@cfxlabsinc/b2b-services
    Preparing search index...

    Type Alias GroupMembership

    GroupMembership:
        | {
            grantsInMigrations?: undefined;
            inRoles: readonly [pulumi.Input<string>, ...pulumi.Input<string>[]];
        }
        | { grantsInMigrations: true; inRoles: readonly [] }

    The group roles the identity inherits from, typically one of the per-domain *_read_write / *_read_only groups (rds_iam is added for an IAM login and never listed). With none it holds only what a migration grants it by name, which is as easy to get by forgetting the group, so an empty list must say so.