import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../../types/input";
import * as outputs from "../../types/output";
/**
 * Create a tenant. Requires write permission on the Agent project.
 * Auto-naming is currently not supported for this resource.
 */
export declare class Tenant extends pulumi.CustomResource {
    /**
     * Get an existing Tenant resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): Tenant;
    /**
     * Returns true if the given object is an instance of Tenant.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is Tenant;
    /**
     * Whether to allow email/password user authentication.
     */
    readonly allowPasswordSignup: pulumi.Output<boolean>;
    /**
     * Whether anonymous users will be auto-deleted after a period of 30 days.
     */
    readonly autodeleteAnonymousUsers: pulumi.Output<boolean>;
    /**
     * Options related to how clients making requests on behalf of a project should be configured.
     */
    readonly client: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2ClientPermissionConfigResponse>;
    /**
     * Whether authentication is disabled for the tenant. If true, the users under the disabled tenant are not allowed to sign-in. Admins of the disabled tenant are not able to manage its users.
     */
    readonly disableAuth: pulumi.Output<boolean>;
    /**
     * Display name of the tenant.
     */
    readonly displayName: pulumi.Output<string>;
    /**
     * Configuration for settings related to email privacy and public visibility.
     */
    readonly emailPrivacyConfig: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2EmailPrivacyConfigResponse>;
    /**
     * Whether to enable anonymous user authentication.
     */
    readonly enableAnonymousUser: pulumi.Output<boolean>;
    /**
     * Whether to enable email link user authentication.
     */
    readonly enableEmailLinkSignin: pulumi.Output<boolean>;
    /**
     * Hash config information of a tenant for display on Pantheon. This can only be displayed on Pantheon to avoid the sensitive information to get accidentally leaked. Only returned in GetTenant response to restrict reading of this information. Requires firebaseauth.configs.getHashConfig permission on the agent project for returning this field.
     */
    readonly hashConfig: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2HashConfigResponse>;
    /**
     * Specify the settings that the tenant could inherit.
     */
    readonly inheritance: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2InheritanceResponse>;
    /**
     * The tenant-level configuration of MFA options.
     */
    readonly mfaConfig: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2MultiFactorAuthConfigResponse>;
    /**
     * Configuration related to monitoring project activity.
     */
    readonly monitoring: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2MonitoringConfigResponse>;
    /**
     * Resource name of a tenant. For example: "projects/{project-id}/tenants/{tenant-id}"
     */
    readonly name: pulumi.Output<string>;
    /**
     * The tenant-level password policy config
     */
    readonly passwordPolicyConfig: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2PasswordPolicyConfigResponse>;
    readonly project: pulumi.Output<string>;
    /**
     * The tenant-level reCAPTCHA config.
     */
    readonly recaptchaConfig: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2RecaptchaConfigResponse>;
    /**
     * Configures which regions are enabled for SMS verification code sending.
     */
    readonly smsRegionConfig: pulumi.Output<outputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2SmsRegionConfigResponse>;
    /**
     * A map of pairs that can be used for MFA. The phone number should be in E.164 format (https://www.itu.int/rec/T-REC-E.164/) and a maximum of 10 pairs can be added (error will be thrown once exceeded).
     */
    readonly testPhoneNumbers: pulumi.Output<{
        [key: string]: string;
    }>;
    /**
     * Create a Tenant resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args?: TenantArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * The set of arguments for constructing a Tenant resource.
 */
export interface TenantArgs {
    /**
     * Whether to allow email/password user authentication.
     */
    allowPasswordSignup?: pulumi.Input<boolean>;
    /**
     * Whether anonymous users will be auto-deleted after a period of 30 days.
     */
    autodeleteAnonymousUsers?: pulumi.Input<boolean>;
    /**
     * Options related to how clients making requests on behalf of a project should be configured.
     */
    client?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2ClientPermissionConfigArgs>;
    /**
     * Whether authentication is disabled for the tenant. If true, the users under the disabled tenant are not allowed to sign-in. Admins of the disabled tenant are not able to manage its users.
     */
    disableAuth?: pulumi.Input<boolean>;
    /**
     * Display name of the tenant.
     */
    displayName?: pulumi.Input<string>;
    /**
     * Configuration for settings related to email privacy and public visibility.
     */
    emailPrivacyConfig?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2EmailPrivacyConfigArgs>;
    /**
     * Whether to enable anonymous user authentication.
     */
    enableAnonymousUser?: pulumi.Input<boolean>;
    /**
     * Whether to enable email link user authentication.
     */
    enableEmailLinkSignin?: pulumi.Input<boolean>;
    /**
     * Specify the settings that the tenant could inherit.
     */
    inheritance?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2InheritanceArgs>;
    /**
     * The tenant-level configuration of MFA options.
     */
    mfaConfig?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2MultiFactorAuthConfigArgs>;
    /**
     * Configuration related to monitoring project activity.
     */
    monitoring?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2MonitoringConfigArgs>;
    /**
     * The tenant-level password policy config
     */
    passwordPolicyConfig?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2PasswordPolicyConfigArgs>;
    project?: pulumi.Input<string>;
    /**
     * The tenant-level reCAPTCHA config.
     */
    recaptchaConfig?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2RecaptchaConfigArgs>;
    /**
     * Configures which regions are enabled for SMS verification code sending.
     */
    smsRegionConfig?: pulumi.Input<inputs.identitytoolkit.v2.GoogleCloudIdentitytoolkitAdminV2SmsRegionConfigArgs>;
    /**
     * A map of pairs that can be used for MFA. The phone number should be in E.164 format (https://www.itu.int/rec/T-REC-E.164/) and a maximum of 10 pairs can be added (error will be thrown once exceeded).
     */
    testPhoneNumbers?: pulumi.Input<{
        [key: string]: pulumi.Input<string>;
    }>;
}