An identity group is a collection of entities that share some common attributes. An identity group
can have one or more policies attached to it, which are inherited by all the members of the group. An
identity group can also have subgroups, which can further refine the policies and attributes for a
subset of entities.
One of the use cases of an identity group is to consistently apply the same set of policies to a
collection of entities. For example, an organization may have different teams or departments, such as
engineering, sales, or marketing. Each team may have its own identity group, with policies that grant
access to the secrets and resources that are relevant to their work. By creating an identity group for
each team, the organization can ensure that the entities belonging to each team have the same level
of access and permissions, regardless of which authentication method they use to log in to
Vault. Reference: Identity: entities and groups | Vault | HashiCorp Developer, vault_identity_group |
Resources | hashicorp/vault | Terraform | Terraform Registry