1. Packages
  2. dbt Cloud Provider
  3. API Docs
  4. GroupPartialPermissions
Viewing docs for dbt Cloud v1.6.1
published on Thursday, Feb 26, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-dbtcloud

dbtcloud.GroupPartialPermissions

dbtcloud logo
Viewing docs for dbt Cloud v1.6.1
published on Thursday, Feb 26, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-dbtcloud

    Provide a partial set of permissions for a group. This is different from dbt_cloud_group as it allows to have multiple resources updating the same dbt Cloud group and is useful for companies managing a single dbt Cloud Account configuration from different Terraform projects/workspaces.

    If a company uses only one Terraform project/workspace to manage all their dbt Cloud Account config, it is recommended to use dbt_cloud_group instead of dbt_cloud_group_partial_permissions.

    This is currently an experimental resource and any feedback is welcome in the GitHub repository.

    The resource currently requires a Service Token with Account Admin access.

    The current behavior of the resource is the following:

    • when using dbt_cloud_group_partial_permissions, don’t use dbt_cloud_group for the same group in any other project/workspace. Otherwise, the behavior is undefined and partial permissions might be removed.
    • when defining a new dbt_cloud_group_partial_permissions
      • if the group doesn’t exist with the given name, it will be created
      • if a group exists with the given name, permissions will be added in the dbt Cloud group if they are not present yet
    • in a given Terraform project/workspace, avoid having different dbt_cloud_group_partial_permissions for the same group name to prevent sync issues. Add all the permissions in the same resource.
    • all resources for the same group name need to have the same values for assign_by_default and sso_mapping_groups. Those fields are not considered “partial”. (Please raise feedback in GitHub if you think that sso_mapping_groups should be “partial” as well)
    • when a resource is updated, the dbt Cloud group will be updated accordingly, removing and adding permissions
    • when the resource is deleted/destroyed, if the resulting permission sets is empty, the group will be deleted ; otherwise, the group will be updated, removing the permissions from the deleted resource

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as dbtcloud from "@pulumi/dbtcloud";

// we add some permissions to the group "TF Group 1" (existing or not) to  a new project 
const tfGroup1 = new dbtcloud.GroupPartialPermissions("tf_group_1", {
    name: "TF Group 1",
    groupPermissions: [
        {
            permissionSet: "developer",
            projectId: dbtProject.id,
            allProjects: false,
            writableEnvironmentCategories: [
                "development",
                "staging",
            ],
        },
        {
            permissionSet: "git_admin",
            projectId: dbtProject.id,
            allProjects: false,
        },
    ],
});
// we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
// it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
const tfGroup2 = new dbtcloud.GroupPartialPermissions("tf_group_2", {
    name: "TF Group 2",
    ssoMappingGroups: ["group2"],
    groupPermissions: [{
        permissionSet: "admin",
        projectId: dbtProject.id,
        allProjects: false,
    }],
});

    import pulumi
import pulumi_dbtcloud as dbtcloud

# we add some permissions to the group "TF Group 1" (existing or not) to  a new project 
tf_group1 = dbtcloud.GroupPartialPermissions("tf_group_1",
    name="TF Group 1",
    group_permissions=[
        {
            "permission_set": "developer",
            "project_id": dbt_project["id"],
            "all_projects": False,
            "writable_environment_categories": [
                "development",
                "staging",
            ],
        },
        {
            "permission_set": "git_admin",
            "project_id": dbt_project["id"],
            "all_projects": False,
        },
    ])
# we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
# it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
tf_group2 = dbtcloud.GroupPartialPermissions("tf_group_2",
    name="TF Group 2",
    sso_mapping_groups=["group2"],
    group_permissions=[{
        "permission_set": "admin",
        "project_id": dbt_project["id"],
        "all_projects": False,
    }])

    package main

import (
	"github.com/pulumi/pulumi-dbtcloud/sdk/go/dbtcloud"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// we add some permissions to the group "TF Group 1" (existing or not) to  a new project
		_, err := dbtcloud.NewGroupPartialPermissions(ctx, "tf_group_1", &dbtcloud.GroupPartialPermissionsArgs{
			Name: pulumi.String("TF Group 1"),
			GroupPermissions: dbtcloud.GroupPartialPermissionsGroupPermissionArray{
				&dbtcloud.GroupPartialPermissionsGroupPermissionArgs{
					PermissionSet: pulumi.String("developer"),
					ProjectId:     pulumi.Any(dbtProject.Id),
					AllProjects:   pulumi.Bool(false),
					WritableEnvironmentCategories: pulumi.StringArray{
						pulumi.String("development"),
						pulumi.String("staging"),
					},
				},
				&dbtcloud.GroupPartialPermissionsGroupPermissionArgs{
					PermissionSet: pulumi.String("git_admin"),
					ProjectId:     pulumi.Any(dbtProject.Id),
					AllProjects:   pulumi.Bool(false),
				},
			},
		})
		if err != nil {
			return err
		}
		// we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project
		// it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
		_, err = dbtcloud.NewGroupPartialPermissions(ctx, "tf_group_2", &dbtcloud.GroupPartialPermissionsArgs{
			Name: pulumi.String("TF Group 2"),
			SsoMappingGroups: pulumi.StringArray{
				pulumi.String("group2"),
			},
			GroupPermissions: dbtcloud.GroupPartialPermissionsGroupPermissionArray{
				&dbtcloud.GroupPartialPermissionsGroupPermissionArgs{
					PermissionSet: pulumi.String("admin"),
					ProjectId:     pulumi.Any(dbtProject.Id),
					AllProjects:   pulumi.Bool(false),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using DbtCloud = Pulumi.DbtCloud;

return await Deployment.RunAsync(() => 
{
    // we add some permissions to the group "TF Group 1" (existing or not) to  a new project 
    var tfGroup1 = new DbtCloud.GroupPartialPermissions("tf_group_1", new()
    {
        Name = "TF Group 1",
        GroupPermissions = new[]
        {
            new DbtCloud.Inputs.GroupPartialPermissionsGroupPermissionArgs
            {
                PermissionSet = "developer",
                ProjectId = dbtProject.Id,
                AllProjects = false,
                WritableEnvironmentCategories = new[]
                {
                    "development",
                    "staging",
                },
            },
            new DbtCloud.Inputs.GroupPartialPermissionsGroupPermissionArgs
            {
                PermissionSet = "git_admin",
                ProjectId = dbtProject.Id,
                AllProjects = false,
            },
        },
    });

    // we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
    // it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
    var tfGroup2 = new DbtCloud.GroupPartialPermissions("tf_group_2", new()
    {
        Name = "TF Group 2",
        SsoMappingGroups = new[]
        {
            "group2",
        },
        GroupPermissions = new[]
        {
            new DbtCloud.Inputs.GroupPartialPermissionsGroupPermissionArgs
            {
                PermissionSet = "admin",
                ProjectId = dbtProject.Id,
                AllProjects = false,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.dbtcloud.GroupPartialPermissions;
import com.pulumi.dbtcloud.GroupPartialPermissionsArgs;
import com.pulumi.dbtcloud.inputs.GroupPartialPermissionsGroupPermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // we add some permissions to the group "TF Group 1" (existing or not) to  a new project 
        var tfGroup1 = new GroupPartialPermissions("tfGroup1", GroupPartialPermissionsArgs.builder()
            .name("TF Group 1")
            .groupPermissions(            
                GroupPartialPermissionsGroupPermissionArgs.builder()
                    .permissionSet("developer")
                    .projectId(dbtProject.id())
                    .allProjects(false)
                    .writableEnvironmentCategories(                    
                        "development",
                        "staging")
                    .build(),
                GroupPartialPermissionsGroupPermissionArgs.builder()
                    .permissionSet("git_admin")
                    .projectId(dbtProject.id())
                    .allProjects(false)
                    .build())
            .build());

        // we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
        // it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
        var tfGroup2 = new GroupPartialPermissions("tfGroup2", GroupPartialPermissionsArgs.builder()
            .name("TF Group 2")
            .ssoMappingGroups("group2")
            .groupPermissions(GroupPartialPermissionsGroupPermissionArgs.builder()
                .permissionSet("admin")
                .projectId(dbtProject.id())
                .allProjects(false)
                .build())
            .build());

    }
}

    resources:
  # we add some permissions to the group "TF Group 1" (existing or not) to  a new project
  tfGroup1:
    type: dbtcloud:GroupPartialPermissions
    name: tf_group_1
    properties:
      name: TF Group 1
      groupPermissions:
        - permissionSet: developer
          projectId: ${dbtProject.id}
          allProjects: false
          writableEnvironmentCategories:
            - development
            - staging
        - permissionSet: git_admin
          projectId: ${dbtProject.id}
          allProjects: false
  # we add Admin permissions to the group "TF Group 2" (existing or not) to  a new project 
  # // it is possible to add more permissions to the same group name in other Terraform projects/workspaces, using another `dbtcloud_group_partial_permissions` resource
  tfGroup2:
    type: dbtcloud:GroupPartialPermissions
    name: tf_group_2
    properties:
      name: TF Group 2
      ssoMappingGroups:
        - group2
      groupPermissions:
        - permissionSet: admin
          projectId: ${dbtProject.id}
          allProjects: false

    Create GroupPartialPermissions Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GroupPartialPermissions(name: string, args?: GroupPartialPermissionsArgs, opts?: CustomResourceOptions);
    @overload
def GroupPartialPermissions(resource_name: str,
                            args: Optional[GroupPartialPermissionsArgs] = None,
                            opts: Optional[ResourceOptions] = None)

@overload
def GroupPartialPermissions(resource_name: str,
                            opts: Optional[ResourceOptions] = None,
                            assign_by_default: Optional[bool] = None,
                            group_permissions: Optional[Sequence[GroupPartialPermissionsGroupPermissionArgs]] = None,
                            name: Optional[str] = None,
                            sso_mapping_groups: Optional[Sequence[str]] = None)
    func NewGroupPartialPermissions(ctx *Context, name string, args *GroupPartialPermissionsArgs, opts ...ResourceOption) (*GroupPartialPermissions, error)
    public GroupPartialPermissions(string name, GroupPartialPermissionsArgs? args = null, CustomResourceOptions? opts = null)
    public GroupPartialPermissions(String name, GroupPartialPermissionsArgs args)
public GroupPartialPermissions(String name, GroupPartialPermissionsArgs args, CustomResourceOptions options)

    type: dbtcloud:GroupPartialPermissions
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GroupPartialPermissionsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var groupPartialPermissionsResource = new DbtCloud.GroupPartialPermissions("groupPartialPermissionsResource", new()
{
    AssignByDefault = false,
    GroupPermissions = new[]
    {
        new DbtCloud.Inputs.GroupPartialPermissionsGroupPermissionArgs
        {
            AllProjects = false,
            PermissionSet = "string",
            ProjectId = 0,
            WritableEnvironmentCategories = new[]
            {
                "string",
            },
        },
    },
    Name = "string",
    SsoMappingGroups = new[]
    {
        "string",
    },
});

    example, err := dbtcloud.NewGroupPartialPermissions(ctx, "groupPartialPermissionsResource", &dbtcloud.GroupPartialPermissionsArgs{
	AssignByDefault: pulumi.Bool(false),
	GroupPermissions: dbtcloud.GroupPartialPermissionsGroupPermissionArray{
		&dbtcloud.GroupPartialPermissionsGroupPermissionArgs{
			AllProjects:   pulumi.Bool(false),
			PermissionSet: pulumi.String("string"),
			ProjectId:     pulumi.Int(0),
			WritableEnvironmentCategories: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	Name: pulumi.String("string"),
	SsoMappingGroups: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var groupPartialPermissionsResource = new GroupPartialPermissions("groupPartialPermissionsResource", GroupPartialPermissionsArgs.builder()
    .assignByDefault(false)
    .groupPermissions(GroupPartialPermissionsGroupPermissionArgs.builder()
        .allProjects(false)
        .permissionSet("string")
        .projectId(0)
        .writableEnvironmentCategories("string")
        .build())
    .name("string")
    .ssoMappingGroups("string")
    .build());

    group_partial_permissions_resource = dbtcloud.GroupPartialPermissions("groupPartialPermissionsResource",
    assign_by_default=False,
    group_permissions=[{
        "all_projects": False,
        "permission_set": "string",
        "project_id": 0,
        "writable_environment_categories": ["string"],
    }],
    name="string",
    sso_mapping_groups=["string"])

    const groupPartialPermissionsResource = new dbtcloud.GroupPartialPermissions("groupPartialPermissionsResource", {
    assignByDefault: false,
    groupPermissions: [{
        allProjects: false,
        permissionSet: "string",
        projectId: 0,
        writableEnvironmentCategories: ["string"],
    }],
    name: "string",
    ssoMappingGroups: ["string"],
});

    type: dbtcloud:GroupPartialPermissions
properties:
    assignByDefault: false
    groupPermissions:
        - allProjects: false
          permissionSet: string
          projectId: 0
          writableEnvironmentCategories:
            - string
    name: string
    ssoMappingGroups:
        - string

    GroupPartialPermissions Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GroupPartialPermissions resource accepts the following input properties:

    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions List<Pulumi.DbtCloud.Inputs.GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups List<string>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions []GroupPartialPermissionsGroupPermissionArgs
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups []string
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions GroupPartialPermissionsGroupPermission[]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name string
    The name of the group. This is used to identify an existing group
    ssoMappingGroups string[]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assign_by_default bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    group_permissions Sequence[GroupPartialPermissionsGroupPermissionArgs]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name str
    The name of the group. This is used to identify an existing group
    sso_mapping_groups Sequence[str]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<Property Map>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GroupPartialPermissions resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GroupPartialPermissions Resource

    Get an existing GroupPartialPermissions resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GroupPartialPermissionsState, opts?: CustomResourceOptions): GroupPartialPermissions
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        assign_by_default: Optional[bool] = None,
        group_permissions: Optional[Sequence[GroupPartialPermissionsGroupPermissionArgs]] = None,
        name: Optional[str] = None,
        sso_mapping_groups: Optional[Sequence[str]] = None) -> GroupPartialPermissions
    func GetGroupPartialPermissions(ctx *Context, name string, id IDInput, state *GroupPartialPermissionsState, opts ...ResourceOption) (*GroupPartialPermissions, error)
    public static GroupPartialPermissions Get(string name, Input<string> id, GroupPartialPermissionsState? state, CustomResourceOptions? opts = null)
    public static GroupPartialPermissions get(String name, Output<String> id, GroupPartialPermissionsState state, CustomResourceOptions options)
    resources:  _:    type: dbtcloud:GroupPartialPermissions    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions List<Pulumi.DbtCloud.Inputs.GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups List<string>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    AssignByDefault bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    GroupPermissions []GroupPartialPermissionsGroupPermissionArgs
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    Name string
    The name of the group. This is used to identify an existing group
    SsoMappingGroups []string
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<GroupPartialPermissionsGroupPermission>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions GroupPartialPermissionsGroupPermission[]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name string
    The name of the group. This is used to identify an existing group
    ssoMappingGroups string[]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assign_by_default bool
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    group_permissions Sequence[GroupPartialPermissionsGroupPermissionArgs]
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name str
    The name of the group. This is used to identify an existing group
    sso_mapping_groups Sequence[str]
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.
    assignByDefault Boolean
    Whether the group will be assigned by default to users. The value needs to be the same for all partial permissions for the same group.
    groupPermissions List<Property Map>
    Partial permissions for the group. Those permissions will be added/removed when config is added/removed.
    name String
    The name of the group. This is used to identify an existing group
    ssoMappingGroups List<String>
    Mapping groups from the IdP. At the moment the complete list needs to be provided in each partial permission for the same group.

    Supporting Types

    GroupPartialPermissionsGroupPermission, GroupPartialPermissionsGroupPermissionArgs

    AllProjects bool
    Whether access should be provided for all projects or not.
    PermissionSet string
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    ProjectId int
    Project ID to apply this permission to for this group.
    WritableEnvironmentCategories List<string>
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    AllProjects bool
    Whether access should be provided for all projects or not.
    PermissionSet string
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    ProjectId int
    Project ID to apply this permission to for this group.
    WritableEnvironmentCategories []string
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    allProjects Boolean
    Whether access should be provided for all projects or not.
    permissionSet String
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    projectId Integer
    Project ID to apply this permission to for this group.
    writableEnvironmentCategories List<String>
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    allProjects boolean
    Whether access should be provided for all projects or not.
    permissionSet string
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    projectId number
    Project ID to apply this permission to for this group.
    writableEnvironmentCategories string[]
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    all_projects bool
    Whether access should be provided for all projects or not.
    permission_set str
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    project_id int
    Project ID to apply this permission to for this group.
    writable_environment_categories Sequence[str]
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.
    allProjects Boolean
    Whether access should be provided for all projects or not.
    permissionSet String
    Set of permissions to apply. The permissions allowed are the same as the ones for the dbtcloud.Group resource.
    projectId Number
    Project ID to apply this permission to for this group.
    writableEnvironmentCategories List<String>
    What types of environments to apply Write permissions to. Even if Write access is restricted to some environment types, the permission set will have Read access to all environments. The values allowed are all, development, staging, production and other. Not setting a value is the same as selecting all. Not all permission sets support environment level write settings, only analyst, database_admin, developer, git_admin and team_admin.

    Package Details

    Repository
    dbtcloud pulumi/pulumi-dbtcloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the dbtcloud Terraform Provider.
    dbtcloud logo
    Viewing docs for dbt Cloud v1.6.1
    published on Thursday, Feb 26, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-dbtcloud
      Try Pulumi Cloud free. Your team will thank you.