search

GoogleCloudPlatform / terraform-google-pam

Deploy Privileged Access Manager
https://registry.terraform.io/modules/GoogleCloudPlatform/pam/google
Apache License 2.0
1 stars 3 forks source link

Allow for Service Agent IAM binding at the project level #4

Closed jace-ys closed 4 weeks ago

jace-ys commented 2 months ago

👋🏻 Thanks for creating this module.

We would really like to use it but one blocker we're hitting is that our Terraform does not have permissions to manage organization level resources, meaning we can't create the google_organization_iam_binding at the organization level for the PAM service agent.

Would you be able to support the IAM binding at the project level instead? Meaning a google_project_iam_binding instead.

jace-ys commented 2 months ago

Had a stab at it: https://github.com/GoogleCloudPlatform/terraform-google-pam/pull/5