[Feature Request] btp_subaccount_role with role template "CustomRoleTemplate" and attributes

[olfolfolf]

Is there an existing issue for this?

• I have searched the existing issues

What version of the Terraform provider are you using?

1.6.0

What version of the Terraform CLI are you using?

1.9.5

What type of issue are you facing

bug report

Describe the bug

I want to create a custom role for SAP Integration Suite. Based on the documentation, I could create the custom role in the BTP cockpit.
You need to set a custom attribute, see here:

No I wanted to do the same in Terraform - I did not find a hint in the documentation, how to set the attribute custom_role in Terraform:

resource "btp_subaccount_role" "testrole" {
subaccount_id      = btp_subaccount.subaccount.id  
  name               = "testrole"  
  role_template_name = "CustomRoleTemplate"  
  app_id             = "it!b182722"  
}

Without setting the attribute custom_role, I get the following error at deployment:

btp_subaccount_role.testrole: Creating...
╷
│ Error: API Error Creating Resource Role (Subaccount)
│
│   with btp_subaccount_role.testrole,
│   on roles_access_policies.tf line 4, in resource "btp_subaccount_role" "testrole":
│    4: resource "btp_subaccount_role" "testrole" {
│
│ Cannot add role without values for all attributes of RoleTemplate

Did I miss something or it isn't supported yet?

Br,
Florian

Expected Behavior

No response

Steps To Reproduce

No response

User's Role Collections

No response

Add screenshots to help explain your problem

No response

Additional context

No response

[lechnerc77]

This seems to be a gap between the interface offered by the corresponding BTP CLI activity and the underlying API

• BTP CLI command: https://help.sap.com/docs/btp/btp-cli-command-reference/btp-create-security-role
• API: https://api.sap.com/api/AuthorizationAPI/resource/Roles

Parameters for attributes is missing. Clarification with BTP CLI team needed

[lechnerc77]

Update: Known gap in BTP CLI implementation

For SAP Internal reference: https://jira.tools.sap/browse/XSUAA-2993

Next step: evaluate if the implementation is already planned and if yes what is the planned ETA

[lechnerc77]

The feature request including the enhancement of the BTP CLI is under evaluation. ETA is not yet available. I will update this issue once known.

[lechnerc77]

Update: Earliest delivery of dependent development is Q2/2025 (not committed though)

[miguelpp-sie]

Any updates regarding the ETA of the dependent development?

We're trying to establish IaC for our Integration Suite Subaccounts.

[lechnerc77]

@miguelpp-sie Not yet. The planning or Q2 is not yet finished. An update will follow after that.