mirror of
https://github.com/letic/terraform-provider-google.git
synced 2024-09-06 17:16:44 +00:00
ced8cb506c
Add consistency for for IAM imports. - Adds imports for projects, folders, crypto keys, organizations, and key rings. - Anything else with IAM can implement a simple method and begin working immediately. - Add tests for all the IAM imports. - Import documentation for IAM resources.
84 lines
2.8 KiB
Markdown
84 lines
2.8 KiB
Markdown
---
|
|
layout: "google"
|
|
page_title: "Google: google_project_iam_policy"
|
|
sidebar_current: "docs-google-project-iam-policy"
|
|
description: |-
|
|
Allows management of an IAM policy for a Google Cloud Platform project.
|
|
---
|
|
|
|
# google\_project\_iam\_policy
|
|
|
|
Allows creation and management of an IAM policy for an existing Google Cloud
|
|
Platform project.
|
|
|
|
~> **Be careful!** You can accidentally lock yourself out of your project
|
|
using this resource. Proceed with caution.
|
|
|
|
## Example Usage
|
|
|
|
```hcl
|
|
resource "google_project_iam_policy" "project" {
|
|
project = "your-project-id"
|
|
policy_data = "${data.google_iam_policy.admin.policy_data}"
|
|
}
|
|
|
|
data "google_iam_policy" "admin" {
|
|
binding {
|
|
role = "roles/editor"
|
|
|
|
members = [
|
|
"user:jane@example.com",
|
|
]
|
|
}
|
|
}
|
|
```
|
|
|
|
## Argument Reference
|
|
|
|
The following arguments are supported:
|
|
|
|
* `project` - (Required) The project ID.
|
|
Changing this forces a new resource to be created.
|
|
|
|
* `policy_data` - (Required) The `google_iam_policy` data source that represents
|
|
the IAM policy that will be applied to the project. The policy will be
|
|
merged with any existing policy applied to the project.
|
|
|
|
Changing this updates the policy.
|
|
|
|
Deleting this removes the policy, but leaves the original project policy
|
|
intact. If there are overlapping `binding` entries between the original
|
|
project policy and the data source policy, they will be removed.
|
|
|
|
* `authoritative` - (DEPRECATED) (Optional) A boolean value indicating if this policy
|
|
should overwrite any existing IAM policy on the project. When set to true,
|
|
**any policies not in your config file will be removed**. This can **lock
|
|
you out** of your project until an Organization Administrator grants you
|
|
access again, so please exercise caution. If this argument is `true` and you
|
|
want to delete the resource, you must set the `disable_project` argument to
|
|
`true`, acknowledging that the project will be inaccessible to anyone but the
|
|
Organization Admins, as it will no longer have an IAM policy. Rather than using
|
|
this, you should use `google_project_iam_policy_binding` and
|
|
`google_project_iam_policy_member`.
|
|
|
|
* `disable_project` - (DEPRECATED) (Optional) A boolean value that must be set to `true`
|
|
if you want to delete a `google_project_iam_policy` that is authoritative.
|
|
|
|
## Attributes Reference
|
|
|
|
In addition to the arguments listed above, the following computed attributes are
|
|
exported:
|
|
|
|
* `etag` - (Computed) The etag of the project's IAM policy.
|
|
|
|
* `restore_policy` - (DEPRECATED) (Computed) The IAM policy that will be restored when a
|
|
non-authoritative policy resource is deleted.
|
|
|
|
## Import
|
|
|
|
IAM policy imports use the identifier of the resource in question. This policy resource can be imported using the `project_id` e.g.
|
|
|
|
```
|
|
$ terraform import google_project_iam_policy.my_project your-project-id
|
|
```
|