From b1f4d90b1b253f59cb303c1af9f0586862b991c8 Mon Sep 17 00:00:00 2001
From: Alfredo Matas <amatas@gmail.com>
Date: Wed, 3 Apr 2019 19:28:22 +0200
Subject: [PATCH] Decrease the role level of the backup-exporter SA

---
 common/modules/gcp-project/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common/modules/gcp-project/main.tf b/common/modules/gcp-project/main.tf
index d45f0329..b0ab58c9 100644
--- a/common/modules/gcp-project/main.tf
+++ b/common/modules/gcp-project/main.tf
@@ -219,7 +219,7 @@ data "google_iam_policy" "combined" {
   }
 
   binding {
-    role = "roles/owner"
+    role = "roles/viewer"
 
     members = [
       "${local.backup_service_accounts}",