re-remove policy admin role from dp SAs

2022-02-18 07:29:24 +01:00 · 2022-02-18 07:29:24 +01:00 · 6f3aa4920a
parent ed844cdedf
commit 6f3aa4920a
1 changed files with 1 additions and 4 deletions
--- a/fast/stages/01-resman/organization.tf
+++ b/fast/stages/01-resman/organization.tf
@ -63,10 +63,7 @@ module "organization" {
      "roles/compute.xpnAdmin" = [
        module.branch-network-sa.iam_email
      ]
-      "roles/orgpolicy.policyAdmin" = concat(
-        local.branch_dataplatform_sa_iam_emails,
-        local.branch_teams_pf_sa_iam_emails
-      )
+      "roles/orgpolicy.policyAdmin" = local.branch_teams_pf_sa_iam_emails
    },
    local.billing_org ? {
      "roles/billing.costsManager" = local.branch_teams_pf_sa_iam_emails