1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. TenantRestrictionProfile
Zscaler Internet Access v1.2.0 published on Friday, Feb 20, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zia

zia.TenantRestrictionProfile

zia logo
Zscaler Internet Access v1.2.0 published on Friday, Feb 20, 2026 by Zscaler
Schema (JSON)
zscaler/pulumi-zia

    Use the zia_tenant_restriction_profile resource creates and manages tenant retriction profiles in the Zscaler Internet Access cloud.

    Example Usage

    Create O365 Tenant Restriction Profile

    resource "zia_tenant_restriction_profile" "this" {
  name = "ACME_MSFT_CA"
  description = "ACME_MSFT_CA"
  restrict_personal_o365_domains = true
  app_type = "MSLOGINSERVICES"
  item_data_primary = ["11111111-1111-1111-1111-111111111111"]
  item_data_secondary = ["acme.com"]
  item_type_primary = "TENANT_RESTRICTION_TENANT_DIRECTORY"
  item_type_secondary = "TENANT_RESTRICTION_TENANT_NAME"
}

    Create O365 V2 Tenant Restriction Profile

    resource "zia_tenant_restriction_profile" "this2" {
  name = "ACME_MSFT_CA_v2"
  description = "ACME_MSFT_CA_v2"
  ms_login_services_tr_v2 = true
  app_type = "MSLOGINSERVICES"
  item_data_primary = ["11111111-1111-1111-1111-111111111111:quadsj"]
  item_type_primary = "TENANT_RESTRICTION_TENANT_POLICY_ID"
}

    Create YouTube Tenant Restriction Profile

    resource "zia_tenant_restriction_profile" "this3" {
  name = "YouTube01_Profile"
  description = "YouTube01_Profile"
  app_type = "YOUTUBE"
  item_value = ["TENANT_RESTRICTION_ACTION_OR_ADVENTURE"]
  item_type_primary = "TENANT_RESTRICTION_CATEGORY_ID"
}

    Create Dropbox Tenant Restriction Profile

    resource "zia_tenant_restriction_profile" "this4" {
  name = "Dropbox_Profile"
  description = "Dropbox_Profile"
  app_type = "DROPBOX"
  item_data_primary = [139732608]
  item_type_primary = "TENANT_RESTRICTION_TEAM_ID"
}

    Create Google Tenant Restriction Profile

    resource "zia_tenant_restriction_profile" "this5" {
  name = "Google_Profile01"
  description = "Google_Profile01"
  allow_google_consumers = false
  allow_google_visitors = false
  app_type = "GOOGLE"
  item_data_primary = ["acme.com"]
  item_type_primary = "TENANT_RESTRICTION_DOMAIN"
}

    Create TenantRestrictionProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new TenantRestrictionProfile(name: string, args?: TenantRestrictionProfileArgs, opts?: CustomResourceOptions);
    @overload
def TenantRestrictionProfile(resource_name: str,
                             args: Optional[TenantRestrictionProfileArgs] = None,
                             opts: Optional[ResourceOptions] = None)

@overload
def TenantRestrictionProfile(resource_name: str,
                             opts: Optional[ResourceOptions] = None,
                             allow_gcp_cloud_storage_read: Optional[bool] = None,
                             allow_google_consumers: Optional[bool] = None,
                             allow_google_visitors: Optional[bool] = None,
                             app_type: Optional[str] = None,
                             description: Optional[str] = None,
                             item_data_primaries: Optional[Sequence[str]] = None,
                             item_data_secondaries: Optional[Sequence[str]] = None,
                             item_type_primary: Optional[str] = None,
                             item_type_secondary: Optional[str] = None,
                             item_values: Optional[Sequence[str]] = None,
                             ms_login_services_tr_v2: Optional[bool] = None,
                             name: Optional[str] = None,
                             restrict_personal_o365_domains: Optional[bool] = None)
    func NewTenantRestrictionProfile(ctx *Context, name string, args *TenantRestrictionProfileArgs, opts ...ResourceOption) (*TenantRestrictionProfile, error)
    public TenantRestrictionProfile(string name, TenantRestrictionProfileArgs? args = null, CustomResourceOptions? opts = null)
    public TenantRestrictionProfile(String name, TenantRestrictionProfileArgs args)
public TenantRestrictionProfile(String name, TenantRestrictionProfileArgs args, CustomResourceOptions options)

    type: zia:TenantRestrictionProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args TenantRestrictionProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args TenantRestrictionProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args TenantRestrictionProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args TenantRestrictionProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args TenantRestrictionProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var tenantRestrictionProfileResource = new Zia.TenantRestrictionProfile("tenantRestrictionProfileResource", new()
{
    AllowGcpCloudStorageRead = false,
    AllowGoogleConsumers = false,
    AllowGoogleVisitors = false,
    AppType = "string",
    Description = "string",
    ItemDataPrimaries = new[]
    {
        "string",
    },
    ItemDataSecondaries = new[]
    {
        "string",
    },
    ItemTypePrimary = "string",
    ItemTypeSecondary = "string",
    ItemValues = new[]
    {
        "string",
    },
    MsLoginServicesTrV2 = false,
    Name = "string",
    RestrictPersonalO365Domains = false,
});

    example, err := zia.NewTenantRestrictionProfile(ctx, "tenantRestrictionProfileResource", &zia.TenantRestrictionProfileArgs{
	AllowGcpCloudStorageRead: pulumi.Bool(false),
	AllowGoogleConsumers:     pulumi.Bool(false),
	AllowGoogleVisitors:      pulumi.Bool(false),
	AppType:                  pulumi.String("string"),
	Description:              pulumi.String("string"),
	ItemDataPrimaries: pulumi.StringArray{
		pulumi.String("string"),
	},
	ItemDataSecondaries: pulumi.StringArray{
		pulumi.String("string"),
	},
	ItemTypePrimary:   pulumi.String("string"),
	ItemTypeSecondary: pulumi.String("string"),
	ItemValues: pulumi.StringArray{
		pulumi.String("string"),
	},
	MsLoginServicesTrV2:         pulumi.Bool(false),
	Name:                        pulumi.String("string"),
	RestrictPersonalO365Domains: pulumi.Bool(false),
})

    var tenantRestrictionProfileResource = new TenantRestrictionProfile("tenantRestrictionProfileResource", TenantRestrictionProfileArgs.builder()
    .allowGcpCloudStorageRead(false)
    .allowGoogleConsumers(false)
    .allowGoogleVisitors(false)
    .appType("string")
    .description("string")
    .itemDataPrimaries("string")
    .itemDataSecondaries("string")
    .itemTypePrimary("string")
    .itemTypeSecondary("string")
    .itemValues("string")
    .msLoginServicesTrV2(false)
    .name("string")
    .restrictPersonalO365Domains(false)
    .build());

    tenant_restriction_profile_resource = zia.TenantRestrictionProfile("tenantRestrictionProfileResource",
    allow_gcp_cloud_storage_read=False,
    allow_google_consumers=False,
    allow_google_visitors=False,
    app_type="string",
    description="string",
    item_data_primaries=["string"],
    item_data_secondaries=["string"],
    item_type_primary="string",
    item_type_secondary="string",
    item_values=["string"],
    ms_login_services_tr_v2=False,
    name="string",
    restrict_personal_o365_domains=False)

    const tenantRestrictionProfileResource = new zia.TenantRestrictionProfile("tenantRestrictionProfileResource", {
    allowGcpCloudStorageRead: false,
    allowGoogleConsumers: false,
    allowGoogleVisitors: false,
    appType: "string",
    description: "string",
    itemDataPrimaries: ["string"],
    itemDataSecondaries: ["string"],
    itemTypePrimary: "string",
    itemTypeSecondary: "string",
    itemValues: ["string"],
    msLoginServicesTrV2: false,
    name: "string",
    restrictPersonalO365Domains: false,
});

    type: zia:TenantRestrictionProfile
properties:
    allowGcpCloudStorageRead: false
    allowGoogleConsumers: false
    allowGoogleVisitors: false
    appType: string
    description: string
    itemDataPrimaries:
        - string
    itemDataSecondaries:
        - string
    itemTypePrimary: string
    itemTypeSecondary: string
    itemValues:
        - string
    msLoginServicesTrV2: false
    name: string
    restrictPersonalO365Domains: false

    TenantRestrictionProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The TenantRestrictionProfile resource accepts the following input properties:

    AllowGcpCloudStorageRead bool
    Flag to allow or disallow cloud storage resources for GCP
    AllowGoogleConsumers bool
    Flag to allow Google consumers
    AllowGoogleVisitors bool
    Flag to allow Google visitors
    AppType string
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    Description string
    Additional information about the profile
    ItemDataPrimaries List<string>
    Tenant profile primary item data
    ItemDataSecondaries List<string>
    List of certifications to be included or excluded for the profile.
    ItemTypePrimary string
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemTypeSecondary string
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemValues List<string>
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    MsLoginServicesTrV2 bool
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    Name string
    The tenant restriction profile name
    RestrictPersonalO365Domains bool
    Flag to restrict personal domains for Office 365
    AllowGcpCloudStorageRead bool
    Flag to allow or disallow cloud storage resources for GCP
    AllowGoogleConsumers bool
    Flag to allow Google consumers
    AllowGoogleVisitors bool
    Flag to allow Google visitors
    AppType string
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    Description string
    Additional information about the profile
    ItemDataPrimaries []string
    Tenant profile primary item data
    ItemDataSecondaries []string
    List of certifications to be included or excluded for the profile.
    ItemTypePrimary string
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemTypeSecondary string
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemValues []string
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    MsLoginServicesTrV2 bool
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    Name string
    The tenant restriction profile name
    RestrictPersonalO365Domains bool
    Flag to restrict personal domains for Office 365
    allowGcpCloudStorageRead Boolean
    Flag to allow or disallow cloud storage resources for GCP
    allowGoogleConsumers Boolean
    Flag to allow Google consumers
    allowGoogleVisitors Boolean
    Flag to allow Google visitors
    appType String
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description String
    Additional information about the profile
    itemDataPrimaries List<String>
    Tenant profile primary item data
    itemDataSecondaries List<String>
    List of certifications to be included or excluded for the profile.
    itemTypePrimary String
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemTypeSecondary String
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemValues List<String>
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    msLoginServicesTrV2 Boolean
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name String
    The tenant restriction profile name
    restrictPersonalO365Domains Boolean
    Flag to restrict personal domains for Office 365
    allowGcpCloudStorageRead boolean
    Flag to allow or disallow cloud storage resources for GCP
    allowGoogleConsumers boolean
    Flag to allow Google consumers
    allowGoogleVisitors boolean
    Flag to allow Google visitors
    appType string
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description string
    Additional information about the profile
    itemDataPrimaries string[]
    Tenant profile primary item data
    itemDataSecondaries string[]
    List of certifications to be included or excluded for the profile.
    itemTypePrimary string
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemTypeSecondary string
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemValues string[]
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    msLoginServicesTrV2 boolean
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name string
    The tenant restriction profile name
    restrictPersonalO365Domains boolean
    Flag to restrict personal domains for Office 365
    allow_gcp_cloud_storage_read bool
    Flag to allow or disallow cloud storage resources for GCP
    allow_google_consumers bool
    Flag to allow Google consumers
    allow_google_visitors bool
    Flag to allow Google visitors
    app_type str
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description str
    Additional information about the profile
    item_data_primaries Sequence[str]
    Tenant profile primary item data
    item_data_secondaries Sequence[str]
    List of certifications to be included or excluded for the profile.
    item_type_primary str
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    item_type_secondary str
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    item_values Sequence[str]
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ms_login_services_tr_v2 bool
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name str
    The tenant restriction profile name
    restrict_personal_o365_domains bool
    Flag to restrict personal domains for Office 365
    allowGcpCloudStorageRead Boolean
    Flag to allow or disallow cloud storage resources for GCP
    allowGoogleConsumers Boolean
    Flag to allow Google consumers
    allowGoogleVisitors Boolean
    Flag to allow Google visitors
    appType String
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description String
    Additional information about the profile
    itemDataPrimaries List<String>
    Tenant profile primary item data
    itemDataSecondaries List<String>
    List of certifications to be included or excluded for the profile.
    itemTypePrimary String
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemTypeSecondary String
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemValues List<String>
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    msLoginServicesTrV2 Boolean
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name String
    The tenant restriction profile name
    restrictPersonalO365Domains Boolean
    Flag to restrict personal domains for Office 365

    Outputs

    All input properties are implicitly available as output properties. Additionally, the TenantRestrictionProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    ProfileId int
    System-generated tenant profile ID
    Id string
    The provider-assigned unique ID for this managed resource.
    ProfileId int
    System-generated tenant profile ID
    id String
    The provider-assigned unique ID for this managed resource.
    profileId Integer
    System-generated tenant profile ID
    id string
    The provider-assigned unique ID for this managed resource.
    profileId number
    System-generated tenant profile ID
    id str
    The provider-assigned unique ID for this managed resource.
    profile_id int
    System-generated tenant profile ID
    id String
    The provider-assigned unique ID for this managed resource.
    profileId Number
    System-generated tenant profile ID

    Look up Existing TenantRestrictionProfile Resource

    Get an existing TenantRestrictionProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: TenantRestrictionProfileState, opts?: CustomResourceOptions): TenantRestrictionProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_gcp_cloud_storage_read: Optional[bool] = None,
        allow_google_consumers: Optional[bool] = None,
        allow_google_visitors: Optional[bool] = None,
        app_type: Optional[str] = None,
        description: Optional[str] = None,
        item_data_primaries: Optional[Sequence[str]] = None,
        item_data_secondaries: Optional[Sequence[str]] = None,
        item_type_primary: Optional[str] = None,
        item_type_secondary: Optional[str] = None,
        item_values: Optional[Sequence[str]] = None,
        ms_login_services_tr_v2: Optional[bool] = None,
        name: Optional[str] = None,
        profile_id: Optional[int] = None,
        restrict_personal_o365_domains: Optional[bool] = None) -> TenantRestrictionProfile
    func GetTenantRestrictionProfile(ctx *Context, name string, id IDInput, state *TenantRestrictionProfileState, opts ...ResourceOption) (*TenantRestrictionProfile, error)
    public static TenantRestrictionProfile Get(string name, Input<string> id, TenantRestrictionProfileState? state, CustomResourceOptions? opts = null)
    public static TenantRestrictionProfile get(String name, Output<String> id, TenantRestrictionProfileState state, CustomResourceOptions options)
    resources:  _:    type: zia:TenantRestrictionProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowGcpCloudStorageRead bool
    Flag to allow or disallow cloud storage resources for GCP
    AllowGoogleConsumers bool
    Flag to allow Google consumers
    AllowGoogleVisitors bool
    Flag to allow Google visitors
    AppType string
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    Description string
    Additional information about the profile
    ItemDataPrimaries List<string>
    Tenant profile primary item data
    ItemDataSecondaries List<string>
    List of certifications to be included or excluded for the profile.
    ItemTypePrimary string
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemTypeSecondary string
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemValues List<string>
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    MsLoginServicesTrV2 bool
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    Name string
    The tenant restriction profile name
    ProfileId int
    System-generated tenant profile ID
    RestrictPersonalO365Domains bool
    Flag to restrict personal domains for Office 365
    AllowGcpCloudStorageRead bool
    Flag to allow or disallow cloud storage resources for GCP
    AllowGoogleConsumers bool
    Flag to allow Google consumers
    AllowGoogleVisitors bool
    Flag to allow Google visitors
    AppType string
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    Description string
    Additional information about the profile
    ItemDataPrimaries []string
    Tenant profile primary item data
    ItemDataSecondaries []string
    List of certifications to be included or excluded for the profile.
    ItemTypePrimary string
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemTypeSecondary string
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ItemValues []string
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    MsLoginServicesTrV2 bool
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    Name string
    The tenant restriction profile name
    ProfileId int
    System-generated tenant profile ID
    RestrictPersonalO365Domains bool
    Flag to restrict personal domains for Office 365
    allowGcpCloudStorageRead Boolean
    Flag to allow or disallow cloud storage resources for GCP
    allowGoogleConsumers Boolean
    Flag to allow Google consumers
    allowGoogleVisitors Boolean
    Flag to allow Google visitors
    appType String
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description String
    Additional information about the profile
    itemDataPrimaries List<String>
    Tenant profile primary item data
    itemDataSecondaries List<String>
    List of certifications to be included or excluded for the profile.
    itemTypePrimary String
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemTypeSecondary String
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemValues List<String>
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    msLoginServicesTrV2 Boolean
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name String
    The tenant restriction profile name
    profileId Integer
    System-generated tenant profile ID
    restrictPersonalO365Domains Boolean
    Flag to restrict personal domains for Office 365
    allowGcpCloudStorageRead boolean
    Flag to allow or disallow cloud storage resources for GCP
    allowGoogleConsumers boolean
    Flag to allow Google consumers
    allowGoogleVisitors boolean
    Flag to allow Google visitors
    appType string
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description string
    Additional information about the profile
    itemDataPrimaries string[]
    Tenant profile primary item data
    itemDataSecondaries string[]
    List of certifications to be included or excluded for the profile.
    itemTypePrimary string
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemTypeSecondary string
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemValues string[]
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    msLoginServicesTrV2 boolean
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name string
    The tenant restriction profile name
    profileId number
    System-generated tenant profile ID
    restrictPersonalO365Domains boolean
    Flag to restrict personal domains for Office 365
    allow_gcp_cloud_storage_read bool
    Flag to allow or disallow cloud storage resources for GCP
    allow_google_consumers bool
    Flag to allow Google consumers
    allow_google_visitors bool
    Flag to allow Google visitors
    app_type str
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description str
    Additional information about the profile
    item_data_primaries Sequence[str]
    Tenant profile primary item data
    item_data_secondaries Sequence[str]
    List of certifications to be included or excluded for the profile.
    item_type_primary str
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    item_type_secondary str
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    item_values Sequence[str]
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    ms_login_services_tr_v2 bool
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name str
    The tenant restriction profile name
    profile_id int
    System-generated tenant profile ID
    restrict_personal_o365_domains bool
    Flag to restrict personal domains for Office 365
    allowGcpCloudStorageRead Boolean
    Flag to allow or disallow cloud storage resources for GCP
    allowGoogleConsumers Boolean
    Flag to allow Google consumers
    allowGoogleVisitors Boolean
    Flag to allow Google visitors
    appType String
    Restricted tenant profile application type. See the Tenancy Restriction Profile API for the list of available application types: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    description String
    Additional information about the profile
    itemDataPrimaries List<String>
    Tenant profile primary item data
    itemDataSecondaries List<String>
    List of certifications to be included or excluded for the profile.
    itemTypePrimary String
    Tenant profile primary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemTypeSecondary String
    Tenant profile secondary item type. See the Tenancy Restriction Profile API for the list of available items: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    itemValues List<String>
    Tenant profile item value for YouTube category. See the Tenancy Restriction Profile API for the list of available item values: https://help.zscaler.com/zia/cloud-app-control-policy#/tenancyRestrictionProfile-get
    msLoginServicesTrV2 Boolean
    Flag to decide between v1 and v2 for tenant restriction on MSLOGINSERVICES
    name String
    The tenant restriction profile name
    profileId Number
    System-generated tenant profile ID
    restrictPersonalO365Domains Boolean
    Flag to restrict personal domains for Office 365

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language. Visit

    zia_tenant_restriction_profile can be imported by using <PROFILE ID> or <PROFILE NAME> as the import ID.

    For example:

    $ pulumi import zia:index/tenantRestrictionProfile:TenantRestrictionProfile example <profile_id>

    or

    $ pulumi import zia:index/tenantRestrictionProfile:TenantRestrictionProfile example <profile_name>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.2.0 published on Friday, Feb 20, 2026 by Zscaler
    Schema (JSON)
    zscaler/pulumi-zia
      Meet Neo: Your AI Platform Teammate