Fixing roles for billing-iam

test/setup/iam.tf

@@ -40,6 +40,10 @@ locals {
   int_required_ba_roles = [
     "roles/billing.user",
   ]
+
+  int_required_ba_billing_iam_roles = [
+    "roles/billing.admin",
+  ]
 }
 
 resource "google_service_account" "int_test" {
@@ -73,9 +77,10 @@ resource "google_billing_account_iam_member" "int_test_ba" {
 }
 
 resource "google_billing_account_iam_member" "int_test_ba_billing_iam" {
+  count = length(local.int_required_ba_billing_iam_roles)
 
   billing_account_id = var.billing_iam_test_account
-  role               = "roles/billing.admin"
+  role               = local.int_required_ba_billing_iam_roles[count.index]
   member             = "serviceAccount:${google_service_account.int_test.email}"
 }