All committers have signed the CLA.

Hey @smishra96, I think we could better solve this issue through smarter use of the API rather than the added filtering for non-service accounts.

Currently the resource uses go-tfe's TeamMembers.ListOrganizationMemberships where we just return the result of the include of organization memberships on a Team. A better route here would be to use OrganizationMemberships.List, where the endpoint automatically filters out service accounts so we can avoid the overhead of doing this in the provider. The one catch is that go-tfe currently doesn't implement the filter[team]=team_external_id query param that would be needed and is otherwise present on the OrganizationMemberships controller. I think a better route for a solution here would be to update go-tfe's OrganizationMembershipListOptions to have a Team filter, and to then make use of it here in the provider.

the endpoint automatically filters out service accounts so we

Hello @Maed223,

The reason why I did the implementation this way was that UI also functions in a similar way, ignoring service accounts using the is-service-account flag. Hence, a similar approach was suggested by @brandonc here: https://hashicorp.slack.com/archives/C01BR9FR8KZ/p1758053460838739?thread_ts=1758014882.375959&cid=C01BR9FR8KZ

But let me also explore the approach that you are suggesting. Will post my findings as soon as I am done.