added new resources and datasources

docs/data-sources/azure_external_datasource.md

@@ -0,0 +1,67 @@
+-> Functionality is limited to Azure SQL Database only for RDBMS or BLOB_STORAGE type
+
+# mssql_azure_external_datasource (Data Source)
+
+The `mssql_azure_external_datasource` obtains information about external data source on an Azure SQL Datatbase.
+
+
+## Example Usage
+
+```hcl
+data "mssql_azure_external_datasource" "rdbms" {
+  server {
+    host = "example-sql-server.database.windows.net"
+    azure_login {
+      tenant_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_secret = "terriblySecretSecret"
+    }
+  }
+  database             = "example_db"
+  data_source_name     = "example_name"
+}
+```
+## Argument Reference
+
+The following arguments are supported:
+
+* `server` - (Required) Server and login details for the SQL Server. The attributes supported in the `server` block is detailed below.
+* `database` - (Required) The name of the database to operate on.
+* `data_source_name` - (Required) The external data source name.
+
+The `server` block supports the following arguments:
+
+* `host` - (Required) The host of the SQL Server. Changing this forces a new resource to be created.
+* `port` - (Optional) The port of the SQL Server. Defaults to `1433`. Changing this forces a new resource to be created.
+* `login` - (Optional) SQL Server login for managing the database resources. The attributes supported in the `login` block is detailed below.
+* `azure_login` - (Optional) Azure AD login for managing the database resources. The attributes supported in the `azure_login` block is detailed below.
+* `azuread_default_chain_auth` - (Optional) Use a chain of strategies for authenticating when managing the database resources. This auth strategy is very similar to how the Azure CLI authenticates. For more information, see [DefaultAzureCredential](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication#configure-defaultazurecredential). This block has no attributes.
+* `azuread_managed_identity_auth` - (Optional) Use a managed identity for authenticating when managing the database resources. This is mainly useful for specifying a user-assigned managed identity. The attributes supported in the `azuread_managed_identity_auth` block is detailed below.
+
+The `login` block supports the following arguments:
+
+* `username` - (Required) The username of the SQL Server login. Can also be sourced from the `MSSQL_USERNAME` environment variable.
+* `password` - (Required) The password of the SQL Server login. Can also be sourced from the `MSSQL_PASSWORD` environment variable.
+
+The `azure_login` block supports the following arguments:
+
+* `tenant_id` - (Required) The tenant ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_TENANT_ID` environment variable.
+* `client_id` - (Required) The client ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_ID` environment variable.
+* `client_secret` - (Required) The client secret of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_SECRET` environment variable.
+
+The `azuread_managed_identity_auth` block supports the following arguments:
+
+* `user_id` - (Optional) Id of a user-assigned managed identity to assume. Omitting this property instructs the provider to assume a system-assigned managed identity.
+
+-> Only one of `login`, `azure_login`, `azuread_default_chain_auth` and `azuread_managed_identity_auth` can be specified.
+
+## Attribute Reference
+
+The following attributes are exported:
+
+* `data_source_id` - The id of this data source name.
+* `credential_name` - The name of the database scoped credential.
+* `credential_id` - The id of the database scoped credential.
+* `location` - The connectivity protocol and path to the external data source.
+* `type` - The `type` of a database-scoped credential for authenticating to the external data source.
+* `remote_database_name` - The name of the remote database on the server provided using `location`.

docs/data-sources/database_credential.md

@@ -0,0 +1,63 @@
+# mssql_database_credential (Data Source)
+
+The `mssql_database_credential` obtains information about user permissions on a SQL Server.
+
+## Example Usage
+
+```hcl
+data "mssql_database_credential" "example" {
+  server {
+    host = "example-sql-server.database.windows.net"
+    azure_login {
+      tenant_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_secret = "xxxxxxxxxxxxxxxxxxxxxx"
+    }
+  }
+  database  = "example"
+  credential_name = "example-credential-name"
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `server` - (Required) Server and login details for the SQL Server. The attributes supported in the `server` block is detailed below.
+* `database` - (Required) The database.
+* `credential_name` - (Required) The database scoped credential name.
+
+The `server` block supports the following arguments:
+
+* `host` - (Required) The host of the SQL Server. Changing this forces a new resource to be created.
+* `port` - (Optional) The port of the SQL Server. Defaults to `1433`. Changing this forces a new resource to be created.
+* `login` - (Optional) SQL Server login for managing the database resources. The attributes supported in the `login` block is detailed below.
+* `azure_login` - (Optional) Azure AD login for managing the database resources. The attributes supported in the `azure_login` block is detailed below.
+* `azuread_default_chain_auth` - (Optional) Use a chain of strategies for authenticating when managing the database resources. This auth strategy is very similar to how the Azure CLI authenticates. For more information, see [DefaultAzureCredential](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication#configure-defaultazurecredential). This block has no attributes.
+* `azuread_managed_identity_auth` - (Optional) Use a managed identity for authenticating when managing the database resources. This is mainly useful for specifying a user-assigned managed identity. The attributes supported in the `azuread_managed_identity_auth` block is detailed below.
+
+The `login` block supports the following arguments:
+
+* `username` - (Required) The username of the SQL Server login. Can also be sourced from the `MSSQL_USERNAME` environment variable.
+* `password` - (Required) The password of the SQL Server login. Can also be sourced from the `MSSQL_PASSWORD` environment variable.
+
+The `azure_login` block supports the following arguments:
+
+* `tenant_id` - (Required) The tenant ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_TENANT_ID` environment variable.
+* `client_id` - (Required) The client ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_ID` environment variable.
+* `client_secret` - (Required) The client secret of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_SECRET` environment variable.
+
+The `azuread_managed_identity_auth` block supports the following arguments:
+
+* `user_id` - (Optional) Id of a user-assigned managed identity to assume. Omitting this property instructs the provider to assume a system-assigned managed identity.
+
+-> Only one of `login`, `azure_login`, `azuread_default_chain_auth` and `azuread_managed_identity_auth` can be specified.
+
+## Attribute Reference
+
+The following attributes are exported:
+
+* `principal_id` - The principal id of this database scoped credential.
+* `credential_id` - The id of this database scoped credential.
+* `credential_name` - The name of the database scoped credential.
+* `identity_name` - The name of the account.

docs/data-sources/database_permissions.md

@@ -0,0 +1,61 @@
+# mssql_database_permissions (Data Source)
+
+The `mssql_database_permissions` obtains information about user permissions on a SQL Server.
+
+## Example Usage
+
+```hcl
+data "mssql_database_permissions" "example" {
+  server {
+    host = "example-sql-server.database.windows.net"
+    azure_login {
+      tenant_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_secret = "xxxxxxxxxxxxxxxxxxxxxx"
+    }
+  }
+  database  = "example"
+  username = "example-username"
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `server` - (Required) Server and login details for the SQL Server. The attributes supported in the `server` block is detailed below.
+* `database` - (Required) The database.
+* `username` - (Required) The name of the database user.
+
+The `server` block supports the following arguments:
+
+* `host` - (Required) The host of the SQL Server. Changing this forces a new resource to be created.
+* `port` - (Optional) The port of the SQL Server. Defaults to `1433`. Changing this forces a new resource to be created.
+* `login` - (Optional) SQL Server login for managing the database resources. The attributes supported in the `login` block is detailed below.
+* `azure_login` - (Optional) Azure AD login for managing the database resources. The attributes supported in the `azure_login` block is detailed below.
+* `azuread_default_chain_auth` - (Optional) Use a chain of strategies for authenticating when managing the database resources. This auth strategy is very similar to how the Azure CLI authenticates. For more information, see [DefaultAzureCredential](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication#configure-defaultazurecredential). This block has no attributes.
+* `azuread_managed_identity_auth` - (Optional) Use a managed identity for authenticating when managing the database resources. This is mainly useful for specifying a user-assigned managed identity. The attributes supported in the `azuread_managed_identity_auth` block is detailed below.
+
+The `login` block supports the following arguments:
+
+* `username` - (Required) The username of the SQL Server login. Can also be sourced from the `MSSQL_USERNAME` environment variable.
+* `password` - (Required) The password of the SQL Server login. Can also be sourced from the `MSSQL_PASSWORD` environment variable.
+
+The `azure_login` block supports the following arguments:
+
+* `tenant_id` - (Required) The tenant ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_TENANT_ID` environment variable.
+* `client_id` - (Required) The client ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_ID` environment variable.
+* `client_secret` - (Required) The client secret of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_SECRET` environment variable.
+
+The `azuread_managed_identity_auth` block supports the following arguments:
+
+* `user_id` - (Optional) Id of a user-assigned managed identity to assume. Omitting this property instructs the provider to assume a system-assigned managed identity.
+
+-> Only one of `login`, `azure_login`, `azuread_default_chain_auth` and `azuread_managed_identity_auth` can be specified.
+
+## Attribute Reference
+
+The following attributes are exported:
+
+* `principal_id` - The principal id of this database role.
+* `permissions` - List of permissions to grant to the user.

docs/data-sources/database_role.md

@@ -0,0 +1,62 @@
+# mssql_database_role (Data Source)
+
+The `mssql_database_role` obtains information about database role.
+
+## Example Usage
+
+```hcl
+data "mssql_database_role" "example" {
+  server {
+    host = "example-sql-server.database.windows.net"
+    azure_login {
+      tenant_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_secret = "xxxxxxxxxxxxxxxxxxxxxx"
+    }
+  }
+  database  = "master"
+  role_name = "example-role-name"
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `server` - (Required) Server and login details for the SQL Server. The attributes supported in the `server` block is detailed below.
+* `database` - (Optional) The database. Defaults to `master`.
+* `role_name` - (Required) The name of the role.
+
+The `server` block supports the following arguments:
+
+* `host` - (Required) The host of the SQL Server. Changing this forces a new resource to be created.
+* `port` - (Optional) The port of the SQL Server. Defaults to `1433`. Changing this forces a new resource to be created.
+* `login` - (Optional) SQL Server login for managing the database resources. The attributes supported in the `login` block is detailed below.
+* `azure_login` - (Optional) Azure AD login for managing the database resources. The attributes supported in the `azure_login` block is detailed below.
+* `azuread_default_chain_auth` - (Optional) Use a chain of strategies for authenticating when managing the database resources. This auth strategy is very similar to how the Azure CLI authenticates. For more information, see [DefaultAzureCredential](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication#configure-defaultazurecredential). This block has no attributes.
+* `azuread_managed_identity_auth` - (Optional) Use a managed identity for authenticating when managing the database resources. This is mainly useful for specifying a user-assigned managed identity. The attributes supported in the `azuread_managed_identity_auth` block is detailed below.
+
+The `login` block supports the following arguments:
+
+* `username` - (Required) The username of the SQL Server login. Can also be sourced from the `MSSQL_USERNAME` environment variable.
+* `password` - (Required) The password of the SQL Server login. Can also be sourced from the `MSSQL_PASSWORD` environment variable.
+
+The `azure_login` block supports the following arguments:
+
+* `tenant_id` - (Required) The tenant ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_TENANT_ID` environment variable.
+* `client_id` - (Required) The client ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_ID` environment variable.
+* `client_secret` - (Required) The client secret of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_SECRET` environment variable.
+
+The `azuread_managed_identity_auth` block supports the following arguments:
+
+* `user_id` - (Optional) Id of a user-assigned managed identity to assume. Omitting this property instructs the provider to assume a system-assigned managed identity.
+
+-> Only one of `login`, `azure_login`, `azuread_default_chain_auth` and `azuread_managed_identity_auth` can be specified.
+
+## Attribute Reference
+
+The following attributes are exported:
+
+* `principal_id` - The principal id of this database role.
+* `owner_name` - The database user name or role name that is own the role.
+* `owning_principal_id` - The database user id or the role id that is own the role.

docs/data-sources/database_schema.md

@@ -0,0 +1,62 @@
+# mssql_database_schema (Data Source)
+
+The `mssql_database_schema` obtains information about database schema.
+
+## Example Usage
+
+```hcl
+data "mssql_database_schema" "example" {
+  server {
+    host = "example-sql-server.database.windows.net"
+    azure_login {
+      tenant_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_id     = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+      client_secret = "xxxxxxxxxxxxxxxxxxxxxx"
+    }
+  }
+  database    = "my-database"
+  schema_name = "example-schema-name"
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `server` - (Required) Server and login details for the SQL Server. The attributes supported in the `server` block is detailed below.
+* `database` - (Optional) The database. Defaults to `master`.
+* `schema_name` - (Required) The name of the schema.
+
+The `server` block supports the following arguments:
+
+* `host` - (Required) The host of the SQL Server. Changing this forces a new resource to be created.
+* `port` - (Optional) The port of the SQL Server. Defaults to `1433`. Changing this forces a new resource to be created.
+* `login` - (Optional) SQL Server login for managing the database resources. The attributes supported in the `login` block is detailed below.
+* `azure_login` - (Optional) Azure AD login for managing the database resources. The attributes supported in the `azure_login` block is detailed below.
+* `azuread_default_chain_auth` - (Optional) Use a chain of strategies for authenticating when managing the database resources. This auth strategy is very similar to how the Azure CLI authenticates. For more information, see [DefaultAzureCredential](https://github.com/Azure/azure-sdk-for-go/wiki/Set-up-Your-Environment-for-Authentication#configure-defaultazurecredential). This block has no attributes.
+* `azuread_managed_identity_auth` - (Optional) Use a managed identity for authenticating when managing the database resources. This is mainly useful for specifying a user-assigned managed identity. The attributes supported in the `azuread_managed_identity_auth` block is detailed below.
+
+The `login` block supports the following arguments:
+
+* `username` - (Required) The username of the SQL Server login. Can also be sourced from the `MSSQL_USERNAME` environment variable.
+* `password` - (Required) The password of the SQL Server login. Can also be sourced from the `MSSQL_PASSWORD` environment variable.
+
+The `azure_login` block supports the following arguments:
+
+* `tenant_id` - (Required) The tenant ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_TENANT_ID` environment variable.
+* `client_id` - (Required) The client ID of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_ID` environment variable.
+* `client_secret` - (Required) The client secret of the principal used to login to the SQL Server. Can also be sourced from the `MSSQL_CLIENT_SECRET` environment variable.
+
+The `azuread_managed_identity_auth` block supports the following arguments:
+
+* `user_id` - (Optional) Id of a user-assigned managed identity to assume. Omitting this property instructs the provider to assume a system-assigned managed identity.
+
+-> Only one of `login`, `azure_login`, `azuread_default_chain_auth` and `azuread_managed_identity_auth` can be specified.
+
+## Attribute Reference
+
+The following attributes are exported:
+
+* `schema_id` - The schema id of this database schema.
+* `owner_name` - The database user name or role name that is own the role.
+* `owning_principal_id` - The database user id or the role id that is own the role.