Observing difference in Access list for BigQuery datasets

[shj-18]

Observing difference in Access list for BigQuery datasets

[g-awmalik]

I'm unable reproduce this issue locally. I've tried a sample configuration closely resembling what you've provided here with both v5.4.1, v5.4.2 and the latest version. None of them provision access to project Viewers as Big Query Data Viewer at the dataset level.

To further investigate this, can you:

• share the output of terraform version for the root config.
• share the complete configuration that reproduces the issue for you.

[shj-18]

Terraform version v1.0.0.

Attached the locals.tf and main.tf files

locals.txt

main.txt

[g-awmalik]

I noticed this block:

resource "google_bigquery_dataset_iam_member" "google_dataset_iam_member_read_assignment" {
  count      = local.combined_dataset_read_accounts != null ? length(local.combined_dataset_read_accounts) : 0
  project    = var.project_id
  dataset_id = module.bigquery.bigquery_dataset.dataset_id
  role       = local.combined_dataset_read_accounts[count.index].role
  member     = local.combined_dataset_read_accounts[count.index].user
}

which is primarily responsible for setting the roles/bigquery.dataViewer role on the dataset. There are no variables configs present here but depending on what you set in var.dataset_read_accounts will drive the dataset reader permissions for the accounts.

[shj-18]

Pasting the version details.

terraform {

  required_providers {

    google = {

      source  = "hashicorp/google"

      version = "~> 4.60.2"

    }


    google-beta = {

      source  = "hashicorp/google-beta"

      version = "~> 4.60.2"

    }

  }

}

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days