import { Value } from '../../../cloudformation/Value';
/**
  Allow or deny permissions for an Active Directory group to enroll or autoenroll certificates for a template.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-pcaconnectorad-templategroupaccesscontrolentry-accessrights.html">the AWS Docs</a>
*/
export interface AccessRightsProps {
    /** <code>Enroll</code>  <a name="cfn-pcaconnectorad-templategroupaccesscontrolentry-accessrights-enroll"></a>
  Allow or deny an Active Directory group from enrolling certificates issued against a template.<br />
  
  Required: No<br />
  
  Allowed values: <code>ALLOW | DENY</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    enroll?: Value<'ALLOW' | 'DENY'>;
    /** <code>AutoEnroll</code>  <a name="cfn-pcaconnectorad-templategroupaccesscontrolentry-accessrights-autoenroll"></a>
  Allow or deny an Active Directory group from autoenrolling certificates issued against a template. The Active Directory group must be allowed to enroll to allow autoenrollment<br />
  
  Required: No<br />
  
  Allowed values: <code>ALLOW | DENY</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    autoEnroll?: Value<'ALLOW' | 'DENY'>;
}
