Add support for user signup/deletion settings in google_identity_platform_tenant

[mkohei]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to a user, that user is claiming responsibility for the issue.
• Customers working with a Google Technical Account Manager or Customer Engineer can ask them to reach out internally to expedite investigation and resolution of this issue.

Description

Currently, it is not possible to configure the following settings on a per-tenant basis using the google_identity_platform_tenant resource:

• client.permissions.disabledUserSignup: When set to true, end users cannot sign up for a new account on the associated project through any API methods.
• client.permissions.disabledUserDeletion: When set to true, end users cannot delete their account on the associated project through any API methods.

These configurations are not available via the console or Terraform.

New or Affected Resource(s)

• google_identity_platform_tenant

Potential Terraform Configuration

resource "google_identity_platform_tenant" "default" {
  tenant_id    = "your-tenant-id"
  display_name = "Your Tenant"

  client {
    permissions {
      disabled_user_signup   = true
      disabled_user_deletion = true
    }
  }

References

• API Documentation:
  • GET Method: Get Tenant
  • PATCH Method: Patch Tenant