{"resources":{"zoom":{"id":"zoom","name":"zoom","fields":{"account":{"name":"account","type":"\u001bzoom.account","title":"Zoom account settings","desc":"Account-wide configuration reached through the authenticated Server-to-Server OAuth account, selected by `id` (the Zoom account ID tied to the credentials used to connect). Covers the meeting-security defaults applied to every meeting on the account (waiting room, passcode requirements, encryption type), cloud-recording encryption, whether only authenticated or account-internal users may join meetings, and the sign-in session timeout enforced for the workforce. The account's single sign-on configuration is available through the `zoom.account.sso` resource.","provider":"go.mondoo.com/mql/providers/zoom","is_implicit_resource":true,"maturity":"experimental"},"group":{"name":"group","type":"\u001bzoom.group","title":"Zoom group","desc":"A user group, selected by `id`, for example `zoom.group(id: \"abc\")`. Groups carry their own meeting-security overrides (`settingsWaitingRoomEnabled`, `settingsMeetingPasscodeRequired`, `settingsE2eeAvailable`, `settingsOnlyAuthenticatedUsersCanJoin`) that take precedence over the account defaults in `zoom.account` for members of the group, so a group's members can end up on a weaker (or stronger) meeting-security posture than the account as a whole.","provider":"go.mondoo.com/mql/providers/zoom","is_implicit_resource":true,"maturity":"experimental"},"groups":{"name":"groups","type":"\u0019\u001bzoom.group","title":"User groups, each with its own meeting-security overrides","provider":"go.mondoo.com/mql/providers/zoom"},"role":{"name":"role","type":"\u001bzoom.role","title":"Zoom role","desc":"A role that can be assigned to users, selected by `id`, for example `zoom.role(id: \"0\")`. The built-in `Owner` and `Admin` roles carry full account privileges; custom roles carry whatever subset of `privileges` was granted to them. Use `members` to audit how many users hold admin-equivalent access.","provider":"go.mondoo.com/mql/providers/zoom","is_implicit_resource":true,"maturity":"experimental"},"roles":{"name":"roles","type":"\u0019\u001bzoom.role","title":"Roles that can be assigned to users","provider":"go.mondoo.com/mql/providers/zoom"},"user":{"name":"user","type":"\u001bzoom.user","title":"Zoom user","desc":"A single user provisioned on the account, selected by `id`, for example `zoom.user(id: \"z9f8...\")`. Carries the user's licensing `type`, `status`, and sign-in method (`loginType` and `ssoLinked`), along with the `role` that governs their admin privileges and the `groups` whose meeting-security overrides apply to their meetings.","provider":"go.mondoo.com/mql/providers/zoom","is_implicit_resource":true,"maturity":"experimental"},"users":{"name":"users","type":"\u0019\u001bzoom.user","title":"Active users provisioned on the account (excludes inactive and pending)","provider":"go.mondoo.com/mql/providers/zoom"}},"title":"Zoom account root","desc":"Entry point for a Zoom account reached through Server-to-Server OAuth. Exposes the account's users, the roles those users can hold, and the groups they belong to. The account's security-relevant configuration is available through the `zoom.account` resource. Groups and roles both carry their own meeting-security overrides and membership lists, so admin-equivalent access and account-wide meeting defaults can be audited from a single query surface.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/providers/zoom","maturity":"experimental"},"zoom.account":{"id":"zoom.account","name":"zoom.account","fields":{"accountName":{"name":"accountName","type":"\u0007","is_mandatory":true,"title":"Account (company) name","provider":"go.mondoo.com/mql/providers/zoom"},"cloudRecordingEnabled":{"name":"cloudRecordingEnabled","type":"\u0004","title":"Whether cloud recording is enabled for the account","provider":"go.mondoo.com/mql/providers/zoom"},"cloudRecordingEncryptionEnabled":{"name":"cloudRecordingEncryptionEnabled","type":"\u0004","title":"Whether cloud recordings are encrypted at rest","provider":"go.mondoo.com/mql/providers/zoom"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Zoom account ID","provider":"go.mondoo.com/mql/providers/zoom"},"meetingAuthenticationRequired":{"name":"meetingAuthenticationRequired","type":"\u0004","title":"Whether meetings require participants to be authenticated before joining","provider":"go.mondoo.com/mql/providers/zoom"},"meetingE2eeAvailable":{"name":"meetingE2eeAvailable","type":"\u0004","title":"Whether end-to-end encryption (E2EE) is available to hosts on this account","provider":"go.mondoo.com/mql/providers/zoom"},"meetingEncryptionType":{"name":"meetingEncryptionType","type":"\u0007","title":"Default meeting encryption type","desc":"One of `enhanced_encryption` (encrypted in transit and at rest on Zoom's servers) or `end_to_end_encryption` (E2EE, only the meeting participants hold the decryption keys).","provider":"go.mondoo.com/mql/providers/zoom"},"meetingOnlyAccountUsersCanJoin":{"name":"meetingOnlyAccountUsersCanJoin","type":"\u0004","title":"Whether meeting participation is restricted to users signed in on this account (blocks external/guest participants)","provider":"go.mondoo.com/mql/providers/zoom"},"meetingPasscodeRequired":{"name":"meetingPasscodeRequired","type":"\u0004","title":"Whether a passcode is required to join meetings by default","provider":"go.mondoo.com/mql/providers/zoom"},"meetingPmiPasscodeRequired":{"name":"meetingPmiPasscodeRequired","type":"\u0004","title":"Whether a passcode is required to join a user's Personal Meeting ID (PMI)","provider":"go.mondoo.com/mql/providers/zoom"},"meetingWaitingRoomEnabled":{"name":"meetingWaitingRoomEnabled","type":"\u0004","title":"Whether the waiting room is enabled by default for new meetings","provider":"go.mondoo.com/mql/providers/zoom"},"ownerEmail":{"name":"ownerEmail","type":"\u0007","is_mandatory":true,"title":"Email address of the account owner","provider":"go.mondoo.com/mql/providers/zoom"},"signInSessionTimeoutMinutes":{"name":"signInSessionTimeoutMinutes","type":"\u0005","title":"Sign-in session timeout, in minutes, before a user is forced to re-authenticate (0 means no timeout is enforced)","provider":"go.mondoo.com/mql/providers/zoom"},"sso":{"name":"sso","type":"\u001bzoom.account.sso","title":"Zoom single sign-on (SSO) configuration","desc":"Account-wide SSO settings: whether SSO is enabled, the email domains provisioned through it, whether group membership is synced from the identity provider, and the identity provider's issuer and login URL.","provider":"go.mondoo.com/mql/providers/zoom","is_implicit_resource":true,"maturity":"experimental"}},"title":"Zoom account settings","desc":"Account-wide configuration reached through the authenticated Server-to-Server OAuth account, selected by `id` (the Zoom account ID tied to the credentials used to connect). Covers the meeting-security defaults applied to every meeting on the account (waiting room, passcode requirements, encryption type), cloud-recording encryption, whether only authenticated or account-internal users may join meetings, and the sign-in session timeout enforced for the workforce. The account's single sign-on configuration is available through the `zoom.account.sso` resource.","min_provider_version":"13.0.0","defaults":"id accountName","provider":"go.mondoo.com/mql/providers/zoom","maturity":"experimental"},"zoom.account.sso":{"id":"zoom.account.sso","name":"zoom.account.sso","fields":{"domains":{"name":"domains","type":"\u0019\u0007","is_mandatory":true,"title":"Email domains provisioned through SSO","provider":"go.mondoo.com/mql/providers/zoom"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether SSO is enabled for the account","provider":"go.mondoo.com/mql/providers/zoom"},"groupMappingEnabled":{"name":"groupMappingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether group membership is mapped from the identity provider","provider":"go.mondoo.com/mql/providers/zoom"},"idpIssuer":{"name":"idpIssuer","type":"\u0007","is_mandatory":true,"title":"Identity provider issuer URL","provider":"go.mondoo.com/mql/providers/zoom"},"idpSsoUrl":{"name":"idpSsoUrl","type":"\u0007","is_mandatory":true,"title":"Identity provider single sign-on URL","provider":"go.mondoo.com/mql/providers/zoom"}},"title":"Zoom single sign-on (SSO) configuration","desc":"Account-wide SSO settings: whether SSO is enabled, the email domains provisioned through it, whether group membership is synced from the identity provider, and the identity provider's issuer and login URL.","min_provider_version":"13.0.0","defaults":"enabled","provider":"go.mondoo.com/mql/providers/zoom","maturity":"experimental"},"zoom.group":{"id":"zoom.group","name":"zoom.group","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Group ID","provider":"go.mondoo.com/mql/providers/zoom"},"members":{"name":"members","type":"\u0019\u001bzoom.user","title":"Users in the group","provider":"go.mondoo.com/mql/providers/zoom"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Group name","provider":"go.mondoo.com/mql/providers/zoom"},"settingsE2eeAvailable":{"name":"settingsE2eeAvailable","type":"\u0004","title":"Whether end-to-end encryption (E2EE) is available to the group's hosts","provider":"go.mondoo.com/mql/providers/zoom"},"settingsMeetingPasscodeRequired":{"name":"settingsMeetingPasscodeRequired","type":"\u0004","title":"Whether a passcode is required to join the group's meetings","provider":"go.mondoo.com/mql/providers/zoom"},"settingsOnlyAuthenticatedUsersCanJoin":{"name":"settingsOnlyAuthenticatedUsersCanJoin","type":"\u0004","title":"Whether the group's meetings are restricted to users signed in on this account","provider":"go.mondoo.com/mql/providers/zoom"},"settingsWaitingRoomEnabled":{"name":"settingsWaitingRoomEnabled","type":"\u0004","title":"Whether the waiting room is enabled by default for the group's meetings","provider":"go.mondoo.com/mql/providers/zoom"},"totalMembers":{"name":"totalMembers","type":"\u0005","is_mandatory":true,"title":"Number of users in the group","provider":"go.mondoo.com/mql/providers/zoom"}},"title":"Zoom group","desc":"A user group, selected by `id`, for example `zoom.group(id: \"abc\")`. Groups carry their own meeting-security overrides (`settingsWaitingRoomEnabled`, `settingsMeetingPasscodeRequired`, `settingsE2eeAvailable`, `settingsOnlyAuthenticatedUsersCanJoin`) that take precedence over the account defaults in `zoom.account` for members of the group, so a group's members can end up on a weaker (or stronger) meeting-security posture than the account as a whole.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/zoom","maturity":"experimental"},"zoom.role":{"id":"zoom.role","name":"zoom.role","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Role description","provider":"go.mondoo.com/mql/providers/zoom"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role ID","provider":"go.mondoo.com/mql/providers/zoom"},"members":{"name":"members","type":"\u0019\u001bzoom.user","title":"Users assigned this role","provider":"go.mondoo.com/mql/providers/zoom"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/providers/zoom"},"privileges":{"name":"privileges","type":"\u0019\u0007","is_mandatory":true,"title":"Privileges (permission scopes) granted by this role","provider":"go.mondoo.com/mql/providers/zoom"},"totalMembers":{"name":"totalMembers","type":"\u0005","is_mandatory":true,"title":"Number of users assigned this role","provider":"go.mondoo.com/mql/providers/zoom"}},"title":"Zoom role","desc":"A role that can be assigned to users, selected by `id`, for example `zoom.role(id: \"0\")`. The built-in `Owner` and `Admin` roles carry full account privileges; custom roles carry whatever subset of `privileges` was granted to them. Use `members` to audit how many users hold admin-equivalent access.","min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/zoom","maturity":"experimental"},"zoom.user":{"id":"zoom.user","name":"zoom.user","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Timestamp the user was created","provider":"go.mondoo.com/mql/providers/zoom"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/mql/providers/zoom"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"User's email address","provider":"go.mondoo.com/mql/providers/zoom"},"firstName":{"name":"firstName","type":"\u0007","is_mandatory":true,"title":"First name","provider":"go.mondoo.com/mql/providers/zoom"},"groupIds":{"name":"groupIds","type":"\u0019\u0007","is_mandatory":true,"title":"Group IDs the user belongs to","desc":"Deprecated in favor of groups.","provider":"go.mondoo.com/mql/providers/zoom","maturity":"deprecated"},"groups":{"name":"groups","type":"\u0019\u001bzoom.group","title":"Groups the user belongs to","provider":"go.mondoo.com/mql/providers/zoom"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Zoom user ID","provider":"go.mondoo.com/mql/providers/zoom"},"lastLoginTime":{"name":"lastLoginTime","type":"\t","is_mandatory":true,"title":"Timestamp of the user's last login","provider":"go.mondoo.com/mql/providers/zoom"},"lastName":{"name":"lastName","type":"\u0007","is_mandatory":true,"title":"Last name","provider":"go.mondoo.com/mql/providers/zoom"},"loginType":{"name":"loginType","type":"\u0005","is_mandatory":true,"title":"Sign-in method","desc":"1 (Google OAuth), 24 (Apple), 27 (Microsoft OAuth), 99 (API), 100 (SSO), or 101 (Zoom Work Email), among others. Check the Zoom Users API docs for the current complete set.","provider":"go.mondoo.com/mql/providers/zoom"},"role":{"name":"role","type":"\u001bzoom.role","title":"Role assigned to the user, governing their admin privileges","provider":"go.mondoo.com/mql/providers/zoom"},"roleId":{"name":"roleId","type":"\u0007","is_mandatory":true,"title":"Role ID assigned to the user","desc":"Deprecated in favor of role.","provider":"go.mondoo.com/mql/providers/zoom","maturity":"deprecated"},"ssoLinked":{"name":"ssoLinked","type":"\u0004","is_mandatory":true,"title":"Whether the user authenticates through the account's SSO configuration","provider":"go.mondoo.com/mql/providers/zoom"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Account status","desc":"One of `active`, `inactive`, or `pending`.","provider":"go.mondoo.com/mql/providers/zoom"},"type":{"name":"type","type":"\u0005","is_mandatory":true,"title":"License type","desc":"1 (Basic), 2 (Licensed), or 99 (None, for API-created users on some plans). Check the Zoom Users API docs for the current complete set.","provider":"go.mondoo.com/mql/providers/zoom"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether the user's email address has been verified","provider":"go.mondoo.com/mql/providers/zoom"}},"init":{"args":[{"name":"id","type":"\u0007","optional":true}]},"title":"Zoom user","desc":"A single user provisioned on the account, selected by `id`, for example `zoom.user(id: \"z9f8...\")`. Carries the user's licensing `type`, `status`, and sign-in method (`loginType` and `ssoLinked`), along with the `role` that governs their admin privileges and the `groups` whose meeting-security overrides apply to their meetings.","min_provider_version":"13.0.0","defaults":"id email type","provider":"go.mondoo.com/mql/providers/zoom","maturity":"experimental"}}}