Package com.pulumi.gcp.bigquery
Class DatasetIamMember
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.gcp.bigquery.DatasetIamMember
-
public class DatasetIamMember extends com.pulumi.resources.CustomResource
Three different resources help you manage your IAM policy for BigQuery dataset. Each of these resources serves a different use case: * `gcp.bigquery.DatasetIamPolicy`: Authoritative. Sets the IAM policy for the dataset and replaces any existing policy already attached. * `gcp.bigquery.DatasetIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the dataset are preserved. * `gcp.bigquery.DatasetIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the dataset are preserved. These resources are intended to convert the permissions system for BigQuery datasets to the standard IAM interface. For advanced usages, including [creating authorized views](https://cloud.google.com/bigquery/docs/share-access-views), please use either `gcp.bigquery.DatasetAccess` or the `access` field on `gcp.bigquery.Dataset`. > **Note:** These resources **cannot** be used with `gcp.bigquery.DatasetAccess` resources or the `access` field on `gcp.bigquery.Dataset` or they will fight over what the policy should be. > **Note:** Using any of these resources will remove any authorized view permissions from the dataset. To assign and preserve authorized view permissions use the `gcp.bigquery.DatasetAccess` instead. > **Note:** Legacy BigQuery roles `OWNER` `WRITER` and `READER` **cannot** be used with any of these IAM resources. Instead use the full role form of: `roles/bigquery.dataOwner` `roles/bigquery.dataEditor` and `roles/bigquery.dataViewer`. > **Note:** `gcp.bigquery.DatasetIamPolicy` **cannot** be used in conjunction with `gcp.bigquery.DatasetIamBinding` and `gcp.bigquery.DatasetIamMember` or they will fight over what your policy should be. > **Note:** `gcp.bigquery.DatasetIamBinding` resources **can be** used in conjunction with `gcp.bigquery.DatasetIamMember` resources **only if** they do not grant privilege to the same role. ## google\_bigquery\_dataset\_iam\_policy ```java package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.gcp.organizations.OrganizationsFunctions; import com.pulumi.gcp.organizations.inputs.GetIAMPolicyArgs; import com.pulumi.gcp.bigquery.Dataset; import com.pulumi.gcp.bigquery.DatasetArgs; import com.pulumi.gcp.bigquery.DatasetIamPolicy; import com.pulumi.gcp.bigquery.DatasetIamPolicyArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { final var owner = OrganizationsFunctions.getIAMPolicy(GetIAMPolicyArgs.builder() .bindings(GetIAMPolicyBindingArgs.builder() .role("roles/bigquery.dataOwner") .members("user:[email protected]") .build()) .build()); var datasetDataset = new Dataset("datasetDataset", DatasetArgs.builder() .datasetId("example_dataset") .build()); var datasetDatasetIamPolicy = new DatasetIamPolicy("datasetDatasetIamPolicy", DatasetIamPolicyArgs.builder() .datasetId(datasetDataset.datasetId()) .policyData(owner.applyValue(getIAMPolicyResult -> getIAMPolicyResult.policyData())) .build()); } } ``` ## google\_bigquery\_dataset\_iam\_binding ```java package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.gcp.bigquery.Dataset; import com.pulumi.gcp.bigquery.DatasetArgs; import com.pulumi.gcp.bigquery.DatasetIamBinding; import com.pulumi.gcp.bigquery.DatasetIamBindingArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var dataset = new Dataset("dataset", DatasetArgs.builder() .datasetId("example_dataset") .build()); var reader = new DatasetIamBinding("reader", DatasetIamBindingArgs.builder() .datasetId(dataset.datasetId()) .role("roles/bigquery.dataViewer") .members("user:[email protected]") .build()); } } ``` ## google\_bigquery\_dataset\_iam\_member ```java package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.gcp.bigquery.Dataset; import com.pulumi.gcp.bigquery.DatasetArgs; import com.pulumi.gcp.bigquery.DatasetIamMember; import com.pulumi.gcp.bigquery.DatasetIamMemberArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var dataset = new Dataset("dataset", DatasetArgs.builder() .datasetId("example_dataset") .build()); var editor = new DatasetIamMember("editor", DatasetIamMemberArgs.builder() .datasetId(dataset.datasetId()) .role("roles/bigquery.dataEditor") .member("user:[email protected]") .build()); } } ``` ## Import ### Importing IAM policies IAM policy imports use the identifier of the BigQuery Dataset resource. For example* `projects/{{project_id}}/datasets/{{dataset_id}}` An `import` block (Terraform v1.5.0 and later) can be used to import IAM policiestf import { id = projects/{{project_id}}/datasets/{{dataset_id}} to = google_bigquery_dataset_iam_policy.default } The `pulumi import` command can also be used ```sh $ pulumi import gcp:bigquery/datasetIamMember:DatasetIamMember default projects/{{project_id}}/datasets/{{dataset_id}} ```
-
-
Constructor Summary
Constructors Constructor Description DatasetIamMember(java.lang.String name)
DatasetIamMember(java.lang.String name, DatasetIamMemberArgs args)
DatasetIamMember(java.lang.String name, DatasetIamMemberArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.util.Optional<DatasetIamMemberCondition>>
condition()
com.pulumi.core.Output<java.lang.String>
datasetId()
com.pulumi.core.Output<java.lang.String>
etag()
static DatasetIamMember
get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, DatasetIamMemberState state, com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.lang.String>
member()
com.pulumi.core.Output<java.lang.String>
project()
com.pulumi.core.Output<java.lang.String>
role()
-
-
-
Constructor Detail
-
DatasetIamMember
public DatasetIamMember(java.lang.String name)
- Parameters:
name
- The _unique_ name of the resulting resource.
-
DatasetIamMember
public DatasetIamMember(java.lang.String name, DatasetIamMemberArgs args)
- Parameters:
name
- The _unique_ name of the resulting resource.args
- The arguments to use to populate this resource's properties.
-
DatasetIamMember
public DatasetIamMember(java.lang.String name, DatasetIamMemberArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)
- Parameters:
name
- The _unique_ name of the resulting resource.args
- The arguments to use to populate this resource's properties.options
- A bag of options that control this resource's behavior.
-
-
Method Detail
-
condition
public com.pulumi.core.Output<java.util.Optional<DatasetIamMemberCondition>> condition()
-
datasetId
public com.pulumi.core.Output<java.lang.String> datasetId()
- Returns:
- The dataset ID. * `member/members` - (Required) Identities that will be granted the privilege in `role`. Each entry can have one of the following values: * **allUsers**: A special identifier that represents anyone who is on the internet; with or without a Google account. * **allAuthenticatedUsers**: A special identifier that represents anyone who is authenticated with a Google account or a service account. * **user:{emailid}**: An email address that represents a specific Google account. For example, [email protected] or [email protected]. * **serviceAccount:{emailid}**: An email address that represents a service account. For example, [email protected]. * **group:{emailid}**: An email address that represents a Google group. For example, [email protected]. * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-
etag
public com.pulumi.core.Output<java.lang.String> etag()
- Returns:
- (Computed) The etag of the dataset's IAM policy.
-
member
public com.pulumi.core.Output<java.lang.String> member()
-
project
public com.pulumi.core.Output<java.lang.String> project()
- Returns:
- The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
-
role
public com.pulumi.core.Output<java.lang.String> role()
- Returns:
- The role that should be applied. Only one `gcp.bigquery.DatasetIamBinding` can be used per role. Note that custom roles must be of the format `[projects|organizations]/{parent-name}/roles/{role-name}`.
-
get
public static DatasetIamMember get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable DatasetIamMemberState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name
- The _unique_ name of the resulting resource.id
- The _unique_ provider ID of the resource to lookup.state
-options
- Optional settings to control the behavior of the CustomResource.
-
-