gcp.iam.binding.create

Grant project-level IAM roles to a principal

Grants IAM role(s) to a principal on a GCP project. Idempotent — the underlying LTIP driver handles the etag retry loop.

Inputs:

• connection_uuid: Cloud connection UUID (required)
• member: IAM principal, e.g. "serviceAccount:foo@bar.iam.gserviceaccount.com" (required)
• roles: List of role strings (required)
• project_id: Explicit project_id (optional; defaults to connection)

Outputs:

• member
• roles
• project_id

Overview

Property	Value
Workflow type	Atomic
Library	Base-gcp
Version	1.0

Input Schema

Field	Type	Required	Default	Description
connection_uuid	uuid	Yes	—	—
member	string	Yes	—	—
roles	json	Yes	—	—
project_id	string	No	—	—

Output Schema

Field	Type	Required	Default	Description
member	string	No	—	—
project_id	string	No	—	—
roles	json	No	—	—
connection_uuid	uuid	No	—	—
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
failed_step	string	No	—	—
failed_layer	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "gcp.iam.binding.create",
  "initial_data": {
    "connection_uuid": "value",
    "member": "value",
    "roles": "value"
  }
}