The Terraform Google Workspace tutorial gives a useful example of how to add a CSV file of users to a Workspace domain:
However, this doesn’t remove users that aren’t defined in the code.
Is there some way to have true infrastructure-as-code, where users not defined will be removed as well? Or what is the idiomatic way to tackle this in TF?