Skip to content

Commit

Permalink
Remove AD Group for Guest (SumoLogic#80)
Browse files Browse the repository at this point in the history
* Update Guest-role.tf

* Update Guest-role.tf

Co-authored-by: Marcin Suterski <msuterski@users.noreply.github.com>
  • Loading branch information
mlclmj and msuterski authored Sep 4, 2020
1 parent d780c61 commit 075cb62
Showing 1 changed file with 2 additions and 6 deletions.
8 changes: 2 additions & 6 deletions terraform/Guest-role.tf
Original file line number Diff line number Diff line change
@@ -1,12 +1,8 @@
# The guest role is a special one which users are added to by default when their accounts are first provisioned.
# This is not one that we want to manage through AD and it's scope should be limited.
resource "sumologic_role" "Guest" {
name = "${var.role_prefix[var.env]}-Guest"
description = "Default Guest User"
filter_predicate = "_sourceCategory=guest"
capabilities = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
}

resource "ad_group_to_ou" "ad-group-Guest" {
ou_distinguished_name = var.ad_oudn
group_name = sumologic_role.Guest.name
description = "AD Group for Sumo Logic RBAC group ${sumologic_role.Guest.name}"
}

0 comments on commit 075cb62

Please sign in to comment.