re-add org policy admin role
This commit is contained in:
parent
2259f3f44c
commit
b9804d895b
|
@ -63,7 +63,11 @@ module "organization" {
|
|||
"roles/compute.xpnAdmin" = [
|
||||
module.branch-network-sa.iam_email
|
||||
]
|
||||
"roles/orgpolicy.policyAdmin" = local.branch_teams_pf_sa_iam_emails
|
||||
# TODO: implement tag-based conditions on this org role
|
||||
"roles/orgpolicy.policyAdmin" = concat(
|
||||
local.branch_teams_pf_sa_iam_emails,
|
||||
local.branch_dataplatform_sa_iam_emails,
|
||||
)
|
||||
},
|
||||
local.billing_org ? {
|
||||
"roles/billing.costsManager" = local.branch_teams_pf_sa_iam_emails
|
||||
|
|
Loading…
Reference in New Issue