This commit is contained in:
@@ -506,67 +506,6 @@ resource "cloudflare_zero_trust_access_group" "latest_os_version_requirements_ru
|
||||
]
|
||||
}
|
||||
|
||||
# Composite Rule Groups
|
||||
resource "cloudflare_zero_trust_access_group" "employees_rule_group" {
|
||||
account_id = local.cloudflare_account_id
|
||||
name = "GL_Users_Employees"
|
||||
|
||||
include = [
|
||||
for group_key in ["it_admin", "sales", "sales_engineering", "infrastructure_admin"] : {
|
||||
group = {
|
||||
id = cloudflare_zero_trust_access_group.saml_groups[group_key].id
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
#
|
||||
resource "cloudflare_zero_trust_access_group" "sales_team_rule_group" {
|
||||
account_id = local.cloudflare_account_id
|
||||
name = "GL_Users_Sales Team"
|
||||
|
||||
include = [
|
||||
for group_key in ["sales", "sales_engineering"] : {
|
||||
group = {
|
||||
id = cloudflare_zero_trust_access_group.saml_groups[group_key].id
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
#
|
||||
resource "cloudflare_zero_trust_access_group" "admins_rule_group" {
|
||||
account_id = local.cloudflare_account_id
|
||||
name = "GL_Users_Administrators"
|
||||
|
||||
include = [
|
||||
for group_key in ["it_admin", "infrastructure_admin"] : {
|
||||
group = {
|
||||
id = cloudflare_zero_trust_access_group.saml_groups[group_key].id
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
#
|
||||
resource "cloudflare_zero_trust_access_group" "contractors_rule_group" {
|
||||
account_id = local.cloudflare_account_id
|
||||
name = "GL_Users_Contractors Extended"
|
||||
|
||||
include = [
|
||||
{
|
||||
group = {
|
||||
id = cloudflare_zero_trust_access_group.saml_groups["contractors"].id
|
||||
}
|
||||
},
|
||||
{
|
||||
email_domain = {
|
||||
domain = var.cloudflare_email_domain
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
#==========================================================
|
||||
# Access Policies
|
||||
#==========================================================
|
||||
|
||||
Reference in New Issue
Block a user