pulumi-gcp 7.35.0a1722940030__py3-none-any.whl → 7.36.0__py3-none-any.whl

pulumi_gcp/gkehub/feature_iam_member.py

@@ -364,6 +364,25 @@ class FeatureIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Feature
+        Three different resources help you manage your IAM policy for GKEHub Feature. Each of these resources serves a different use case:
+
+        * `gkehub.FeatureIamPolicy`: Authoritative. Sets the IAM policy for the feature and replaces any existing policy already attached.
+        * `gkehub.FeatureIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the feature are preserved.
+        * `gkehub.FeatureIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the feature are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.FeatureIamPolicy`: Retrieves the IAM policy for the feature
+
+        > **Note:** `gkehub.FeatureIamPolicy` **cannot** be used in conjunction with `gkehub.FeatureIamBinding` and `gkehub.FeatureIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.FeatureIamBinding` resources **can be** used in conjunction with `gkehub.FeatureIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.FeatureIamPolicy
 
         ```python
@@ -536,6 +555,25 @@ class FeatureIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Feature
+        Three different resources help you manage your IAM policy for GKEHub Feature. Each of these resources serves a different use case:
+
+        * `gkehub.FeatureIamPolicy`: Authoritative. Sets the IAM policy for the feature and replaces any existing policy already attached.
+        * `gkehub.FeatureIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the feature are preserved.
+        * `gkehub.FeatureIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the feature are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.FeatureIamPolicy`: Retrieves the IAM policy for the feature
+
+        > **Note:** `gkehub.FeatureIamPolicy` **cannot** be used in conjunction with `gkehub.FeatureIamBinding` and `gkehub.FeatureIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.FeatureIamBinding` resources **can be** used in conjunction with `gkehub.FeatureIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.FeatureIamPolicy
 
         ```python

pulumi_gcp/gkehub/feature_iam_policy.py

@@ -261,6 +261,25 @@ class FeatureIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Feature
+        Three different resources help you manage your IAM policy for GKEHub Feature. Each of these resources serves a different use case:
+
+        * `gkehub.FeatureIamPolicy`: Authoritative. Sets the IAM policy for the feature and replaces any existing policy already attached.
+        * `gkehub.FeatureIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the feature are preserved.
+        * `gkehub.FeatureIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the feature are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.FeatureIamPolicy`: Retrieves the IAM policy for the feature
+
+        > **Note:** `gkehub.FeatureIamPolicy` **cannot** be used in conjunction with `gkehub.FeatureIamBinding` and `gkehub.FeatureIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.FeatureIamBinding` resources **can be** used in conjunction with `gkehub.FeatureIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.FeatureIamPolicy
 
         ```python
@@ -421,6 +440,25 @@ class FeatureIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Feature
+        Three different resources help you manage your IAM policy for GKEHub Feature. Each of these resources serves a different use case:
+
+        * `gkehub.FeatureIamPolicy`: Authoritative. Sets the IAM policy for the feature and replaces any existing policy already attached.
+        * `gkehub.FeatureIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the feature are preserved.
+        * `gkehub.FeatureIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the feature are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.FeatureIamPolicy`: Retrieves the IAM policy for the feature
+
+        > **Note:** `gkehub.FeatureIamPolicy` **cannot** be used in conjunction with `gkehub.FeatureIamBinding` and `gkehub.FeatureIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.FeatureIamBinding` resources **can be** used in conjunction with `gkehub.FeatureIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.FeatureIamPolicy
 
         ```python

pulumi_gcp/gkehub/membership_iam_binding.py

@@ -363,6 +363,25 @@ class MembershipIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Membership
+        Three different resources help you manage your IAM policy for GKEHub Membership. Each of these resources serves a different use case:
+
+        * `gkehub.MembershipIamPolicy`: Authoritative. Sets the IAM policy for the membership and replaces any existing policy already attached.
+        * `gkehub.MembershipIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the membership are preserved.
+        * `gkehub.MembershipIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the membership are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.MembershipIamPolicy`: Retrieves the IAM policy for the membership
+
+        > **Note:** `gkehub.MembershipIamPolicy` **cannot** be used in conjunction with `gkehub.MembershipIamBinding` and `gkehub.MembershipIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.MembershipIamBinding` resources **can be** used in conjunction with `gkehub.MembershipIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.MembershipIamPolicy
 
         ```python
@@ -536,6 +555,25 @@ class MembershipIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Membership
+        Three different resources help you manage your IAM policy for GKEHub Membership. Each of these resources serves a different use case:
+
+        * `gkehub.MembershipIamPolicy`: Authoritative. Sets the IAM policy for the membership and replaces any existing policy already attached.
+        * `gkehub.MembershipIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the membership are preserved.
+        * `gkehub.MembershipIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the membership are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.MembershipIamPolicy`: Retrieves the IAM policy for the membership
+
+        > **Note:** `gkehub.MembershipIamPolicy` **cannot** be used in conjunction with `gkehub.MembershipIamBinding` and `gkehub.MembershipIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.MembershipIamBinding` resources **can be** used in conjunction with `gkehub.MembershipIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.MembershipIamPolicy
 
         ```python

pulumi_gcp/gkehub/membership_iam_member.py

@@ -363,6 +363,25 @@ class MembershipIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Membership
+        Three different resources help you manage your IAM policy for GKEHub Membership. Each of these resources serves a different use case:
+
+        * `gkehub.MembershipIamPolicy`: Authoritative. Sets the IAM policy for the membership and replaces any existing policy already attached.
+        * `gkehub.MembershipIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the membership are preserved.
+        * `gkehub.MembershipIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the membership are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.MembershipIamPolicy`: Retrieves the IAM policy for the membership
+
+        > **Note:** `gkehub.MembershipIamPolicy` **cannot** be used in conjunction with `gkehub.MembershipIamBinding` and `gkehub.MembershipIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.MembershipIamBinding` resources **can be** used in conjunction with `gkehub.MembershipIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.MembershipIamPolicy
 
         ```python
@@ -536,6 +555,25 @@ class MembershipIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Membership
+        Three different resources help you manage your IAM policy for GKEHub Membership. Each of these resources serves a different use case:
+
+        * `gkehub.MembershipIamPolicy`: Authoritative. Sets the IAM policy for the membership and replaces any existing policy already attached.
+        * `gkehub.MembershipIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the membership are preserved.
+        * `gkehub.MembershipIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the membership are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.MembershipIamPolicy`: Retrieves the IAM policy for the membership
+
+        > **Note:** `gkehub.MembershipIamPolicy` **cannot** be used in conjunction with `gkehub.MembershipIamBinding` and `gkehub.MembershipIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.MembershipIamBinding` resources **can be** used in conjunction with `gkehub.MembershipIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.MembershipIamPolicy
 
         ```python

pulumi_gcp/gkehub/membership_iam_policy.py

@@ -260,6 +260,25 @@ class MembershipIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Membership
+        Three different resources help you manage your IAM policy for GKEHub Membership. Each of these resources serves a different use case:
+
+        * `gkehub.MembershipIamPolicy`: Authoritative. Sets the IAM policy for the membership and replaces any existing policy already attached.
+        * `gkehub.MembershipIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the membership are preserved.
+        * `gkehub.MembershipIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the membership are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.MembershipIamPolicy`: Retrieves the IAM policy for the membership
+
+        > **Note:** `gkehub.MembershipIamPolicy` **cannot** be used in conjunction with `gkehub.MembershipIamBinding` and `gkehub.MembershipIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.MembershipIamBinding` resources **can be** used in conjunction with `gkehub.MembershipIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.MembershipIamPolicy
 
         ```python
@@ -421,6 +440,25 @@ class MembershipIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Membership
+        Three different resources help you manage your IAM policy for GKEHub Membership. Each of these resources serves a different use case:
+
+        * `gkehub.MembershipIamPolicy`: Authoritative. Sets the IAM policy for the membership and replaces any existing policy already attached.
+        * `gkehub.MembershipIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the membership are preserved.
+        * `gkehub.MembershipIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the membership are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.MembershipIamPolicy`: Retrieves the IAM policy for the membership
+
+        > **Note:** `gkehub.MembershipIamPolicy` **cannot** be used in conjunction with `gkehub.MembershipIamBinding` and `gkehub.MembershipIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.MembershipIamBinding` resources **can be** used in conjunction with `gkehub.MembershipIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.MembershipIamPolicy
 
         ```python

pulumi_gcp/gkehub/scope_iam_binding.py

@@ -311,6 +311,25 @@ class ScopeIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Scope
+        Three different resources help you manage your IAM policy for GKEHub Scope. Each of these resources serves a different use case:
+
+        * `gkehub.ScopeIamPolicy`: Authoritative. Sets the IAM policy for the scope and replaces any existing policy already attached.
+        * `gkehub.ScopeIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the scope are preserved.
+        * `gkehub.ScopeIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the scope are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.ScopeIamPolicy`: Retrieves the IAM policy for the scope
+
+        > **Note:** `gkehub.ScopeIamPolicy` **cannot** be used in conjunction with `gkehub.ScopeIamBinding` and `gkehub.ScopeIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.ScopeIamBinding` resources **can be** used in conjunction with `gkehub.ScopeIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.ScopeIamPolicy
 
         ```python
@@ -471,6 +490,25 @@ class ScopeIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Scope
+        Three different resources help you manage your IAM policy for GKEHub Scope. Each of these resources serves a different use case:
+
+        * `gkehub.ScopeIamPolicy`: Authoritative. Sets the IAM policy for the scope and replaces any existing policy already attached.
+        * `gkehub.ScopeIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the scope are preserved.
+        * `gkehub.ScopeIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the scope are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.ScopeIamPolicy`: Retrieves the IAM policy for the scope
+
+        > **Note:** `gkehub.ScopeIamPolicy` **cannot** be used in conjunction with `gkehub.ScopeIamBinding` and `gkehub.ScopeIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.ScopeIamBinding` resources **can be** used in conjunction with `gkehub.ScopeIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.ScopeIamPolicy
 
         ```python

pulumi_gcp/gkehub/scope_iam_member.py

@@ -311,6 +311,25 @@ class ScopeIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Scope
+        Three different resources help you manage your IAM policy for GKEHub Scope. Each of these resources serves a different use case:
+
+        * `gkehub.ScopeIamPolicy`: Authoritative. Sets the IAM policy for the scope and replaces any existing policy already attached.
+        * `gkehub.ScopeIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the scope are preserved.
+        * `gkehub.ScopeIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the scope are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.ScopeIamPolicy`: Retrieves the IAM policy for the scope
+
+        > **Note:** `gkehub.ScopeIamPolicy` **cannot** be used in conjunction with `gkehub.ScopeIamBinding` and `gkehub.ScopeIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.ScopeIamBinding` resources **can be** used in conjunction with `gkehub.ScopeIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.ScopeIamPolicy
 
         ```python
@@ -471,6 +490,25 @@ class ScopeIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Scope
+        Three different resources help you manage your IAM policy for GKEHub Scope. Each of these resources serves a different use case:
+
+        * `gkehub.ScopeIamPolicy`: Authoritative. Sets the IAM policy for the scope and replaces any existing policy already attached.
+        * `gkehub.ScopeIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the scope are preserved.
+        * `gkehub.ScopeIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the scope are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.ScopeIamPolicy`: Retrieves the IAM policy for the scope
+
+        > **Note:** `gkehub.ScopeIamPolicy` **cannot** be used in conjunction with `gkehub.ScopeIamBinding` and `gkehub.ScopeIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.ScopeIamBinding` resources **can be** used in conjunction with `gkehub.ScopeIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.ScopeIamPolicy
 
         ```python

pulumi_gcp/gkehub/scope_iam_policy.py

@@ -208,6 +208,25 @@ class ScopeIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Scope
+        Three different resources help you manage your IAM policy for GKEHub Scope. Each of these resources serves a different use case:
+
+        * `gkehub.ScopeIamPolicy`: Authoritative. Sets the IAM policy for the scope and replaces any existing policy already attached.
+        * `gkehub.ScopeIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the scope are preserved.
+        * `gkehub.ScopeIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the scope are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.ScopeIamPolicy`: Retrieves the IAM policy for the scope
+
+        > **Note:** `gkehub.ScopeIamPolicy` **cannot** be used in conjunction with `gkehub.ScopeIamBinding` and `gkehub.ScopeIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.ScopeIamBinding` resources **can be** used in conjunction with `gkehub.ScopeIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.ScopeIamPolicy
 
         ```python
@@ -356,6 +375,25 @@ class ScopeIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## This resource supports User Project Overrides.
+
+        - 
+
+        # IAM policy for GKEHub Scope
+        Three different resources help you manage your IAM policy for GKEHub Scope. Each of these resources serves a different use case:
+
+        * `gkehub.ScopeIamPolicy`: Authoritative. Sets the IAM policy for the scope and replaces any existing policy already attached.
+        * `gkehub.ScopeIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the scope are preserved.
+        * `gkehub.ScopeIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the scope are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `gkehub.ScopeIamPolicy`: Retrieves the IAM policy for the scope
+
+        > **Note:** `gkehub.ScopeIamPolicy` **cannot** be used in conjunction with `gkehub.ScopeIamBinding` and `gkehub.ScopeIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `gkehub.ScopeIamBinding` resources **can be** used in conjunction with `gkehub.ScopeIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## gkehub.ScopeIamPolicy
 
         ```python

pulumi_gcp/healthcare/consent_store_iam_binding.py

@@ -322,6 +322,26 @@ class ConsentStoreIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Cloud Healthcare ConsentStore
+        Three different resources help you manage your IAM policy for Cloud Healthcare ConsentStore. Each of these resources serves a different use case:
+
+        * `healthcare.ConsentStoreIamPolicy`: Authoritative. Sets the IAM policy for the consentstore and replaces any existing policy already attached.
+        * `healthcare.ConsentStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the consentstore are preserved.
+        * `healthcare.ConsentStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the consentstore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `healthcare.ConsentStoreIamPolicy`: Retrieves the IAM policy for the consentstore
+
+        > **Note:** `healthcare.ConsentStoreIamPolicy` **cannot** be used in conjunction with `healthcare.ConsentStoreIamBinding` and `healthcare.ConsentStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `healthcare.ConsentStoreIamBinding` resources **can be** used in conjunction with `healthcare.ConsentStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## healthcare.ConsentStoreIamPolicy
 
         ```python
@@ -482,6 +502,26 @@ class ConsentStoreIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Cloud Healthcare ConsentStore
+        Three different resources help you manage your IAM policy for Cloud Healthcare ConsentStore. Each of these resources serves a different use case:
+
+        * `healthcare.ConsentStoreIamPolicy`: Authoritative. Sets the IAM policy for the consentstore and replaces any existing policy already attached.
+        * `healthcare.ConsentStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the consentstore are preserved.
+        * `healthcare.ConsentStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the consentstore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `healthcare.ConsentStoreIamPolicy`: Retrieves the IAM policy for the consentstore
+
+        > **Note:** `healthcare.ConsentStoreIamPolicy` **cannot** be used in conjunction with `healthcare.ConsentStoreIamBinding` and `healthcare.ConsentStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `healthcare.ConsentStoreIamBinding` resources **can be** used in conjunction with `healthcare.ConsentStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## healthcare.ConsentStoreIamPolicy
 
         ```python

pulumi_gcp/healthcare/consent_store_iam_member.py

@@ -322,6 +322,26 @@ class ConsentStoreIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Cloud Healthcare ConsentStore
+        Three different resources help you manage your IAM policy for Cloud Healthcare ConsentStore. Each of these resources serves a different use case:
+
+        * `healthcare.ConsentStoreIamPolicy`: Authoritative. Sets the IAM policy for the consentstore and replaces any existing policy already attached.
+        * `healthcare.ConsentStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the consentstore are preserved.
+        * `healthcare.ConsentStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the consentstore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `healthcare.ConsentStoreIamPolicy`: Retrieves the IAM policy for the consentstore
+
+        > **Note:** `healthcare.ConsentStoreIamPolicy` **cannot** be used in conjunction with `healthcare.ConsentStoreIamBinding` and `healthcare.ConsentStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `healthcare.ConsentStoreIamBinding` resources **can be** used in conjunction with `healthcare.ConsentStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## healthcare.ConsentStoreIamPolicy
 
         ```python
@@ -482,6 +502,26 @@ class ConsentStoreIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Cloud Healthcare ConsentStore
+        Three different resources help you manage your IAM policy for Cloud Healthcare ConsentStore. Each of these resources serves a different use case:
+
+        * `healthcare.ConsentStoreIamPolicy`: Authoritative. Sets the IAM policy for the consentstore and replaces any existing policy already attached.
+        * `healthcare.ConsentStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the consentstore are preserved.
+        * `healthcare.ConsentStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the consentstore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `healthcare.ConsentStoreIamPolicy`: Retrieves the IAM policy for the consentstore
+
+        > **Note:** `healthcare.ConsentStoreIamPolicy` **cannot** be used in conjunction with `healthcare.ConsentStoreIamBinding` and `healthcare.ConsentStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `healthcare.ConsentStoreIamBinding` resources **can be** used in conjunction with `healthcare.ConsentStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## healthcare.ConsentStoreIamPolicy
 
         ```python

pulumi_gcp/healthcare/consent_store_iam_policy.py

@@ -219,6 +219,26 @@ class ConsentStoreIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Cloud Healthcare ConsentStore
+        Three different resources help you manage your IAM policy for Cloud Healthcare ConsentStore. Each of these resources serves a different use case:
+
+        * `healthcare.ConsentStoreIamPolicy`: Authoritative. Sets the IAM policy for the consentstore and replaces any existing policy already attached.
+        * `healthcare.ConsentStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the consentstore are preserved.
+        * `healthcare.ConsentStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the consentstore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `healthcare.ConsentStoreIamPolicy`: Retrieves the IAM policy for the consentstore
+
+        > **Note:** `healthcare.ConsentStoreIamPolicy` **cannot** be used in conjunction with `healthcare.ConsentStoreIamBinding` and `healthcare.ConsentStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `healthcare.ConsentStoreIamBinding` resources **can be** used in conjunction with `healthcare.ConsentStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## healthcare.ConsentStoreIamPolicy
 
         ```python
@@ -367,6 +387,26 @@ class ConsentStoreIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
+        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+
+        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+        ---
+
+        # IAM policy for Cloud Healthcare ConsentStore
+        Three different resources help you manage your IAM policy for Cloud Healthcare ConsentStore. Each of these resources serves a different use case:
+
+        * `healthcare.ConsentStoreIamPolicy`: Authoritative. Sets the IAM policy for the consentstore and replaces any existing policy already attached.
+        * `healthcare.ConsentStoreIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the consentstore are preserved.
+        * `healthcare.ConsentStoreIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the consentstore are preserved.
+
+        A data source can be used to retrieve policy data in advent you do not need creation
+
+        * `healthcare.ConsentStoreIamPolicy`: Retrieves the IAM policy for the consentstore
+
+        > **Note:** `healthcare.ConsentStoreIamPolicy` **cannot** be used in conjunction with `healthcare.ConsentStoreIamBinding` and `healthcare.ConsentStoreIamMember` or they will fight over what your policy should be.
+
+        > **Note:** `healthcare.ConsentStoreIamBinding` resources **can be** used in conjunction with `healthcare.ConsentStoreIamMember` resources **only if** they do not grant privilege to the same role.
+
         ## healthcare.ConsentStoreIamPolicy
 
         ```python

pulumi_gcp/healthcare/dataset_iam_binding.py

@@ -275,21 +275,6 @@ class DatasetIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## healthcare.DatasetIamPolicy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/editor",
-            "members": ["user:jane@example.com"],
-        }])
-        dataset = gcp.healthcare.DatasetIamPolicy("dataset",
-            dataset_id="your-dataset-id",
-            policy_data=admin.policy_data)
-        ```
-
         ## healthcare.DatasetIamBinding
 
         ```python
@@ -414,21 +399,6 @@ class DatasetIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## healthcare.DatasetIamPolicy
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        admin = gcp.organizations.get_iam_policy(bindings=[{
-            "role": "roles/editor",
-            "members": ["user:jane@example.com"],
-        }])
-        dataset = gcp.healthcare.DatasetIamPolicy("dataset",
-            dataset_id="your-dataset-id",
-            policy_data=admin.policy_data)
-        ```
-
         ## healthcare.DatasetIamBinding
 
         ```python