gcp_iam_role
ancestors
Type: UNORDERED_LIST_STRING
deleted
Type: BOOLEAN
Provider name: deleted
Description: The current deleted state of the role. This field is read only. It will be ignored in calls to CreateRole and UpdateRole.
description
Type: STRING
Provider name: description
Description: Optional. A human-readable description for the role.
included_permissions
Type: UNORDERED_LIST_STRING
Provider name: includedPermissions
Description: The names of the permissions this role grants when bound in an IAM policy.
labels
Type: UNORDERED_LIST_STRING
name
Type: STRING
Provider name: name
Description: The name of the role. When Role
is used in CreateRole
, the role name must not be set. When Role
is used in output and other input such as UpdateRole
, the role name is the complete path. For example, roles/logging.viewer
for predefined roles, organizations/{ORGANIZATION_ID}/roles/my-role
for organization-level custom roles, and projects/{PROJECT_ID}/roles/my-role
for project-level custom roles.
organization_id
Type: STRING
parent
Type: STRING
project_id
Type: STRING
project_number
Type: STRING
resource_name
Type: STRING
stage
Type: STRING
Provider name: stage
Description: The current launch stage of the role. If the ALPHA
launch stage has been selected for a role, the stage
field will not be included in the returned definition for the role.
Possible values:
ALPHA
- The user has indicated this role is currently in an Alpha phase. If this launch stage is selected, the stage
field will not be included when requesting the definition for a given role.
BETA
- The user has indicated this role is currently in a Beta phase.
GA
- The user has indicated this role is generally available.
DEPRECATED
- The user has indicated this role is being deprecated.
DISABLED
- This role is disabled and will not contribute permissions to any principals it is granted to in policies.
EAP
- The user has indicated this role is currently in an EAP phase.
Type: UNORDERED_LIST_STRING
title
Type: STRING
Provider name: title
Description: Optional. A human-readable title for the role. Typically this is limited to 100 UTF-8 bytes.