Fall back to group-scoped revoke for group service account access token delete

Nicolas Boussugerequested to merge
nicolas.boussuge.fintech/terraform-provider-gitlab:service-account-owner-revoke-token into main

Summary

Top-level group Owners on gitlab.com aren't instance admins, so IsCurrentUserAdmin never matches for them and Delete() fell through to self-revoking with the token value from state, which is empty for imported resources. Try the group-scoped revoke endpoint (already used by Create/Read/Update) before that fallback.

Related Issues

Closes #6876 (closed)

Co-authored with Claude Opus 5

Edited by Nicolas Boussuge

Merge request reports