snowflake logo
Snowflake v0.20.0, Mar 27 23

snowflake.AccountGrant

Import

 $ pulumi import snowflake:index/accountGrant:AccountGrant example 'privilege=MONITOR,roles=[role1,role2],with_grant_option=false'

Example Usage

using System.Collections.Generic;
using Pulumi;
using Snowflake = Pulumi.Snowflake;

return await Deployment.RunAsync(() => 
{
    var grant = new Snowflake.AccountGrant("grant", new()
    {
        Privilege = "CREATE ROLE",
        Roles = new[]
        {
            "role1",
            "role2",
        },
        WithGrantOption = false,
    });

});
package main

import (
	"github.com/pulumi/pulumi-snowflake/sdk/go/snowflake"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := snowflake.NewAccountGrant(ctx, "grant", &snowflake.AccountGrantArgs{
			Privilege: pulumi.String("CREATE ROLE"),
			Roles: pulumi.StringArray{
				pulumi.String("role1"),
				pulumi.String("role2"),
			},
			WithGrantOption: pulumi.Bool(false),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.AccountGrant;
import com.pulumi.snowflake.AccountGrantArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var grant = new AccountGrant("grant", AccountGrantArgs.builder()        
            .privilege("CREATE ROLE")
            .roles(            
                "role1",
                "role2")
            .withGrantOption(false)
            .build());

    }
}
import pulumi
import pulumi_snowflake as snowflake

grant = snowflake.AccountGrant("grant",
    privilege="CREATE ROLE",
    roles=[
        "role1",
        "role2",
    ],
    with_grant_option=False)
import * as pulumi from "@pulumi/pulumi";
import * as snowflake from "@pulumi/snowflake";

const grant = new snowflake.AccountGrant("grant", {
    privilege: "CREATE ROLE",
    roles: [
        "role1",
        "role2",
    ],
    withGrantOption: false,
});
resources:
  grant:
    type: snowflake:AccountGrant
    properties:
      privilege: CREATE ROLE
      roles:
        - role1
        - role2
      withGrantOption: false

Create AccountGrant Resource

new AccountGrant(name: string, args?: AccountGrantArgs, opts?: CustomResourceOptions);
@overload
def AccountGrant(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 enable_multiple_grants: Optional[bool] = None,
                 privilege: Optional[str] = None,
                 roles: Optional[Sequence[str]] = None,
                 with_grant_option: Optional[bool] = None)
@overload
def AccountGrant(resource_name: str,
                 args: Optional[AccountGrantArgs] = None,
                 opts: Optional[ResourceOptions] = None)
func NewAccountGrant(ctx *Context, name string, args *AccountGrantArgs, opts ...ResourceOption) (*AccountGrant, error)
public AccountGrant(string name, AccountGrantArgs? args = null, CustomResourceOptions? opts = null)
public AccountGrant(String name, AccountGrantArgs args)
public AccountGrant(String name, AccountGrantArgs args, CustomResourceOptions options)
type: snowflake:AccountGrant
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args AccountGrantArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args AccountGrantArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args AccountGrantArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args AccountGrantArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args AccountGrantArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

AccountGrant Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The AccountGrant resource accepts the following input properties:

EnableMultipleGrants bool

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

Privilege string

The account privilege to grant. Valid privileges are those in globalPrivileges

Roles List<string>

Grants privilege to these roles.

WithGrantOption bool

When this is set to true, allows the recipient role to grant the privileges to other roles.

EnableMultipleGrants bool

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

Privilege string

The account privilege to grant. Valid privileges are those in globalPrivileges

Roles []string

Grants privilege to these roles.

WithGrantOption bool

When this is set to true, allows the recipient role to grant the privileges to other roles.

enableMultipleGrants Boolean

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege String

The account privilege to grant. Valid privileges are those in globalPrivileges

roles List<String>

Grants privilege to these roles.

withGrantOption Boolean

When this is set to true, allows the recipient role to grant the privileges to other roles.

enableMultipleGrants boolean

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege string

The account privilege to grant. Valid privileges are those in globalPrivileges

roles string[]

Grants privilege to these roles.

withGrantOption boolean

When this is set to true, allows the recipient role to grant the privileges to other roles.

enable_multiple_grants bool

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege str

The account privilege to grant. Valid privileges are those in globalPrivileges

roles Sequence[str]

Grants privilege to these roles.

with_grant_option bool

When this is set to true, allows the recipient role to grant the privileges to other roles.

enableMultipleGrants Boolean

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege String

The account privilege to grant. Valid privileges are those in globalPrivileges

roles List<String>

Grants privilege to these roles.

withGrantOption Boolean

When this is set to true, allows the recipient role to grant the privileges to other roles.

Outputs

All input properties are implicitly available as output properties. Additionally, the AccountGrant resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Id string

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

id string

The provider-assigned unique ID for this managed resource.

id str

The provider-assigned unique ID for this managed resource.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing AccountGrant Resource

Get an existing AccountGrant resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AccountGrantState, opts?: CustomResourceOptions): AccountGrant
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        enable_multiple_grants: Optional[bool] = None,
        privilege: Optional[str] = None,
        roles: Optional[Sequence[str]] = None,
        with_grant_option: Optional[bool] = None) -> AccountGrant
func GetAccountGrant(ctx *Context, name string, id IDInput, state *AccountGrantState, opts ...ResourceOption) (*AccountGrant, error)
public static AccountGrant Get(string name, Input<string> id, AccountGrantState? state, CustomResourceOptions? opts = null)
public static AccountGrant get(String name, Output<String> id, AccountGrantState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
EnableMultipleGrants bool

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

Privilege string

The account privilege to grant. Valid privileges are those in globalPrivileges

Roles List<string>

Grants privilege to these roles.

WithGrantOption bool

When this is set to true, allows the recipient role to grant the privileges to other roles.

EnableMultipleGrants bool

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

Privilege string

The account privilege to grant. Valid privileges are those in globalPrivileges

Roles []string

Grants privilege to these roles.

WithGrantOption bool

When this is set to true, allows the recipient role to grant the privileges to other roles.

enableMultipleGrants Boolean

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege String

The account privilege to grant. Valid privileges are those in globalPrivileges

roles List<String>

Grants privilege to these roles.

withGrantOption Boolean

When this is set to true, allows the recipient role to grant the privileges to other roles.

enableMultipleGrants boolean

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege string

The account privilege to grant. Valid privileges are those in globalPrivileges

roles string[]

Grants privilege to these roles.

withGrantOption boolean

When this is set to true, allows the recipient role to grant the privileges to other roles.

enable_multiple_grants bool

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege str

The account privilege to grant. Valid privileges are those in globalPrivileges

roles Sequence[str]

Grants privilege to these roles.

with_grant_option bool

When this is set to true, allows the recipient role to grant the privileges to other roles.

enableMultipleGrants Boolean

When this is set to true, multiple grants of the same type can be created. This will cause Terraform to not revoke grants applied to roles and objects outside Terraform.

privilege String

The account privilege to grant. Valid privileges are those in globalPrivileges

roles List<String>

Grants privilege to these roles.

withGrantOption Boolean

When this is set to true, allows the recipient role to grant the privileges to other roles.

Package Details

Repository
Snowflake pulumi/pulumi-snowflake
License
Apache-2.0
Notes

This Pulumi package is based on the snowflake Terraform Provider.