I have a custom Organization role. When I try and use it with the "terraform-google-modules/iam/google//modules/folders_iam" module, I get:
Error: invalid value for member (IAM members must have one of the values outlined here: https://cloud.google.com/billing/docs/reference/rest/v1/Policy#Binding)
Expected behavior
I expect to be able to pass custom roles using the folders_iam module.
Observed behavior
│ Error: invalid value for member (IAM members must have one of the values outlined here: https://cloud.google.com/billing/docs/reference/rest/v1/Policy#Binding)
│
│ with module.folders_iam_bindings_bi_and_analytics.google_folder_iam_member.folder_iam_additive["default--organizations/1078837331876/roles/CustomBigQueryUser--gcp_org_business_intelligence_engineers@company.com"],
│ on .terraform\modules\folders_iam_bindings_bi_and_analytics\modules\folders_iam\main.tf line 53, in resource "google_folder_iam_member" "folder_iam_additive":
│ 53: member = module.helper.bindings_additive[each.key].member
│
* exit status 1
Terraform v1.3.3
on windows_amd64
+ provider registry.terraform.io/hashicorp/google v4.47.0
Additional information
The following doc indicates that:
Custom Roles
: If you're importing a IAM binding with a custom role, make sure to use the full name of the custom role, e.g. [projects/my-project|organizations/my-org]/roles/my-custom-role.
TL;DR
I have a custom Organization role. When I try and use it with the "terraform-google-modules/iam/google//modules/folders_iam" module, I get:
Expected behavior
I expect to be able to pass custom roles using the folders_iam module.
Observed behavior
Terraform Configuration
Terraform Version
Additional information
The following doc indicates that:
https://registry.terraform.io/providers/hashicorp/google/3.24.0/docs/resources/google_folder_iam_binding