future_grants

Creates, updates, deletes, gets or lists a future_grants resource.

Overview

Name	future_grants
Type	Resource
Id	snowflake.role.future_grants

Fields

Name	Datatype	Description
containing_scope	object
created_on	string	Date and time when the grant was created
grant_option	boolean	If true, allows the recipient role to grant the privileges to other roles.
granted_by	string	The role that granted this privilege to this grantee
privileges	array	List of privileges to be granted.
securable	object
securable_type	string	Type of the securable to be granted.

Methods

Name	Accessible by	Required Params	Description
list_future_grants	SELECT	name, endpoint	List all future grants to the role
grant_future_privileges	INSERT	name, data__securable_type, endpoint	Grant future privileges to the role
revoke_future_grants	DELETE	name, data__securable_type, endpoint	Revoke future grants from the role

SELECT examples

List all future grants to the role

SELECT
containing_scope,
created_on,
grant_option,
granted_by,
privileges,
securable,
securable_type
FROM snowflake.role.future_grants
WHERE name = '{{ name }}'
AND endpoint = '{{ endpoint }}';

INSERT example

Use the following StackQL query and manifest file to create a new future_grants resource.

Required Properties

/*+ create */
INSERT INTO snowflake.role.future_grants (
data__securable,
data__containing_scope,
data__securable_type,
data__grant_option,
data__privileges,
name,
endpoint
)
SELECT 
'{{ securable }}',
'{{ containing_scope }}',
'{{ securable_type }}',
'{{ grant_option }}',
'{{ privileges }}',
'{{ name }}',
'{{ endpoint }}'
;

All Properties

/*+ create */
INSERT INTO snowflake.role.future_grants (
data__securable_type,
name,
endpoint
)
SELECT 
'{{ securable_type }}',
'{{ name }}',
'{{ endpoint }}'
;

Manifest

- name: future_grants
  props:
    - name: name
      value: string
    - name: data__securable_type
      value: string
    - name: endpoint
      value: string
    - name: securable
      props:
        - name: database
          value: string
        - name: schema
          value: string
        - name: service
          value: string
        - name: name
          value: string
    - name: containing_scope
      props:
        - name: database
          value: string
        - name: schema
          value: string
    - name: securable_type
      value: string
    - name: grant_option
      value: boolean
    - name: privileges
      value: array

DELETE example

Deletes the specified future_grants resource.

/*+ delete */
DELETE FROM snowflake.role.future_grants
WHERE name = '{{ name }}'
AND data__securable_type = '{{ data__securable_type }}'
AND endpoint = '{{ endpoint }}';