feat: added disabled_user_signup and disabled_user_deletion to google_identity_platform_tenant (GoogleCloudPlatform#12841)

Author: ramonvermeulen

mmv1/products/identityplatform/Tenant.yaml

@@ -63,3 +63,21 @@ properties:
       Whether authentication is disabled for the tenant. If true, the users under
       the disabled tenant are not allowed to sign-in. Admins of the disabled tenant
       are not able to manage its users.
+  - name: 'client'
+    type: NestedObject
+    description: |
+      Options related to how clients making requests on behalf of a tenant should be configured.
+    properties:
+      - name: 'permissions'
+        type: NestedObject
+        description: |
+          Configuration related to restricting a user's ability to affect their account.
+        properties:
+          - name: 'disabledUserSignup'
+            type: Boolean
+            description: |
+              When true, end users cannot sign up for a new account on the associated project through any of our API methods.
+          - name: 'disabledUserDeletion'
+            type: Boolean
+            description: |
+              When true, end users cannot delete their account on the associated project through any of our API methods.

mmv1/third_party/terraform/services/identityplatform/resource_identity_platform_tenant_test.go

@@ -4,6 +4,7 @@ import (
 	"testing"
 
 	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
+	"github.com/hashicorp/terraform-plugin-testing/plancheck"
 	"github.com/hashicorp/terraform-provider-google/google/acctest"
 )
 
@@ -29,6 +30,11 @@ func TestAccIdentityPlatformTenant_identityPlatformTenantUpdate(t *testing.T) {
 			},
 			{
 				Config: testAccIdentityPlatformTenant_identityPlatformTenantUpdate(context),
+				ConfigPlanChecks: resource.ConfigPlanChecks{
+					PreApply: []plancheck.PlanCheck{
+						plancheck.ExpectResourceAction("google_identity_platform_tenant.tenant", plancheck.ResourceActionUpdate),
+					},
+				},
 			},
 			{
 				ResourceName:      "google_identity_platform_tenant.tenant",
@@ -55,6 +61,12 @@ resource "google_identity_platform_tenant" "tenant" {
   allow_password_signup    = false
   enable_email_link_signin = true
   disable_auth             = true
+  client {
+    permissions {
+      disabled_user_signup   = true
+      disabled_user_deletion = true
+    }
+  }
 }
 `, context)
 }