IamUserGroupMembership

Source: src/Cloudflare/Iam/UserGroupMembership.ts

Membership of a single account member in a Cloudflare IAM user group.

This is an existence-only resource: it has no mutable aspects beyond its identity (user group + member), so changing either property triggers a replacement. Cloudflare’s member-add API is idempotent — adding a member who is already in the group succeeds — so reconcile is a simple observe-then-ensure flow.

Account-scoped IAM (user groups and their members) is an Enterprise feature.

Adding a Member

const group = yield* Cloudflare.IamUserGroup("Operators", {});

yield* Cloudflare.IamUserGroupMembership("SamInOperators", {
  userGroup: group.userGroupId,
  memberId: "b67b4c279ea0177a0ddff0a2ef64b11b",
});