Add existing roles (SumoLogic#26)

* WIP add existing users and roles

Co-authored-by: Lincoln Sward <lincoln.a.sward@gmail.com>

* Format terraform

Co-authored-by: Lincoln Sward <lincoln.a.sward@gmail.com>

* Add is_active = false to two users

* updated existing-users.tf file with reference to role ids

* Put roles in separate files

* Format terraform

* removing existing-users.tf to start PR for that specific resource

* Remove roles already managed by terraform

* Remove administrator role since we're unable to modify it

* Dummy commit for tf plan

* Remove dummy commit file

Co-authored-by: Lincoln Sward <lincoln.a.sward@gmail.com>

terraform/ATT-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "ATT" {
+  name             = "ATT"
+  description      = "At The Times"
+  filter_predicate = "_sourceCategory=att-stg OR\n_sourceCategory=att-prd"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Analyst-role.tf

@@ -0,0 +1,6 @@
+resource "sumologic_role" "Analyst" {
+  name         = "Analyst"
+  description  = "Infrastructure & Operations Team"
+  capabilities = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "viewCollectors"]
+}
+

terraform/Aristo-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Aristo" {
+  name             = "Aristo"
+  description      = "Aristo Team"
+  filter_predicate = "_sourceCategory=business-aristo* OR _sourceCategory=business-ax-etl OR _sourceCategory=aristo-prd OR\n_sourceCategory=axpetl-prd OR\n_sourceCategory=ppd"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Atlassian-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Atlassian" {
+  name             = "Atlassian"
+  description      = "Atlassian Administrators"
+  filter_predicate = "_collector=atlassian*"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Auth-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Auth" {
+  name             = "Auth"
+  description      = "Auth Team"
+  filter_predicate = "_sourceCategory=webandmobile-auth OR _sourceName=*auth-*/syslog.log* OR _sourceName=*auth-*/kern.log* OR _sourceName=*auth-*/daemon.log* OR _sourceCategory=webandmobile-seg OR _sourceCategory=stg/myaccount-fastly OR _sourceCategory=prd/myaccount-fastly OR _sourceCategory=prd/homedelivery-fastly OR _sourceCategory=stg/homedelivery-fastly OR _sourceCategory=prd/ecommerce/auth_event_publisher OR _sourceCategory=stg/ecommerce/auth_event_publisher"
+  capabilities     = ["viewScheduledViews", "metricsExtraction", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/BI-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "BI" {
+  name             = "BI"
+  description      = "BI Team"
+  filter_predicate = "_sourceCategory=business-bi"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Blogs-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Blogs" {
+  name             = "Blogs"
+  description      = "Blogs Team"
+  filter_predicate = "_sourceCategory=webandmobile-blogs5 or _sourceName=*blogs5-*/syslog.log* or _sourceName=*blogs5-*/kern.log* or _sourceName=*blogs5-*/daemon.log*"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/CMOTS-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "CMOTS" {
+  name             = "CMOTS"
+  description      = "CMOTS/Magnolia logs"
+  filter_predicate = "_sourceCategory=cmots-dev OR\n_sourceCategory=cmots-stg OR\n_sourceCategory=cmots-prd"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/CMS-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "CMS" {
+  name             = "CMS"
+  description      = "CMS Team"
+  filter_predicate = "_sourceCategory=publishing* OR _sourceCategory=mrln-elb OR _sourceCategory=infrastructure-mysql-slow OR _sourceCategory=merlin-proxy OR _sourceCategory=merlin-proxy-elb OR _sourceCategory=prd/co-fastly OR _sourceCategory=network-vpn-f5 OR\n_sourceCategory=cms-fallback-* OR\n_source=cms-fallback-*"
+  capabilities     = ["viewCollectors", "manageMonitors", "viewPartitions"]
+}
+

terraform/Collector_Managers-role.tf

@@ -0,0 +1,6 @@
+resource "sumologic_role" "Collector_Managers" {
+  name         = "Collector Managers"
+  description  = "Users Who Can Modify Collectors And Sources"
+  capabilities = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "manageCollectors", "viewCollectors"]
+}
+

terraform/Compliance-role.tf

@@ -0,0 +1,6 @@
+resource "sumologic_role" "Compliance" {
+  name         = "Compliance"
+  description  = "Compliance Team"
+  capabilities = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "viewCollectors"]
+}
+

terraform/CustomerCare-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "CustomerCare" {
+  name             = "CustomerCare"
+  description      = "Customer Care Applogs"
+  filter_predicate = "_sourceCategory=care-connect-dev or _sourceCategory=care-connect-stg or _sourceCategory=care-connect-prd or\n_source=care-connect-dev or\n_source=care-connect-stg or\n_source=care-connect-prd"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Customer_Service-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Customer_Service" {
+  name             = "Customer Service"
+  description      = "Customer Service logs"
+  filter_predicate = "_sourceCategory=care-services-dev or _sourceCategory=care-services-stg or _sourceCategory=care-services-prd or\n_source=care-services-dev or\n_source=care-services-stg or\n_source=care-services-prd"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction"]
+}
+

terraform/DBAs-role.tf

@@ -0,0 +1,6 @@
+resource "sumologic_role" "DBAs" {
+  name         = "DBAs"
+  description  = "Database Administartors"
+  capabilities = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/DSE-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "DSE" {
+  name             = "DSE"
+  description      = "DSE Team"
+  filter_predicate = "_sourceName=*/dse-*/syslog.log* or _sourceName=*/dse-*/kern.log* or _sourceName=*/dse-*/daemon.log* or _sourceName=*/bi-*/syslog.log* or _sourceName=*/bi-*/kern.log* or _sourceName=*/bi-*/daemon.log* or _sourceCategory=analytics-dse or _sourceCategory=business-* or _sourceCategory=atg-et-mon or _sourceCategory=analytics-apis"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Dist-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Dist" {
+  name             = "Dist"
+  description      = "Distribution PDP logs"
+  filter_predicate = "_sourceCategory=dist OR\n_source=dist-dev OR\n_source=dist-stg OR\n_source=dist-prd OR\n_sourceCategory=ppd-ink OR\n_source=ppd-ink-dev OR\n_source=ppd-ink-stg OR\n_source=ppd-ink-prd OR\n_sourceCategory=ppd-ink-ce OR\n_source=ppd-ink-ce-dev OR\n_source=ppd-ink-ce-stg OR\n_source=ppd-ink-ce-prd OR\n_sourceCategory=dist-batch OR\n_source=dist-batch-dev OR\n_source=dist-batch-stg OR\n_source=dist-batch-prd"
+  capabilities     = ["viewPartitions"]
+}
+

terraform/ECOMM-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "ECOMM" {
+  name             = "ECOMM"
+  description      = "E-Commerce Team"
+  filter_predicate = "_sourceCategory=applogs-store OR _sourceCategory=applogs-ecomm OR _sourceCategory=applogs-lire OR _sourceCategory=lire-* OR _sourceCategory=ecomm-hdweb OR _sourceCategory=ecommerce-* OR _sourceCategory=stg/ecommerce/payflow OR _sourceCategory=prd/ecommerce/payflow OR _sourceCategory=business-ax-etl OR _sourceCategory=aristo-prd OR _sourceCategory=axpetl-prd OR _sourceCategory=dist OR _sourceCategory=ecommerce-payflow-api OR _sourceCategory=linux-* ecmcore OR _sourceCategory=linux-* payflow OR _sourceCategory=infra-jenkins* OR _sourceCategory=sugar* OR _sourceCategory=prd/myaccount-fastly OR _sourceCategory=stg/myaccount-fastly OR _sourceCategory=prd/ecommerce/auth_event_publisher OR _sourceCategory=linux-* sugar or _sourceCategory=ecommerce-ecmcore-core or _sourceCategory=circa or _sourceCategory=ecommerce-payflow-api or _source=ecommerce-ecmcore-http or _source=ecommerce-payflow-http or _sourceCategory=fastly-waf-apps/stg or _sourceCategory=fastly-waf-apps/prd or _sourceCategory=tokenization* or\n_sourceCategory=ecmcore-* or\n_sourceCategory=ecr-* or\n_sourceCategory=ecommerce-payflow-api-stg or\n_sourceCategory=nytimes/spg-petstore"
+  capabilities     = ["viewScheduledViews", "manageFieldExtractionRules", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "viewCollectors", "manageFields"]
+}
+

terraform/Endusers-role.tf

@@ -0,0 +1,6 @@
+resource "sumologic_role" "Endusers" {
+  name         = "Endusers"
+  description  = "Enduser Support Team"
+  capabilities = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "viewCollectors"]
+}
+

terraform/Guest-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Guest" {
+  name             = "Guest"
+  description      = "Default Guest User"
+  filter_predicate = "_sourceCategory=guest"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/MSSP-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "MSSP" {
+  name             = "MSSP"
+  description      = "Managed Service Security Providers"
+  filter_predicate = "_sourceName=*proxy-squid*/daemon.log OR _sourceName=*dns* OR _sourceName=*server-fw* OR _sourceCategory=linux-authpriv OR _sourceCategory=security-* OR _sourceCategory=network-firewall* OR _sourceCategory=network-vpn-cisco OR _sourceCategory=network-vpn-f5 OR _sourceCategory=network-wireless-aruba OR _sourceCategory=network-wireless OR _sourceCategory=network-infoblox* OR _sourceCategory=network-loadbalancer OR _sourceCategory=security-ids-suricta OR _sourceCategory=windows-dc OR _sourceCategory=windows-dc-sap OR _sourceCategory=snare OR _sourceCategory=windows-snare OR _sourceCategory=SEP OR _sourceCategory=IDS OR _sourceCategory=cisco_vpn OR _sourceCategory=fortigate OR _sourceCategory=syslogs-firewall OR _sourceCategory=syslogs-toplayer OR _sourceCategory=ESX-VGW OR _sourceCategory=aruba OR _sourceCategory=syslogs-alienvault OR _sourceCategory=bind OR _sourceCategory=applogs-fireeye OR _sourceCategory=syslogs-ids-suricta OR _sourceCategory=syslogs-ids-snort OR _sourceCategory=AWS_EAGLE OR _sourceCategory=bit9 OR _sourceCategory=prd/tipjar OR _sourceCategory=AzureSignInEvents OR _index=sumologic_audit"
+  capabilities     = ["viewScheduledViews", "manageFieldExtractionRules", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "manageFields", "manageDataVolumeFeed"]
+}
+

terraform/Messaging-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Messaging" {
+  name             = "Messaging"
+  description      = "Messaging Team"
+  filter_predicate = "_sourceCategory=webandmobile-messaging"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/MobileWeb-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "MobileWeb" {
+  name             = "MobileWeb"
+  description      = "MobileWeb Team"
+  filter_predicate = "_sourceCategory=webandmobile-mobileweb or _view=blocker_by_rmid or _view=blocker_aggregate or _view=blocker_aggregate_general"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Myaccount_Fastly_Logs-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Myaccount_Fastly_Logs" {
+  name             = "Myaccount Fastly Logs"
+  description      = "Access to fastly logs for myaccount service"
+  filter_predicate = "_sourceCategory=prd/myaccount-fastly OR _sourceCategory=stg/myaccount-fastly"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "viewCollectors"]
+}
+

terraform/NYT_Beta-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "NYT_Beta" {
+  name             = "NYT Beta"
+  description      = "NYT Beta Team"
+  filter_predicate = "_sourceCategory=webandmobile-brian*"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Network-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Network" {
+  name             = "Network"
+  description      = "Network Team"
+  filter_predicate = "_index=Network OR _index=Virtualization OR _sourceCategory=voice-tel* OR _sourceCategory=network-* OR _sourceCategory=forti-analyzer"
+  capabilities     = ["viewScheduledViews", "metricsExtraction", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "viewCollectors"]
+}
+

terraform/Output-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Output" {
+  name             = "Output"
+  description      = "Output systems logs"
+  filter_predicate = "_source=output-px*"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/PPI-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "PPI" {
+  name             = "PPI"
+  description      = "Publishing system logs"
+  filter_predicate = "_source=business-ppi-* OR _sourceCategory=business-ppi OR _sourceCategory=business-ppi-syslog"
+  capabilities     = ["manageMonitors", "viewPartitions"]
+}
+

terraform/Paperboy-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Paperboy" {
+  name             = "Paperboy"
+  description      = "Paper Boy Team"
+  filter_predicate = "_sourceName=*paperboy-*/syslog.log* or _sourceName=*paperboy-*/kern.log* or _sourceName=*paperboy-*/daemon.log* or _sourceCategory=business-paperboy"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Personalization-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Personalization" {
+  name             = "Personalization"
+  description      = "Personalization Team"
+  filter_predicate = "(_sourceCategory=linux-* AND _sourceName=*/per-*/*.log) OR _sourceCategory=webandmobile-personalization OR _index=linux*"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Pubsys-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Pubsys" {
+  name             = "Pubsys"
+  description      = "NewsGate and Pubsys Logs"
+  filter_predicate = "_sourceCategory=publishing-pubsys or _sourceCategory=publishing-ng or _sourceCategory=ngc-cas or _sourceCategory=ngc-io or _sourceCategory=ngc-web or _sourceCategory=fp-inyt or _sourceCategory=linux-* ngc-io or _sourceCategory=linux-* ngc-cas or _sourceCategory=linux-* ngc-web or _sourceCategory=aws_eagle or\n_source=nytm-pubsys-output-scripts-* or\n_source=nytm-pubsys-newsgate-ConfigBase1-*"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "viewCollectors"]
+}
+

terraform/SEG-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "SEG" {
+  name             = "SEG"
+  description      = "SEG Team"
+  filter_predicate = "_sourceCategory=webandmobile-seg"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Samizdat-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Samizdat" {
+  name             = "Samizdat"
+  description      = "Samizdat Application Logs"
+  filter_predicate = "(_sourceCategory=linux-* AND _sourceName=*/samizdat-*/*.log) OR _sourceCategory=webandmobile-samizdat OR _sourceCategory=webandmobile-samizdat-iad OR _sourceCategory=samizdat-graphql-elb-prd-iad1 OR _sourceCategory=samizdat-graphql-elb-prd-pdx1 OR _sourceCategory=webprd-www OR _sourceCategory=fastly-www/prd OR _sourceCategory=samizdat-dev"
+  capabilities     = ["viewScheduledViews", "metricsExtraction", "manageFieldExtractionRules", "manageMonitors", "viewPartitions", "managePartitions", "manageIndexes", "manageScheduledViews", "viewFields", "viewFieldExtraction", "manageFields"]
+}
+

terraform/Search-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Search" {
+  name             = "Search"
+  description      = "Search Team"
+  filter_predicate = "_sourceCategory=webandmobile-search or _sourceCategory=webandmobile-seo or\n_sourceCategory=search-api-* or\n_source=search-api-* or\n_sourceCategory=nytimes-search-omnibus-* or\n_sourceCategory=nytimes-search-add-es-*"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction"]
+}
+

terraform/Security-role.tf

@@ -0,0 +1,6 @@
+resource "sumologic_role" "Security" {
+  name         = "Security"
+  description  = "SecOps Team"
+  capabilities = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel", "viewCollectors"]
+}
+

terraform/ServiceNow-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "ServiceNow" {
+  name             = "ServiceNow"
+  description      = "Windows ServiceNow"
+  filter_predicate = "_sourceCategory=windows-servicenow"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Shared_Cluster_DEV-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Shared_Cluster_DEV" {
+  name             = "Shared Cluster DEV"
+  description      = "k8s Shared Cluster logs dev"
+  filter_predicate = "_collector=nyt-sharecluster-dev_shared-dev-east-r0"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "manageUsersAndRoles", "manageCollectors", "viewCollectors"]
+}
+

terraform/Storage-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Storage" {
+  name             = "Storage"
+  description      = "Storage Team"
+  filter_predicate = "_sourceCategory=ftps-dev-syslog or _sourceCategory=ftps-stg-syslog or _sourceCategory=ftps-prd-syslog or _sourceCategory=AWS_EAGLE"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Tips_Jar-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Tips_Jar" {
+  name             = "Tips Jar"
+  description      = "Tips collection logs"
+  filter_predicate = "_sourceCategory=tipjar-x-stg OR _sourceCategory=tipjar-x-prd"
+  capabilities     = ["viewScheduledViews", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Twistlock-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Twistlock" {
+  name             = "Twistlock"
+  description      = "Twistlock Application Logs"
+  filter_predicate = "_sourceCategory=dev/twistlock/console or _sourceCategory=stg/twistlock/console or _sourceCategory=prd/twistlock/console"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction"]
+}
+

terraform/UGC-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "UGC" {
+  name             = "UGC"
+  description      = "UGC Team"
+  filter_predicate = "_sourceCategory=webandmobile-ugc"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Vault-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Vault" {
+  name             = "Vault"
+  description      = "Vault HTTP Logs"
+  filter_predicate = "_sourceCategory=stg/vault or _sourceCategory=prd/vault"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+

terraform/Video-role.tf

@@ -0,0 +1,7 @@
+resource "sumologic_role" "Video" {
+  name             = "Video"
+  description      = "Video Team"
+  filter_predicate = "_sourceName=*video-*/syslog.log* or _sourceName=*video-*/kern.log* or _sourceName=*video-*/daemon.log* or _sourceCategory=webandmobile-video OR _sourceCategory=video-service-stg OR _sourceCategory=video-service"
+  capabilities     = ["viewScheduledViews", "manageMonitors", "viewPartitions", "viewFields", "viewFieldExtraction", "changeDataAccessLevel"]
+}
+