yandex_organizationmanager_organization_iam_binding (Resource)

Allows creation and management of a single binding within IAM policy for an existing Yandex Cloud Organization Manager organization.

Example usageExample usage

//
// Create a new OrganizationManager Organization IAM Binding.
//
resource "yandex_organizationmanager_organization_iam_binding" "editor" {
  organization_id = "some_organization_id"

  role = "editor"

  members = [
    "userAccount:some_user_id",
  ]
}

SchemaSchema

RequiredRequired

• members (Set of String) An array of identities that will be granted the privilege in the role. Each entry can have one of the following values:
  • userAccount:{user_id}: A unique user ID that represents a specific Yandex account.
  • serviceAccount:{service_account_id}: A unique service account ID.
  • federatedUser:{federated_user_id}: A unique federated user ID.
  • federatedUser:{federated_user_id}:: A unique SAML federation user account ID.
  • group:{group_id}: A unique group ID.
  • system:group:federation:{federation_id}:users: All users in federation.
  • system:group:organization:{organization_id}:users: All users in organization.
  • system:allAuthenticatedUsers: All authenticated users.
  • system:allUsers: All users, including unauthenticated ones.

~> for more information about system groups, see Cloud Documentation.

• organization_id (String) The ID of the organization to attach the policy to.
• role (String) The role that should be applied. See roles catalog.

OptionalOptional

• sleep_after (Number)
• timeouts (Block, Optional) (see below for nested schema)

Read-OnlyRead-Only

• id (String) The ID of this resource.

Nested Schema for Nested Schema for timeouts

Optional:

• default (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

ImportImport

The resource can be imported by using their resource ID. For getting the resource ID you can use Yandex Cloud Web Console or YC CLI.

# terraform import yandex_organizationmanager_organization_iam_binding.<resource Name> "<resource Id> <resource Role>"
terraform import yandex_organizationmanager_organization_iam_binding.editor "abjjf**********p3gp8 editor"