Skip to content

Commit 27d38e1

Browse files
committed
fix: replaced permission_assignment with group_member
1 parent 6308195 commit 27d38e1

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

iam.tf

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,10 @@ locals {
2121
)
2222
}
2323

24+
data "databricks_group" "admin" {
25+
display_name = "admins"
26+
}
27+
2428
resource "databricks_group" "this" {
2529
for_each = toset(keys(var.iam))
2630

@@ -49,11 +53,11 @@ resource "databricks_service_principal" "this" {
4953
lifecycle { ignore_changes = [external_id, allow_cluster_create, allow_instance_pool_create, databricks_sql_access, workspace_access] }
5054
}
5155

52-
resource "databricks_permission_assignment" "this" {
56+
resource "databricks_group_member" "admin" {
5357
for_each = merge(local.admin_user_map, local.admin_sp_map)
5458

55-
principal_id = startswith(each.key, "user") ? databricks_user.this[each.value].id : databricks_service_principal.this[each.value].id
56-
permissions = ["ADMIN"]
59+
group_id = data.databricks_group.admin.id
60+
member_id = startswith(each.key, "user") ? databricks_user.this[each.value].id : databricks_service_principal.this[each.value].id
5761
}
5862

5963
resource "databricks_group_member" "this" {

0 commit comments

Comments
 (0)