Skip to content

Support Application of Partial Permissions to SCIM-created dbt Groups #539

@trouze

Description

@trouze

Is your feature request related to a problem? Please describe.

An extension of #523 has been identified in working with the requesting customer to further their SCIM setup. The use of SCIM necessitated a new resource to apply permissions defined in terraform to a group, by definition due to using SCIM, created outside of terraform.

It's desired that we support the application of partial permissions. The requesting customer operates in a federated model common to organizations with a platform team and decentralized analytics functions. In practice, platform teams apply default permissions while allowing each team to separately apply additional grants as needed.

Describe the solution you'd like

I think we'll follow the model laid out for the existing regular group and partial group permission resources, creating a dbtcloud_group_scim_partial_permissions resource in a matching implementation pattern.

Describe alternatives you've considered

Not implementing this - it's possible it's a niche requirement, but implementing it should require very little thought to backwards compatibility and should closely follow the implementation for the existing dbtcloud_group_partial_permissions resource.

Additional context

I believe I'll find the time to make a contribution for this so assigning to myself for now.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions