oci_identity_domains_grant

This resource provides the Grant resource in Oracle Cloud Infrastructure Identity Domains service.

Add a Grantee to an AppRole

Example Usage

resource "oci_identity_domains_grant" "test_grant" {
    #Required
    grant_mechanism = var.grant_grant_mechanism
    grantee {
        #Required
        type = var.grant_grantee_type
        value = var.grant_grantee_value
    }
    idcs_endpoint = data.oci_identity_domain.test_domain.url
    schemas = ["urn:ietf:params:scim:schemas:oracle:idcs:Grant"]

    #Optional
    app {
        #Required
        value = var.grant_app_value
    }
    app_entitlement_collection {
        #Required
        value = var.grant_app_entitlement_collection_value
    }
    attribute_sets = ["all"]
    attributes = ""
    authorization = var.grant_authorization
    entitlement {
        #Required
        attribute_name = "appRoles"
        attribute_value = var.grant_entitlement_attribute_value
    }
    granted_attribute_values_json = var.grant_granted_attribute_values_json
    id = var.grant_id
    ocid = var.grant_ocid
    resource_type_schema_version = var.grant_resource_type_schema_version
    tags {
        #Required
        key = var.grant_tags_key
        value = var.grant_tags_value
    }
}

Argument Reference

The following arguments are supported:

* IMPORTANT * Any change to a property that does not support update will force the destruction and recreation of the resource with the new property values

Attributes Reference

The following attributes are exported:

Timeouts

The timeouts block allows you to specify timeouts for certain operations: * create - (Defaults to 20 minutes), when creating the Grant * update - (Defaults to 20 minutes), when updating the Grant * delete - (Defaults to 20 minutes), when destroying the Grant

Import

Grants can be imported using the id, e.g.

$ terraform import oci_identity_domains_grant.test_grant "idcsEndpoint/{idcsEndpoint}/grants/{grantId}"