Updated May 10, 2026
Manages an account-level member . Use exactly one of email, target_user_id, or api_key_id to identify the member at create time — they are mutually exclusive (ExactlyOneOf is enforced at plan time). Inviting by email creates a pending member that becomes active when the recipient accepts the invitation.
Example — invite by email resource "raff_member" "alice" { email = "alice@example.com" role_id = data . raff_roles . account . roles [ 0 ] . id # e.g. "Admin" }
Example — add an existing user resource "raff_member" "bob" { target_user_id = "<bob-user-uuid>" role_id = "<operator-role-uuid>" }
Example — grant CI key account-level access resource "raff_member" "ci" { api_key_id = raff_api_key . ci . id role_id = raff_role . vm_operator . id }
Argument reference Required Argument Type Description role_idstring (UUID) Role to assign. Must be account-scoped
One of (mutually exclusive) Argument Type Description emailstring Email to invite. Creates a pending member. ForceNew target_user_idstring (UUID) Existing account user. ForceNew api_key_idstring (UUID) API key to grant account access. ForceNew
Optional Argument Type Description statusstring active or suspended. pending is set automatically for invited members until they accept
Attribute reference (computed) Attribute Description idMember UUID role_nameDisplay name of the assigned role created_atRFC3339 timestamp
Lifecycle Operation Behavior terraform apply (create)Adds (or invites) the member Change role_id, status In-place update Change email, target_user_id, api_key_id Replacement — destroy + recreateterraform destroyRemoves the member from the account
Importing existing members terraform import raff_member.alice < member-uui d >
Permissions The API key needs members.manage at the account level. The system role Account Admin grants this.
Data sources # Single account member by UUID data "raff_member" "alice" { id = raff_member . alice . id } # All account members data "raff_members" "all" {}
raff_project_member Project-scoped membership.
raff_role Roles assigned via role_id.
CLI: raff member Imperative equivalent.
Last modified on May 11, 2026
