allowAll property
Optional. Whether or not the scope allows all labels, allowAll and allowedDataAccessLabels are mutually exclusive and one of them must be present. deniedDataAccessLabels can still be used along with allow_all. When combined with denied_data_access_labels, access will be granted to all data that doesn't have labels mentioned in denied_data_access_labels. E.g.: A customer with scope with denied labels A and B and allowAll will be able to see all data except data labeled with A and data labeled with B and data with labels A and B.
Implementation
final pulumi.Input<bool?>? allowAll;