| name | description | type | required | default |
|---|---|:---: |:---:|:---:|
| org_id | Organization id in nnnnnn format. | <codetitle="">number</code> | ✓ | |
| *custom_roles* | Map of role name => list of permissions to create in this project. | <codetitle="map(list(string))">map(list(string))</code> | | <codetitle="">{}</code> |
| *iam_additive_bindings* | Map of roles lists used to set non authoritative bindings, keyed by members. | <codetitle="map(list(string))">map(list(string))</code> | | <codetitle="">{}</code> |
| *iam_audit_config* | Service audit logging configuration. Service as key, map of log permission (eg DATA_READ) and excluded members as value for each service. | <codetitle="map(map(list(string)))">map(map(list(string)))</code> | | <codetitle="">{}</code> |
| *iam_members* | Map of member lists used to set authoritative bindings, keyed by role. | <codetitle="map(list(string))">map(list(string))</code> | | <codetitle="">{}</code> |
| *iam_roles* | List of roles used to set authoritative bindings. | <codetitle="list(string)">list(string)</code> | | <codetitle="">[]</code> |
| *policy_boolean* | Map of boolean org policies and enforcement value, set value to null for policy restore. | <codetitle="map(bool)">map(bool)</code> | | <codetitle="">{}</code> |
| *policy_list* | Map of list org policies, status is true for allow, false for deny, null for restore. Values can only be used for allow or deny. | <codetitle="map(object({ inherit_from_parent = bool suggested_value = string status = bool values = list(string) }))">map(object({...}))</code> | | <codetitle="">{}</code> |
## Outputs
| name | description | sensitive |
|---|---|:---:|
| org_id | Organization id dependent on module resources. | |