 *         "db-table-describe",
 *         "db-graphql",
 *         "db-rest",
 *         "db-cql",
 *     ],
 *     resources: [
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73",
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73:db:5b70892f-e01a-4595-98e6-19ecc9985d50",
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73:db:5b70892f-e01a-4595-98e6-19ecc9985d50:keyspace:system_schema:table:*",
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73:db:5b70892f-e01a-4595-98e6-19ecc9985d50:keyspace:system:table:*",
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73:db:5b70892f-e01a-4595-98e6-19ecc9985d50:keyspace:system_virtual_schema:table:*",
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73:db:5b70892f-e01a-4595-98e6-19ecc9985d50:keyspace:*",
 *         "drn:astra:org:f9f4b1e0-4c05-451e-9bba-d631295a7f73:db:5b70892f-e01a-4595-98e6-19ecc9985d50:keyspace:*:table:*",
 *     ],
 *     roleName: "puppies",
 * });
 * ```
 *
 * ## Import
 *
 * ```sh
 *  $ pulumi import astra:index/role:Role example role-id
 * ```
 */
export declare class Role extends pulumi.CustomResource {
    /**
     * Get an existing Role resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: RoleState, opts?: pulumi.CustomResourceOptions): Role;
    /**
     * Returns true if the given object is an instance of Role.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is Role;
    /**
     * Role description
     */
    readonly description: pulumi.Output<string>;
    /**
     * Role effect
     */
    readonly effect: pulumi.Output<string>;
    /**
     * List of policies for the role. See
     * https://docs.datastax.com/en/astra/docs/user-permissions.html#_operational_roles_detail for supported policies.
     */
    readonly policies: pulumi.Output<string[]>;
    /**
     * Resources for which role is applicable (format is "drn:astra:org:<org UUID>", followed by optional resource criteria.
     * See example usage above).
     */
    readonly resources: pulumi.Output<string[]>;
    /**
     * Role ID, system generated
     */
    readonly roleId: pulumi.Output<string>;
    /**
     * Role name
     */
    readonly roleName: pulumi.Output<string>;
    /**
     * Create a Role resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: RoleArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering Role resources.
 */
export interface RoleState {
    /**
     * Role description
     */
    description?: pulumi.Input<string>;
    /**
     * Role effect
     */
    effect?: pulumi.Input<string>;
    /**
     * List of policies for the role. See
     * https://docs.datastax.com/en/astra/docs/user-permissions.html#_operational_roles_detail for supported policies.
     */
    policies?: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Resources for which role is applicable (format is "drn:astra:org:<org UUID>", followed by optional resource criteria.
     * See example usage above).
     */
    resources?: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Role ID, system generated
     */
    roleId?: pulumi.Input<string>;
    /**
     * Role name
     */
    roleName?: pulumi.Input<string>;
}
/**
 * The set of arguments for constructing a Role resource.
 */
export interface RoleArgs {
    /**
     * Role description
     */
    description: pulumi.Input<string>;
    /**
     * Role effect
     */
    effect: pulumi.Input<string>;
    /**
     * List of policies for the role. See
     * https://docs.datastax.com/en/astra/docs/user-permissions.html#_operational_roles_detail for supported policies.
     */
    policies: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Resources for which role is applicable (format is "drn:astra:org:<org UUID>", followed by optional resource criteria.
     * See example usage above).
     */
    resources: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * Role name
     */
    roleName: pulumi.Input<string>;
}