Add limited role and existing users to datadog

datadog-roles.tf

@@ -7,24 +7,31 @@ variable "dd_roles" {
   }))
 
   default = {
-    # Example role configuration - replace with actual roles
-    # "custom-readonly" = {
-    #   name        = "Custom Read Only"
-    #   permissions = [
-    #     "dashboards_read",
-    #     "monitors_read",
-    #     "logs_read_data"
-    #   ]
-    # },
-    # "custom-admin" = {
-    #   name        = "Custom Admin"
-    #   permissions = [
-    #     "admin",
-    #     "dashboards_write",
-    #     "monitors_write",
-    #     "logs_write_exclusion_filters"
-    #   ]
-    # }
+    "limited-read-write" = {
+      name = "Limited Read Write"
+      permissions = [
+        # Read permissions (similar to read-only role)
+        "dashboards_read",
+        "monitors_read",
+        "logs_read_data",
+        "logs_read_index_data",
+        "logs_read_archives",
+        "apm_read",
+        "metrics_read",
+        "synthetics_read",
+        "incidents_read",
+        "cases_read",
+        "notebooks_read",
+
+        # Additional write permissions
+        "dashboards_write",
+        "notebooks_write",
+        "monitors_write",
+        "synthetics_write",
+        "incidents_write",
+        "cases_write"
+      ]
+    }
   }
 }
 

datadog-users.tf

@@ -3,26 +3,37 @@ variable "dd_users" {
   description = "Map of User Resources"
   type = map(object({
     email    = string
-    name     = string
     roles    = optional(list(string), [])
     disabled = optional(bool, false)
   }))
 
   default = {
-    # Example user configuration - replace with actual users
-    # "example-user" = {
-    #   email    = "[email protected]"
-    #   name     = "Example User"
-    #   roles    = ["standard"]  # roles can include: "standard", "admin", "read_only"
-    #   disabled = false
-    # }
+    "jconway" = {
+      email    = "[email protected]"
+      name     = "Jordan Conway"
+      roles    = ["admin"]
+      disabled = false
+    },
+    "tha" = {
+      email    = "[email protected]"
+      roles    = ["admin"]
+      disabled = false
+    },
+    "rdetjens" = {
+      email    = "[email protected]"
+      roles    = ["admin"]
+      disabled = false
+    },
+    "rgrigar" = {
+      email    = "[email protected]"
+      roles    = ["admin"]
+      disabled = false
+    }
   }
 }
-
 resource "datadog_user" "users" {
   for_each = var.dd_users
   email    = each.value.email
-  name     = each.value.name
   roles    = each.value.roles
   disabled = each.value.disabled
 }