gcp_iam_role

ancestors

Type: UNORDERED_LIST_STRING

deleted

Type: BOOLEAN
Provider name: deleted
Description: The current deleted state of the role. This field is read only. It will be ignored in calls to CreateRole and UpdateRole.

description

Type: STRING
Provider name: description
Description: Optional. A human-readable description for the role.

included_permissions

Type: UNORDERED_LIST_STRING
Provider name: includedPermissions
Description: The names of the permissions this role grants when bound in an IAM policy.

labels

Type: UNORDERED_LIST_STRING

name

Type: STRING
Provider name: name
Description: The name of the role. When Role is used in CreateRole, the role name must not be set. When Role is used in output and other input such as UpdateRole, the role name is the complete path. For example, roles/logging.viewer for predefined roles, organizations/{ORGANIZATION_ID}/roles/my-role for organization-level custom roles, and projects/{PROJECT_ID}/roles/my-role for project-level custom roles.

organization_id

Type: STRING

parent

Type: STRING

project_id

Type: STRING

project_number

Type: STRING

resource_name

Type: STRING

stage

Type: STRING
Provider name: stage
Description: The current launch stage of the role. If the ALPHA launch stage has been selected for a role, the stage field will not be included in the returned definition for the role.
Possible values:

  • ALPHA - The user has indicated this role is currently in an Alpha phase. If this launch stage is selected, the stage field will not be included when requesting the definition for a given role.
  • BETA - The user has indicated this role is currently in a Beta phase.
  • GA - The user has indicated this role is generally available.
  • DEPRECATED - The user has indicated this role is being deprecated.
  • DISABLED - This role is disabled and will not contribute permissions to any principals it is granted to in policies.
  • EAP - The user has indicated this role is currently in an EAP phase.

tags

Type: UNORDERED_LIST_STRING

title

Type: STRING
Provider name: title
Description: Optional. A human-readable title for the role. Typically this is limited to 100 UTF-8 bytes.