forbid importing root group as resource

pkg/config-api-provider/provider/resources/group.go

@@ -62,7 +62,7 @@ func (r *groupResource) Schema(_ context.Context, _ resource.SchemaRequest, resp
 				Required: true,
 			},
 			"parent_group_id": schema.StringAttribute{
-				Optional: true,
+				Required: true,
 				PlanModifiers: []planmodifier.String{
 					// UXI business logic does not permit moving of groups
 					stringplanmodifier.RequiresReplace(),
@@ -108,6 +108,9 @@ func (r *groupResource) Read(ctx context.Context, req resource.ReadRequest, resp
 	// Get current state
 	var state groupResourceModel
 	diags := req.State.Get(ctx, &state)
+	if state.ID.ValueString() == GetRootGroupUID() {
+		diags.AddError("operation not supported", "the root node cannot be used as a resource")
+	}
 	resp.Diagnostics.Append(diags...)
 	if resp.Diagnostics.HasError() {
 		return
@@ -209,3 +212,8 @@ var UpdateGroup = func(request GroupUpdateRequestModel) GroupResponseModel {
 		Path:      "mock_path",
 	}
 }
+
+var GetRootGroupUID = func() string {
+	// Get root node here using the client
+	return "root_group_uid"
+}

pkg/config-api-provider/test/group_test.go

@@ -1,6 +1,7 @@
 package test
 
 import (
+	"regexp"
 	"testing"
 
 	"github.com/aruba-uxi/configuration-api-terraform-provider/pkg/terraform-provider-configuration/provider/resources"
@@ -94,3 +95,29 @@ func TestGroupResource(t *testing.T) {
 		},
 	})
 }
+
+func TestRootGroupResource(t *testing.T) {
+
+	resource.Test(t, resource.TestCase{
+		ProtoV6ProviderFactories: testAccProtoV6ProviderFactories,
+		Steps: []resource.TestStep{
+			// Importing the root group does not work
+			{
+				PreConfig: func() {
+					resources.GetRootGroupUID = func() string { return "my_root_group_uid" }
+				},
+				Config: providerConfig + `
+				resource "uxi_group" "my_root_group" {
+					name            = "name"
+					parent_group_id = "some_random_string"
+				}
+
+				import {
+					to = uxi_group.my_root_group
+					id = "my_root_group_uid"
+				}`,
+				ExpectError: regexp.MustCompile(`the root node cannot be used as a resource`),
+			},
+		},
+	})
+}