fix #11: allow ax role

apiclient/iam.go

@@ -78,6 +78,10 @@ func CreateIAMServiceAccount(name string, iamRole string) (err error) {
 		role = "roles/apigee.synchronizerManager"
 	case "analytics":
 		role = "roles/apigee.analyticsAgent"
+	case "analyticsAgent":
+		role = "roles/apigee.analyticsAgent"
+	case "analyticsViewer":
+		role = "roles/apigee.analyticsViewer"
 	case "metric":
 		role = "roles/monitoring.metricWriter"
 	case "logger":
@@ -223,6 +227,10 @@ func SetIAMPermission(memberName string, iamRole string, memberType string) (err
 		role = "roles/apigee.synchronizerManager"
 	case "analytics":
 		role = "roles/apigee.analyticsAgent"
+	case "analyticsViewer":
+		role = "roles/apigee.analyticsViewer"
+	case "analyticsAgent":
+		role = "roles/apigee.analyticsAgent"
 	case "deploy":
 		role = "roles/apigee.deployer"
 	default: //assume this is a custom role definition

cmd/env/setax.go

@@ -28,15 +28,18 @@ var SetAxCmd = &cobra.Command{
 	Short: "Set Analytics Agent role for a member on an environment",
 	Long:  "Set Analytics Agent role for a member an Environment",
 	Args: func(cmd *cobra.Command, args []string) (err error) {
+		if role != "analyticsAgent" && role != "analyticsViewer" {
+			return fmt.Errorf("invalid memberRole. Member role must be analyticsViewer or analyticsAgent")
+		}
 		apiclient.SetApigeeEnv(environment)
 		return apiclient.SetApigeeOrg(org)
 	},
 	RunE: func(cmd *cobra.Command, args []string) (err error) {
-		err = environments.SetIAM(memberName, "analytics", memberType)
+		err = environments.SetIAM(memberName, role, memberType)
 		if err != nil {
 			return err
 		}
-		fmt.Printf("Member %s granted access to Apigee Analytics Viewer role\n", memberName)
+		fmt.Printf("Member %s granted access to %s role\n", memberName, role)
 		return nil
 	},
 }
@@ -47,6 +50,7 @@ func init() {
 		"", "Member Name, example Service Account Name")
 	SetAxCmd.Flags().StringVarP(&memberType, "memberType", "m",
 		"serviceAccount", "memberType must be serviceAccount, user or group")
-
+	SetAxCmd.Flags().StringVarP(&role, "memberRole", "r",
+		"analyticsAgent", "memberRole must be analyticsViewer or analyticsAgent")
 	_ = SetAxCmd.MarkFlagRequired("name")
 }