Skip to content

Commit d8b947c

Browse files
Bigtable: Refer to a functional role for bigtable (#3811) (#2328)
Using `roles/editor` returns the following error: ``` Error: Error setting IAM policy for Bigtable Instance XXX/XXXbigtable-instance: googleapi: Error 400: Role (roles/editor) does not exist in the resource's hierarchy., badRequest ``` Co-authored-by: Chase <[email protected]> Signed-off-by: Modular Magician <[email protected]> Co-authored-by: Chase <[email protected]>
1 parent 8b8f5a5 commit d8b947c

File tree

2 files changed

+7
-4
lines changed

2 files changed

+7
-4
lines changed

.changelog/3811.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:none
2+
3+
```

website/docs/r/bigtable_instance_iam.html.markdown

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Three different resources help you manage IAM policies on bigtable instances. Ea
2424
```hcl
2525
data "google_iam_policy" "admin" {
2626
binding {
27-
role = "roles/editor"
27+
role = "roles/bigtable.user"
2828
members = [
2929
3030
]
@@ -43,7 +43,7 @@ resource "google_bigtable_instance_iam_policy" "editor" {
4343
```hcl
4444
resource "google_bigtable_instance_iam_binding" "editor" {
4545
instance = "your-bigtable-instance"
46-
role = "roles/editor"
46+
role = "roles/bigtable.user"
4747
members = [
4848
4949
]
@@ -55,7 +55,7 @@ resource "google_bigtable_instance_iam_binding" "editor" {
5555
```hcl
5656
resource "google_bigtable_instance_iam_member" "editor" {
5757
instance = "your-bigtable-instance"
58-
role = "roles/editor"
58+
role = "roles/bigtable.user"
5959
member = "user:[email protected]"
6060
}
6161
```
@@ -79,7 +79,7 @@ For `google_bigtable_instance_iam_member` or `google_bigtable_instance_iam_bindi
7979

8080
* `role` - (Required) The role that should be applied. Only one
8181
`google_bigtable_instance_iam_binding` can be used per role. Note that custom roles must be of the format
82-
`[projects|organizations]/{parent-name}/roles/{role-name}`.
82+
`[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
8383

8484
`google_bigtable_instance_iam_policy` only:
8585
* `policy_data` - (Required) The policy data generated by a `google_iam_policy` data source.

0 commit comments

Comments
 (0)