raff_member

_{Updated May 10, 2026} Manages an account-level member. Use exactly one of email, target_user_id, or api_key_id to identify the member at create time — they are mutually exclusive (ExactlyOneOf is enforced at plan time). Inviting by email creates a pending member that becomes active when the recipient accepts the invitation.

Example — invite by email

resource "raff_member" "alice" {
  email   = "alice@example.com"
  role_id = data.raff_roles.account.roles[0].id    # e.g. "Admin"
}

Example — add an existing user

resource "raff_member" "bob" {
  target_user_id = "<bob-user-uuid>"
  role_id        = "<operator-role-uuid>"
}

Example — grant CI key account-level access

resource "raff_member" "ci" {
  api_key_id = raff_api_key.ci.id
  role_id    = raff_role.vm_operator.id
}

Argument reference

Required

Argument	Type	Description
`role_id`	string (UUID)	Role to assign. Must be account-scoped

One of (mutually exclusive)

Argument	Type	Description
`email`	string	Email to invite. Creates a pending member. ForceNew
`target_user_id`	string (UUID)	Existing account user. ForceNew
`api_key_id`	string (UUID)	API key to grant account access. ForceNew

Optional

Argument	Type	Description
`status`	string	`active` or `suspended`. `pending` is set automatically for invited members until they accept

Attribute reference (computed)

Attribute	Description
`id`	Member UUID
`role_name`	Display name of the assigned role
`created_at`	RFC3339 timestamp

Lifecycle

Operation	Behavior
`terraform apply` (create)	Adds (or invites) the member
Change `role_id`, `status`	In-place update
Change `email`, `target_user_id`, `api_key_id`	Replacement — destroy + recreate
`terraform destroy`	Removes the member from the account

Importing existing members

terraform import raff_member.alice <member-uuid>

Permissions

The API key needs members.manage at the account level. The system role Account Admin grants this.

Data sources

# Single account member by UUID
data "raff_member" "alice" {
  id = raff_member.alice.id
}

# All account members
data "raff_members" "all" {}

raff_project_member

Project-scoped membership.

raff_role

Roles assigned via role_id.

CLI: raff member

Imperative equivalent.

Getting Started

Guides

REST API

CLI

Terraform

raff_member

Example — invite by email

Example — add an existing user

Example — grant CI key account-level access

Argument reference

Required

One of (mutually exclusive)

Optional

Attribute reference (computed)

Lifecycle

Importing existing members

Permissions

Data sources

raff_project_member

raff_role

CLI: raff member

​Example — invite by email

​Example — add an existing user

​Example — grant CI key account-level access

​Argument reference

​Required

​One of (mutually exclusive)

​Optional

​Attribute reference (computed)

​Lifecycle

​Importing existing members

​Permissions

​Data sources

​Related

raff_project_member

raff_role

CLI: raff member

Example — invite by email

Example — add an existing user

Example — grant CI key account-level access

Argument reference

Required

One of (mutually exclusive)

Optional

Attribute reference (computed)

Lifecycle

Importing existing members

Permissions

Data sources

Related