Syntax
A google_iam_organization_custom_role
is used to test a Google OrganizationCustomRole resource
Examples
describe google_iam_organization_custom_role(org_id: '12345', name: 'org-role') do
it { should exist }
its('stage') { should eq 'GA' }
its('included_permissions') { should eq ["iam.roles.list"] }
end
describe google_iam_organization_custom_role(org_id: '12345', name: 'org-role', name: 'nonexistent') do
it { should_not exist }
end
Properties
Properties that can be accessed from the google_iam_organization_custom_role
resource:
name
: The name of the role.title
: A human-readable title for the role. Typically this is limited to 100 UTF-8 bytes.description
: Human-readable description for the roleincluded_permissions
: Names of permissions this role grants when bound in an IAM policy.stage
: The current launch stage of the role. Possible values:- ALPHA
- BETA
- GA
- DEPRECATED
- DISABLED
- EAP
deleted
: The current deleted state of the role
GCP Permissions
Ensure the Identity and Access Management (IAM) API is enabled for the current project.