This submodule is used to assign BigQuery dataset roles.
module "bigquery_dataset-iam-bindings" {
source = "terraform-google-modules/iam/google//modules/bigquery_datasets_iam"
version = "~> 8.2"
project = "my-bigquery_dataset_project"
bigquery_datasets = ["my_big_query_one", "my_bigquery_dataset_two"]
mode = "additive"
bindings = {
"roles/bigquery.dataViewer" = [
"serviceAccount:my-sa@my-project.iam.gserviceaccount.com",
"group:my-group@my-org.com",
"user:my-user@my-org.com",
]
"roles/bigquery.dataEditor" = [
"serviceAccount:my-sa@my-project.iam.gserviceaccount.com",
"group:my-group@my-org.com",
"user:my-user@my-org.com",
]
}
}
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| bigquery_datasets | BigQuery dataset IDs list to add the IAM policies/bindings | list(string) |
n/a | yes |
| bindings | Map of role (key) and list of members (value) to add the IAM policies/bindings | map(any) |
n/a | yes |
| mode | Mode for adding the IAM policies/bindings, additive and authoritative | string |
"additive" |
no |
| project | Project to add the IAM policies/bindings | string |
n/a | yes |
| Name | Description |
|---|---|
| bigquery_datasets | Bigquery dataset IDs which received for bindings. |
| members | Members which were bound to the bigquery datasets. |
| roles | Roles which were assigned to members. |