| layout | azuredevops |
|---|---|
| page_title | AzureDevops: azuredevops_servicehook_permissions |
| description | Manages permissions for AzureDevOps Service Hook permissions. |
Manages permissions for Service Hook permissions.
Permissions for service hooks within Azure DevOps can be applied on the Organizational level or, if the optional attribute project_id is specified, on Project level.
Those levels are reflected by specifying (or omitting) values for the argument project_id.
resource "azuredevops_project" "example" {
name = "Example Project"
work_item_template = "Agile"
version_control = "Git"
visibility = "private"
description = "Managed by Terraform"
}
data "azuredevops_group" "example-readers" {
project_id = azuredevops_project.example.id
name = "Readers"
}
resource "azuredevops_servicehook_permissions" "example-permissions" {
project_id = azuredevops_project.example.id
principal = data.azuredevops_group.example-readers.id
permissions = {
ViewSubscriptions = "allow"
EditSubscriptions = "allow"
DeleteSubscriptions = "allow"
PublishEvents = "allow"
}
}The following arguments are supported:
-
principal- (Required) The group principal to assign the permissions. -
permissions- (Required) the permissions to assign. The following permissions are available.Name Permission Description ViewSubscriptions View Subscriptions EditSubscriptions Edit Subscription DeleteSubscriptions Delete Subscriptions PublishEvents Publish Events
-
replace- (Optional) Replace (true) or merge (false) the permissions. Default:true -
project_id- (optional) The ID of the project.
The timeouts block allows you to specify timeouts for certain actions:
create- (Defaults to 10 minutes) Used when creating the Service Hook Permissions.read- (Defaults to 5 minute) Used when retrieving the Service Hook Permissions.update- (Defaults to 10 minutes) Used when updating the Service Hook Permissions.delete- (Defaults to 10 minutes) Used when deleting the Service Hook Permissions.
The resource does not support import.
- Project & Team: vso.security_manage - Grants the ability to read, write, and manage security permissions.