# Integrating SailPoint with Pulumi

Pulumi is a modern infrastructure as code (IaC) platform that lets teams provision and manage cloud resources using familiar programming languages. The Pulumi Cloud organization model groups members and assigns them fine-grained access (FGA) roles that control what they can do inside an organization. This document provides instructions to configure a new direct connection to a Pulumi source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Pulumi connector supports the following:

### Account Management

- Aggregate Accounts

### Entitlement Management

- Aggregate Roles

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

- You have a Pulumi Cloud account with administrative access to the target organization.
- You have access to the Pulumi Cloud console and can manage organization access tokens.
- You have the Organization Name of the Pulumi organization you want to manage.
- To create an access token, complete the following steps:

  1. Sign in to the Pulumi Cloud console.
  2. Go to **Personal settings \> Access Tokens** (or **Organization settings \> Access Tokens** for an organization token).
  3. Select **Create token** and provide a description.
  4. Securely copy the generated token value.
- For more information about access tokens, refer to the [Pulumi Cloud Access Tokens guide](<https://www.pulumi.com/docs/administration/access-identity/access-tokens/>).
- The organization name is the slug shown in your Pulumi Cloud URLs (for example, `https://app.pulumi.com/<organization>`). You can also find it under **Organization settings \> General** in the Pulumi Cloud console.

## Required Permissions

- The access token used for the connector must be issued by an **Admin** user:

  - **Members** can fetch users/org members.
  - **Admins** are required to fetch roles - elevated access is necessary as role data is restricted to admin-level tokens only.
- For more information about access management, refer to the [Pulumi Cloud Access Management documentation](<https://www.pulumi.com/docs/administration/access-identity/>).

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.