Setting 'saml_autocreate_access_role' to "ERROR" is ignored once manually set in web interface

[jorneilander]

Terraform Version

Terraform v1.2.5 but also applies to v1.3.5

Affected Resource(s)

• datadog_organization_settings

Terraform Configuration Files

resource "datadog_organization_settings" "suborganization" {
  name  = lower(local.customer)

  settings {
    saml_autocreate_access_role = "ERROR"
    saml_autocreate_users_domains {
      domains = ["example.com"]
      enabled = true
    }
    saml_idp_initiated_login {
      enabled = true
    }
    saml {
      enabled = true
    }
    saml_strict_mode {
      enabled = false
    }
  }
}

Debug Output

N/A

Panic Output

N/A

Expected Behavior

The value for Choose a role for provisioning new Just-in-Time Users in the web interface to either be blank or set to ERROR

Actual Behavior

Value remains as-is when a default role has been selected in the past.

Steps to Reproduce

1. terraform apply

Important Factoids

Not to my knowledge.

References

N/A

Other

Tried looking at the Python library for these settings but it found the following:

OrganizationSettings.saml_autocreate_access_role() mentions:

• Options are st (standard user), adm (admin user), or ro (read-only user).

but the argument to the function is an AccessRole which mentions:

• If omitted defaults to “st”. Must be one of [“st”, “adm”, “ro”, “ERROR”].

Might be unrelated to this specific issue, but still interesting.