Can I restrict who can click "confirm and apply" on a Terraform Plan?

I want only certain team members to have the right to click “confirm and apply” on a plan that has been run in Terraform Cloud. Is this possible? Is there a different answer between Terraform Cloud and Enterprise?

This is granted teams with the workspace “Write” permission (or “Apply” permission when customizing access). Workspace Admins, Organization owners, and teams with “Manage Workspaces” can also do this.

Documentation for permissions is here: Permissions - Terraform Cloud | Terraform by HashiCorp

And no, everything here is the same between Terraform Cloud and Enterprise.

1 Like