Add DLP Service Agent role

blueprints/data-solutions/data-platform-minimal/04-common.tf

@@ -39,6 +39,7 @@ locals {
     "roles/datacatalog.categoryFineGrainedReader" = [
       module.processing-sa-0.iam_email
     ]
+    "roles/dlp.serviceAgent" = ["serviceAccount:${module.common-project.service_accounts.robots.dlp}"]
   }
   # this only works because the service account module uses a static output
   iam_cmn_additive = {

blueprints/data-solutions/data-platform-minimal/README.md

@@ -229,7 +229,7 @@ module "data-platform" {
   prefix = "myprefix"
 }
 
-# tftest modules=23 resources=138
+# tftest modules=23 resources=139
 ```
 
 ## Customizations