googleworkspace_role (Resource)

Role resource in the Terraform Googleworkspace provider. Role resides under the https://www.googleapis.com/auth/admin.directory.rolemanagement client scope.

Example Usage

data "googleworkspace_privileges" "privileges" {}

locals {
  read_only_privileges = [
    for priv in data.googleworkspace_privileges.privileges.items : priv
    if length(regexall("READ", priv.privilege_name)) > 0
  ]
}

resource "googleworkspace_role" "read-only" {
  name = "read-only"

  dynamic "privileges" {
    for_each = local.read_only_privileges
    content {
      service_id     = privileges.value["service_id"]
      privilege_name = privileges.value["privilege_name"]
    }
  }
}

Schema

Required

Optional

Read-Only

Nested Schema for privileges

Required:

Import

Import is supported using the following syntax:

terraform import googleworkspace_role.admin 12345678901234567