Manage Team Members

Each kupe_tenant_member resource adds one person to the tenant and assigns their role: admin for full access and readonly for everyone else in this example.

# Full access for the lead developer
resource "kupe_tenant_member" "lead" {
  email = "lead@example.com"
  role  = "admin"
}

# Read-only for the rest of the team
resource "kupe_tenant_member" "dev1" {
  email = "dev1@example.com"
  role  = "readonly"
}

resource "kupe_tenant_member" "dev2" {
  email = "dev2@example.com"
  role  = "readonly"
}

email is immutable; changing it forces replacement (which removes the old member and adds a new one). role can be updated in place.

For the role definitions and permissions, see Manage Members via the API.