Grant expand role assignments (#51)

* grant expand roles * remove extra line
ConductorOne · Nov 13, 2024 · f815a6c · f815a6c
1 parent 92fc66f
commit f815a6c
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/pkg/connector/custom_role.go b/pkg/connector/custom_role.go
@@ -77,7 +77,7 @@ func (o *customRoleResourceType) Entitlements(
 		sdkEntitlement.WithAnnotation(&v2.V1Identifier{
 			Id: V1MembershipEntitlementID(role.Type),
 		}),
-		sdkEntitlement.WithGrantableTo(resourceTypeUser),
+		sdkEntitlement.WithGrantableTo(resourceTypeUser, resourceTypeGroup),
 	)
 	rv = append(rv, en)
 

diff --git a/pkg/connector/role.go b/pkg/connector/role.go
@@ -491,6 +491,10 @@ func roleGroupGrant(groupID string, resource *v2.Resource) *v2.Grant {
 		sdkGrant.WithAnnotation(&v2.V1Identifier{
 			Id: fmtGrantIdV1(V1MembershipEntitlementID(resource.Id.Resource), groupID),
 		}),
+		sdkGrant.WithAnnotation(&v2.GrantExpandable{
+			EntitlementIds: []string{fmt.Sprintf("group:%s:member", groupID)},
+			Shallow:        true,
+		}),
 	)
 }