Add iamMember to access for BigQuery dataset

.changelog/9288.txt

@@ -0,0 +1,6 @@
+```release-note:enhancement
+bigquery: added support for `iam_member` to `google_bigquery_dataset.access`
+```
+```release-note:bug
+bigquery: fixed a bug when updating a `google_bigquery_dataset` that contained an `iamMember` access rule added out of band with Terraform
+```

google/services/bigquery/resource_bigquery_dataset.go

@@ -341,6 +341,12 @@ domain specified will be granted the specified access`,
 				Optional:    true,
 				Description: `An email address of a Google Group to grant access to.`,
 			},
+			"iam_member": {
+				Type:     schema.TypeString,
+				Optional: true,
+				Description: `Some other type of member that appears in the IAM Policy but isn't a user,
+group, domain, or special group. For example: 'allUsers'`,
+			},
 			"role": {
 				Type:     schema.TypeString,
 				Optional: true,
@@ -906,6 +912,7 @@ func flattenBigQueryDatasetAccess(v interface{}, d *schema.ResourceData, config
 			"group_by_email": flattenBigQueryDatasetAccessGroupByEmail(original["groupByEmail"], d, config),
 			"role":           flattenBigQueryDatasetAccessRole(original["role"], d, config),
 			"special_group":  flattenBigQueryDatasetAccessSpecialGroup(original["specialGroup"], d, config),
+			"iam_member":     flattenBigQueryDatasetAccessIamMember(original["iamMember"], d, config),
 			"user_by_email":  flattenBigQueryDatasetAccessUserByEmail(original["userByEmail"], d, config),
 			"view":           flattenBigQueryDatasetAccessView(original["view"], d, config),
 			"dataset":        flattenBigQueryDatasetAccessDataset(original["dataset"], d, config),
@@ -930,6 +937,10 @@ func flattenBigQueryDatasetAccessSpecialGroup(v interface{}, d *schema.ResourceD
 	return v
 }
 
+func flattenBigQueryDatasetAccessIamMember(v interface{}, d *schema.ResourceData, config *transport_tpg.Config) interface{} {
+	return v
+}
+
 func flattenBigQueryDatasetAccessUserByEmail(v interface{}, d *schema.ResourceData, config *transport_tpg.Config) interface{} {
 	return v
 }
@@ -1247,6 +1258,13 @@ func expandBigQueryDatasetAccess(v interface{}, d tpgresource.TerraformResourceD
 			transformed["specialGroup"] = transformedSpecialGroup
 		}
 
+		transformedIamMember, err := expandBigQueryDatasetAccessIamMember(original["iam_member"], d, config)
+		if err != nil {
+			return nil, err
+		} else if val := reflect.ValueOf(transformedIamMember); val.IsValid() && !tpgresource.IsEmptyValue(val) {
+			transformed["iamMember"] = transformedIamMember
+		}
+
 		transformedUserByEmail, err := expandBigQueryDatasetAccessUserByEmail(original["user_by_email"], d, config)
 		if err != nil {
 			return nil, err
@@ -1296,6 +1314,10 @@ func expandBigQueryDatasetAccessSpecialGroup(v interface{}, d tpgresource.Terraf
 	return v, nil
 }
 
+func expandBigQueryDatasetAccessIamMember(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
+	return v, nil
+}
+
 func expandBigQueryDatasetAccessUserByEmail(v interface{}, d tpgresource.TerraformResourceData, config *transport_tpg.Config) (interface{}, error) {
 	return v, nil
 }

google/services/bigquery/resource_bigquery_dataset_test.go

@@ -229,7 +229,7 @@ func TestAccBigQueryDataset_access(t *testing.T) {
 				ImportStateVerifyIgnore: []string{"labels", "terraform_labels"},
 			},
 			{
-				Config: testAccBigQueryDatasetWithTwoAccess(datasetID),
+				Config: testAccBigQueryDatasetWithThreeAccess(datasetID),
 			},
 			{
 				ResourceName:            "google_bigquery_dataset.access_test",
@@ -506,7 +506,7 @@ resource "google_bigquery_dataset" "access_test" {
 `, datasetID)
 }
 
-func testAccBigQueryDatasetWithTwoAccess(datasetID string) string {
+func testAccBigQueryDatasetWithThreeAccess(datasetID string) string {
 	return fmt.Sprintf(`
 resource "google_bigquery_dataset" "access_test" {
   dataset_id = "%s"
@@ -519,6 +519,10 @@ resource "google_bigquery_dataset" "access_test" {
     role   = "READER"
     domain = "hashicorp.com"
   }
+  access {
+    role       = "READER"
+    iam_member = "allUsers"
+  }
 
   labels = {
     env                         = "foo"

website/docs/r/bigquery_dataset.html.markdown

@@ -360,6 +360,11 @@ destroying the resource will fail if tables are present.
 
   * `allAuthenticatedUsers`: All authenticated BigQuery users.
 
+* `iam_member` -
+  (Optional)
+  Some other type of member that appears in the IAM Policy but isn't a user,
+  group, domain, or special group. For example: `allUsers`
+
 * `user_by_email` -
   (Optional)
   An email address of a user to grant access to. For example: