highbond_role_permissions_assignment (Resource)

Schema

Required

role_id

String

Unique identifier for the role

Optional

force_updates	Boolean	Allows overriding top-level 'create_only' option.
id	String	The ID of this resource.
permissions	Block List	List of role permission information
Nested Schema for `permissions` Optional asset_type Block List Object with key of asset type ID and value of a permission mapping. Use key * to associate permissions with all asset types. Can only be on roleType of user Nested Schema for `permissions.asset_type` Required id String The value of Asset Type ID Optional create_asset Boolean Create Asset Premission delete_asset Boolean Delete Asset Permission read_asset_section_0 Boolean Read Asset Section 0 Permission read_asset_section_1 Boolean Read Asset Section 1 Permission read_asset_section_10 Boolean Read Asset Section 10 Permission read_asset_section_11 Boolean Read Asset Section 11 Permission read_asset_section_12 Boolean Read Asset Section 12 Permission read_asset_section_13 Boolean Read Asset Section 13 Permission read_asset_section_14 Boolean Read Asset Section 14 Permission read_asset_section_15 Boolean Read Asset Section 15 Permission read_asset_section_16 Boolean Read Asset Section 16 Permission read_asset_section_17 Boolean Read Asset Section 17 Permission read_asset_section_18 Boolean Read Asset Section 18 Permission read_asset_section_19 Boolean Read Asset Section 19 Permission read_asset_section_2 Boolean Read Asset Section 2 Permission read_asset_section_3 Boolean Read Asset Section 3 Permission read_asset_section_4 Boolean Read Asset Section 4 Permission read_asset_section_5 Boolean Read Asset Section 5 Permission read_asset_section_6 Boolean Read Asset Section 6 Permission read_asset_section_7 Boolean Read Asset Section 7 Permission read_asset_section_8 Boolean Read Asset Section 8 Permission read_asset_section_9 Boolean Read Asset Section 9 Permission read_audit_trail Boolean Read Audit Trail Permission read_audit_trail_details Boolean Read Audit Trail Details Permission update_asset_section_0 Boolean Update Asset Section 0 Permission update_asset_section_1 Boolean Update Asset Section 1 Permission update_asset_section_10 Boolean Update Asset Section 10 Permission update_asset_section_11 Boolean Update Asset Section 11 Permission update_asset_section_12 Boolean Update Asset Section 12 Permission update_asset_section_13 Boolean Update Asset Section 13 Permission update_asset_section_14 Boolean Update Asset Section 14 Permission update_asset_section_15 Boolean Update Asset Section 15 Permission update_asset_section_16 Boolean Update Asset Section 16 Permission update_asset_section_17 Boolean Update Asset Section 17 Permission update_asset_section_18 Boolean Update Asset Section 18 Permission update_asset_section_19 Boolean Update Asset Section 19 Permission update_asset_section_2 Boolean Update Asset Section 2 Permission update_asset_section_3 Boolean Update Asset Section 3 Permission update_asset_section_4 Boolean Update Asset Section 4 Permission update_asset_section_5 Boolean Update Asset Section 5 Permission update_asset_section_6 Boolean Update Asset Section 6 Permission update_asset_section_7 Boolean Update Asset Section 7 Permission update_asset_section_8 Boolean Update Asset Section 8 Permission update_asset_section_9 Boolean Update Asset Section 9 Permission organization Block List Object with key of organization ID and value of permission mapping. Can only be on roleType of platform Nested Schema for `permissions.organization` Required id String The ID of the organization Optional manage_asset_types Boolean Manage Asset Types Permission manage_compliance_regulation_locked_field_and_disclaimers Boolean Manage Compliance Regulation Locked Field and Disclaimers Permission manage_roles Boolean Manage roles Permission manage_workflows Boolean Manage Workflows Permission read_audit_trail Boolean Read Audit Trail Permission read_audit_trail_details Boolean Read Audit Trail Details Permission use_bulk_importer Boolean Use Bulk Importer Permission

Read-Only

role_type

String

Type of Role, defined on creation, cannot be updated

Example Usage

// Associate permissions to a role. Permissions for an organization
resource "highbond_role_permissions_assignment" "userorganization" {
  role_id       = highbond_role.main.id
  force_updates = true // Create only with force update changes
  permissions {
    organization {
      id                                                        = "1001020"
      use_bulk_importer                                         = false
      manage_asset_types                                        = false
      manage_workflows                                          = false
      manage_roles                                              = false
      read_audit_trail                                          = true
      read_audit_trail_details                                  = true
      manage_compliance_regulation_locked_field_and_disclaimers = true
    }
  }
}

// Associate permissions to a role. Permissions for a single asset type
resource "highbond_role_permissions_assignment" "mai2n" {
  role_id = highbond_role.user.id
  permissions {
    asset_type {
      id                       = highbond_asset_type.main.id
      create_asset             = true
      delete_asset             = true
      read_asset_section_0     = true
      read_asset_section_1     = true
      read_asset_section_2     = true
      read_asset_section_3     = true
      read_asset_section_4     = true
      read_asset_section_5     = true
      read_asset_section_6     = true
      read_asset_section_7     = true
      read_asset_section_8     = true
      read_asset_section_9     = true
      update_asset_section_0   = true
      update_asset_section_1   = true
      update_asset_section_2   = true
      update_asset_section_3   = true
      update_asset_section_4   = true
      update_asset_section_5   = true
      update_asset_section_6   = true
      update_asset_section_7   = true
      update_asset_section_8   = true
      update_asset_section_9   = true
      read_asset_section_10    = true
      read_asset_section_11    = true
      read_asset_section_12    = true
      read_asset_section_13    = true
      read_asset_section_14    = true
      read_asset_section_15    = true
      read_asset_section_16    = true
      read_asset_section_17    = true
      read_asset_section_18    = true
      read_asset_section_19    = true
      update_asset_section_10  = true
      update_asset_section_11  = true
      update_asset_section_12  = true
      update_asset_section_13  = true
      update_asset_section_14  = true
      update_asset_section_15  = true
      update_asset_section_16  = true
      update_asset_section_17  = true
      update_asset_section_18  = true
      update_asset_section_19  = true
      read_audit_trail         = true
      read_audit_trail_details = true
    }
  }
}

// Associate permissions to a role. Permissions for all asset_type. Can be used as *
resource "highbond_role_permissions_assignment" "assetall" {
  role_id = highbond_role.user.id
  permissions {
    asset_type {
      id                       = "*"
      create_asset             = true
      delete_asset             = true
      read_asset_section_0     = true
      read_asset_section_1     = true
      read_asset_section_2     = true
      read_asset_section_3     = true
      read_asset_section_4     = true
      read_asset_section_5     = true
      read_asset_section_6     = true
      read_asset_section_7     = true
      read_asset_section_8     = true
      read_asset_section_9     = true
      update_asset_section_0   = true
      update_asset_section_1   = true
      update_asset_section_2   = true
      update_asset_section_3   = true
      update_asset_section_4   = true
      update_asset_section_5   = true
      update_asset_section_6   = true
      update_asset_section_7   = true
      update_asset_section_8   = true
      update_asset_section_9   = true
      read_asset_section_10    = true
      read_asset_section_11    = true
      read_asset_section_12    = true
      read_asset_section_13    = true
      read_asset_section_14    = true
      read_asset_section_15    = true
      read_asset_section_16    = true
      read_asset_section_17    = true
      read_asset_section_18    = true
      read_asset_section_19    = true
      update_asset_section_10  = true
      update_asset_section_11  = true
      update_asset_section_12  = true
      update_asset_section_13  = true
      update_asset_section_14  = true
      update_asset_section_15  = true
      update_asset_section_16  = true
      update_asset_section_17  = true
      update_asset_section_18  = true
      update_asset_section_19  = true
      read_audit_trail         = true
      read_audit_trail_details = true
    }
  }
}


// Roles with role_type user and asset_type id containing assettypeID and workflowStatusID
resource "highbond_role_permissions_assignment" "assettypeworkflowstatus" {
  role_id = highbond_role.main.id
  permissions {
    asset_type {
      id                       = format("%s%s%s", highbond_asset_type.main2.id, "$", highbond_workflow_status.main.id)
      read_asset_section_0     = true
      read_asset_section_1     = true
      read_asset_section_2     = true
      read_asset_section_3     = true
      read_asset_section_4     = true
      read_asset_section_5     = true
      read_asset_section_6     = true
      read_asset_section_7     = true
      read_asset_section_8     = true
      read_asset_section_9     = true
      update_asset_section_0   = true
      update_asset_section_1   = true
      update_asset_section_2   = true
      update_asset_section_3   = true
      update_asset_section_4   = true
      update_asset_section_5   = true
      update_asset_section_6   = true
      update_asset_section_7   = true
      update_asset_section_8   = true
      update_asset_section_9   = true
      read_asset_section_10    = true
      read_asset_section_11    = true
      read_asset_section_12    = true
      read_asset_section_13    = true
      read_asset_section_14    = true
      read_asset_section_15    = true
      read_asset_section_16    = true
      read_asset_section_17    = true
      read_asset_section_18    = true
      read_asset_section_19    = true
      update_asset_section_10  = true
      update_asset_section_11  = true
      update_asset_section_12  = true
      update_asset_section_13  = true
      update_asset_section_14  = true
      update_asset_section_15  = true
      update_asset_section_16  = true
      update_asset_section_17  = true
      update_asset_section_18  = true
      update_asset_section_19  = true
      read_audit_trail         = true
      read_audit_trail_details = true
    }
  }
}