We recommend using Azure Native.
Azure v6.22.0 published on Tuesday, Apr 1, 2025 by Pulumi
azure.domainservices.getService
Explore with Pulumi AI
Gets information about an Active Directory Domain Service.
Supported Modes: At present this data source only supports User Forest mode and not Resource Forest mode. Read more about the different operation modes for this service.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const example = azure.domainservices.getService({
    name: "example-aadds",
    resourceGroupName: "example-aadds-rg",
});
import pulumi
import pulumi_azure as azure
example = azure.domainservices.get_service(name="example-aadds",
    resource_group_name="example-aadds-rg")
package main
import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/domainservices"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := domainservices.LookupService(ctx, &domainservices.LookupServiceArgs{
			Name:              "example-aadds",
			ResourceGroupName: "example-aadds-rg",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() => 
{
    var example = Azure.DomainServices.GetService.Invoke(new()
    {
        Name = "example-aadds",
        ResourceGroupName = "example-aadds-rg",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.domainservices.DomainservicesFunctions;
import com.pulumi.azure.domainservices.inputs.GetServiceArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = DomainservicesFunctions.getService(GetServiceArgs.builder()
            .name("example-aadds")
            .resourceGroupName("example-aadds-rg")
            .build());
    }
}
variables:
  example:
    fn::invoke:
      function: azure:domainservices:getService
      arguments:
        name: example-aadds
        resourceGroupName: example-aadds-rg
Using getService
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getService(args: GetServiceArgs, opts?: InvokeOptions): Promise<GetServiceResult>
function getServiceOutput(args: GetServiceOutputArgs, opts?: InvokeOptions): Output<GetServiceResult>def get_service(name: Optional[str] = None,
                resource_group_name: Optional[str] = None,
                tags: Optional[Mapping[str, str]] = None,
                opts: Optional[InvokeOptions] = None) -> GetServiceResult
def get_service_output(name: Optional[pulumi.Input[str]] = None,
                resource_group_name: Optional[pulumi.Input[str]] = None,
                tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                opts: Optional[InvokeOptions] = None) -> Output[GetServiceResult]func LookupService(ctx *Context, args *LookupServiceArgs, opts ...InvokeOption) (*LookupServiceResult, error)
func LookupServiceOutput(ctx *Context, args *LookupServiceOutputArgs, opts ...InvokeOption) LookupServiceResultOutput> Note: This function is named LookupService in the Go SDK.
public static class GetService 
{
    public static Task<GetServiceResult> InvokeAsync(GetServiceArgs args, InvokeOptions? opts = null)
    public static Output<GetServiceResult> Invoke(GetServiceInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetServiceResult> getService(GetServiceArgs args, InvokeOptions options)
public static Output<GetServiceResult> getService(GetServiceArgs args, InvokeOptions options)
fn::invoke:
  function: azure:domainservices/getService:getService
  arguments:
    # arguments dictionaryThe following arguments are supported:
- Name string
 - The display name for your managed Active Directory Domain Service resource. Changing this forces a new resource to be created.
 - Resource
Group stringName  - The name of the Resource Group in which the Domain Service should exist. Changing this forces a new resource to be created.
 - Dictionary<string, string>
 - A mapping of tags assigned to the resource.
 
- Name string
 - The display name for your managed Active Directory Domain Service resource. Changing this forces a new resource to be created.
 - Resource
Group stringName  - The name of the Resource Group in which the Domain Service should exist. Changing this forces a new resource to be created.
 - map[string]string
 - A mapping of tags assigned to the resource.
 
- name String
 - The display name for your managed Active Directory Domain Service resource. Changing this forces a new resource to be created.
 - resource
Group StringName  - The name of the Resource Group in which the Domain Service should exist. Changing this forces a new resource to be created.
 - Map<String,String>
 - A mapping of tags assigned to the resource.
 
- name string
 - The display name for your managed Active Directory Domain Service resource. Changing this forces a new resource to be created.
 - resource
Group stringName  - The name of the Resource Group in which the Domain Service should exist. Changing this forces a new resource to be created.
 - {[key: string]: string}
 - A mapping of tags assigned to the resource.
 
- name str
 - The display name for your managed Active Directory Domain Service resource. Changing this forces a new resource to be created.
 - resource_
group_ strname  - The name of the Resource Group in which the Domain Service should exist. Changing this forces a new resource to be created.
 - Mapping[str, str]
 - A mapping of tags assigned to the resource.
 
- name String
 - The display name for your managed Active Directory Domain Service resource. Changing this forces a new resource to be created.
 - resource
Group StringName  - The name of the Resource Group in which the Domain Service should exist. Changing this forces a new resource to be created.
 - Map<String>
 - A mapping of tags assigned to the resource.
 
getService Result
The following output properties are available:
- Deployment
Id string - A unique ID for the managed domain deployment.
 - Domain
Configuration stringType  - The forest type used by the managed domain. One of 
ResourceTrusting, for a Resource Forest, or blank, for a User Forest. - Domain
Name string - The Active Directory domain of the Domain Service. See official documentation for constraints and recommendations.
 - Filtered
Sync boolEnabled  - Whether group-based filtered sync (also called scoped synchronisation) is enabled.
 - Id string
 - The provider-assigned unique ID for this managed resource.
 - Location string
 - The Azure location in which the replica set resides.
 - Name string
 - Notifications
List<Get
Service Notification>  - A 
notificationsblock as defined below. - Replica
Sets List<GetService Replica Set>  - One or more 
replica_setblocks as defined below. - Resource
Group stringName  - Resource
Id string - Secure
Ldaps List<GetService Secure Ldap>  - A 
secure_ldapblock as defined below. - Securities
List<Get
Service Security>  - A 
securityblock as defined below. - Sku string
 - The SKU of the Domain Service resource. One of 
Standard,EnterpriseorPremium. - Sync
Owner string - Tenant
Id string - Version int
 - Dictionary<string, string>
 - A mapping of tags assigned to the resource.
 
- Deployment
Id string - A unique ID for the managed domain deployment.
 - Domain
Configuration stringType  - The forest type used by the managed domain. One of 
ResourceTrusting, for a Resource Forest, or blank, for a User Forest. - Domain
Name string - The Active Directory domain of the Domain Service. See official documentation for constraints and recommendations.
 - Filtered
Sync boolEnabled  - Whether group-based filtered sync (also called scoped synchronisation) is enabled.
 - Id string
 - The provider-assigned unique ID for this managed resource.
 - Location string
 - The Azure location in which the replica set resides.
 - Name string
 - Notifications
[]Get
Service Notification  - A 
notificationsblock as defined below. - Replica
Sets []GetService Replica Set  - One or more 
replica_setblocks as defined below. - Resource
Group stringName  - Resource
Id string - Secure
Ldaps []GetService Secure Ldap  - A 
secure_ldapblock as defined below. - Securities
[]Get
Service Security  - A 
securityblock as defined below. - Sku string
 - The SKU of the Domain Service resource. One of 
Standard,EnterpriseorPremium. - Sync
Owner string - Tenant
Id string - Version int
 - map[string]string
 - A mapping of tags assigned to the resource.
 
- deployment
Id String - A unique ID for the managed domain deployment.
 - domain
Configuration StringType  - The forest type used by the managed domain. One of 
ResourceTrusting, for a Resource Forest, or blank, for a User Forest. - domain
Name String - The Active Directory domain of the Domain Service. See official documentation for constraints and recommendations.
 - filtered
Sync BooleanEnabled  - Whether group-based filtered sync (also called scoped synchronisation) is enabled.
 - id String
 - The provider-assigned unique ID for this managed resource.
 - location String
 - The Azure location in which the replica set resides.
 - name String
 - notifications
List<Get
Service Notification>  - A 
notificationsblock as defined below. - replica
Sets List<GetService Replica Set>  - One or more 
replica_setblocks as defined below. - resource
Group StringName  - resource
Id String - secure
Ldaps List<GetService Secure Ldap>  - A 
secure_ldapblock as defined below. - securities
List<Get
Service Security>  - A 
securityblock as defined below. - sku String
 - The SKU of the Domain Service resource. One of 
Standard,EnterpriseorPremium. - sync
Owner String - tenant
Id String - version Integer
 - Map<String,String>
 - A mapping of tags assigned to the resource.
 
- deployment
Id string - A unique ID for the managed domain deployment.
 - domain
Configuration stringType  - The forest type used by the managed domain. One of 
ResourceTrusting, for a Resource Forest, or blank, for a User Forest. - domain
Name string - The Active Directory domain of the Domain Service. See official documentation for constraints and recommendations.
 - filtered
Sync booleanEnabled  - Whether group-based filtered sync (also called scoped synchronisation) is enabled.
 - id string
 - The provider-assigned unique ID for this managed resource.
 - location string
 - The Azure location in which the replica set resides.
 - name string
 - notifications
Get
Service Notification[]  - A 
notificationsblock as defined below. - replica
Sets GetService Replica Set[]  - One or more 
replica_setblocks as defined below. - resource
Group stringName  - resource
Id string - secure
Ldaps GetService Secure Ldap[]  - A 
secure_ldapblock as defined below. - securities
Get
Service Security[]  - A 
securityblock as defined below. - sku string
 - The SKU of the Domain Service resource. One of 
Standard,EnterpriseorPremium. - sync
Owner string - tenant
Id string - version number
 - {[key: string]: string}
 - A mapping of tags assigned to the resource.
 
- deployment_
id str - A unique ID for the managed domain deployment.
 - domain_
configuration_ strtype  - The forest type used by the managed domain. One of 
ResourceTrusting, for a Resource Forest, or blank, for a User Forest. - domain_
name str - The Active Directory domain of the Domain Service. See official documentation for constraints and recommendations.
 - filtered_
sync_ boolenabled  - Whether group-based filtered sync (also called scoped synchronisation) is enabled.
 - id str
 - The provider-assigned unique ID for this managed resource.
 - location str
 - The Azure location in which the replica set resides.
 - name str
 - notifications
Sequence[Get
Service Notification]  - A 
notificationsblock as defined below. - replica_
sets Sequence[GetService Replica Set]  - One or more 
replica_setblocks as defined below. - resource_
group_ strname  - resource_
id str - secure_
ldaps Sequence[GetService Secure Ldap]  - A 
secure_ldapblock as defined below. - securities
Sequence[Get
Service Security]  - A 
securityblock as defined below. - sku str
 - The SKU of the Domain Service resource. One of 
Standard,EnterpriseorPremium. - sync_
owner str - tenant_
id str - version int
 - Mapping[str, str]
 - A mapping of tags assigned to the resource.
 
- deployment
Id String - A unique ID for the managed domain deployment.
 - domain
Configuration StringType  - The forest type used by the managed domain. One of 
ResourceTrusting, for a Resource Forest, or blank, for a User Forest. - domain
Name String - The Active Directory domain of the Domain Service. See official documentation for constraints and recommendations.
 - filtered
Sync BooleanEnabled  - Whether group-based filtered sync (also called scoped synchronisation) is enabled.
 - id String
 - The provider-assigned unique ID for this managed resource.
 - location String
 - The Azure location in which the replica set resides.
 - name String
 - notifications List<Property Map>
 - A 
notificationsblock as defined below. - replica
Sets List<Property Map> - One or more 
replica_setblocks as defined below. - resource
Group StringName  - resource
Id String - secure
Ldaps List<Property Map> - A 
secure_ldapblock as defined below. - securities List<Property Map>
 - A 
securityblock as defined below. - sku String
 - The SKU of the Domain Service resource. One of 
Standard,EnterpriseorPremium. - sync
Owner String - tenant
Id String - version Number
 - Map<String>
 - A mapping of tags assigned to the resource.
 
Supporting Types
GetServiceNotification  
- Additional
Recipients List<string> - A list of additional email addresses to notify when there are alerts in the managed domain.
 - Notify
Dc boolAdmins  - Whethermembers of the AAD DC Administrators group are notified when there are alerts in the managed domain.
 - Notify
Global boolAdmins  - Whether all Global Administrators are notified when there are alerts in the managed domain.
 
- Additional
Recipients []string - A list of additional email addresses to notify when there are alerts in the managed domain.
 - Notify
Dc boolAdmins  - Whethermembers of the AAD DC Administrators group are notified when there are alerts in the managed domain.
 - Notify
Global boolAdmins  - Whether all Global Administrators are notified when there are alerts in the managed domain.
 
- additional
Recipients List<String> - A list of additional email addresses to notify when there are alerts in the managed domain.
 - notify
Dc BooleanAdmins  - Whethermembers of the AAD DC Administrators group are notified when there are alerts in the managed domain.
 - notify
Global BooleanAdmins  - Whether all Global Administrators are notified when there are alerts in the managed domain.
 
- additional
Recipients string[] - A list of additional email addresses to notify when there are alerts in the managed domain.
 - notify
Dc booleanAdmins  - Whethermembers of the AAD DC Administrators group are notified when there are alerts in the managed domain.
 - notify
Global booleanAdmins  - Whether all Global Administrators are notified when there are alerts in the managed domain.
 
- additional_
recipients Sequence[str] - A list of additional email addresses to notify when there are alerts in the managed domain.
 - notify_
dc_ booladmins  - Whethermembers of the AAD DC Administrators group are notified when there are alerts in the managed domain.
 - notify_
global_ booladmins  - Whether all Global Administrators are notified when there are alerts in the managed domain.
 
- additional
Recipients List<String> - A list of additional email addresses to notify when there are alerts in the managed domain.
 - notify
Dc BooleanAdmins  - Whethermembers of the AAD DC Administrators group are notified when there are alerts in the managed domain.
 - notify
Global BooleanAdmins  - Whether all Global Administrators are notified when there are alerts in the managed domain.
 
GetServiceReplicaSet   
- Domain
Controller List<string>Ip Addresses  - A list of subnet IP addresses for the domain controllers in the replica set, typically two.
 - External
Access stringIp Address  - The publicly routable IP address for the domain controllers in the replica set.
 - Id string
 - The ID of the Domain Service.
 - Location string
 - The Azure location in which the replica set resides.
 - Service
Status string - The current service status for the replica set.
 - Subnet
Id string - The ID of the subnet in which the replica set resides.
 
- Domain
Controller []stringIp Addresses  - A list of subnet IP addresses for the domain controllers in the replica set, typically two.
 - External
Access stringIp Address  - The publicly routable IP address for the domain controllers in the replica set.
 - Id string
 - The ID of the Domain Service.
 - Location string
 - The Azure location in which the replica set resides.
 - Service
Status string - The current service status for the replica set.
 - Subnet
Id string - The ID of the subnet in which the replica set resides.
 
- domain
Controller List<String>Ip Addresses  - A list of subnet IP addresses for the domain controllers in the replica set, typically two.
 - external
Access StringIp Address  - The publicly routable IP address for the domain controllers in the replica set.
 - id String
 - The ID of the Domain Service.
 - location String
 - The Azure location in which the replica set resides.
 - service
Status String - The current service status for the replica set.
 - subnet
Id String - The ID of the subnet in which the replica set resides.
 
- domain
Controller string[]Ip Addresses  - A list of subnet IP addresses for the domain controllers in the replica set, typically two.
 - external
Access stringIp Address  - The publicly routable IP address for the domain controllers in the replica set.
 - id string
 - The ID of the Domain Service.
 - location string
 - The Azure location in which the replica set resides.
 - service
Status string - The current service status for the replica set.
 - subnet
Id string - The ID of the subnet in which the replica set resides.
 
- domain_
controller_ Sequence[str]ip_ addresses  - A list of subnet IP addresses for the domain controllers in the replica set, typically two.
 - external_
access_ strip_ address  - The publicly routable IP address for the domain controllers in the replica set.
 - id str
 - The ID of the Domain Service.
 - location str
 - The Azure location in which the replica set resides.
 - service_
status str - The current service status for the replica set.
 - subnet_
id str - The ID of the subnet in which the replica set resides.
 
- domain
Controller List<String>Ip Addresses  - A list of subnet IP addresses for the domain controllers in the replica set, typically two.
 - external
Access StringIp Address  - The publicly routable IP address for the domain controllers in the replica set.
 - id String
 - The ID of the Domain Service.
 - location String
 - The Azure location in which the replica set resides.
 - service
Status String - The current service status for the replica set.
 - subnet
Id String - The ID of the subnet in which the replica set resides.
 
GetServiceSecureLdap   
- Certificate
Expiry string - Certificate
Thumbprint string - Enabled bool
 - Whether secure LDAP is enabled for the managed domain.
 - External
Access boolEnabled  - Whether external access to LDAPS over the Internet, is enabled.
 - Public
Certificate string 
- Certificate
Expiry string - Certificate
Thumbprint string - Enabled bool
 - Whether secure LDAP is enabled for the managed domain.
 - External
Access boolEnabled  - Whether external access to LDAPS over the Internet, is enabled.
 - Public
Certificate string 
- certificate
Expiry String - certificate
Thumbprint String - enabled Boolean
 - Whether secure LDAP is enabled for the managed domain.
 - external
Access BooleanEnabled  - Whether external access to LDAPS over the Internet, is enabled.
 - public
Certificate String 
- certificate
Expiry string - certificate
Thumbprint string - enabled boolean
 - Whether secure LDAP is enabled for the managed domain.
 - external
Access booleanEnabled  - Whether external access to LDAPS over the Internet, is enabled.
 - public
Certificate string 
- certificate_
expiry str - certificate_
thumbprint str - enabled bool
 - Whether secure LDAP is enabled for the managed domain.
 - external_
access_ boolenabled  - Whether external access to LDAPS over the Internet, is enabled.
 - public_
certificate str 
- certificate
Expiry String - certificate
Thumbprint String - enabled Boolean
 - Whether secure LDAP is enabled for the managed domain.
 - external
Access BooleanEnabled  - Whether external access to LDAPS over the Internet, is enabled.
 - public
Certificate String 
GetServiceSecurity  
- Kerberos
Armoring boolEnabled  - (Optional) Whether the Kerberos Armoring is enabled.
 - Kerberos
Rc4Encryption boolEnabled  - (Optional) Whether the Kerberos RC4 Encryption is enabled.
 - Ntlm
V1Enabled bool - Whether legacy NTLM v1 support is enabled.
 - Sync
Kerberos boolPasswords  - Whether Kerberos password hashes are synchronized to the managed domain.
 - Sync
Ntlm boolPasswords  - Whether NTLM password hashes are synchronized to the managed domain.
 - Sync
On boolPrem Passwords  - Whether on-premises password hashes are synchronized to the managed domain.
 - Tls
V1Enabled bool - Whether legacy TLS v1 support is enabled.
 
- Kerberos
Armoring boolEnabled  - (Optional) Whether the Kerberos Armoring is enabled.
 - Kerberos
Rc4Encryption boolEnabled  - (Optional) Whether the Kerberos RC4 Encryption is enabled.
 - Ntlm
V1Enabled bool - Whether legacy NTLM v1 support is enabled.
 - Sync
Kerberos boolPasswords  - Whether Kerberos password hashes are synchronized to the managed domain.
 - Sync
Ntlm boolPasswords  - Whether NTLM password hashes are synchronized to the managed domain.
 - Sync
On boolPrem Passwords  - Whether on-premises password hashes are synchronized to the managed domain.
 - Tls
V1Enabled bool - Whether legacy TLS v1 support is enabled.
 
- kerberos
Armoring BooleanEnabled  - (Optional) Whether the Kerberos Armoring is enabled.
 - kerberos
Rc4Encryption BooleanEnabled  - (Optional) Whether the Kerberos RC4 Encryption is enabled.
 - ntlm
V1Enabled Boolean - Whether legacy NTLM v1 support is enabled.
 - sync
Kerberos BooleanPasswords  - Whether Kerberos password hashes are synchronized to the managed domain.
 - sync
Ntlm BooleanPasswords  - Whether NTLM password hashes are synchronized to the managed domain.
 - sync
On BooleanPrem Passwords  - Whether on-premises password hashes are synchronized to the managed domain.
 - tls
V1Enabled Boolean - Whether legacy TLS v1 support is enabled.
 
- kerberos
Armoring booleanEnabled  - (Optional) Whether the Kerberos Armoring is enabled.
 - kerberos
Rc4Encryption booleanEnabled  - (Optional) Whether the Kerberos RC4 Encryption is enabled.
 - ntlm
V1Enabled boolean - Whether legacy NTLM v1 support is enabled.
 - sync
Kerberos booleanPasswords  - Whether Kerberos password hashes are synchronized to the managed domain.
 - sync
Ntlm booleanPasswords  - Whether NTLM password hashes are synchronized to the managed domain.
 - sync
On booleanPrem Passwords  - Whether on-premises password hashes are synchronized to the managed domain.
 - tls
V1Enabled boolean - Whether legacy TLS v1 support is enabled.
 
- kerberos_
armoring_ boolenabled  - (Optional) Whether the Kerberos Armoring is enabled.
 - kerberos_
rc4_ boolencryption_ enabled  - (Optional) Whether the Kerberos RC4 Encryption is enabled.
 - ntlm_
v1_ boolenabled  - Whether legacy NTLM v1 support is enabled.
 - sync_
kerberos_ boolpasswords  - Whether Kerberos password hashes are synchronized to the managed domain.
 - sync_
ntlm_ boolpasswords  - Whether NTLM password hashes are synchronized to the managed domain.
 - sync_
on_ boolprem_ passwords  - Whether on-premises password hashes are synchronized to the managed domain.
 - tls_
v1_ boolenabled  - Whether legacy TLS v1 support is enabled.
 
- kerberos
Armoring BooleanEnabled  - (Optional) Whether the Kerberos Armoring is enabled.
 - kerberos
Rc4Encryption BooleanEnabled  - (Optional) Whether the Kerberos RC4 Encryption is enabled.
 - ntlm
V1Enabled Boolean - Whether legacy NTLM v1 support is enabled.
 - sync
Kerberos BooleanPasswords  - Whether Kerberos password hashes are synchronized to the managed domain.
 - sync
Ntlm BooleanPasswords  - Whether NTLM password hashes are synchronized to the managed domain.
 - sync
On BooleanPrem Passwords  - Whether on-premises password hashes are synchronized to the managed domain.
 - tls
V1Enabled Boolean - Whether legacy TLS v1 support is enabled.
 
Package Details
- Repository
 - Azure Classic pulumi/pulumi-azure
 - License
 - Apache-2.0
 - Notes
 - This Pulumi package is based on the 
azurermTerraform Provider.