add missing role for initial user (#1118)

2023-01-28 09:41:22 +01:00
parent 926541f77b
commit 7b96ed429c
1 changed files with 4 additions and 3 deletions
--- a/fast/stages/00-bootstrap/organization.tf
+++ b/fast/stages/00-bootstrap/organization.tf
@@ -23,9 +23,10 @@ locals {
    "roles/browser" = [
      "domain:${var.organization.domain}"
    ]
-    "roles/logging.admin" = [
-      module.automation-tf-bootstrap-sa.iam_email
-    ]
+    "roles/logging.admin" = concat(
+      [module.automation-tf-bootstrap-sa.iam_email],
+      local._iam_bootstrap_user
+    )
    "roles/owner" = local._iam_bootstrap_user
    "roles/resourcemanager.folderAdmin" = [
      module.automation-tf-resman-sa.iam_email