Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.rafftechnologies.com/llms.txt

Use this file to discover all available pages before exploring further.

Updated May 10, 2026 Manages an account-level member. Use exactly one of email, target_user_id, or api_key_id to identify the member at create time — they are mutually exclusive (ExactlyOneOf is enforced at plan time). Inviting by email creates a pending member that becomes active when the recipient accepts the invitation.

Example — invite by email

resource "raff_member" "alice" {
  email   = "alice@example.com"
  role_id = data.raff_roles.account.roles[0].id    # e.g. "Admin"
}

Example — add an existing user

resource "raff_member" "bob" {
  target_user_id = "<bob-user-uuid>"
  role_id        = "<operator-role-uuid>"
}

Example — grant CI key account-level access

resource "raff_member" "ci" {
  api_key_id = raff_api_key.ci.id
  role_id    = raff_role.vm_operator.id
}

Argument reference

Required

ArgumentTypeDescription
role_idstring (UUID)Role to assign. Must be account-scoped

One of (mutually exclusive)

ArgumentTypeDescription
emailstringEmail to invite. Creates a pending member. ForceNew
target_user_idstring (UUID)Existing account user. ForceNew
api_key_idstring (UUID)API key to grant account access. ForceNew

Optional

ArgumentTypeDescription
statusstringactive or suspended. pending is set automatically for invited members until they accept

Attribute reference (computed)

AttributeDescription
idMember UUID
role_nameDisplay name of the assigned role
created_atRFC3339 timestamp

Lifecycle

OperationBehavior
terraform apply (create)Adds (or invites) the member
Change role_id, statusIn-place update
Change email, target_user_id, api_key_idReplacement — destroy + recreate
terraform destroyRemoves the member from the account

Importing existing members

terraform import raff_member.alice <member-uuid>

Permissions

The API key needs members.manage at the account level. The system role Account Admin grants this.

Data sources

# Single account member by UUID
data "raff_member" "alice" {
  id = raff_member.alice.id
}

# All account members
data "raff_members" "all" {}

raff_project_member

Project-scoped membership.

raff_role

Roles assigned via role_id.

CLI: raff member

Imperative equivalent.
Last modified on May 11, 2026