Google Cloud Identity Group Membership

google_cloud_identity_group_membership (Terraform)

The Group Membership in Cloud Identity can be configured in Terraform with the resource name google_cloud_identity_group_membership. The following sections describe 5 examples of how to use the resource and its parameters.

Example Usage from GitHub

apsureda/ci-groups

resource "google_cloud_identity_group_membership" "obe-bu2-cigroups-app3_leslie_lamport_apszaz_com" {
  group = google_cloud_identity_group.obe-bu2-cigroups-app3.id
  preferred_member_key {
    id = "leslie.lamport@apszaz.com"
  }
  roles {

apsureda/ci-groups

resource "google_cloud_identity_group_membership" "obe-bu1-cigroups-app1_leslie_lamport_apszaz_com" {
  group = google_cloud_identity_group.obe-bu1-cigroups-app1.id
  preferred_member_key {
    id = "leslie.lamport@apszaz.com"
  }
  roles {

apsureda/gci-groups

resource "google_cloud_identity_group_membership" "tnt1-bu1-cigroups-app3_leslie_lamport_apszaz_com" {
  group = google_cloud_identity_group.tnt1-bu1-cigroups-app3.id
  preferred_member_key {
    id = "leslie.lamport@apszaz.com"
  }
  roles {

apsureda/ci-groups

resource "google_cloud_identity_group_membership" "obe-bu2-cigroups-app1_leslie_lamport_apszaz_com" {
  group = google_cloud_identity_group.obe-bu2-cigroups-app1.id
  preferred_member_key {
    id = "leslie.lamport@apszaz.com"
  }
  roles {

apsureda/gci-groups

resource "google_cloud_identity_group_membership" "tnt1-bu1-cigroups-app1_leslie_lamport_apszaz_com" {
  group = google_cloud_identity_group.tnt1-bu1-cigroups-app1.id
  preferred_member_key {
    id = "leslie.lamport@apszaz.com"
  }
  roles {

Parameters

• create_time optional computed - string

The time when the Membership was created.

• group required - string

The name of the Group to create this membership in.

• id optional computed - string
• name optional computed - string

The resource name of the Membership, of the form groups/[group_id]/memberships/[membership_id].

• type optional computed - string

The type of the membership.

• update_time optional computed - string

The time when the Membership was last updated.

• preferred_member_key list block
  • id required - string

  The ID of the entity. For Google-managed entities, the id must be the email address of an existing group or user. For external-identity-mapped entities, the id must be a string conforming to the Identity Source's requirements. Must be unique within a namespace.

  • namespace optional - string

  The namespace in which the entity exists. If not specified, the EntityKey represents a Google-managed entity such as a Google user or a Google Group. If specified, the EntityKey represents an external-identity-mapped group. The namespace must correspond to an identity source created in Admin Console and must be in the form of 'identitysources/[identity_source_id]'.

• roles set block
  • name required - string

  The name of the MembershipRole. Must be one of OWNER, MANAGER, MEMBER. Possible values: ["OWNER", "MANAGER", "MEMBER"]

• timeouts single block
  • create optional - string
  • delete optional - string
  • update optional - string

Explanation in Terraform Registry

A Membership defines a relationship between a Group and an entity belonging to that Group, referred to as a "member". To get more information about GroupMembership, see:

• API documentation
• How-to Guides
  • Official Documentation

    Warning: If you are using User ADCs (Application Default Credentials) with this resource, you must specify a billing_project and set user_project_override to true in the provider configuration. Otherwise the Cloud Identity API will return a 403 error. Your account must have the serviceusage.services.use permission on the billing_project you defined.