Migrate from teams to groups with Terraform

Teams in Aiven are becoming groups. Groups are an easier way to control access to your organization's projects and services for a group of users.

important

Teams have been replaced by groups.

To make the transition to groups smoother, migrate your teams to groups.

Members of the Account Owners team are automatically made super admin. You can change their access level by revoking super admin privileges, or by granting other roles and permissions.

Migrate teams to groups

important

You can't delete the Account Owners team. Deleting all other teams in your organization will disable the teams feature. You won't be able to create new teams or access your Account Owners team.

For each team, make a note of:
- which users are members of the team
- which projects the team is assigned to
- the team's role for each project
For each team in your organization, create a group with the same name. The following sample creates a group using the aiven_organization_user_group resource.
```
resource "aiven_organization_user_group" "admin" {
  organization_id = data.aiven_organization.main.id
  name            = "Admin user group"
  description     = "Administrators"
}
```
note
Users on the Account Owners team automatically become super admin with full access to manage the organization. You don't need to create a group for these users or manage this team after the migration.

To add the users to the groups, use the aiven_organization_user_group_member resource:

resource "aiven_organization_user_group_member" "admin_members" {
  group_id        = aiven_organization_user_group.admin.group_id
  organization_id = data.aiven_organization.main.id
  user_id         = "u123a456b7890c"
}

To add each new group to the same projects that the teams are assigned to, use the aiven_organization_permission resource:

resource "aiven_organization_permission" "project_admin" {
  organization_id = data.aiven_organization.main.id
  resource_id     = data.aiven_project.example_project.id
  resource_type   = "project"
  permissions {
    permissions = [
      "admin"
    ]
    principal_id   = aiven_organization_user_group.admin.group_id
    principal_type = "user_group"
  }
}

Preview your changes by running:
```
terraform plan
```
To apply the new configuration, run:
```
terraform apply --auto-approve
```
After confirming all users have the correct access, delete the team resources and apply the changes.

Aiven Provider for Terraform documentation

Migrate teams to groups​

Migrate teams to groups