highbond_role_permissions_assignment (Resource)

Example Usage

// Associate permissions to a role. Permissions for an organization
resource "highbond_role_permissions_assignment" "userorganization" {
  role_id       = highbond_role.main.id
  force_updates = true // Create only with force update changes
  permissions {
    organization {
      id                                                        = "1001020"
      use_bulk_importer                                         = false
      manage_asset_types                                        = false
      manage_workflows                                          = false
      manage_roles                                              = false
      read_audit_trail                                          = true
      read_audit_trail_details                                  = true
      manage_compliance_regulation_locked_field_and_disclaimers = true
    }
  }
}

// Associate permissions to a role. Permissions for a single asset type
resource "highbond_role_permissions_assignment" "mai2n" {
  role_id = highbond_role.user.id
  permissions {
    asset_type {
      id                       = highbond_asset_type.main.id
      create_asset             = true
      delete_asset             = true
      read_asset_section_0     = true
      read_asset_section_1     = true
      read_asset_section_2     = true
      read_asset_section_3     = true
      read_asset_section_4     = true
      read_asset_section_5     = true
      read_asset_section_6     = true
      read_asset_section_7     = true
      read_asset_section_8     = true
      read_asset_section_9     = true
      update_asset_section_0   = true
      update_asset_section_1   = true
      update_asset_section_2   = true
      update_asset_section_3   = true
      update_asset_section_4   = true
      update_asset_section_5   = true
      update_asset_section_6   = true
      update_asset_section_7   = true
      update_asset_section_8   = true
      update_asset_section_9   = true
      read_asset_section_10    = true
      read_asset_section_11    = true
      read_asset_section_12    = true
      read_asset_section_13    = true
      read_asset_section_14    = true
      read_asset_section_15    = true
      read_asset_section_16    = true
      read_asset_section_17    = true
      read_asset_section_18    = true
      read_asset_section_19    = true
      update_asset_section_10  = true
      update_asset_section_11  = true
      update_asset_section_12  = true
      update_asset_section_13  = true
      update_asset_section_14  = true
      update_asset_section_15  = true
      update_asset_section_16  = true
      update_asset_section_17  = true
      update_asset_section_18  = true
      update_asset_section_19  = true
      read_audit_trail         = true
      read_audit_trail_details = true
    }
  }
}

// Associate permissions to a role. Permissions for all asset_type. Can be used as *
resource "highbond_role_permissions_assignment" "assetall" {
  role_id = highbond_role.user.id
  permissions {
    asset_type {
      id                       = "*"
      create_asset             = true
      delete_asset             = true
      read_asset_section_0     = true
      read_asset_section_1     = true
      read_asset_section_2     = true
      read_asset_section_3     = true
      read_asset_section_4     = true
      read_asset_section_5     = true
      read_asset_section_6     = true
      read_asset_section_7     = true
      read_asset_section_8     = true
      read_asset_section_9     = true
      update_asset_section_0   = true
      update_asset_section_1   = true
      update_asset_section_2   = true
      update_asset_section_3   = true
      update_asset_section_4   = true
      update_asset_section_5   = true
      update_asset_section_6   = true
      update_asset_section_7   = true
      update_asset_section_8   = true
      update_asset_section_9   = true
      read_asset_section_10    = true
      read_asset_section_11    = true
      read_asset_section_12    = true
      read_asset_section_13    = true
      read_asset_section_14    = true
      read_asset_section_15    = true
      read_asset_section_16    = true
      read_asset_section_17    = true
      read_asset_section_18    = true
      read_asset_section_19    = true
      update_asset_section_10  = true
      update_asset_section_11  = true
      update_asset_section_12  = true
      update_asset_section_13  = true
      update_asset_section_14  = true
      update_asset_section_15  = true
      update_asset_section_16  = true
      update_asset_section_17  = true
      update_asset_section_18  = true
      update_asset_section_19  = true
      read_audit_trail         = true
      read_audit_trail_details = true
    }
  }
}


// Roles with role_type user and asset_type id containing assettypeID and workflowStatusID
resource "highbond_role_permissions_assignment" "assettypeworkflowstatus" {
  role_id = highbond_role.main.id
  permissions {
    asset_type {
      id                       = format("%s%s%s", highbond_asset_type.main2.id, "$", highbond_workflow_status.main.id)
      read_asset_section_0     = true
      read_asset_section_1     = true
      read_asset_section_2     = true
      read_asset_section_3     = true
      read_asset_section_4     = true
      read_asset_section_5     = true
      read_asset_section_6     = true
      read_asset_section_7     = true
      read_asset_section_8     = true
      read_asset_section_9     = true
      update_asset_section_0   = true
      update_asset_section_1   = true
      update_asset_section_2   = true
      update_asset_section_3   = true
      update_asset_section_4   = true
      update_asset_section_5   = true
      update_asset_section_6   = true
      update_asset_section_7   = true
      update_asset_section_8   = true
      update_asset_section_9   = true
      read_asset_section_10    = true
      read_asset_section_11    = true
      read_asset_section_12    = true
      read_asset_section_13    = true
      read_asset_section_14    = true
      read_asset_section_15    = true
      read_asset_section_16    = true
      read_asset_section_17    = true
      read_asset_section_18    = true
      read_asset_section_19    = true
      update_asset_section_10  = true
      update_asset_section_11  = true
      update_asset_section_12  = true
      update_asset_section_13  = true
      update_asset_section_14  = true
      update_asset_section_15  = true
      update_asset_section_16  = true
      update_asset_section_17  = true
      update_asset_section_18  = true
      update_asset_section_19  = true
      read_audit_trail         = true
      read_audit_trail_details = true
    }
  }
}

Schema

Required

• role_id (String) Unique identifier for the role

Optional

• force_updates (Boolean) Allows overriding top-level 'create_only' option.
• permissions (Block List) List of role permission information (see below for nested schema)

Read-Only

• id (String) The ID of this resource.
• role_type (String) Type of Role, defined on creation, cannot be updated

Nested Schema for permissions

Optional:

• asset_type (Block List) Object with key of asset type ID and value of a permission mapping. Use key * to associate permissions with all asset types. Can only be on roleType of user (see below for nested schema)
• organization (Block List) Object with key of organization ID and value of permission mapping. Can only be on roleType of platform (see below for nested schema)

Nested Schema for permissions.asset_type

Required:

• id (String) The value of Asset Type ID

Optional:

• create_asset (Boolean) Create Asset Premission
• delete_asset (Boolean) Delete Asset Permission
• read_asset_section_0 (Boolean) Read Asset Section 0 Permission
• read_asset_section_1 (Boolean) Read Asset Section 1 Permission
• read_asset_section_10 (Boolean) Read Asset Section 10 Permission
• read_asset_section_11 (Boolean) Read Asset Section 11 Permission
• read_asset_section_12 (Boolean) Read Asset Section 12 Permission
• read_asset_section_13 (Boolean) Read Asset Section 13 Permission
• read_asset_section_14 (Boolean) Read Asset Section 14 Permission
• read_asset_section_15 (Boolean) Read Asset Section 15 Permission
• read_asset_section_16 (Boolean) Read Asset Section 16 Permission
• read_asset_section_17 (Boolean) Read Asset Section 17 Permission
• read_asset_section_18 (Boolean) Read Asset Section 18 Permission
• read_asset_section_19 (Boolean) Read Asset Section 19 Permission
• read_asset_section_2 (Boolean) Read Asset Section 2 Permission
• read_asset_section_3 (Boolean) Read Asset Section 3 Permission
• read_asset_section_4 (Boolean) Read Asset Section 4 Permission
• read_asset_section_5 (Boolean) Read Asset Section 5 Permission
• read_asset_section_6 (Boolean) Read Asset Section 6 Permission
• read_asset_section_7 (Boolean) Read Asset Section 7 Permission
• read_asset_section_8 (Boolean) Read Asset Section 8 Permission
• read_asset_section_9 (Boolean) Read Asset Section 9 Permission
• read_audit_trail (Boolean) Read Audit Trail Permission
• read_audit_trail_details (Boolean) Read Audit Trail Details Permission
• update_asset_section_0 (Boolean) Update Asset Section 0 Permission
• update_asset_section_1 (Boolean) Update Asset Section 1 Permission
• update_asset_section_10 (Boolean) Update Asset Section 10 Permission
• update_asset_section_11 (Boolean) Update Asset Section 11 Permission
• update_asset_section_12 (Boolean) Update Asset Section 12 Permission
• update_asset_section_13 (Boolean) Update Asset Section 13 Permission
• update_asset_section_14 (Boolean) Update Asset Section 14 Permission
• update_asset_section_15 (Boolean) Update Asset Section 15 Permission
• update_asset_section_16 (Boolean) Update Asset Section 16 Permission
• update_asset_section_17 (Boolean) Update Asset Section 17 Permission
• update_asset_section_18 (Boolean) Update Asset Section 18 Permission
• update_asset_section_19 (Boolean) Update Asset Section 19 Permission
• update_asset_section_2 (Boolean) Update Asset Section 2 Permission
• update_asset_section_3 (Boolean) Update Asset Section 3 Permission
• update_asset_section_4 (Boolean) Update Asset Section 4 Permission
• update_asset_section_5 (Boolean) Update Asset Section 5 Permission
• update_asset_section_6 (Boolean) Update Asset Section 6 Permission
• update_asset_section_7 (Boolean) Update Asset Section 7 Permission
• update_asset_section_8 (Boolean) Update Asset Section 8 Permission
• update_asset_section_9 (Boolean) Update Asset Section 9 Permission

Nested Schema for permissions.organization

Required:

• id (String) The ID of the organization

Optional:

• manage_asset_types (Boolean) Manage Asset Types Permission
• manage_compliance_regulation_locked_field_and_disclaimers (Boolean) Manage Compliance Regulation Locked Field and Disclaimers Permission
• manage_roles (Boolean) Manage roles Permission
• manage_workflows (Boolean) Manage Workflows Permission
• read_audit_trail (Boolean) Read Audit Trail Permission
• read_audit_trail_details (Boolean) Read Audit Trail Details Permission
• use_bulk_importer (Boolean) Use Bulk Importer Permission