terraform-vault-tenant/auth.tf

resource "vault_auth_backend" "approle" {
  type = "approle"
  path = "${var.prefix}/approle"
  tune {
    default_lease_ttl = "3600s"
    max_lease_ttl     = "14400s"
  }
}

resource "vault_identity_group" "this" {
  name = var.name
  type = "internal"
  metadata = {
    tenant = var.name
    prefix = var.prefix
  }
}