ibm 1.77.1 published on Monday, Apr 14, 2025 by ibm-cloud
ibm.getIamUserMfaEnrollments
Explore with Pulumi AI
Provides a read-only data source for iam_user_mfa_enrollments. You can then reference the fields of the data source in other resources within the same configuration using interpolation syntax.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";
const iamUserMfaEnrollments = ibm.getIamUserMfaEnrollments({
    accountId: "account_id",
    iamId: "iam_id",
});
import pulumi
import pulumi_ibm as ibm
iam_user_mfa_enrollments = ibm.get_iam_user_mfa_enrollments(account_id="account_id",
    iam_id="iam_id")
package main
import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.GetIamUserMfaEnrollments(ctx, &ibm.GetIamUserMfaEnrollmentsArgs{
			AccountId: "account_id",
			IamId:     "iam_id",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;
return await Deployment.RunAsync(() => 
{
    var iamUserMfaEnrollments = Ibm.GetIamUserMfaEnrollments.Invoke(new()
    {
        AccountId = "account_id",
        IamId = "iam_id",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.IbmFunctions;
import com.pulumi.ibm.inputs.GetIamUserMfaEnrollmentsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var iamUserMfaEnrollments = IbmFunctions.getIamUserMfaEnrollments(GetIamUserMfaEnrollmentsArgs.builder()
            .accountId("account_id")
            .iamId("iam_id")
            .build());
    }
}
variables:
  iamUserMfaEnrollments:
    fn::invoke:
      function: ibm:getIamUserMfaEnrollments
      arguments:
        accountId: account_id
        iamId: iam_id
Using getIamUserMfaEnrollments
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getIamUserMfaEnrollments(args: GetIamUserMfaEnrollmentsArgs, opts?: InvokeOptions): Promise<GetIamUserMfaEnrollmentsResult>
function getIamUserMfaEnrollmentsOutput(args: GetIamUserMfaEnrollmentsOutputArgs, opts?: InvokeOptions): Output<GetIamUserMfaEnrollmentsResult>def get_iam_user_mfa_enrollments(account_id: Optional[str] = None,
                                 iam_id: Optional[str] = None,
                                 id: Optional[str] = None,
                                 opts: Optional[InvokeOptions] = None) -> GetIamUserMfaEnrollmentsResult
def get_iam_user_mfa_enrollments_output(account_id: Optional[pulumi.Input[str]] = None,
                                 iam_id: Optional[pulumi.Input[str]] = None,
                                 id: Optional[pulumi.Input[str]] = None,
                                 opts: Optional[InvokeOptions] = None) -> Output[GetIamUserMfaEnrollmentsResult]func GetIamUserMfaEnrollments(ctx *Context, args *GetIamUserMfaEnrollmentsArgs, opts ...InvokeOption) (*GetIamUserMfaEnrollmentsResult, error)
func GetIamUserMfaEnrollmentsOutput(ctx *Context, args *GetIamUserMfaEnrollmentsOutputArgs, opts ...InvokeOption) GetIamUserMfaEnrollmentsResultOutput> Note: This function is named GetIamUserMfaEnrollments in the Go SDK.
public static class GetIamUserMfaEnrollments 
{
    public static Task<GetIamUserMfaEnrollmentsResult> InvokeAsync(GetIamUserMfaEnrollmentsArgs args, InvokeOptions? opts = null)
    public static Output<GetIamUserMfaEnrollmentsResult> Invoke(GetIamUserMfaEnrollmentsInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetIamUserMfaEnrollmentsResult> getIamUserMfaEnrollments(GetIamUserMfaEnrollmentsArgs args, InvokeOptions options)
public static Output<GetIamUserMfaEnrollmentsResult> getIamUserMfaEnrollments(GetIamUserMfaEnrollmentsArgs args, InvokeOptions options)
fn::invoke:
  function: ibm:index/getIamUserMfaEnrollments:getIamUserMfaEnrollments
  arguments:
    # arguments dictionaryThe following arguments are supported:
- account_
id str - ID of the account.
 - iam_
id str - iam_id of the user. This user must be the member of the account.
 - id str
 - The unique identifier of the iam_user_mfa_enrollments.
 
getIamUserMfaEnrollments Result
The following output properties are available:
- Account
Based List<GetMfas Iam User Mfa Enrollments Account Based Mfa>  - (List) Nested scheme for account_based_mfa:
 - Account
Id string - Effective
Mfa stringType  - (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
 - Iam
Id string - Id string
 - The unique identifier of the iam_user_mfa_enrollments.
 - Id
Based List<GetMfas Iam User Mfa Enrollments Id Based Mfa>  - (List) Nested scheme for id_based_mfa:
 
- Account
Based []GetMfas Iam User Mfa Enrollments Account Based Mfa  - (List) Nested scheme for account_based_mfa:
 - Account
Id string - Effective
Mfa stringType  - (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
 - Iam
Id string - Id string
 - The unique identifier of the iam_user_mfa_enrollments.
 - Id
Based []GetMfas Iam User Mfa Enrollments Id Based Mfa  - (List) Nested scheme for id_based_mfa:
 
- account
Based List<GetMfas Iam User Mfa Enrollments Account Based Mfa>  - (List) Nested scheme for account_based_mfa:
 - account
Id String - effective
Mfa StringType  - (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
 - iam
Id String - id String
 - The unique identifier of the iam_user_mfa_enrollments.
 - id
Based List<GetMfas Iam User Mfa Enrollments Id Based Mfa>  - (List) Nested scheme for id_based_mfa:
 
- account
Based GetMfas Iam User Mfa Enrollments Account Based Mfa[]  - (List) Nested scheme for account_based_mfa:
 - account
Id string - effective
Mfa stringType  - (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
 - iam
Id string - id string
 - The unique identifier of the iam_user_mfa_enrollments.
 - id
Based GetMfas Iam User Mfa Enrollments Id Based Mfa[]  - (List) Nested scheme for id_based_mfa:
 
- account_
based_ Sequence[Getmfas Iam User Mfa Enrollments Account Based Mfa]  - (List) Nested scheme for account_based_mfa:
 - account_
id str - effective_
mfa_ strtype  - (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
 - iam_
id str - id str
 - The unique identifier of the iam_user_mfa_enrollments.
 - id_
based_ Sequence[Getmfas Iam User Mfa Enrollments Id Based Mfa]  - (List) Nested scheme for id_based_mfa:
 
- account
Based List<Property Map>Mfas  - (List) Nested scheme for account_based_mfa:
 - account
Id String - effective
Mfa StringType  - (String) currently effective mfa type i.e. id_based_mfa or account_based_mfa.
 - iam
Id String - id String
 - The unique identifier of the iam_user_mfa_enrollments.
 - id
Based List<Property Map>Mfas  - (List) Nested scheme for id_based_mfa:
 
Supporting Types
GetIamUserMfaEnrollmentsAccountBasedMfa       
- Complies bool
 - (Boolean) The enrollment complies to the effective requirement.
 - Security
Questions List<GetIam User Mfa Enrollments Account Based Mfa Security Question>  - (List) Nested scheme for security_questions:
 - Totps
List<Get
Iam User Mfa Enrollments Account Based Mfa Totp>  - (List) Nested scheme for totp:
 - Verisigns
List<Get
Iam User Mfa Enrollments Account Based Mfa Verisign>  - (List) Nested scheme for verisign:
 
- Complies bool
 - (Boolean) The enrollment complies to the effective requirement.
 - Security
Questions []GetIam User Mfa Enrollments Account Based Mfa Security Question  - (List) Nested scheme for security_questions:
 - Totps
[]Get
Iam User Mfa Enrollments Account Based Mfa Totp  - (List) Nested scheme for totp:
 - Verisigns
[]Get
Iam User Mfa Enrollments Account Based Mfa Verisign  - (List) Nested scheme for verisign:
 
- complies Boolean
 - (Boolean) The enrollment complies to the effective requirement.
 - security
Questions List<GetIam User Mfa Enrollments Account Based Mfa Security Question>  - (List) Nested scheme for security_questions:
 - totps
List<Get
Iam User Mfa Enrollments Account Based Mfa Totp>  - (List) Nested scheme for totp:
 - verisigns
List<Get
Iam User Mfa Enrollments Account Based Mfa Verisign>  - (List) Nested scheme for verisign:
 
- complies boolean
 - (Boolean) The enrollment complies to the effective requirement.
 - security
Questions GetIam User Mfa Enrollments Account Based Mfa Security Question[]  - (List) Nested scheme for security_questions:
 - totps
Get
Iam User Mfa Enrollments Account Based Mfa Totp[]  - (List) Nested scheme for totp:
 - verisigns
Get
Iam User Mfa Enrollments Account Based Mfa Verisign[]  - (List) Nested scheme for verisign:
 
- complies bool
 - (Boolean) The enrollment complies to the effective requirement.
 - security_
questions Sequence[GetIam User Mfa Enrollments Account Based Mfa Security Question]  - (List) Nested scheme for security_questions:
 - totps
Sequence[Get
Iam User Mfa Enrollments Account Based Mfa Totp]  - (List) Nested scheme for totp:
 - verisigns
Sequence[Get
Iam User Mfa Enrollments Account Based Mfa Verisign]  - (List) Nested scheme for verisign:
 
- complies Boolean
 - (Boolean) The enrollment complies to the effective requirement.
 - security
Questions List<Property Map> - (List) Nested scheme for security_questions:
 - totps List<Property Map>
 - (List) Nested scheme for totp:
 - verisigns List<Property Map>
 - (List) Nested scheme for verisign:
 
GetIamUserMfaEnrollmentsAccountBasedMfaSecurityQuestion         
GetIamUserMfaEnrollmentsAccountBasedMfaTotp        
GetIamUserMfaEnrollmentsAccountBasedMfaVerisign        
GetIamUserMfaEnrollmentsIdBasedMfa       
- Complies bool
 - (Boolean) The enrollment complies to the effective requirement.
 - Trait
Account stringDefault  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - Trait
Effective string - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - Trait
User stringSpecific  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 
- Complies bool
 - (Boolean) The enrollment complies to the effective requirement.
 - Trait
Account stringDefault  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - Trait
Effective string - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - Trait
User stringSpecific  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 
- complies Boolean
 - (Boolean) The enrollment complies to the effective requirement.
 - trait
Account StringDefault  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait
Effective String - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait
User StringSpecific  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 
- complies boolean
 - (Boolean) The enrollment complies to the effective requirement.
 - trait
Account stringDefault  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait
Effective string - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait
User stringSpecific  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 
- complies bool
 - (Boolean) The enrollment complies to the effective requirement.
 - trait_
account_ strdefault  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait_
effective str - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait_
user_ strspecific  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 
- complies Boolean
 - (Boolean) The enrollment complies to the effective requirement.
 - trait
Account StringDefault  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait
Effective String - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 - trait
User StringSpecific  - (String) Defines the MFA trait for the account. Valid values: * NONE - No MFA trait set * NONE_NO_ROPC- No MFA, disable CLI logins with only a password * TOTP - For all non-federated IBMId users * TOTP4ALL - For all users * LEVEL1 - Email-based MFA for all users * LEVEL2 - TOTP-based MFA for all users * LEVEL3 - U2F MFA for all users.
- Constraints: Allowable values are: 
NONE,NONE_NO_ROPC,TOTP,TOTP4ALL,LEVEL1,LEVEL2,LEVEL3. 
 - Constraints: Allowable values are: 
 
Package Details
- Repository
 - ibm ibm-cloud/terraform-provider-ibm
 - License
 - Notes
 - This Pulumi package is based on the 
ibmTerraform Provider.