Add IAM binding and member support for organizations (hashicorp#775)

docs/r/google_organization_iam_binding.md

@@ -0,0 +1,48 @@
+---
+layout: "google"
+page_title: "Google: google_organization_iam_binding"
+sidebar_current: "docs-google-organization-iam-binding"
+description: |-
+ Allows management of a single binding with an IAM policy for a Google Cloud Platform Organization.
+---
+
+# google\_organization\_iam\_binding
+
+Allows creation and management of a single binding within IAM policy for
+an existing Google Cloud Platform Organization.
+
+~> **Note:** This resource __must not__ be used in conjunction with
+   `google_organization_iam_member` for the __same role__ or they will fight over
+   what your policy should be.
+
+## Example Usage
+
+```hcl
+resource "google_organization_iam_binding" "binding" {
+  org_id = "123456789"
+  role    = "roles/browser"
+
+  members = [
+    "user:[email protected]",
+  ]
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `org_id` - (Required) The numeric ID of the organization in which you want to create a custom role.
+
+* `role` - (Required) The role that should be applied. Only one
+    `google_organization_iam_binding` can be used per role.
+
+* `members` - (Required) A list of users that the role should apply to.
+
+## Attributes Reference
+
+In addition to the arguments listed above, the following computed attributes are
+exported:
+
+* `etag` - (Computed) The etag of the organization's IAM policy.
+

docs/r/google_organization_iam_member.md

@@ -0,0 +1,43 @@
+---
+layout: "google"
+page_title: "Google: google_organization_iam_member"
+sidebar_current: "docs-google-organization-iam-member"
+description: |-
+ Allows management of a single member for a single binding on the IAM policy for a Google Cloud Platform Organization.
+---
+
+# google\_organization\_iam\_member
+
+Allows creation and management of a single member for a single binding within
+the IAM policy for an existing Google Cloud Platform Organization.
+
+~> **Note:** This resource __must not__ be used in conjunction with
+   `google_organization_iam_binding` for the __same role__ or they will fight over
+   what your policy should be.
+
+## Example Usage
+
+```hcl
+resource "google_organization_iam_member" "binding" {
+  org_id = "0123456789"
+  role    = "roles/editor"
+  member  = "user:[email protected]"
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `org_id` - (Required) The numeric ID of the organization in which you want to create a custom role.
+
+* `role` - (Required) The role that should be applied.
+
+* `member` - (Required) The user that the role should apply to.
+
+## Attributes Reference
+
+In addition to the arguments listed above, the following computed attributes are
+exported:
+
+* `etag` - (Computed) The etag of the organization's IAM policy.

google.erb

@@ -95,9 +95,15 @@
       <li<%= sidebar_current("docs-google-organization-policy") %>>
         <a href="/docs/providers/google/r/google_organization_policy.html">google_organization_policy</a>
       </li>
+      <li<%= sidebar_current("docs-google-organization-iam-binding") %>>
+        <a href="/docs/providers/google/r/google_organization_iam_binding.html">google_organization_iam_binding</a>
+      </li>
       <li<%= sidebar_current("docs-google-organization-iam-custom-role") %>>
         <a href="/docs/providers/google/r/google_organization_iam_custom_role.html">google_organization_iam_custom_role</a>
       </li>
+      <li<%= sidebar_current("docs-google-organization-iam-member") %>>
+        <a href="/docs/providers/google/r/google_organization_iam_member.html">google_organization_iam_member</a>
+      </li>
       <li<%= sidebar_current("docs-google-project-x") %>>
         <a href="/docs/providers/google/r/google_project.html">google_project</a>
       </li>