[RS] OneLake Data Access Security Resource #521
Description
📝 Description
When I am automating and managing data analytics infrastructure using Microsoft Fabric across multiple environments, I want to get details of OneLake Data Access as code in Terraform.
To consistently and securely manage OneLake Data Access as code in Terraform while automating and managing data analytics infrastructure using Microsoft Fabric across multiple environments
🔬 Details / References
- Resource Name:
fabric_onelake_data_access - API documentation:
- Create Or Update Data Access Roles: https://learn.microsoft.com/en-us/rest/api/fabric/core/onelake-data-access-security/create-or-update-data-access-roles?tabs=HTTP
- Estimated complexity/effort: moderate
- Related resources/data-sources:
🚧 Potential Terraform Configuration / Desired Solution
Update OneLake Data Access Security Item
resource "fabric_onelake_data_access" "example" {
item_id = "00000000-0000-0000-0000-000000000000"
workspace_id = "00000000-0000-0000-0000-000000000000"
value = [
"name": "default_role_1",
"decisionRules": [
{
"effect": "Permit",
"permission": [
{
"attributeName": "Path",
"attributeValueIncludedIn": [
"*"
]
},
{
"attributeName": "Action",
"attributeValueIncludedIn": [
"Read"
]
}
]
}
],
"members": {
"fabricItemMembers": [
{
"itemAccess": [
"ReadAll"
],
"sourcePath": "cfafbeb1-8037-4d0c-896e-a46fb27ff222/25bac802-080d-4f73-8a42-1b406eb1fceb"
}
]
}
]
}Create or Update OneLake Data Access Security Item
resource "fabric_onelake_data_access" "example" {
display_name = "00000000-0000-0000-0000-000000000000"
workspace_id = "00000000-0000-0000-0000-000000000000"
value = [
"name": "default_role_1",
"decisionRules": [
{
"effect": "Permit",
"permission": [
{
"attributeName": "Path",
"attributeValueIncludedIn": [
"*"
]
},
{
"attributeName": "Action",
"attributeValueIncludedIn": [
"Read"
]
}
]
}
],
"members": {
"fabricItemMembers": [
{
"itemAccess": [
"ReadAll"
],
"sourcePath": "cfafbeb1-8037-4d0c-896e-a46fb27ff222/25bac802-080d-4f73-8a42-1b406eb1fceb"
}
]
}
]
}📎 Additional context
No response
☑️ Acceptance Criteria
No response
✅ Definition of Done
- Data Transfer Objects (DTOs)
- Resource Implementation
- Resource Added to Provider
- Unit Tests for Happy path
- Unit Tests for Error path
- Acceptance Tests
- Example in the ./examples folder
- Schema documentation in code
- Updated auto-generated provider docs with
task docs
🔰 Code of Conduct
- I agree to follow this project's Code of Conduct.