iam_access_group_policy with addition of account_management doesn't apply

[argeiger]

Terraform Version

Terraform v0.12.24

• provider.ibm v1.7.1

Affected Resource(s)

• ibm_iam_access_group_policy

Terraform Configuration Files

Initial apply

resource "ibm_iam_access_group" "accgrp" {
  name = "mygroup"
}

resource "ibm_iam_access_group_policy" "policy" {
  access_group_id = ibm_iam_access_group.accgrp.id
  roles           = ["Viewer"]
}

Updated apply:

resource "ibm_iam_access_group" "accgrp" {
  name = "mygroup"
}

resource "ibm_iam_access_group_policy" "policy" {
  access_group_id = ibm_iam_access_group.accgrp.id
  roles           = ["Viewer"]
  account_management = true
}

Expected Behavior

The plan shows the change:

Terraform will perform the following actions:

  # ibm_iam_access_group_policy.policy_base will be updated in-place
  ~ resource "ibm_iam_access_group_policy" "policy_base" {
        access_group_id    = "AccessGroupId-cccb0318-dbcc-46c5-9804-d106c0cfd81e"
      ~ account_management = false -> true
        id                 = "AccessGroupId-cccb0318-dbcc-46c5-9804-d106c0cfd81e/31417b19-437c-4422-9ed7-59822f1b7e81"
        roles              = [
            "Viewer",
        ]
        version            = "1-03ccb8aee41599e4ed4ee5fb26b78e2a"

        resources {
            attributes = {}
        }
    }

Plan: 0 to add, 1 to change, 0 to destroy.

and expected behavior is that the change actually apply

Actual Behavior

Terraform showed that there was a change but if you go the access group, no change was made

Steps to Reproduce

1. Apply the initial apply hcl above
2. Apply the updated apply hcl above

[hkantare]

Currently we have update support on change of roles or resource attribute..we need to extend it to account_management attribute.

We will plan in upcoming sprints

[hkantare]

closing this issue now we have support with account_management
https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/resources/iam_access_group_policy