layout | page_title | description |
---|---|---|
azuredevops |
AzureDevops: azuredevops_group_membership |
Manages group membership within Azure DevOps organization. |
Manages group membership within Azure DevOps.
resource "azuredevops_project" "example" {
name = "Example Project"
}
resource "azuredevops_user_entitlement" "example" {
principal_name = "[email protected]"
}
data "azuredevops_group" "example" {
project_id = azuredevops_project.example.id
name = "Build Administrators"
}
resource "azuredevops_group_membership" "example" {
group = data.azuredevops_group.example.descriptor
members = [
azuredevops_user_entitlement.example.descriptor
]
}
The following arguments are supported:
-
group
- (Required) The descriptor of the group being managed. -
members
- (Required) A list of user or group descriptors that will become members of the group.~> NOTE 1. It's possible to define group members both within the
azuredevops_group_membership resource
via the members block and by using theazuredevops_group
resource. However it's not possible to use both methods to manage group members, since there'll be conflicts.
2. Themembers
usesdescriptor
as the identifier not Resource ID or others.
-
mode
- (Optional) The mode how the resource manages group members.~>NOTE 1.
mode = add
: the resource will ensure that all specified members will be part of the referenced group
2.mode = overwrite
: the resource will replace all existing members with the members specified within themembers
block
3. To clear all members from a group, specify an empty list of descriptors in themembers
attribute and set themode
member tooverwrite
.
In addition to all arguments above, the following attributes are exported:
id
- A random ID for this resource. There is no "natural" ID, so a random one is assigned.
The timeouts
block allows you to specify timeouts for certain actions:
create
- (Defaults to 10 minutes) Used when creating the Group membership.read
- (Defaults to 5 minute) Used when retrieving the Group membership.update
- (Defaults to 10 minutes) Used when updating the Group membership.delete
- (Defaults to 10 minutes) Used when deleting the Group membership.
- Deployment Groups: Read & Manage