» opentelekomcloud_identity_role_assignment_v3

Manages a V3 Role assignment within group on OpentelekomCloud IAM Service.

Note: You must have admin privileges in your OpentelekomCloud cloud to use this resource.

» Example Usage: Assign Role On Project Level

resource "opentelekomcloud_identity_project_v3" "project_1" {
  name = "eu-de_project_1"
}

resource "opentelekomcloud_identity_group_v3" "group_1" {
  name = "group_1"
}

data "opentelekomcloud_identity_role_v3" "role_1" {
  name = "system_all_4" #ECS admin
}

resource "opentelekomcloud_identity_role_assignment_v3" "role_assignment_1" {
  group_id = "${opentelekomcloud_identity_group_v3.group_1.id}"
  project_id = "${opentelekomcloud_identity_project_v3.project_1.id}"
  role_id = "${data.opentelekomcloud_identity_role_v3.role_1.id}"
}

» Example Usage: Assign Role On Domain Level


variable "domain_id" {
    default = "01aafcf63744d988ebef2b1e04c5c34"
    description = "this is the domain id"
}

resource "opentelekomcloud_identity_group_v3" "group_1" {
  name = "group_1"
}

data "opentelekomcloud_identity_role_v3" "role_1" {
  name = "secu_admin" #security admin
}

resource "opentelekomcloud_identity_role_assignment_v3" "role_assignment_1" {
  group_id = "${opentelekomcloud_identity_group_v3.group_1.id}"
  domain_id = "${var.domain_id}"
  role_id = "${data.opentelekomcloud_identity_role_v3.role_1.id}"
}

» Argument Reference

The following arguments are supported:

domain_id - (Optional; Required if project_id is empty) The domain to assign the role in.
group_id - (Optional; Required if user_id is empty) The group to assign the role to.
project_id - (Optional; Required if domain_id is empty) The project to assign the role in.
user_id - (Optional; Required if group_id is empty) The user to assign the role in.
role_id - (Required) The role to assign.

» Attributes Reference

The following attributes are exported:

domain_id - See Argument Reference above.
project_id - See Argument Reference above.
group_id - See Argument Reference above.
user_id - See Argument Reference above.
role_id - See Argument Reference above.