Viewing docs for Snowflake v2.23.0
published on Friday, Nov 6, 2026 by Pulumi
published on Friday, Nov 6, 2026 by Pulumi
Viewing docs for Snowflake v2.23.0
published on Friday, Nov 6, 2026 by Pulumi
published on Friday, Nov 6, 2026 by Pulumi
Caution Use
networkPolicyattribute instead of thesnowflake.NetworkPolicyAttachmentresource.snowflake.NetworkPolicyAttachmentwill be reworked in the following versions of the provider which may still affect this resource.
Sensitive values This resource’s
displayName,show_output.display_name,show_output.email,show_output.login_name,show_output.first_nameandshow_output.last_namefields are not marked as sensitive in the provider. Ensure that no personal data, sensitive data, export-controlled data, or other regulated data is entered as metadata when using the provider. If you use one of these fields, they may be present in logs, so ensure that the provider logs are properly restricted. For more information, see Sensitive values limitations and Metadata fields in Snowflake.
Note
snowflake.UserPasswordPolicyAttachmentwill be reworked in the following versions of the provider which may still affect this resource.
Note Attaching user policies will be handled in the following versions of the provider which may still affect this resource.
Note Other two user types are handled in separate resources:
snowflake.ServiceUserfor user typeserviceandsnowflake.Userfor user typeperson.
Note External changes to
daysToExpiryandminsToUnlockare not currently handled by the provider (because the value changes continuously on Snowflake side after setting it).
Note The RSA public keys can be set with the write-only
rsaPublicKeyWoandrsaPublicKey2Wofields (requires Terraform 1.11 or later). Their values are never saved in the pulumi preview or state, so they can be fed from an ephemeral resource, liketlsPrivateKey. Because Terraform can not see a write-only value, it can not detect changes to it either: the key is sent to Snowflake only when the accompanyingrsaPublicKeyWoVersion(orrsaPublicKey2WoVersion) field changes, so increment it whenever you want to rotate the key. For the same reason, external changes to the keys set this way are not detected; to push the key from your configuration to Snowflake again, increment the version field. Each write-only field conflicts with its regular counterpart, and requires its version field to be set. Note that after importing a user, the version field is empty, so the first apply pushes the key again.
Note External changes to
default_workload_identity.aws, including setting AWS type externally, are not currently handled by the provider because of lack of certain data in Snowflake API.
Resource used to manage legacy service user objects. For more information, check user documentation.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as snowflake from "@pulumi/snowflake";
// minimal
const minimal = new snowflake.LegacyServiceUser("minimal", {name: "Snowflake Legacy Service User - minimal"});
const config = new pulumi.Config();
const email = config.require("email");
const loginName = config.require("loginName");
const password = config.require("password");
// with all attributes set
const user = new snowflake.LegacyServiceUser("user", {
name: "Snowflake Legacy Service User",
loginName: loginName,
comment: "A legacy service user of snowflake.",
password: password,
disabled: "false",
displayName: "Snowflake Legacy Service User display name",
email: email,
defaultWarehouse: "warehouse",
defaultSecondaryRolesOption: "ALL",
defaultRole: "role1",
defaultNamespace: "some.namespace",
minsToUnlock: 9,
daysToExpiry: 8,
rsaPublicKey: "...",
rsaPublicKey2: "...",
mustChangePassword: "true",
});
// all parameters set on the resource level
const u = new snowflake.LegacyServiceUser("u", {
name: "Snowflake Legacy Service User with all parameters",
abortDetachedQuery: true,
autocommit: false,
binaryInputFormat: "UTF8",
binaryOutputFormat: "BASE64",
clientMemoryLimit: 1024,
clientMetadataRequestUseConnectionCtx: true,
clientPrefetchThreads: 2,
clientResultChunkSize: 48,
clientResultColumnCaseInsensitive: true,
clientSessionKeepAlive: true,
clientSessionKeepAliveHeartbeatFrequency: 2400,
clientTimestampTypeMapping: "TIMESTAMP_NTZ",
dateInputFormat: "YYYY-MM-DD",
dateOutputFormat: "YY-MM-DD",
enableUnloadPhysicalTypeOptimization: false,
enableUnredactedQuerySyntaxError: true,
errorOnNondeterministicMerge: false,
errorOnNondeterministicUpdate: true,
geographyOutputFormat: "WKB",
geometryOutputFormat: "WKB",
jdbcTreatDecimalAsInt: false,
jdbcTreatTimestampNtzAsUtc: true,
jdbcUseSessionTimezone: false,
jsonIndent: 4,
lockTimeout: 21222,
logLevel: "ERROR",
multiStatementCount: 0,
networkPolicy: "BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7",
noorderSequenceAsDefault: false,
odbcTreatDecimalAsInt: true,
preventUnloadToInternalStages: true,
queryTag: "some_tag",
quotedIdentifiersIgnoreCase: true,
rowsPerResultset: 2,
searchPath: "$public, $current",
simulatedDataSharingConsumer: "some_consumer",
statementQueuedTimeoutInSeconds: 10,
statementTimeoutInSeconds: 10,
strictJsonOutput: true,
s3StageVpceDnsName: "vpce-id.s3.region.vpce.amazonaws.com",
timeInputFormat: "HH24:MI",
timeOutputFormat: "HH24:MI",
timestampDayIsAlways24h: true,
timestampInputFormat: "YYYY-MM-DD",
timestampLtzOutputFormat: "YYYY-MM-DD HH24:MI:SS",
timestampNtzOutputFormat: "YYYY-MM-DD HH24:MI:SS",
timestampOutputFormat: "YYYY-MM-DD HH24:MI:SS",
timestampTypeMapping: "TIMESTAMP_LTZ",
timestampTzOutputFormat: "YYYY-MM-DD HH24:MI:SS",
timezone: "Europe/Warsaw",
traceLevel: "PROPAGATE",
transactionAbortOnError: true,
transactionDefaultIsolationLevel: "READ COMMITTED",
twoDigitCenturyStart: 1980,
unsupportedDdlAction: "FAIL",
useCachedResult: false,
weekOfYearPolicy: 1,
weekStart: 1,
});
// with AWS workload identity (GetCallerIdentity attestation)
const withAwsWif = new snowflake.LegacyServiceUser("with_aws_wif", {
name: "legacy_service_user_aws",
defaultWorkloadIdentity: {
aws: {
arn: "arn:aws:iam::123456789012:role/snowflake-service-role",
},
},
});
// with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
const withAwsJwtWif = new snowflake.LegacyServiceUser("with_aws_jwt_wif", {
name: "legacy_service_user_aws_jwt",
defaultWorkloadIdentity: {
aws: {
arn: "arn:aws:iam::123456789012:role/snowflake-service-role",
issuer: "https://sts.amazonaws.com",
},
},
});
// with GCP workload identity
const withGcpWif = new snowflake.LegacyServiceUser("with_gcp_wif", {
name: "legacy_service_user_gcp",
defaultWorkloadIdentity: {
gcp: {
subject: "1122334455",
},
},
});
// with Azure workload identity
const withAzureWif = new snowflake.LegacyServiceUser("with_azure_wif", {
name: "legacy_service_user_azure",
defaultWorkloadIdentity: {
azure: {
issuer: "https://login.microsoftonline.com/tenant-id/v2.0",
subject: "application-id",
},
},
});
// with OIDC workload identity
const withOidcWif = new snowflake.LegacyServiceUser("with_oidc_wif", {
name: "legacy_service_user_oidc",
defaultWorkloadIdentity: {
oidc: {
issuer: "https://oidc.example.com",
subject: "service-principal",
oidcAudienceLists: ["snowflake"],
},
},
});
import pulumi
import pulumi_snowflake as snowflake
# minimal
minimal = snowflake.LegacyServiceUser("minimal", name="Snowflake Legacy Service User - minimal")
config = pulumi.Config()
email = config.require("email")
login_name = config.require("loginName")
password = config.require("password")
# with all attributes set
user = snowflake.LegacyServiceUser("user",
name="Snowflake Legacy Service User",
login_name=login_name,
comment="A legacy service user of snowflake.",
password=password,
disabled="false",
display_name="Snowflake Legacy Service User display name",
email=email,
default_warehouse="warehouse",
default_secondary_roles_option="ALL",
default_role="role1",
default_namespace="some.namespace",
mins_to_unlock=9,
days_to_expiry=8,
rsa_public_key="...",
rsa_public_key2="...",
must_change_password="true")
# all parameters set on the resource level
u = snowflake.LegacyServiceUser("u",
name="Snowflake Legacy Service User with all parameters",
abort_detached_query=True,
autocommit=False,
binary_input_format="UTF8",
binary_output_format="BASE64",
client_memory_limit=1024,
client_metadata_request_use_connection_ctx=True,
client_prefetch_threads=2,
client_result_chunk_size=48,
client_result_column_case_insensitive=True,
client_session_keep_alive=True,
client_session_keep_alive_heartbeat_frequency=2400,
client_timestamp_type_mapping="TIMESTAMP_NTZ",
date_input_format="YYYY-MM-DD",
date_output_format="YY-MM-DD",
enable_unload_physical_type_optimization=False,
enable_unredacted_query_syntax_error=True,
error_on_nondeterministic_merge=False,
error_on_nondeterministic_update=True,
geography_output_format="WKB",
geometry_output_format="WKB",
jdbc_treat_decimal_as_int=False,
jdbc_treat_timestamp_ntz_as_utc=True,
jdbc_use_session_timezone=False,
json_indent=4,
lock_timeout=21222,
log_level="ERROR",
multi_statement_count=0,
network_policy="BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7",
noorder_sequence_as_default=False,
odbc_treat_decimal_as_int=True,
prevent_unload_to_internal_stages=True,
query_tag="some_tag",
quoted_identifiers_ignore_case=True,
rows_per_resultset=2,
search_path="$public, $current",
simulated_data_sharing_consumer="some_consumer",
statement_queued_timeout_in_seconds=10,
statement_timeout_in_seconds=10,
strict_json_output=True,
s3_stage_vpce_dns_name="vpce-id.s3.region.vpce.amazonaws.com",
time_input_format="HH24:MI",
time_output_format="HH24:MI",
timestamp_day_is_always24h=True,
timestamp_input_format="YYYY-MM-DD",
timestamp_ltz_output_format="YYYY-MM-DD HH24:MI:SS",
timestamp_ntz_output_format="YYYY-MM-DD HH24:MI:SS",
timestamp_output_format="YYYY-MM-DD HH24:MI:SS",
timestamp_type_mapping="TIMESTAMP_LTZ",
timestamp_tz_output_format="YYYY-MM-DD HH24:MI:SS",
timezone="Europe/Warsaw",
trace_level="PROPAGATE",
transaction_abort_on_error=True,
transaction_default_isolation_level="READ COMMITTED",
two_digit_century_start=1980,
unsupported_ddl_action="FAIL",
use_cached_result=False,
week_of_year_policy=1,
week_start=1)
# with AWS workload identity (GetCallerIdentity attestation)
with_aws_wif = snowflake.LegacyServiceUser("with_aws_wif",
name="legacy_service_user_aws",
default_workload_identity={
"aws": {
"arn": "arn:aws:iam::123456789012:role/snowflake-service-role",
},
})
# with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
with_aws_jwt_wif = snowflake.LegacyServiceUser("with_aws_jwt_wif",
name="legacy_service_user_aws_jwt",
default_workload_identity={
"aws": {
"arn": "arn:aws:iam::123456789012:role/snowflake-service-role",
"issuer": "https://sts.amazonaws.com",
},
})
# with GCP workload identity
with_gcp_wif = snowflake.LegacyServiceUser("with_gcp_wif",
name="legacy_service_user_gcp",
default_workload_identity={
"gcp": {
"subject": "1122334455",
},
})
# with Azure workload identity
with_azure_wif = snowflake.LegacyServiceUser("with_azure_wif",
name="legacy_service_user_azure",
default_workload_identity={
"azure": {
"issuer": "https://login.microsoftonline.com/tenant-id/v2.0",
"subject": "application-id",
},
})
# with OIDC workload identity
with_oidc_wif = snowflake.LegacyServiceUser("with_oidc_wif",
name="legacy_service_user_oidc",
default_workload_identity={
"oidc": {
"issuer": "https://oidc.example.com",
"subject": "service-principal",
"oidc_audience_lists": ["snowflake"],
},
})
package main
import (
"github.com/pulumi/pulumi-snowflake/sdk/v2/go/snowflake"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
// minimal
_, err := snowflake.NewLegacyServiceUser(ctx, "minimal", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("Snowflake Legacy Service User - minimal"),
})
if err != nil {
return err
}
cfg := config.New(ctx, "")
email := cfg.Require("email")
loginName := cfg.Require("loginName")
password := cfg.Require("password")
// with all attributes set
_, err = snowflake.NewLegacyServiceUser(ctx, "user", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("Snowflake Legacy Service User"),
LoginName: pulumi.String(loginName),
Comment: pulumi.String("A legacy service user of snowflake."),
Password: pulumi.String(password),
Disabled: pulumi.String("false"),
DisplayName: pulumi.String("Snowflake Legacy Service User display name"),
Email: pulumi.String(email),
DefaultWarehouse: pulumi.String("warehouse"),
DefaultSecondaryRolesOption: pulumi.String("ALL"),
DefaultRole: pulumi.String("role1"),
DefaultNamespace: pulumi.String("some.namespace"),
MinsToUnlock: pulumi.Int(9),
DaysToExpiry: pulumi.Int(8),
RsaPublicKey: pulumi.String("..."),
RsaPublicKey2: pulumi.String("..."),
MustChangePassword: pulumi.String("true"),
})
if err != nil {
return err
}
// all parameters set on the resource level
_, err = snowflake.NewLegacyServiceUser(ctx, "u", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("Snowflake Legacy Service User with all parameters"),
AbortDetachedQuery: pulumi.Bool(true),
Autocommit: pulumi.Bool(false),
BinaryInputFormat: pulumi.String("UTF8"),
BinaryOutputFormat: pulumi.String("BASE64"),
ClientMemoryLimit: pulumi.Int(1024),
ClientMetadataRequestUseConnectionCtx: pulumi.Bool(true),
ClientPrefetchThreads: pulumi.Int(2),
ClientResultChunkSize: pulumi.Int(48),
ClientResultColumnCaseInsensitive: pulumi.Bool(true),
ClientSessionKeepAlive: pulumi.Bool(true),
ClientSessionKeepAliveHeartbeatFrequency: pulumi.Int(2400),
ClientTimestampTypeMapping: pulumi.String("TIMESTAMP_NTZ"),
DateInputFormat: pulumi.String("YYYY-MM-DD"),
DateOutputFormat: pulumi.String("YY-MM-DD"),
EnableUnloadPhysicalTypeOptimization: pulumi.Bool(false),
EnableUnredactedQuerySyntaxError: pulumi.Bool(true),
ErrorOnNondeterministicMerge: pulumi.Bool(false),
ErrorOnNondeterministicUpdate: pulumi.Bool(true),
GeographyOutputFormat: pulumi.String("WKB"),
GeometryOutputFormat: pulumi.String("WKB"),
JdbcTreatDecimalAsInt: pulumi.Bool(false),
JdbcTreatTimestampNtzAsUtc: pulumi.Bool(true),
JdbcUseSessionTimezone: pulumi.Bool(false),
JsonIndent: pulumi.Int(4),
LockTimeout: pulumi.Int(21222),
LogLevel: pulumi.String("ERROR"),
MultiStatementCount: pulumi.Int(0),
NetworkPolicy: pulumi.String("BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7"),
NoorderSequenceAsDefault: pulumi.Bool(false),
OdbcTreatDecimalAsInt: pulumi.Bool(true),
PreventUnloadToInternalStages: pulumi.Bool(true),
QueryTag: pulumi.String("some_tag"),
QuotedIdentifiersIgnoreCase: pulumi.Bool(true),
RowsPerResultset: pulumi.Int(2),
SearchPath: pulumi.String("$public, $current"),
SimulatedDataSharingConsumer: pulumi.String("some_consumer"),
StatementQueuedTimeoutInSeconds: pulumi.Int(10),
StatementTimeoutInSeconds: pulumi.Int(10),
StrictJsonOutput: pulumi.Bool(true),
S3StageVpceDnsName: pulumi.String("vpce-id.s3.region.vpce.amazonaws.com"),
TimeInputFormat: pulumi.String("HH24:MI"),
TimeOutputFormat: pulumi.String("HH24:MI"),
TimestampDayIsAlways24h: pulumi.Bool(true),
TimestampInputFormat: pulumi.String("YYYY-MM-DD"),
TimestampLtzOutputFormat: pulumi.String("YYYY-MM-DD HH24:MI:SS"),
TimestampNtzOutputFormat: pulumi.String("YYYY-MM-DD HH24:MI:SS"),
TimestampOutputFormat: pulumi.String("YYYY-MM-DD HH24:MI:SS"),
TimestampTypeMapping: pulumi.String("TIMESTAMP_LTZ"),
TimestampTzOutputFormat: pulumi.String("YYYY-MM-DD HH24:MI:SS"),
Timezone: pulumi.String("Europe/Warsaw"),
TraceLevel: pulumi.String("PROPAGATE"),
TransactionAbortOnError: pulumi.Bool(true),
TransactionDefaultIsolationLevel: pulumi.String("READ COMMITTED"),
TwoDigitCenturyStart: pulumi.Int(1980),
UnsupportedDdlAction: pulumi.String("FAIL"),
UseCachedResult: pulumi.Bool(false),
WeekOfYearPolicy: pulumi.Int(1),
WeekStart: pulumi.Int(1),
})
if err != nil {
return err
}
// with AWS workload identity (GetCallerIdentity attestation)
_, err = snowflake.NewLegacyServiceUser(ctx, "with_aws_wif", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("legacy_service_user_aws"),
DefaultWorkloadIdentity: &snowflake.LegacyServiceUserDefaultWorkloadIdentityArgs{
Aws: &snowflake.LegacyServiceUserDefaultWorkloadIdentityAwsArgs{
Arn: pulumi.String("arn:aws:iam::123456789012:role/snowflake-service-role"),
},
},
})
if err != nil {
return err
}
// with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
_, err = snowflake.NewLegacyServiceUser(ctx, "with_aws_jwt_wif", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("legacy_service_user_aws_jwt"),
DefaultWorkloadIdentity: &snowflake.LegacyServiceUserDefaultWorkloadIdentityArgs{
Aws: &snowflake.LegacyServiceUserDefaultWorkloadIdentityAwsArgs{
Arn: pulumi.String("arn:aws:iam::123456789012:role/snowflake-service-role"),
Issuer: pulumi.String("https://sts.amazonaws.com"),
},
},
})
if err != nil {
return err
}
// with GCP workload identity
_, err = snowflake.NewLegacyServiceUser(ctx, "with_gcp_wif", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("legacy_service_user_gcp"),
DefaultWorkloadIdentity: &snowflake.LegacyServiceUserDefaultWorkloadIdentityArgs{
Gcp: &snowflake.LegacyServiceUserDefaultWorkloadIdentityGcpArgs{
Subject: pulumi.String("1122334455"),
},
},
})
if err != nil {
return err
}
// with Azure workload identity
_, err = snowflake.NewLegacyServiceUser(ctx, "with_azure_wif", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("legacy_service_user_azure"),
DefaultWorkloadIdentity: &snowflake.LegacyServiceUserDefaultWorkloadIdentityArgs{
Azure: &snowflake.LegacyServiceUserDefaultWorkloadIdentityAzureArgs{
Issuer: pulumi.String("https://login.microsoftonline.com/tenant-id/v2.0"),
Subject: pulumi.String("application-id"),
},
},
})
if err != nil {
return err
}
// with OIDC workload identity
_, err = snowflake.NewLegacyServiceUser(ctx, "with_oidc_wif", &snowflake.LegacyServiceUserArgs{
Name: pulumi.String("legacy_service_user_oidc"),
DefaultWorkloadIdentity: &snowflake.LegacyServiceUserDefaultWorkloadIdentityArgs{
Oidc: &snowflake.LegacyServiceUserDefaultWorkloadIdentityOidcArgs{
Issuer: pulumi.String("https://oidc.example.com"),
Subject: pulumi.String("service-principal"),
OidcAudienceLists: pulumi.StringArray{
pulumi.String("snowflake"),
},
},
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Snowflake = Pulumi.Snowflake;
return await Deployment.RunAsync(() =>
{
// minimal
var minimal = new Snowflake.LegacyServiceUser("minimal", new()
{
Name = "Snowflake Legacy Service User - minimal",
});
var config = new Config();
var email = config.Require("email");
var loginName = config.Require("loginName");
var password = config.Require("password");
// with all attributes set
var user = new Snowflake.LegacyServiceUser("user", new()
{
Name = "Snowflake Legacy Service User",
LoginName = loginName,
Comment = "A legacy service user of snowflake.",
Password = password,
Disabled = "false",
DisplayName = "Snowflake Legacy Service User display name",
Email = email,
DefaultWarehouse = "warehouse",
DefaultSecondaryRolesOption = "ALL",
DefaultRole = "role1",
DefaultNamespace = "some.namespace",
MinsToUnlock = 9,
DaysToExpiry = 8,
RsaPublicKey = "...",
RsaPublicKey2 = "...",
MustChangePassword = "true",
});
// all parameters set on the resource level
var u = new Snowflake.LegacyServiceUser("u", new()
{
Name = "Snowflake Legacy Service User with all parameters",
AbortDetachedQuery = true,
Autocommit = false,
BinaryInputFormat = "UTF8",
BinaryOutputFormat = "BASE64",
ClientMemoryLimit = 1024,
ClientMetadataRequestUseConnectionCtx = true,
ClientPrefetchThreads = 2,
ClientResultChunkSize = 48,
ClientResultColumnCaseInsensitive = true,
ClientSessionKeepAlive = true,
ClientSessionKeepAliveHeartbeatFrequency = 2400,
ClientTimestampTypeMapping = "TIMESTAMP_NTZ",
DateInputFormat = "YYYY-MM-DD",
DateOutputFormat = "YY-MM-DD",
EnableUnloadPhysicalTypeOptimization = false,
EnableUnredactedQuerySyntaxError = true,
ErrorOnNondeterministicMerge = false,
ErrorOnNondeterministicUpdate = true,
GeographyOutputFormat = "WKB",
GeometryOutputFormat = "WKB",
JdbcTreatDecimalAsInt = false,
JdbcTreatTimestampNtzAsUtc = true,
JdbcUseSessionTimezone = false,
JsonIndent = 4,
LockTimeout = 21222,
LogLevel = "ERROR",
MultiStatementCount = 0,
NetworkPolicy = "BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7",
NoorderSequenceAsDefault = false,
OdbcTreatDecimalAsInt = true,
PreventUnloadToInternalStages = true,
QueryTag = "some_tag",
QuotedIdentifiersIgnoreCase = true,
RowsPerResultset = 2,
SearchPath = "$public, $current",
SimulatedDataSharingConsumer = "some_consumer",
StatementQueuedTimeoutInSeconds = 10,
StatementTimeoutInSeconds = 10,
StrictJsonOutput = true,
S3StageVpceDnsName = "vpce-id.s3.region.vpce.amazonaws.com",
TimeInputFormat = "HH24:MI",
TimeOutputFormat = "HH24:MI",
TimestampDayIsAlways24h = true,
TimestampInputFormat = "YYYY-MM-DD",
TimestampLtzOutputFormat = "YYYY-MM-DD HH24:MI:SS",
TimestampNtzOutputFormat = "YYYY-MM-DD HH24:MI:SS",
TimestampOutputFormat = "YYYY-MM-DD HH24:MI:SS",
TimestampTypeMapping = "TIMESTAMP_LTZ",
TimestampTzOutputFormat = "YYYY-MM-DD HH24:MI:SS",
Timezone = "Europe/Warsaw",
TraceLevel = "PROPAGATE",
TransactionAbortOnError = true,
TransactionDefaultIsolationLevel = "READ COMMITTED",
TwoDigitCenturyStart = 1980,
UnsupportedDdlAction = "FAIL",
UseCachedResult = false,
WeekOfYearPolicy = 1,
WeekStart = 1,
});
// with AWS workload identity (GetCallerIdentity attestation)
var withAwsWif = new Snowflake.LegacyServiceUser("with_aws_wif", new()
{
Name = "legacy_service_user_aws",
DefaultWorkloadIdentity = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityArgs
{
Aws = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityAwsArgs
{
Arn = "arn:aws:iam::123456789012:role/snowflake-service-role",
},
},
});
// with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
var withAwsJwtWif = new Snowflake.LegacyServiceUser("with_aws_jwt_wif", new()
{
Name = "legacy_service_user_aws_jwt",
DefaultWorkloadIdentity = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityArgs
{
Aws = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityAwsArgs
{
Arn = "arn:aws:iam::123456789012:role/snowflake-service-role",
Issuer = "https://sts.amazonaws.com",
},
},
});
// with GCP workload identity
var withGcpWif = new Snowflake.LegacyServiceUser("with_gcp_wif", new()
{
Name = "legacy_service_user_gcp",
DefaultWorkloadIdentity = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityArgs
{
Gcp = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityGcpArgs
{
Subject = "1122334455",
},
},
});
// with Azure workload identity
var withAzureWif = new Snowflake.LegacyServiceUser("with_azure_wif", new()
{
Name = "legacy_service_user_azure",
DefaultWorkloadIdentity = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityArgs
{
Azure = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityAzureArgs
{
Issuer = "https://login.microsoftonline.com/tenant-id/v2.0",
Subject = "application-id",
},
},
});
// with OIDC workload identity
var withOidcWif = new Snowflake.LegacyServiceUser("with_oidc_wif", new()
{
Name = "legacy_service_user_oidc",
DefaultWorkloadIdentity = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityArgs
{
Oidc = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityOidcArgs
{
Issuer = "https://oidc.example.com",
Subject = "service-principal",
OidcAudienceLists = new[]
{
"snowflake",
},
},
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.snowflake.LegacyServiceUser;
import com.pulumi.snowflake.LegacyServiceUserArgs;
import com.pulumi.snowflake.inputs.LegacyServiceUserDefaultWorkloadIdentityArgs;
import com.pulumi.snowflake.inputs.LegacyServiceUserDefaultWorkloadIdentityAwsArgs;
import com.pulumi.snowflake.inputs.LegacyServiceUserDefaultWorkloadIdentityGcpArgs;
import com.pulumi.snowflake.inputs.LegacyServiceUserDefaultWorkloadIdentityAzureArgs;
import com.pulumi.snowflake.inputs.LegacyServiceUserDefaultWorkloadIdentityOidcArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
// minimal
var minimal = new LegacyServiceUser("minimal", LegacyServiceUserArgs.builder()
.name("Snowflake Legacy Service User - minimal")
.build());
final var email = config.require("email");
final var loginName = config.require("loginName");
final var password = config.require("password");
// with all attributes set
var user = new LegacyServiceUser("user", LegacyServiceUserArgs.builder()
.name("Snowflake Legacy Service User")
.loginName(loginName)
.comment("A legacy service user of snowflake.")
.password(password)
.disabled("false")
.displayName("Snowflake Legacy Service User display name")
.email(email)
.defaultWarehouse("warehouse")
.defaultSecondaryRolesOption("ALL")
.defaultRole("role1")
.defaultNamespace("some.namespace")
.minsToUnlock(9)
.daysToExpiry(8)
.rsaPublicKey("...")
.rsaPublicKey2("...")
.mustChangePassword("true")
.build());
// all parameters set on the resource level
var u = new LegacyServiceUser("u", LegacyServiceUserArgs.builder()
.name("Snowflake Legacy Service User with all parameters")
.abortDetachedQuery(true)
.autocommit(false)
.binaryInputFormat("UTF8")
.binaryOutputFormat("BASE64")
.clientMemoryLimit(1024)
.clientMetadataRequestUseConnectionCtx(true)
.clientPrefetchThreads(2)
.clientResultChunkSize(48)
.clientResultColumnCaseInsensitive(true)
.clientSessionKeepAlive(true)
.clientSessionKeepAliveHeartbeatFrequency(2400)
.clientTimestampTypeMapping("TIMESTAMP_NTZ")
.dateInputFormat("YYYY-MM-DD")
.dateOutputFormat("YY-MM-DD")
.enableUnloadPhysicalTypeOptimization(false)
.enableUnredactedQuerySyntaxError(true)
.errorOnNondeterministicMerge(false)
.errorOnNondeterministicUpdate(true)
.geographyOutputFormat("WKB")
.geometryOutputFormat("WKB")
.jdbcTreatDecimalAsInt(false)
.jdbcTreatTimestampNtzAsUtc(true)
.jdbcUseSessionTimezone(false)
.jsonIndent(4)
.lockTimeout(21222)
.logLevel("ERROR")
.multiStatementCount(0)
.networkPolicy("BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7")
.noorderSequenceAsDefault(false)
.odbcTreatDecimalAsInt(true)
.preventUnloadToInternalStages(true)
.queryTag("some_tag")
.quotedIdentifiersIgnoreCase(true)
.rowsPerResultset(2)
.searchPath("$public, $current")
.simulatedDataSharingConsumer("some_consumer")
.statementQueuedTimeoutInSeconds(10)
.statementTimeoutInSeconds(10)
.strictJsonOutput(true)
.s3StageVpceDnsName("vpce-id.s3.region.vpce.amazonaws.com")
.timeInputFormat("HH24:MI")
.timeOutputFormat("HH24:MI")
.timestampDayIsAlways24h(true)
.timestampInputFormat("YYYY-MM-DD")
.timestampLtzOutputFormat("YYYY-MM-DD HH24:MI:SS")
.timestampNtzOutputFormat("YYYY-MM-DD HH24:MI:SS")
.timestampOutputFormat("YYYY-MM-DD HH24:MI:SS")
.timestampTypeMapping("TIMESTAMP_LTZ")
.timestampTzOutputFormat("YYYY-MM-DD HH24:MI:SS")
.timezone("Europe/Warsaw")
.traceLevel("PROPAGATE")
.transactionAbortOnError(true)
.transactionDefaultIsolationLevel("READ COMMITTED")
.twoDigitCenturyStart(1980)
.unsupportedDdlAction("FAIL")
.useCachedResult(false)
.weekOfYearPolicy(1)
.weekStart(1)
.build());
// with AWS workload identity (GetCallerIdentity attestation)
var withAwsWif = new LegacyServiceUser("withAwsWif", LegacyServiceUserArgs.builder()
.name("legacy_service_user_aws")
.defaultWorkloadIdentity(LegacyServiceUserDefaultWorkloadIdentityArgs.builder()
.aws(LegacyServiceUserDefaultWorkloadIdentityAwsArgs.builder()
.arn("arn:aws:iam::123456789012:role/snowflake-service-role")
.build())
.build())
.build());
// with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
var withAwsJwtWif = new LegacyServiceUser("withAwsJwtWif", LegacyServiceUserArgs.builder()
.name("legacy_service_user_aws_jwt")
.defaultWorkloadIdentity(LegacyServiceUserDefaultWorkloadIdentityArgs.builder()
.aws(LegacyServiceUserDefaultWorkloadIdentityAwsArgs.builder()
.arn("arn:aws:iam::123456789012:role/snowflake-service-role")
.issuer("https://sts.amazonaws.com")
.build())
.build())
.build());
// with GCP workload identity
var withGcpWif = new LegacyServiceUser("withGcpWif", LegacyServiceUserArgs.builder()
.name("legacy_service_user_gcp")
.defaultWorkloadIdentity(LegacyServiceUserDefaultWorkloadIdentityArgs.builder()
.gcp(LegacyServiceUserDefaultWorkloadIdentityGcpArgs.builder()
.subject("1122334455")
.build())
.build())
.build());
// with Azure workload identity
var withAzureWif = new LegacyServiceUser("withAzureWif", LegacyServiceUserArgs.builder()
.name("legacy_service_user_azure")
.defaultWorkloadIdentity(LegacyServiceUserDefaultWorkloadIdentityArgs.builder()
.azure(LegacyServiceUserDefaultWorkloadIdentityAzureArgs.builder()
.issuer("https://login.microsoftonline.com/tenant-id/v2.0")
.subject("application-id")
.build())
.build())
.build());
// with OIDC workload identity
var withOidcWif = new LegacyServiceUser("withOidcWif", LegacyServiceUserArgs.builder()
.name("legacy_service_user_oidc")
.defaultWorkloadIdentity(LegacyServiceUserDefaultWorkloadIdentityArgs.builder()
.oidc(LegacyServiceUserDefaultWorkloadIdentityOidcArgs.builder()
.issuer("https://oidc.example.com")
.subject("service-principal")
.oidcAudienceLists("snowflake")
.build())
.build())
.build());
}
}
configuration:
email:
type: string
loginName:
type: string
password:
type: string
resources:
# minimal
minimal:
type: snowflake:LegacyServiceUser
properties:
name: Snowflake Legacy Service User - minimal
# with all attributes set
user:
type: snowflake:LegacyServiceUser
properties:
name: Snowflake Legacy Service User
loginName: ${loginName}
comment: A legacy service user of snowflake.
password: ${password}
disabled: 'false'
displayName: Snowflake Legacy Service User display name
email: ${email}
defaultWarehouse: warehouse
defaultSecondaryRolesOption: ALL
defaultRole: role1
defaultNamespace: some.namespace
minsToUnlock: 9
daysToExpiry: 8
rsaPublicKey: '...'
rsaPublicKey2: '...'
mustChangePassword: 'true'
# all parameters set on the resource level
u:
type: snowflake:LegacyServiceUser
properties:
name: Snowflake Legacy Service User with all parameters
abortDetachedQuery: true
autocommit: false
binaryInputFormat: UTF8
binaryOutputFormat: BASE64
clientMemoryLimit: 1024
clientMetadataRequestUseConnectionCtx: true
clientPrefetchThreads: 2
clientResultChunkSize: 48
clientResultColumnCaseInsensitive: true
clientSessionKeepAlive: true
clientSessionKeepAliveHeartbeatFrequency: 2400
clientTimestampTypeMapping: TIMESTAMP_NTZ
dateInputFormat: YYYY-MM-DD
dateOutputFormat: YY-MM-DD
enableUnloadPhysicalTypeOptimization: false
enableUnredactedQuerySyntaxError: true
errorOnNondeterministicMerge: false
errorOnNondeterministicUpdate: true
geographyOutputFormat: WKB
geometryOutputFormat: WKB
jdbcTreatDecimalAsInt: false
jdbcTreatTimestampNtzAsUtc: true
jdbcUseSessionTimezone: false
jsonIndent: 4
lockTimeout: 21222
logLevel: ERROR
multiStatementCount: 0
networkPolicy: BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7
noorderSequenceAsDefault: false
odbcTreatDecimalAsInt: true
preventUnloadToInternalStages: true
queryTag: some_tag
quotedIdentifiersIgnoreCase: true
rowsPerResultset: 2
searchPath: $public, $current
simulatedDataSharingConsumer: some_consumer
statementQueuedTimeoutInSeconds: 10
statementTimeoutInSeconds: 10
strictJsonOutput: true
s3StageVpceDnsName: vpce-id.s3.region.vpce.amazonaws.com
timeInputFormat: HH24:MI
timeOutputFormat: HH24:MI
timestampDayIsAlways24h: true
timestampInputFormat: YYYY-MM-DD
timestampLtzOutputFormat: YYYY-MM-DD HH24:MI:SS
timestampNtzOutputFormat: YYYY-MM-DD HH24:MI:SS
timestampOutputFormat: YYYY-MM-DD HH24:MI:SS
timestampTypeMapping: TIMESTAMP_LTZ
timestampTzOutputFormat: YYYY-MM-DD HH24:MI:SS
timezone: Europe/Warsaw
traceLevel: PROPAGATE
transactionAbortOnError: true
transactionDefaultIsolationLevel: READ COMMITTED
twoDigitCenturyStart: 1980
unsupportedDdlAction: FAIL
useCachedResult: false
weekOfYearPolicy: 1
weekStart: 1
# with AWS workload identity (GetCallerIdentity attestation)
withAwsWif:
type: snowflake:LegacyServiceUser
name: with_aws_wif
properties:
name: legacy_service_user_aws
defaultWorkloadIdentity:
aws:
arn: arn:aws:iam::123456789012:role/snowflake-service-role
# with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
withAwsJwtWif:
type: snowflake:LegacyServiceUser
name: with_aws_jwt_wif
properties:
name: legacy_service_user_aws_jwt
defaultWorkloadIdentity:
aws:
arn: arn:aws:iam::123456789012:role/snowflake-service-role
issuer: https://sts.amazonaws.com
# with GCP workload identity
withGcpWif:
type: snowflake:LegacyServiceUser
name: with_gcp_wif
properties:
name: legacy_service_user_gcp
defaultWorkloadIdentity:
gcp:
subject: '1122334455'
# with Azure workload identity
withAzureWif:
type: snowflake:LegacyServiceUser
name: with_azure_wif
properties:
name: legacy_service_user_azure
defaultWorkloadIdentity:
azure:
issuer: https://login.microsoftonline.com/tenant-id/v2.0
subject: application-id
# with OIDC workload identity
withOidcWif:
type: snowflake:LegacyServiceUser
name: with_oidc_wif
properties:
name: legacy_service_user_oidc
defaultWorkloadIdentity:
oidc:
issuer: https://oidc.example.com
subject: service-principal
oidcAudienceLists:
- snowflake
terraform {
required_providers {
snowflake = {
source = "pulumi/snowflake"
}
}
}
# minimal
resource "snowflake_legacy_service_user" "minimal" {
lifecycle {
create_before_destroy = true
}
name = "Snowflake Legacy Service User - minimal"
}
# with all attributes set
resource "snowflake_legacy_service_user" "user" {
lifecycle {
create_before_destroy = true
}
name = "Snowflake Legacy Service User"
login_name = var.loginName
comment = "A legacy service user of snowflake."
password = var.password
disabled = "false"
display_name = "Snowflake Legacy Service User display name"
email = var.email
default_warehouse = "warehouse"
default_secondary_roles_option = "ALL"
default_role = "role1"
default_namespace = "some.namespace"
mins_to_unlock = 9
days_to_expiry = 8
rsa_public_key = "..."
rsa_public_key_2 = "..."
must_change_password = "true"
}
# all parameters set on the resource level
resource "snowflake_legacy_service_user" "u" {
lifecycle {
create_before_destroy = true
}
name = "Snowflake Legacy Service User with all parameters"
abort_detached_query = true
autocommit = false
binary_input_format = "UTF8"
binary_output_format = "BASE64"
client_memory_limit = 1024
client_metadata_request_use_connection_ctx = true
client_prefetch_threads = 2
client_result_chunk_size = 48
client_result_column_case_insensitive = true
client_session_keep_alive = true
client_session_keep_alive_heartbeat_frequency = 2400
client_timestamp_type_mapping = "TIMESTAMP_NTZ"
date_input_format = "YYYY-MM-DD"
date_output_format = "YY-MM-DD"
enable_unload_physical_type_optimization = false
enable_unredacted_query_syntax_error = true
error_on_nondeterministic_merge = false
error_on_nondeterministic_update = true
geography_output_format = "WKB"
geometry_output_format = "WKB"
jdbc_treat_decimal_as_int = false
jdbc_treat_timestamp_ntz_as_utc = true
jdbc_use_session_timezone = false
json_indent = 4
lock_timeout = 21222
log_level = "ERROR"
multi_statement_count = 0
network_policy = "BVYDGRAT_0D5E3DD1_F644_03DE_318A_1179886518A7"
noorder_sequence_as_default = false
odbc_treat_decimal_as_int = true
prevent_unload_to_internal_stages = true
query_tag = "some_tag"
quoted_identifiers_ignore_case = true
rows_per_resultset = 2
search_path = "$public, $current"
simulated_data_sharing_consumer = "some_consumer"
statement_queued_timeout_in_seconds = 10
statement_timeout_in_seconds = 10
strict_json_output = true
s3_stage_vpce_dns_name = "vpce-id.s3.region.vpce.amazonaws.com"
time_input_format = "HH24:MI"
time_output_format = "HH24:MI"
timestamp_day_is_always_24h = true
timestamp_input_format = "YYYY-MM-DD"
timestamp_ltz_output_format = "YYYY-MM-DD HH24:MI:SS"
timestamp_ntz_output_format = "YYYY-MM-DD HH24:MI:SS"
timestamp_output_format = "YYYY-MM-DD HH24:MI:SS"
timestamp_type_mapping = "TIMESTAMP_LTZ"
timestamp_tz_output_format = "YYYY-MM-DD HH24:MI:SS"
timezone = "Europe/Warsaw"
trace_level = "PROPAGATE"
transaction_abort_on_error = true
transaction_default_isolation_level = "READ COMMITTED"
two_digit_century_start = 1980
unsupported_ddl_action = "FAIL"
use_cached_result = false
week_of_year_policy = 1
week_start = 1
}
# with AWS workload identity (GetCallerIdentity attestation)
resource "snowflake_legacy_service_user" "with_aws_wif" {
lifecycle {
create_before_destroy = true
}
name = "legacy_service_user_aws"
default_workload_identity {
aws {
arn = "arn:aws:iam::123456789012:role/snowflake-service-role"
}
}
}
# with AWS workload identity (JWT-based / GetWebIdentityToken attestation)
resource "snowflake_legacy_service_user" "with_aws_jwt_wif" {
lifecycle {
create_before_destroy = true
}
name = "legacy_service_user_aws_jwt"
default_workload_identity {
aws {
arn = "arn:aws:iam::123456789012:role/snowflake-service-role"
issuer = "https://sts.amazonaws.com"
}
}
}
# with GCP workload identity
resource "snowflake_legacy_service_user" "with_gcp_wif" {
lifecycle {
create_before_destroy = true
}
name = "legacy_service_user_gcp"
default_workload_identity {
gcp {
subject = "1122334455"
}
}
}
# with Azure workload identity
resource "snowflake_legacy_service_user" "with_azure_wif" {
lifecycle {
create_before_destroy = true
}
name = "legacy_service_user_azure"
default_workload_identity {
azure {
issuer = "https://login.microsoftonline.com/tenant-id/v2.0"
subject = "application-id"
}
}
}
# with OIDC workload identity
resource "snowflake_legacy_service_user" "with_oidc_wif" {
lifecycle {
create_before_destroy = true
}
name = "legacy_service_user_oidc"
default_workload_identity {
oidc {
issuer = "https://oidc.example.com"
subject = "service-principal"
oidc_audience_list = ["snowflake"]
}
}
}
variable "email" {
type = string
}
variable "loginName" {
type = string
}
variable "password" {
type = string
}
Note Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.
Note If a field has a default value, it is shown next to the type in the schema.
Create LegacyServiceUser Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new LegacyServiceUser(name: string, args?: LegacyServiceUserArgs, opts?: CustomResourceOptions);@overload
def LegacyServiceUser(resource_name: str,
args: Optional[LegacyServiceUserArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def LegacyServiceUser(resource_name: str,
opts: Optional[ResourceOptions] = None,
abort_detached_query: Optional[bool] = None,
active_python_profiler: Optional[str] = None,
autocommit: Optional[bool] = None,
binary_input_format: Optional[str] = None,
binary_output_format: Optional[str] = None,
client_enable_log_info_statement_parameters: Optional[bool] = None,
client_memory_limit: Optional[int] = None,
client_metadata_request_use_connection_ctx: Optional[bool] = None,
client_metadata_use_session_database: Optional[bool] = None,
client_prefetch_threads: Optional[int] = None,
client_result_chunk_size: Optional[int] = None,
client_result_column_case_insensitive: Optional[bool] = None,
client_session_keep_alive: Optional[bool] = None,
client_session_keep_alive_heartbeat_frequency: Optional[int] = None,
client_timestamp_type_mapping: Optional[str] = None,
comment: Optional[str] = None,
csv_timestamp_format: Optional[str] = None,
date_input_format: Optional[str] = None,
date_output_format: Optional[str] = None,
days_to_expiry: Optional[int] = None,
default_namespace: Optional[str] = None,
default_role: Optional[str] = None,
default_secondary_roles_option: Optional[str] = None,
default_warehouse: Optional[str] = None,
default_workload_identity: Optional[LegacyServiceUserDefaultWorkloadIdentityArgs] = None,
disabled: Optional[str] = None,
display_name: Optional[str] = None,
email: Optional[str] = None,
enable_get_ddl_use_data_type_alias: Optional[bool] = None,
enable_unload_physical_type_optimization: Optional[bool] = None,
enable_unredacted_query_syntax_error: Optional[bool] = None,
error_on_nondeterministic_merge: Optional[bool] = None,
error_on_nondeterministic_update: Optional[bool] = None,
geography_output_format: Optional[str] = None,
geometry_output_format: Optional[str] = None,
hybrid_table_lock_timeout: Optional[int] = None,
jdbc_treat_decimal_as_int: Optional[bool] = None,
jdbc_treat_timestamp_ntz_as_utc: Optional[bool] = None,
jdbc_use_session_timezone: Optional[bool] = None,
js_treat_integer_as_bigint: Optional[bool] = None,
json_indent: Optional[int] = None,
lock_timeout: Optional[int] = None,
log_event_level: Optional[str] = None,
log_level: Optional[str] = None,
login_name: Optional[str] = None,
mins_to_unlock: Optional[int] = None,
multi_statement_count: Optional[int] = None,
must_change_password: Optional[str] = None,
name: Optional[str] = None,
network_policy: Optional[str] = None,
noorder_sequence_as_default: Optional[bool] = None,
odbc_treat_decimal_as_int: Optional[bool] = None,
password: Optional[str] = None,
prevent_unload_to_internal_stages: Optional[bool] = None,
python_profiler_modules: Optional[str] = None,
python_profiler_target_stage: Optional[str] = None,
query_tag: Optional[str] = None,
quoted_identifiers_ignore_case: Optional[bool] = None,
rows_per_resultset: Optional[int] = None,
rsa_public_key: Optional[str] = None,
rsa_public_key2: Optional[str] = None,
rsa_public_key2_wo: Optional[str] = None,
rsa_public_key2_wo_version: Optional[int] = None,
rsa_public_key_wo: Optional[str] = None,
rsa_public_key_wo_version: Optional[int] = None,
s3_stage_vpce_dns_name: Optional[str] = None,
search_path: Optional[str] = None,
simulated_data_sharing_consumer: Optional[str] = None,
statement_queued_timeout_in_seconds: Optional[int] = None,
statement_timeout_in_seconds: Optional[int] = None,
strict_json_output: Optional[bool] = None,
time_input_format: Optional[str] = None,
time_output_format: Optional[str] = None,
timestamp_day_is_always24h: Optional[bool] = None,
timestamp_input_format: Optional[str] = None,
timestamp_ltz_output_format: Optional[str] = None,
timestamp_ntz_output_format: Optional[str] = None,
timestamp_output_format: Optional[str] = None,
timestamp_type_mapping: Optional[str] = None,
timestamp_tz_output_format: Optional[str] = None,
timezone: Optional[str] = None,
trace_level: Optional[str] = None,
transaction_abort_on_error: Optional[bool] = None,
transaction_default_isolation_level: Optional[str] = None,
two_digit_century_start: Optional[int] = None,
unsupported_ddl_action: Optional[str] = None,
use_cached_result: Optional[bool] = None,
week_of_year_policy: Optional[int] = None,
week_start: Optional[int] = None)func NewLegacyServiceUser(ctx *Context, name string, args *LegacyServiceUserArgs, opts ...ResourceOption) (*LegacyServiceUser, error)public LegacyServiceUser(string name, LegacyServiceUserArgs? args = null, CustomResourceOptions? opts = null)
public LegacyServiceUser(String name, LegacyServiceUserArgs args)
public LegacyServiceUser(String name, LegacyServiceUserArgs args, CustomResourceOptions options)
type: snowflake:LegacyServiceUser
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "snowflake_legacy_service_user" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args LegacyServiceUserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args LegacyServiceUserArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args LegacyServiceUserArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args LegacyServiceUserArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args LegacyServiceUserArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var legacyServiceUserResource = new Snowflake.LegacyServiceUser("legacyServiceUserResource", new()
{
AbortDetachedQuery = false,
ActivePythonProfiler = "string",
Autocommit = false,
BinaryInputFormat = "string",
BinaryOutputFormat = "string",
ClientEnableLogInfoStatementParameters = false,
ClientMemoryLimit = 0,
ClientMetadataRequestUseConnectionCtx = false,
ClientMetadataUseSessionDatabase = false,
ClientPrefetchThreads = 0,
ClientResultChunkSize = 0,
ClientResultColumnCaseInsensitive = false,
ClientSessionKeepAlive = false,
ClientSessionKeepAliveHeartbeatFrequency = 0,
ClientTimestampTypeMapping = "string",
Comment = "string",
CsvTimestampFormat = "string",
DateInputFormat = "string",
DateOutputFormat = "string",
DaysToExpiry = 0,
DefaultNamespace = "string",
DefaultRole = "string",
DefaultSecondaryRolesOption = "string",
DefaultWarehouse = "string",
DefaultWorkloadIdentity = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityArgs
{
Aws = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityAwsArgs
{
Arn = "string",
Issuer = "string",
},
Azure = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityAzureArgs
{
Issuer = "string",
Subject = "string",
},
Gcp = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityGcpArgs
{
Subject = "string",
},
Oidc = new Snowflake.Inputs.LegacyServiceUserDefaultWorkloadIdentityOidcArgs
{
Issuer = "string",
Subject = "string",
OidcAudienceLists = new[]
{
"string",
},
},
},
Disabled = "string",
DisplayName = "string",
Email = "string",
EnableGetDdlUseDataTypeAlias = false,
EnableUnloadPhysicalTypeOptimization = false,
EnableUnredactedQuerySyntaxError = false,
ErrorOnNondeterministicMerge = false,
ErrorOnNondeterministicUpdate = false,
GeographyOutputFormat = "string",
GeometryOutputFormat = "string",
HybridTableLockTimeout = 0,
JdbcTreatDecimalAsInt = false,
JdbcTreatTimestampNtzAsUtc = false,
JdbcUseSessionTimezone = false,
JsTreatIntegerAsBigint = false,
JsonIndent = 0,
LockTimeout = 0,
LogEventLevel = "string",
LogLevel = "string",
LoginName = "string",
MinsToUnlock = 0,
MultiStatementCount = 0,
MustChangePassword = "string",
Name = "string",
NetworkPolicy = "string",
NoorderSequenceAsDefault = false,
OdbcTreatDecimalAsInt = false,
Password = "string",
PreventUnloadToInternalStages = false,
PythonProfilerModules = "string",
PythonProfilerTargetStage = "string",
QueryTag = "string",
QuotedIdentifiersIgnoreCase = false,
RowsPerResultset = 0,
RsaPublicKey = "string",
RsaPublicKey2 = "string",
RsaPublicKey2Wo = "string",
RsaPublicKey2WoVersion = 0,
RsaPublicKeyWo = "string",
RsaPublicKeyWoVersion = 0,
S3StageVpceDnsName = "string",
SearchPath = "string",
SimulatedDataSharingConsumer = "string",
StatementQueuedTimeoutInSeconds = 0,
StatementTimeoutInSeconds = 0,
StrictJsonOutput = false,
TimeInputFormat = "string",
TimeOutputFormat = "string",
TimestampDayIsAlways24h = false,
TimestampInputFormat = "string",
TimestampLtzOutputFormat = "string",
TimestampNtzOutputFormat = "string",
TimestampOutputFormat = "string",
TimestampTypeMapping = "string",
TimestampTzOutputFormat = "string",
Timezone = "string",
TraceLevel = "string",
TransactionAbortOnError = false,
TransactionDefaultIsolationLevel = "string",
TwoDigitCenturyStart = 0,
UnsupportedDdlAction = "string",
UseCachedResult = false,
WeekOfYearPolicy = 0,
WeekStart = 0,
});
example, err := snowflake.NewLegacyServiceUser(ctx, "legacyServiceUserResource", &snowflake.LegacyServiceUserArgs{
AbortDetachedQuery: pulumi.Bool(false),
ActivePythonProfiler: pulumi.String("string"),
Autocommit: pulumi.Bool(false),
BinaryInputFormat: pulumi.String("string"),
BinaryOutputFormat: pulumi.String("string"),
ClientEnableLogInfoStatementParameters: pulumi.Bool(false),
ClientMemoryLimit: pulumi.Int(0),
ClientMetadataRequestUseConnectionCtx: pulumi.Bool(false),
ClientMetadataUseSessionDatabase: pulumi.Bool(false),
ClientPrefetchThreads: pulumi.Int(0),
ClientResultChunkSize: pulumi.Int(0),
ClientResultColumnCaseInsensitive: pulumi.Bool(false),
ClientSessionKeepAlive: pulumi.Bool(false),
ClientSessionKeepAliveHeartbeatFrequency: pulumi.Int(0),
ClientTimestampTypeMapping: pulumi.String("string"),
Comment: pulumi.String("string"),
CsvTimestampFormat: pulumi.String("string"),
DateInputFormat: pulumi.String("string"),
DateOutputFormat: pulumi.String("string"),
DaysToExpiry: pulumi.Int(0),
DefaultNamespace: pulumi.String("string"),
DefaultRole: pulumi.String("string"),
DefaultSecondaryRolesOption: pulumi.String("string"),
DefaultWarehouse: pulumi.String("string"),
DefaultWorkloadIdentity: &snowflake.LegacyServiceUserDefaultWorkloadIdentityArgs{
Aws: &snowflake.LegacyServiceUserDefaultWorkloadIdentityAwsArgs{
Arn: pulumi.String("string"),
Issuer: pulumi.String("string"),
},
Azure: &snowflake.LegacyServiceUserDefaultWorkloadIdentityAzureArgs{
Issuer: pulumi.String("string"),
Subject: pulumi.String("string"),
},
Gcp: &snowflake.LegacyServiceUserDefaultWorkloadIdentityGcpArgs{
Subject: pulumi.String("string"),
},
Oidc: &snowflake.LegacyServiceUserDefaultWorkloadIdentityOidcArgs{
Issuer: pulumi.String("string"),
Subject: pulumi.String("string"),
OidcAudienceLists: pulumi.StringArray{
pulumi.String("string"),
},
},
},
Disabled: pulumi.String("string"),
DisplayName: pulumi.String("string"),
Email: pulumi.String("string"),
EnableGetDdlUseDataTypeAlias: pulumi.Bool(false),
EnableUnloadPhysicalTypeOptimization: pulumi.Bool(false),
EnableUnredactedQuerySyntaxError: pulumi.Bool(false),
ErrorOnNondeterministicMerge: pulumi.Bool(false),
ErrorOnNondeterministicUpdate: pulumi.Bool(false),
GeographyOutputFormat: pulumi.String("string"),
GeometryOutputFormat: pulumi.String("string"),
HybridTableLockTimeout: pulumi.Int(0),
JdbcTreatDecimalAsInt: pulumi.Bool(false),
JdbcTreatTimestampNtzAsUtc: pulumi.Bool(false),
JdbcUseSessionTimezone: pulumi.Bool(false),
JsTreatIntegerAsBigint: pulumi.Bool(false),
JsonIndent: pulumi.Int(0),
LockTimeout: pulumi.Int(0),
LogEventLevel: pulumi.String("string"),
LogLevel: pulumi.String("string"),
LoginName: pulumi.String("string"),
MinsToUnlock: pulumi.Int(0),
MultiStatementCount: pulumi.Int(0),
MustChangePassword: pulumi.String("string"),
Name: pulumi.String("string"),
NetworkPolicy: pulumi.String("string"),
NoorderSequenceAsDefault: pulumi.Bool(false),
OdbcTreatDecimalAsInt: pulumi.Bool(false),
Password: pulumi.String("string"),
PreventUnloadToInternalStages: pulumi.Bool(false),
PythonProfilerModules: pulumi.String("string"),
PythonProfilerTargetStage: pulumi.String("string"),
QueryTag: pulumi.String("string"),
QuotedIdentifiersIgnoreCase: pulumi.Bool(false),
RowsPerResultset: pulumi.Int(0),
RsaPublicKey: pulumi.String("string"),
RsaPublicKey2: pulumi.String("string"),
RsaPublicKey2Wo: pulumi.String("string"),
RsaPublicKey2WoVersion: pulumi.Int(0),
RsaPublicKeyWo: pulumi.String("string"),
RsaPublicKeyWoVersion: pulumi.Int(0),
S3StageVpceDnsName: pulumi.String("string"),
SearchPath: pulumi.String("string"),
SimulatedDataSharingConsumer: pulumi.String("string"),
StatementQueuedTimeoutInSeconds: pulumi.Int(0),
StatementTimeoutInSeconds: pulumi.Int(0),
StrictJsonOutput: pulumi.Bool(false),
TimeInputFormat: pulumi.String("string"),
TimeOutputFormat: pulumi.String("string"),
TimestampDayIsAlways24h: pulumi.Bool(false),
TimestampInputFormat: pulumi.String("string"),
TimestampLtzOutputFormat: pulumi.String("string"),
TimestampNtzOutputFormat: pulumi.String("string"),
TimestampOutputFormat: pulumi.String("string"),
TimestampTypeMapping: pulumi.String("string"),
TimestampTzOutputFormat: pulumi.String("string"),
Timezone: pulumi.String("string"),
TraceLevel: pulumi.String("string"),
TransactionAbortOnError: pulumi.Bool(false),
TransactionDefaultIsolationLevel: pulumi.String("string"),
TwoDigitCenturyStart: pulumi.Int(0),
UnsupportedDdlAction: pulumi.String("string"),
UseCachedResult: pulumi.Bool(false),
WeekOfYearPolicy: pulumi.Int(0),
WeekStart: pulumi.Int(0),
})
resource "snowflake_legacy_service_user" "legacyServiceUserResource" {
lifecycle {
create_before_destroy = true
}
abort_detached_query = false
active_python_profiler = "string"
autocommit = false
binary_input_format = "string"
binary_output_format = "string"
client_enable_log_info_statement_parameters = false
client_memory_limit = 0
client_metadata_request_use_connection_ctx = false
client_metadata_use_session_database = false
client_prefetch_threads = 0
client_result_chunk_size = 0
client_result_column_case_insensitive = false
client_session_keep_alive = false
client_session_keep_alive_heartbeat_frequency = 0
client_timestamp_type_mapping = "string"
comment = "string"
csv_timestamp_format = "string"
date_input_format = "string"
date_output_format = "string"
days_to_expiry = 0
default_namespace = "string"
default_role = "string"
default_secondary_roles_option = "string"
default_warehouse = "string"
default_workload_identity = {
aws = {
arn = "string"
issuer = "string"
}
azure = {
issuer = "string"
subject = "string"
}
gcp = {
subject = "string"
}
oidc = {
issuer = "string"
subject = "string"
oidc_audience_lists = ["string"]
}
}
disabled = "string"
display_name = "string"
email = "string"
enable_get_ddl_use_data_type_alias = false
enable_unload_physical_type_optimization = false
enable_unredacted_query_syntax_error = false
error_on_nondeterministic_merge = false
error_on_nondeterministic_update = false
geography_output_format = "string"
geometry_output_format = "string"
hybrid_table_lock_timeout = 0
jdbc_treat_decimal_as_int = false
jdbc_treat_timestamp_ntz_as_utc = false
jdbc_use_session_timezone = false
js_treat_integer_as_bigint = false
json_indent = 0
lock_timeout = 0
log_event_level = "string"
log_level = "string"
login_name = "string"
mins_to_unlock = 0
multi_statement_count = 0
must_change_password = "string"
name = "string"
network_policy = "string"
noorder_sequence_as_default = false
odbc_treat_decimal_as_int = false
password = "string"
prevent_unload_to_internal_stages = false
python_profiler_modules = "string"
python_profiler_target_stage = "string"
query_tag = "string"
quoted_identifiers_ignore_case = false
rows_per_resultset = 0
rsa_public_key = "string"
rsa_public_key2 = "string"
rsa_public_key2_wo = "string"
rsa_public_key2_wo_version = 0
rsa_public_key_wo = "string"
rsa_public_key_wo_version = 0
s3_stage_vpce_dns_name = "string"
search_path = "string"
simulated_data_sharing_consumer = "string"
statement_queued_timeout_in_seconds = 0
statement_timeout_in_seconds = 0
strict_json_output = false
time_input_format = "string"
time_output_format = "string"
timestamp_day_is_always24h = false
timestamp_input_format = "string"
timestamp_ltz_output_format = "string"
timestamp_ntz_output_format = "string"
timestamp_output_format = "string"
timestamp_type_mapping = "string"
timestamp_tz_output_format = "string"
timezone = "string"
trace_level = "string"
transaction_abort_on_error = false
transaction_default_isolation_level = "string"
two_digit_century_start = 0
unsupported_ddl_action = "string"
use_cached_result = false
week_of_year_policy = 0
week_start = 0
}
var legacyServiceUserResource = new LegacyServiceUser("legacyServiceUserResource", LegacyServiceUserArgs.builder()
.abortDetachedQuery(false)
.activePythonProfiler("string")
.autocommit(false)
.binaryInputFormat("string")
.binaryOutputFormat("string")
.clientEnableLogInfoStatementParameters(false)
.clientMemoryLimit(0)
.clientMetadataRequestUseConnectionCtx(false)
.clientMetadataUseSessionDatabase(false)
.clientPrefetchThreads(0)
.clientResultChunkSize(0)
.clientResultColumnCaseInsensitive(false)
.clientSessionKeepAlive(false)
.clientSessionKeepAliveHeartbeatFrequency(0)
.clientTimestampTypeMapping("string")
.comment("string")
.csvTimestampFormat("string")
.dateInputFormat("string")
.dateOutputFormat("string")
.daysToExpiry(0)
.defaultNamespace("string")
.defaultRole("string")
.defaultSecondaryRolesOption("string")
.defaultWarehouse("string")
.defaultWorkloadIdentity(LegacyServiceUserDefaultWorkloadIdentityArgs.builder()
.aws(LegacyServiceUserDefaultWorkloadIdentityAwsArgs.builder()
.arn("string")
.issuer("string")
.build())
.azure(LegacyServiceUserDefaultWorkloadIdentityAzureArgs.builder()
.issuer("string")
.subject("string")
.build())
.gcp(LegacyServiceUserDefaultWorkloadIdentityGcpArgs.builder()
.subject("string")
.build())
.oidc(LegacyServiceUserDefaultWorkloadIdentityOidcArgs.builder()
.issuer("string")
.subject("string")
.oidcAudienceLists("string")
.build())
.build())
.disabled("string")
.displayName("string")
.email("string")
.enableGetDdlUseDataTypeAlias(false)
.enableUnloadPhysicalTypeOptimization(false)
.enableUnredactedQuerySyntaxError(false)
.errorOnNondeterministicMerge(false)
.errorOnNondeterministicUpdate(false)
.geographyOutputFormat("string")
.geometryOutputFormat("string")
.hybridTableLockTimeout(0)
.jdbcTreatDecimalAsInt(false)
.jdbcTreatTimestampNtzAsUtc(false)
.jdbcUseSessionTimezone(false)
.jsTreatIntegerAsBigint(false)
.jsonIndent(0)
.lockTimeout(0)
.logEventLevel("string")
.logLevel("string")
.loginName("string")
.minsToUnlock(0)
.multiStatementCount(0)
.mustChangePassword("string")
.name("string")
.networkPolicy("string")
.noorderSequenceAsDefault(false)
.odbcTreatDecimalAsInt(false)
.password("string")
.preventUnloadToInternalStages(false)
.pythonProfilerModules("string")
.pythonProfilerTargetStage("string")
.queryTag("string")
.quotedIdentifiersIgnoreCase(false)
.rowsPerResultset(0)
.rsaPublicKey("string")
.rsaPublicKey2("string")
.rsaPublicKey2Wo("string")
.rsaPublicKey2WoVersion(0)
.rsaPublicKeyWo("string")
.rsaPublicKeyWoVersion(0)
.s3StageVpceDnsName("string")
.searchPath("string")
.simulatedDataSharingConsumer("string")
.statementQueuedTimeoutInSeconds(0)
.statementTimeoutInSeconds(0)
.strictJsonOutput(false)
.timeInputFormat("string")
.timeOutputFormat("string")
.timestampDayIsAlways24h(false)
.timestampInputFormat("string")
.timestampLtzOutputFormat("string")
.timestampNtzOutputFormat("string")
.timestampOutputFormat("string")
.timestampTypeMapping("string")
.timestampTzOutputFormat("string")
.timezone("string")
.traceLevel("string")
.transactionAbortOnError(false)
.transactionDefaultIsolationLevel("string")
.twoDigitCenturyStart(0)
.unsupportedDdlAction("string")
.useCachedResult(false)
.weekOfYearPolicy(0)
.weekStart(0)
.build());
legacy_service_user_resource = snowflake.LegacyServiceUser("legacyServiceUserResource",
abort_detached_query=False,
active_python_profiler="string",
autocommit=False,
binary_input_format="string",
binary_output_format="string",
client_enable_log_info_statement_parameters=False,
client_memory_limit=0,
client_metadata_request_use_connection_ctx=False,
client_metadata_use_session_database=False,
client_prefetch_threads=0,
client_result_chunk_size=0,
client_result_column_case_insensitive=False,
client_session_keep_alive=False,
client_session_keep_alive_heartbeat_frequency=0,
client_timestamp_type_mapping="string",
comment="string",
csv_timestamp_format="string",
date_input_format="string",
date_output_format="string",
days_to_expiry=0,
default_namespace="string",
default_role="string",
default_secondary_roles_option="string",
default_warehouse="string",
default_workload_identity={
"aws": {
"arn": "string",
"issuer": "string",
},
"azure": {
"issuer": "string",
"subject": "string",
},
"gcp": {
"subject": "string",
},
"oidc": {
"issuer": "string",
"subject": "string",
"oidc_audience_lists": ["string"],
},
},
disabled="string",
display_name="string",
email="string",
enable_get_ddl_use_data_type_alias=False,
enable_unload_physical_type_optimization=False,
enable_unredacted_query_syntax_error=False,
error_on_nondeterministic_merge=False,
error_on_nondeterministic_update=False,
geography_output_format="string",
geometry_output_format="string",
hybrid_table_lock_timeout=0,
jdbc_treat_decimal_as_int=False,
jdbc_treat_timestamp_ntz_as_utc=False,
jdbc_use_session_timezone=False,
js_treat_integer_as_bigint=False,
json_indent=0,
lock_timeout=0,
log_event_level="string",
log_level="string",
login_name="string",
mins_to_unlock=0,
multi_statement_count=0,
must_change_password="string",
name="string",
network_policy="string",
noorder_sequence_as_default=False,
odbc_treat_decimal_as_int=False,
password="string",
prevent_unload_to_internal_stages=False,
python_profiler_modules="string",
python_profiler_target_stage="string",
query_tag="string",
quoted_identifiers_ignore_case=False,
rows_per_resultset=0,
rsa_public_key="string",
rsa_public_key2="string",
rsa_public_key2_wo="string",
rsa_public_key2_wo_version=0,
rsa_public_key_wo="string",
rsa_public_key_wo_version=0,
s3_stage_vpce_dns_name="string",
search_path="string",
simulated_data_sharing_consumer="string",
statement_queued_timeout_in_seconds=0,
statement_timeout_in_seconds=0,
strict_json_output=False,
time_input_format="string",
time_output_format="string",
timestamp_day_is_always24h=False,
timestamp_input_format="string",
timestamp_ltz_output_format="string",
timestamp_ntz_output_format="string",
timestamp_output_format="string",
timestamp_type_mapping="string",
timestamp_tz_output_format="string",
timezone="string",
trace_level="string",
transaction_abort_on_error=False,
transaction_default_isolation_level="string",
two_digit_century_start=0,
unsupported_ddl_action="string",
use_cached_result=False,
week_of_year_policy=0,
week_start=0)
const legacyServiceUserResource = new snowflake.LegacyServiceUser("legacyServiceUserResource", {
abortDetachedQuery: false,
activePythonProfiler: "string",
autocommit: false,
binaryInputFormat: "string",
binaryOutputFormat: "string",
clientEnableLogInfoStatementParameters: false,
clientMemoryLimit: 0,
clientMetadataRequestUseConnectionCtx: false,
clientMetadataUseSessionDatabase: false,
clientPrefetchThreads: 0,
clientResultChunkSize: 0,
clientResultColumnCaseInsensitive: false,
clientSessionKeepAlive: false,
clientSessionKeepAliveHeartbeatFrequency: 0,
clientTimestampTypeMapping: "string",
comment: "string",
csvTimestampFormat: "string",
dateInputFormat: "string",
dateOutputFormat: "string",
daysToExpiry: 0,
defaultNamespace: "string",
defaultRole: "string",
defaultSecondaryRolesOption: "string",
defaultWarehouse: "string",
defaultWorkloadIdentity: {
aws: {
arn: "string",
issuer: "string",
},
azure: {
issuer: "string",
subject: "string",
},
gcp: {
subject: "string",
},
oidc: {
issuer: "string",
subject: "string",
oidcAudienceLists: ["string"],
},
},
disabled: "string",
displayName: "string",
email: "string",
enableGetDdlUseDataTypeAlias: false,
enableUnloadPhysicalTypeOptimization: false,
enableUnredactedQuerySyntaxError: false,
errorOnNondeterministicMerge: false,
errorOnNondeterministicUpdate: false,
geographyOutputFormat: "string",
geometryOutputFormat: "string",
hybridTableLockTimeout: 0,
jdbcTreatDecimalAsInt: false,
jdbcTreatTimestampNtzAsUtc: false,
jdbcUseSessionTimezone: false,
jsTreatIntegerAsBigint: false,
jsonIndent: 0,
lockTimeout: 0,
logEventLevel: "string",
logLevel: "string",
loginName: "string",
minsToUnlock: 0,
multiStatementCount: 0,
mustChangePassword: "string",
name: "string",
networkPolicy: "string",
noorderSequenceAsDefault: false,
odbcTreatDecimalAsInt: false,
password: "string",
preventUnloadToInternalStages: false,
pythonProfilerModules: "string",
pythonProfilerTargetStage: "string",
queryTag: "string",
quotedIdentifiersIgnoreCase: false,
rowsPerResultset: 0,
rsaPublicKey: "string",
rsaPublicKey2: "string",
rsaPublicKey2Wo: "string",
rsaPublicKey2WoVersion: 0,
rsaPublicKeyWo: "string",
rsaPublicKeyWoVersion: 0,
s3StageVpceDnsName: "string",
searchPath: "string",
simulatedDataSharingConsumer: "string",
statementQueuedTimeoutInSeconds: 0,
statementTimeoutInSeconds: 0,
strictJsonOutput: false,
timeInputFormat: "string",
timeOutputFormat: "string",
timestampDayIsAlways24h: false,
timestampInputFormat: "string",
timestampLtzOutputFormat: "string",
timestampNtzOutputFormat: "string",
timestampOutputFormat: "string",
timestampTypeMapping: "string",
timestampTzOutputFormat: "string",
timezone: "string",
traceLevel: "string",
transactionAbortOnError: false,
transactionDefaultIsolationLevel: "string",
twoDigitCenturyStart: 0,
unsupportedDdlAction: "string",
useCachedResult: false,
weekOfYearPolicy: 0,
weekStart: 0,
});
type: snowflake:LegacyServiceUser
properties:
abortDetachedQuery: false
activePythonProfiler: string
autocommit: false
binaryInputFormat: string
binaryOutputFormat: string
clientEnableLogInfoStatementParameters: false
clientMemoryLimit: 0
clientMetadataRequestUseConnectionCtx: false
clientMetadataUseSessionDatabase: false
clientPrefetchThreads: 0
clientResultChunkSize: 0
clientResultColumnCaseInsensitive: false
clientSessionKeepAlive: false
clientSessionKeepAliveHeartbeatFrequency: 0
clientTimestampTypeMapping: string
comment: string
csvTimestampFormat: string
dateInputFormat: string
dateOutputFormat: string
daysToExpiry: 0
defaultNamespace: string
defaultRole: string
defaultSecondaryRolesOption: string
defaultWarehouse: string
defaultWorkloadIdentity:
aws:
arn: string
issuer: string
azure:
issuer: string
subject: string
gcp:
subject: string
oidc:
issuer: string
oidcAudienceLists:
- string
subject: string
disabled: string
displayName: string
email: string
enableGetDdlUseDataTypeAlias: false
enableUnloadPhysicalTypeOptimization: false
enableUnredactedQuerySyntaxError: false
errorOnNondeterministicMerge: false
errorOnNondeterministicUpdate: false
geographyOutputFormat: string
geometryOutputFormat: string
hybridTableLockTimeout: 0
jdbcTreatDecimalAsInt: false
jdbcTreatTimestampNtzAsUtc: false
jdbcUseSessionTimezone: false
jsTreatIntegerAsBigint: false
jsonIndent: 0
lockTimeout: 0
logEventLevel: string
logLevel: string
loginName: string
minsToUnlock: 0
multiStatementCount: 0
mustChangePassword: string
name: string
networkPolicy: string
noorderSequenceAsDefault: false
odbcTreatDecimalAsInt: false
password: string
preventUnloadToInternalStages: false
pythonProfilerModules: string
pythonProfilerTargetStage: string
queryTag: string
quotedIdentifiersIgnoreCase: false
rowsPerResultset: 0
rsaPublicKey: string
rsaPublicKey2: string
rsaPublicKey2Wo: string
rsaPublicKey2WoVersion: 0
rsaPublicKeyWo: string
rsaPublicKeyWoVersion: 0
s3StageVpceDnsName: string
searchPath: string
simulatedDataSharingConsumer: string
statementQueuedTimeoutInSeconds: 0
statementTimeoutInSeconds: 0
strictJsonOutput: false
timeInputFormat: string
timeOutputFormat: string
timestampDayIsAlways24h: false
timestampInputFormat: string
timestampLtzOutputFormat: string
timestampNtzOutputFormat: string
timestampOutputFormat: string
timestampTypeMapping: string
timestampTzOutputFormat: string
timezone: string
traceLevel: string
transactionAbortOnError: false
transactionDefaultIsolationLevel: string
twoDigitCenturyStart: 0
unsupportedDdlAction: string
useCachedResult: false
weekOfYearPolicy: 0
weekStart: 0
LegacyServiceUser Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The LegacyServiceUser resource accepts the following input properties:
- Abort
Detached boolQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- Active
Python stringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - Autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- Binary
Input stringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - Binary
Output stringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - Client
Enable boolLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- Client
Memory intLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- Client
Metadata boolRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- Client
Metadata boolUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- Client
Prefetch intThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- Client
Result intChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- Client
Result boolColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- Client
Session boolKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- Client
Session intKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- Client
Timestamp stringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - Comment string
- Specifies a comment for the user.
- Csv
Timestamp stringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- Date
Input stringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- Date
Output stringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- Days
To intExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Default
Namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- Default
Role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- Default
Secondary stringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - Default
Warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- Default
Workload LegacyIdentity Service User Default Workload Identity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - Disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Display
Name string - Name displayed for the user in the Snowflake web interface.
- Email string
- Email address for the user.
- Enable
Get boolDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- Enable
Unload boolPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- Enable
Unredacted boolQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- Error
On boolNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- Error
On boolNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- Geography
Output stringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - Geometry
Output stringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - Hybrid
Table intLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- Jdbc
Treat boolDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- Jdbc
Treat boolTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- Jdbc
Use boolSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- Js
Treat boolInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- Json
Indent int - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- Lock
Timeout int - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- Log
Event stringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - Log
Level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - Login
Name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- Mins
To intUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Multi
Statement intCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- Must
Change stringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - Network
Policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- Noorder
Sequence boolAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- Odbc
Treat boolDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- Password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Prevent
Unload boolTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- Python
Profiler stringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- Python
Profiler stringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- Query
Tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- Quoted
Identifiers boolIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- Rows
Per intResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- Rsa
Public stringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - S3Stage
Vpce stringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- Search
Path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- Simulated
Data stringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- Statement
Queued intTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- Statement
Timeout intIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- Strict
Json boolOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- Time
Input stringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- Time
Output stringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- Timestamp
Day boolIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- Timestamp
Input stringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- Timestamp
Ltz stringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- Timestamp
Ntz stringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- Timestamp
Output stringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- Timestamp
Type stringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - Timestamp
Tz stringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- Timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- Trace
Level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - Transaction
Abort boolOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- Transaction
Default stringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - Two
Digit intCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - Unsupported
Ddl stringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - Use
Cached boolResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- Week
Of intYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - Week
Start int - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- Abort
Detached boolQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- Active
Python stringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - Autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- Binary
Input stringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - Binary
Output stringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - Client
Enable boolLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- Client
Memory intLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- Client
Metadata boolRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- Client
Metadata boolUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- Client
Prefetch intThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- Client
Result intChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- Client
Result boolColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- Client
Session boolKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- Client
Session intKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- Client
Timestamp stringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - Comment string
- Specifies a comment for the user.
- Csv
Timestamp stringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- Date
Input stringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- Date
Output stringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- Days
To intExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Default
Namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- Default
Role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- Default
Secondary stringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - Default
Warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- Default
Workload LegacyIdentity Service User Default Workload Identity Args - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - Disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Display
Name string - Name displayed for the user in the Snowflake web interface.
- Email string
- Email address for the user.
- Enable
Get boolDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- Enable
Unload boolPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- Enable
Unredacted boolQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- Error
On boolNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- Error
On boolNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- Geography
Output stringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - Geometry
Output stringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - Hybrid
Table intLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- Jdbc
Treat boolDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- Jdbc
Treat boolTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- Jdbc
Use boolSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- Js
Treat boolInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- Json
Indent int - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- Lock
Timeout int - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- Log
Event stringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - Log
Level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - Login
Name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- Mins
To intUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Multi
Statement intCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- Must
Change stringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - Network
Policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- Noorder
Sequence boolAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- Odbc
Treat boolDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- Password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Prevent
Unload boolTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- Python
Profiler stringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- Python
Profiler stringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- Query
Tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- Quoted
Identifiers boolIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- Rows
Per intResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- Rsa
Public stringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - S3Stage
Vpce stringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- Search
Path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- Simulated
Data stringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- Statement
Queued intTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- Statement
Timeout intIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- Strict
Json boolOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- Time
Input stringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- Time
Output stringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- Timestamp
Day boolIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- Timestamp
Input stringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- Timestamp
Ltz stringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- Timestamp
Ntz stringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- Timestamp
Output stringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- Timestamp
Type stringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - Timestamp
Tz stringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- Timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- Trace
Level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - Transaction
Abort boolOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- Transaction
Default stringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - Two
Digit intCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - Unsupported
Ddl stringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - Use
Cached boolResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- Week
Of intYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - Week
Start int - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort_
detached_ boolquery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active_
python_ stringprofiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary_
input_ stringformat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary_
output_ stringformat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client_
enable_ boollog_ info_ statement_ parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client_
memory_ numberlimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client_
metadata_ boolrequest_ use_ connection_ ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client_
metadata_ booluse_ session_ database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client_
prefetch_ numberthreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client_
result_ numberchunk_ size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client_
result_ boolcolumn_ case_ insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client_
session_ boolkeep_ alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client_
session_ numberkeep_ alive_ heartbeat_ frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client_
timestamp_ stringtype_ mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment string
- Specifies a comment for the user.
- csv_
timestamp_ stringformat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date_
input_ stringformat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date_
output_ stringformat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days_
to_ numberexpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default_
namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default_
role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default_
secondary_ stringroles_ option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default_
warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default_
workload_ objectidentity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display_
name string - Name displayed for the user in the Snowflake web interface.
- email string
- Email address for the user.
- enable_
get_ boolddl_ use_ data_ type_ alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable_
unload_ boolphysical_ type_ optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable_
unredacted_ boolquery_ syntax_ error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error_
on_ boolnondeterministic_ merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error_
on_ boolnondeterministic_ update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- geography_
output_ stringformat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry_
output_ stringformat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid_
table_ numberlock_ timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc_
treat_ booldecimal_ as_ int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc_
treat_ booltimestamp_ ntz_ as_ utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc_
use_ boolsession_ timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js_
treat_ boolinteger_ as_ bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json_
indent number - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock_
timeout number - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log_
event_ stringlevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log_
level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login_
name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins_
to_ numberunlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi_
statement_ numbercount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must_
change_ stringpassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network_
policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder_
sequence_ boolas_ default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc_
treat_ booldecimal_ as_ int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent_
unload_ boolto_ internal_ stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python_
profiler_ stringmodules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python_
profiler_ stringtarget_ stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query_
tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted_
identifiers_ boolignore_ case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows_
per_ numberresultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa_
public_ stringkey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa_
public_ stringkey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa_
public_ stringkey2_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ numberkey2_ wo_ version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ stringkey_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ numberkey_ wo_ version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3_
stage_ stringvpce_ dns_ name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search_
path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- simulated_
data_ stringsharing_ consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement_
queued_ numbertimeout_ in_ seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement_
timeout_ numberin_ seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict_
json_ booloutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time_
input_ stringformat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time_
output_ stringformat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp_
day_ boolis_ always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp_
input_ stringformat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp_
ltz_ stringoutput_ format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp_
ntz_ stringoutput_ format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp_
output_ stringformat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp_
type_ stringmapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp_
tz_ stringoutput_ format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace_
level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction_
abort_ boolon_ error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction_
default_ stringisolation_ level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two_
digit_ numbercentury_ start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported_
ddl_ stringaction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use_
cached_ boolresult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- week_
of_ numberyear_ policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week_
start number - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort
Detached BooleanQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active
Python StringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit Boolean
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary
Input StringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary
Output StringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client
Enable BooleanLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client
Memory IntegerLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client
Metadata BooleanRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client
Metadata BooleanUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client
Prefetch IntegerThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client
Result IntegerChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client
Result BooleanColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client
Session BooleanKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client
Session IntegerKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client
Timestamp StringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment String
- Specifies a comment for the user.
- csv
Timestamp StringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date
Input StringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date
Output StringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days
To IntegerExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default
Namespace String - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default
Role String - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default
Secondary StringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default
Warehouse String - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default
Workload LegacyIdentity Service User Default Workload Identity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled String
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display
Name String - Name displayed for the user in the Snowflake web interface.
- email String
- Email address for the user.
- enable
Get BooleanDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable
Unload BooleanPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable
Unredacted BooleanQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error
On BooleanNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error
On BooleanNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- geography
Output StringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry
Output StringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid
Table IntegerLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc
Treat BooleanDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc
Treat BooleanTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc
Use BooleanSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js
Treat BooleanInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json
Indent Integer - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock
Timeout Integer - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log
Event StringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log
Level String - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login
Name String - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins
To IntegerUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi
Statement IntegerCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must
Change StringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name String
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network
Policy String - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder
Sequence BooleanAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc
Treat BooleanDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- password String
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent
Unload BooleanTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python
Profiler StringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python
Profiler StringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query
Tag String - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted
Identifiers BooleanIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows
Per IntegerResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa
Public StringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa
Public StringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa
Public StringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public IntegerKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public StringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public IntegerKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3Stage
Vpce StringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search
Path String - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- simulated
Data StringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement
Queued IntegerTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement
Timeout IntegerIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict
Json BooleanOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time
Input StringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time
Output StringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp
Day BooleanIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp
Input StringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp
Ltz StringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp
Ntz StringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp
Output StringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp
Type StringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp
Tz StringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone String
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace
Level String - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction
Abort BooleanOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction
Default StringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two
Digit IntegerCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported
Ddl StringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use
Cached BooleanResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- week
Of IntegerYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week
Start Integer - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort
Detached booleanQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active
Python stringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit boolean
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary
Input stringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary
Output stringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client
Enable booleanLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client
Memory numberLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client
Metadata booleanRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client
Metadata booleanUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client
Prefetch numberThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client
Result numberChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client
Result booleanColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client
Session booleanKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client
Session numberKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client
Timestamp stringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment string
- Specifies a comment for the user.
- csv
Timestamp stringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date
Input stringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date
Output stringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days
To numberExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default
Namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default
Role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default
Secondary stringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default
Warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default
Workload LegacyIdentity Service User Default Workload Identity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display
Name string - Name displayed for the user in the Snowflake web interface.
- email string
- Email address for the user.
- enable
Get booleanDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable
Unload booleanPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable
Unredacted booleanQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error
On booleanNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error
On booleanNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- geography
Output stringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry
Output stringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid
Table numberLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc
Treat booleanDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc
Treat booleanTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc
Use booleanSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js
Treat booleanInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json
Indent number - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock
Timeout number - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log
Event stringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log
Level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login
Name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins
To numberUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi
Statement numberCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must
Change stringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network
Policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder
Sequence booleanAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc
Treat booleanDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent
Unload booleanTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python
Profiler stringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python
Profiler stringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query
Tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted
Identifiers booleanIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows
Per numberResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa
Public stringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa
Public stringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa
Public stringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public numberKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public numberKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3Stage
Vpce stringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search
Path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- simulated
Data stringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement
Queued numberTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement
Timeout numberIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict
Json booleanOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time
Input stringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time
Output stringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp
Day booleanIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp
Input stringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp
Ltz stringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp
Ntz stringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp
Output stringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp
Type stringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp
Tz stringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace
Level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction
Abort booleanOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction
Default stringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two
Digit numberCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported
Ddl stringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use
Cached booleanResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- week
Of numberYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week
Start number - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort_
detached_ boolquery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active_
python_ strprofiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary_
input_ strformat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary_
output_ strformat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client_
enable_ boollog_ info_ statement_ parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client_
memory_ intlimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client_
metadata_ boolrequest_ use_ connection_ ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client_
metadata_ booluse_ session_ database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client_
prefetch_ intthreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client_
result_ intchunk_ size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client_
result_ boolcolumn_ case_ insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client_
session_ boolkeep_ alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client_
session_ intkeep_ alive_ heartbeat_ frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client_
timestamp_ strtype_ mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment str
- Specifies a comment for the user.
- csv_
timestamp_ strformat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date_
input_ strformat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date_
output_ strformat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days_
to_ intexpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default_
namespace str - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default_
role str - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default_
secondary_ strroles_ option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default_
warehouse str - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default_
workload_ Legacyidentity Service User Default Workload Identity Args - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled str
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display_
name str - Name displayed for the user in the Snowflake web interface.
- email str
- Email address for the user.
- enable_
get_ boolddl_ use_ data_ type_ alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable_
unload_ boolphysical_ type_ optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable_
unredacted_ boolquery_ syntax_ error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error_
on_ boolnondeterministic_ merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error_
on_ boolnondeterministic_ update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- geography_
output_ strformat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry_
output_ strformat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid_
table_ intlock_ timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc_
treat_ booldecimal_ as_ int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc_
treat_ booltimestamp_ ntz_ as_ utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc_
use_ boolsession_ timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js_
treat_ boolinteger_ as_ bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json_
indent int - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock_
timeout int - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log_
event_ strlevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log_
level str - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login_
name str - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins_
to_ intunlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi_
statement_ intcount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must_
change_ strpassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name str
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network_
policy str - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder_
sequence_ boolas_ default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc_
treat_ booldecimal_ as_ int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- password str
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent_
unload_ boolto_ internal_ stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python_
profiler_ strmodules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python_
profiler_ strtarget_ stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query_
tag str - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted_
identifiers_ boolignore_ case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows_
per_ intresultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa_
public_ strkey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa_
public_ strkey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa_
public_ strkey2_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ intkey2_ wo_ version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ strkey_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ intkey_ wo_ version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3_
stage_ strvpce_ dns_ name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search_
path str - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- simulated_
data_ strsharing_ consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement_
queued_ inttimeout_ in_ seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement_
timeout_ intin_ seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict_
json_ booloutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time_
input_ strformat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time_
output_ strformat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp_
day_ boolis_ always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp_
input_ strformat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp_
ltz_ stroutput_ format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp_
ntz_ stroutput_ format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp_
output_ strformat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp_
type_ strmapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp_
tz_ stroutput_ format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone str
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace_
level str - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction_
abort_ boolon_ error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction_
default_ strisolation_ level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two_
digit_ intcentury_ start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported_
ddl_ straction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use_
cached_ boolresult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- week_
of_ intyear_ policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week_
start int - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort
Detached BooleanQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active
Python StringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit Boolean
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary
Input StringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary
Output StringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client
Enable BooleanLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client
Memory NumberLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client
Metadata BooleanRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client
Metadata BooleanUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client
Prefetch NumberThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client
Result NumberChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client
Result BooleanColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client
Session BooleanKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client
Session NumberKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client
Timestamp StringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment String
- Specifies a comment for the user.
- csv
Timestamp StringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date
Input StringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date
Output StringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days
To NumberExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default
Namespace String - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default
Role String - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default
Secondary StringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default
Warehouse String - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default
Workload Property MapIdentity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled String
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display
Name String - Name displayed for the user in the Snowflake web interface.
- email String
- Email address for the user.
- enable
Get BooleanDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable
Unload BooleanPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable
Unredacted BooleanQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error
On BooleanNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error
On BooleanNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- geography
Output StringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry
Output StringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid
Table NumberLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc
Treat BooleanDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc
Treat BooleanTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc
Use BooleanSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js
Treat BooleanInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json
Indent Number - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock
Timeout Number - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log
Event StringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log
Level String - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login
Name String - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins
To NumberUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi
Statement NumberCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must
Change StringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name String
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network
Policy String - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder
Sequence BooleanAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc
Treat BooleanDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- password String
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent
Unload BooleanTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python
Profiler StringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python
Profiler StringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query
Tag String - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted
Identifiers BooleanIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows
Per NumberResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa
Public StringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa
Public StringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa
Public StringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public NumberKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public StringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public NumberKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3Stage
Vpce StringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search
Path String - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- simulated
Data StringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement
Queued NumberTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement
Timeout NumberIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict
Json BooleanOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time
Input StringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time
Output StringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp
Day BooleanIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp
Input StringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp
Ltz StringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp
Ntz StringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp
Output StringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp
Type StringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp
Tz StringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone String
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace
Level String - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction
Abort BooleanOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction
Default StringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two
Digit NumberCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported
Ddl StringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use
Cached BooleanResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- week
Of NumberYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week
Start Number - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
Outputs
All input properties are implicitly available as output properties. Additionally, the LegacyServiceUser resource produces the following output properties:
- Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Id string
- The provider-assigned unique ID for this managed resource.
- Parameters
List<Legacy
Service User Parameter> - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - Show
Outputs List<LegacyService User Show Output> - Outputs the result of
SHOW USERfor the given user. - User
Type string - Specifies a type for the user.
- Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Id string
- The provider-assigned unique ID for this managed resource.
- Parameters
[]Legacy
Service User Parameter - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - Show
Outputs []LegacyService User Show Output - Outputs the result of
SHOW USERfor the given user. - User
Type string - Specifies a type for the user.
- fully_
qualified_ stringname - Fully qualified name of the resource. For more information, see object name resolution.
- id string
- The provider-assigned unique ID for this managed resource.
- parameters list(object)
- Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - show_
outputs list(object) - Outputs the result of
SHOW USERfor the given user. - user_
type string - Specifies a type for the user.
- fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- id String
- The provider-assigned unique ID for this managed resource.
- parameters
List<Legacy
Service User Parameter> - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - show
Outputs List<LegacyService User Show Output> - Outputs the result of
SHOW USERfor the given user. - user
Type String - Specifies a type for the user.
- fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- id string
- The provider-assigned unique ID for this managed resource.
- parameters
Legacy
Service User Parameter[] - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - show
Outputs LegacyService User Show Output[] - Outputs the result of
SHOW USERfor the given user. - user
Type string - Specifies a type for the user.
- fully_
qualified_ strname - Fully qualified name of the resource. For more information, see object name resolution.
- id str
- The provider-assigned unique ID for this managed resource.
- parameters
Sequence[Legacy
Service User Parameter] - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - show_
outputs Sequence[LegacyService User Show Output] - Outputs the result of
SHOW USERfor the given user. - user_
type str - Specifies a type for the user.
- fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- id String
- The provider-assigned unique ID for this managed resource.
- parameters List<Property Map>
- Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - show
Outputs List<Property Map> - Outputs the result of
SHOW USERfor the given user. - user
Type String - Specifies a type for the user.
Look up Existing LegacyServiceUser Resource
Get an existing LegacyServiceUser resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: LegacyServiceUserState, opts?: CustomResourceOptions): LegacyServiceUser@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
abort_detached_query: Optional[bool] = None,
active_python_profiler: Optional[str] = None,
autocommit: Optional[bool] = None,
binary_input_format: Optional[str] = None,
binary_output_format: Optional[str] = None,
client_enable_log_info_statement_parameters: Optional[bool] = None,
client_memory_limit: Optional[int] = None,
client_metadata_request_use_connection_ctx: Optional[bool] = None,
client_metadata_use_session_database: Optional[bool] = None,
client_prefetch_threads: Optional[int] = None,
client_result_chunk_size: Optional[int] = None,
client_result_column_case_insensitive: Optional[bool] = None,
client_session_keep_alive: Optional[bool] = None,
client_session_keep_alive_heartbeat_frequency: Optional[int] = None,
client_timestamp_type_mapping: Optional[str] = None,
comment: Optional[str] = None,
csv_timestamp_format: Optional[str] = None,
date_input_format: Optional[str] = None,
date_output_format: Optional[str] = None,
days_to_expiry: Optional[int] = None,
default_namespace: Optional[str] = None,
default_role: Optional[str] = None,
default_secondary_roles_option: Optional[str] = None,
default_warehouse: Optional[str] = None,
default_workload_identity: Optional[LegacyServiceUserDefaultWorkloadIdentityArgs] = None,
disabled: Optional[str] = None,
display_name: Optional[str] = None,
email: Optional[str] = None,
enable_get_ddl_use_data_type_alias: Optional[bool] = None,
enable_unload_physical_type_optimization: Optional[bool] = None,
enable_unredacted_query_syntax_error: Optional[bool] = None,
error_on_nondeterministic_merge: Optional[bool] = None,
error_on_nondeterministic_update: Optional[bool] = None,
fully_qualified_name: Optional[str] = None,
geography_output_format: Optional[str] = None,
geometry_output_format: Optional[str] = None,
hybrid_table_lock_timeout: Optional[int] = None,
jdbc_treat_decimal_as_int: Optional[bool] = None,
jdbc_treat_timestamp_ntz_as_utc: Optional[bool] = None,
jdbc_use_session_timezone: Optional[bool] = None,
js_treat_integer_as_bigint: Optional[bool] = None,
json_indent: Optional[int] = None,
lock_timeout: Optional[int] = None,
log_event_level: Optional[str] = None,
log_level: Optional[str] = None,
login_name: Optional[str] = None,
mins_to_unlock: Optional[int] = None,
multi_statement_count: Optional[int] = None,
must_change_password: Optional[str] = None,
name: Optional[str] = None,
network_policy: Optional[str] = None,
noorder_sequence_as_default: Optional[bool] = None,
odbc_treat_decimal_as_int: Optional[bool] = None,
parameters: Optional[Sequence[LegacyServiceUserParameterArgs]] = None,
password: Optional[str] = None,
prevent_unload_to_internal_stages: Optional[bool] = None,
python_profiler_modules: Optional[str] = None,
python_profiler_target_stage: Optional[str] = None,
query_tag: Optional[str] = None,
quoted_identifiers_ignore_case: Optional[bool] = None,
rows_per_resultset: Optional[int] = None,
rsa_public_key: Optional[str] = None,
rsa_public_key2: Optional[str] = None,
rsa_public_key2_wo: Optional[str] = None,
rsa_public_key2_wo_version: Optional[int] = None,
rsa_public_key_wo: Optional[str] = None,
rsa_public_key_wo_version: Optional[int] = None,
s3_stage_vpce_dns_name: Optional[str] = None,
search_path: Optional[str] = None,
show_outputs: Optional[Sequence[LegacyServiceUserShowOutputArgs]] = None,
simulated_data_sharing_consumer: Optional[str] = None,
statement_queued_timeout_in_seconds: Optional[int] = None,
statement_timeout_in_seconds: Optional[int] = None,
strict_json_output: Optional[bool] = None,
time_input_format: Optional[str] = None,
time_output_format: Optional[str] = None,
timestamp_day_is_always24h: Optional[bool] = None,
timestamp_input_format: Optional[str] = None,
timestamp_ltz_output_format: Optional[str] = None,
timestamp_ntz_output_format: Optional[str] = None,
timestamp_output_format: Optional[str] = None,
timestamp_type_mapping: Optional[str] = None,
timestamp_tz_output_format: Optional[str] = None,
timezone: Optional[str] = None,
trace_level: Optional[str] = None,
transaction_abort_on_error: Optional[bool] = None,
transaction_default_isolation_level: Optional[str] = None,
two_digit_century_start: Optional[int] = None,
unsupported_ddl_action: Optional[str] = None,
use_cached_result: Optional[bool] = None,
user_type: Optional[str] = None,
week_of_year_policy: Optional[int] = None,
week_start: Optional[int] = None) -> LegacyServiceUserfunc GetLegacyServiceUser(ctx *Context, name string, id IDInput, state *LegacyServiceUserState, opts ...ResourceOption) (*LegacyServiceUser, error)public static LegacyServiceUser Get(string name, Input<string> id, LegacyServiceUserState? state, CustomResourceOptions? opts = null)public static LegacyServiceUser get(String name, Output<String> id, LegacyServiceUserState state, CustomResourceOptions options)resources: _: type: snowflake:LegacyServiceUser get: id: ${id}import {
to = snowflake_legacy_service_user.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Abort
Detached boolQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- Active
Python stringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - Autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- Binary
Input stringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - Binary
Output stringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - Client
Enable boolLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- Client
Memory intLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- Client
Metadata boolRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- Client
Metadata boolUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- Client
Prefetch intThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- Client
Result intChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- Client
Result boolColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- Client
Session boolKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- Client
Session intKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- Client
Timestamp stringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - Comment string
- Specifies a comment for the user.
- Csv
Timestamp stringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- Date
Input stringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- Date
Output stringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- Days
To intExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Default
Namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- Default
Role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- Default
Secondary stringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - Default
Warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- Default
Workload LegacyIdentity Service User Default Workload Identity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - Disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Display
Name string - Name displayed for the user in the Snowflake web interface.
- Email string
- Email address for the user.
- Enable
Get boolDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- Enable
Unload boolPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- Enable
Unredacted boolQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- Error
On boolNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- Error
On boolNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Geography
Output stringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - Geometry
Output stringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - Hybrid
Table intLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- Jdbc
Treat boolDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- Jdbc
Treat boolTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- Jdbc
Use boolSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- Js
Treat boolInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- Json
Indent int - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- Lock
Timeout int - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- Log
Event stringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - Log
Level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - Login
Name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- Mins
To intUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Multi
Statement intCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- Must
Change stringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - Network
Policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- Noorder
Sequence boolAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- Odbc
Treat boolDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- Parameters
List<Legacy
Service User Parameter> - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - Password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Prevent
Unload boolTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- Python
Profiler stringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- Python
Profiler stringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- Query
Tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- Quoted
Identifiers boolIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- Rows
Per intResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- Rsa
Public stringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - S3Stage
Vpce stringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- Search
Path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- Show
Outputs List<LegacyService User Show Output> - Outputs the result of
SHOW USERfor the given user. - Simulated
Data stringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- Statement
Queued intTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- Statement
Timeout intIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- Strict
Json boolOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- Time
Input stringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- Time
Output stringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- Timestamp
Day boolIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- Timestamp
Input stringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- Timestamp
Ltz stringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- Timestamp
Ntz stringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- Timestamp
Output stringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- Timestamp
Type stringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - Timestamp
Tz stringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- Timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- Trace
Level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - Transaction
Abort boolOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- Transaction
Default stringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - Two
Digit intCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - Unsupported
Ddl stringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - Use
Cached boolResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- User
Type string - Specifies a type for the user.
- Week
Of intYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - Week
Start int - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- Abort
Detached boolQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- Active
Python stringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - Autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- Binary
Input stringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - Binary
Output stringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - Client
Enable boolLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- Client
Memory intLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- Client
Metadata boolRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- Client
Metadata boolUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- Client
Prefetch intThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- Client
Result intChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- Client
Result boolColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- Client
Session boolKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- Client
Session intKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- Client
Timestamp stringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - Comment string
- Specifies a comment for the user.
- Csv
Timestamp stringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- Date
Input stringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- Date
Output stringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- Days
To intExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - Default
Namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- Default
Role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- Default
Secondary stringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - Default
Warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- Default
Workload LegacyIdentity Service User Default Workload Identity Args - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - Disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Display
Name string - Name displayed for the user in the Snowflake web interface.
- Email string
- Email address for the user.
- Enable
Get boolDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- Enable
Unload boolPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- Enable
Unredacted boolQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- Error
On boolNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- Error
On boolNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- Fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- Geography
Output stringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - Geometry
Output stringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - Hybrid
Table intLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- Jdbc
Treat boolDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- Jdbc
Treat boolTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- Jdbc
Use boolSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- Js
Treat boolInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- Json
Indent int - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- Lock
Timeout int - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- Log
Event stringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - Log
Level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - Login
Name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- Mins
To intUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Multi
Statement intCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- Must
Change stringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- Name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - Network
Policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- Noorder
Sequence boolAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- Odbc
Treat boolDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- Parameters
[]Legacy
Service User Parameter Args - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - Password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- Prevent
Unload boolTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- Python
Profiler stringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- Python
Profiler stringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- Query
Tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- Quoted
Identifiers boolIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- Rows
Per intResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- Rsa
Public stringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- Rsa
Public stringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - Rsa
Public intKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - S3Stage
Vpce stringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- Search
Path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- Show
Outputs []LegacyService User Show Output Args - Outputs the result of
SHOW USERfor the given user. - Simulated
Data stringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- Statement
Queued intTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- Statement
Timeout intIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- Strict
Json boolOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- Time
Input stringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- Time
Output stringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- Timestamp
Day boolIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- Timestamp
Input stringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- Timestamp
Ltz stringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- Timestamp
Ntz stringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- Timestamp
Output stringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- Timestamp
Type stringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - Timestamp
Tz stringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- Timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- Trace
Level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - Transaction
Abort boolOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- Transaction
Default stringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - Two
Digit intCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - Unsupported
Ddl stringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - Use
Cached boolResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- User
Type string - Specifies a type for the user.
- Week
Of intYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - Week
Start int - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort_
detached_ boolquery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active_
python_ stringprofiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary_
input_ stringformat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary_
output_ stringformat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client_
enable_ boollog_ info_ statement_ parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client_
memory_ numberlimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client_
metadata_ boolrequest_ use_ connection_ ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client_
metadata_ booluse_ session_ database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client_
prefetch_ numberthreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client_
result_ numberchunk_ size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client_
result_ boolcolumn_ case_ insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client_
session_ boolkeep_ alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client_
session_ numberkeep_ alive_ heartbeat_ frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client_
timestamp_ stringtype_ mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment string
- Specifies a comment for the user.
- csv_
timestamp_ stringformat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date_
input_ stringformat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date_
output_ stringformat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days_
to_ numberexpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default_
namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default_
role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default_
secondary_ stringroles_ option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default_
warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default_
workload_ objectidentity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display_
name string - Name displayed for the user in the Snowflake web interface.
- email string
- Email address for the user.
- enable_
get_ boolddl_ use_ data_ type_ alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable_
unload_ boolphysical_ type_ optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable_
unredacted_ boolquery_ syntax_ error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error_
on_ boolnondeterministic_ merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error_
on_ boolnondeterministic_ update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- fully_
qualified_ stringname - Fully qualified name of the resource. For more information, see object name resolution.
- geography_
output_ stringformat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry_
output_ stringformat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid_
table_ numberlock_ timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc_
treat_ booldecimal_ as_ int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc_
treat_ booltimestamp_ ntz_ as_ utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc_
use_ boolsession_ timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js_
treat_ boolinteger_ as_ bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json_
indent number - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock_
timeout number - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log_
event_ stringlevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log_
level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login_
name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins_
to_ numberunlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi_
statement_ numbercount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must_
change_ stringpassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network_
policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder_
sequence_ boolas_ default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc_
treat_ booldecimal_ as_ int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- parameters list(object)
- Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent_
unload_ boolto_ internal_ stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python_
profiler_ stringmodules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python_
profiler_ stringtarget_ stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query_
tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted_
identifiers_ boolignore_ case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows_
per_ numberresultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa_
public_ stringkey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa_
public_ stringkey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa_
public_ stringkey2_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ numberkey2_ wo_ version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ stringkey_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ numberkey_ wo_ version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3_
stage_ stringvpce_ dns_ name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search_
path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- show_
outputs list(object) - Outputs the result of
SHOW USERfor the given user. - simulated_
data_ stringsharing_ consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement_
queued_ numbertimeout_ in_ seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement_
timeout_ numberin_ seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict_
json_ booloutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time_
input_ stringformat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time_
output_ stringformat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp_
day_ boolis_ always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp_
input_ stringformat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp_
ltz_ stringoutput_ format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp_
ntz_ stringoutput_ format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp_
output_ stringformat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp_
type_ stringmapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp_
tz_ stringoutput_ format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace_
level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction_
abort_ boolon_ error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction_
default_ stringisolation_ level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two_
digit_ numbercentury_ start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported_
ddl_ stringaction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use_
cached_ boolresult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- user_
type string - Specifies a type for the user.
- week_
of_ numberyear_ policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week_
start number - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort
Detached BooleanQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active
Python StringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit Boolean
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary
Input StringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary
Output StringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client
Enable BooleanLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client
Memory IntegerLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client
Metadata BooleanRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client
Metadata BooleanUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client
Prefetch IntegerThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client
Result IntegerChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client
Result BooleanColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client
Session BooleanKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client
Session IntegerKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client
Timestamp StringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment String
- Specifies a comment for the user.
- csv
Timestamp StringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date
Input StringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date
Output StringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days
To IntegerExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default
Namespace String - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default
Role String - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default
Secondary StringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default
Warehouse String - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default
Workload LegacyIdentity Service User Default Workload Identity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled String
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display
Name String - Name displayed for the user in the Snowflake web interface.
- email String
- Email address for the user.
- enable
Get BooleanDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable
Unload BooleanPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable
Unredacted BooleanQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error
On BooleanNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error
On BooleanNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- geography
Output StringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry
Output StringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid
Table IntegerLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc
Treat BooleanDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc
Treat BooleanTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc
Use BooleanSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js
Treat BooleanInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json
Indent Integer - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock
Timeout Integer - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log
Event StringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log
Level String - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login
Name String - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins
To IntegerUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi
Statement IntegerCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must
Change StringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name String
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network
Policy String - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder
Sequence BooleanAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc
Treat BooleanDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- parameters
List<Legacy
Service User Parameter> - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - password String
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent
Unload BooleanTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python
Profiler StringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python
Profiler StringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query
Tag String - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted
Identifiers BooleanIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows
Per IntegerResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa
Public StringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa
Public StringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa
Public StringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public IntegerKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public StringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public IntegerKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3Stage
Vpce StringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search
Path String - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- show
Outputs List<LegacyService User Show Output> - Outputs the result of
SHOW USERfor the given user. - simulated
Data StringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement
Queued IntegerTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement
Timeout IntegerIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict
Json BooleanOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time
Input StringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time
Output StringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp
Day BooleanIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp
Input StringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp
Ltz StringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp
Ntz StringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp
Output StringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp
Type StringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp
Tz StringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone String
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace
Level String - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction
Abort BooleanOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction
Default StringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two
Digit IntegerCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported
Ddl StringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use
Cached BooleanResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- user
Type String - Specifies a type for the user.
- week
Of IntegerYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week
Start Integer - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort
Detached booleanQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active
Python stringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit boolean
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary
Input stringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary
Output stringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client
Enable booleanLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client
Memory numberLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client
Metadata booleanRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client
Metadata booleanUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client
Prefetch numberThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client
Result numberChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client
Result booleanColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client
Session booleanKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client
Session numberKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client
Timestamp stringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment string
- Specifies a comment for the user.
- csv
Timestamp stringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date
Input stringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date
Output stringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days
To numberExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default
Namespace string - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default
Role string - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default
Secondary stringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default
Warehouse string - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default
Workload LegacyIdentity Service User Default Workload Identity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled string
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display
Name string - Name displayed for the user in the Snowflake web interface.
- email string
- Email address for the user.
- enable
Get booleanDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable
Unload booleanPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable
Unredacted booleanQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error
On booleanNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error
On booleanNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- fully
Qualified stringName - Fully qualified name of the resource. For more information, see object name resolution.
- geography
Output stringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry
Output stringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid
Table numberLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc
Treat booleanDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc
Treat booleanTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc
Use booleanSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js
Treat booleanInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json
Indent number - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock
Timeout number - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log
Event stringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log
Level string - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login
Name string - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins
To numberUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi
Statement numberCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must
Change stringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name string
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network
Policy string - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder
Sequence booleanAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc
Treat booleanDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- parameters
Legacy
Service User Parameter[] - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - password string
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent
Unload booleanTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python
Profiler stringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python
Profiler stringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query
Tag string - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted
Identifiers booleanIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows
Per numberResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa
Public stringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa
Public stringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa
Public stringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public numberKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public stringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public numberKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3Stage
Vpce stringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search
Path string - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- show
Outputs LegacyService User Show Output[] - Outputs the result of
SHOW USERfor the given user. - simulated
Data stringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement
Queued numberTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement
Timeout numberIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict
Json booleanOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time
Input stringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time
Output stringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp
Day booleanIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp
Input stringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp
Ltz stringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp
Ntz stringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp
Output stringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp
Type stringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp
Tz stringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone string
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace
Level string - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction
Abort booleanOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction
Default stringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two
Digit numberCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported
Ddl stringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use
Cached booleanResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- user
Type string - Specifies a type for the user.
- week
Of numberYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week
Start number - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort_
detached_ boolquery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active_
python_ strprofiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit bool
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary_
input_ strformat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary_
output_ strformat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client_
enable_ boollog_ info_ statement_ parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client_
memory_ intlimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client_
metadata_ boolrequest_ use_ connection_ ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client_
metadata_ booluse_ session_ database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client_
prefetch_ intthreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client_
result_ intchunk_ size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client_
result_ boolcolumn_ case_ insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client_
session_ boolkeep_ alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client_
session_ intkeep_ alive_ heartbeat_ frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client_
timestamp_ strtype_ mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment str
- Specifies a comment for the user.
- csv_
timestamp_ strformat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date_
input_ strformat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date_
output_ strformat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days_
to_ intexpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default_
namespace str - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default_
role str - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default_
secondary_ strroles_ option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default_
warehouse str - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default_
workload_ Legacyidentity Service User Default Workload Identity Args - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled str
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display_
name str - Name displayed for the user in the Snowflake web interface.
- email str
- Email address for the user.
- enable_
get_ boolddl_ use_ data_ type_ alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable_
unload_ boolphysical_ type_ optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable_
unredacted_ boolquery_ syntax_ error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error_
on_ boolnondeterministic_ merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error_
on_ boolnondeterministic_ update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- fully_
qualified_ strname - Fully qualified name of the resource. For more information, see object name resolution.
- geography_
output_ strformat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry_
output_ strformat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid_
table_ intlock_ timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc_
treat_ booldecimal_ as_ int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc_
treat_ booltimestamp_ ntz_ as_ utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc_
use_ boolsession_ timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js_
treat_ boolinteger_ as_ bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json_
indent int - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock_
timeout int - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log_
event_ strlevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log_
level str - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login_
name str - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins_
to_ intunlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi_
statement_ intcount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must_
change_ strpassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name str
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network_
policy str - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder_
sequence_ boolas_ default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc_
treat_ booldecimal_ as_ int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- parameters
Sequence[Legacy
Service User Parameter Args] - Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - password str
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent_
unload_ boolto_ internal_ stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python_
profiler_ strmodules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python_
profiler_ strtarget_ stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query_
tag str - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted_
identifiers_ boolignore_ case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows_
per_ intresultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa_
public_ strkey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa_
public_ strkey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa_
public_ strkey2_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ intkey2_ wo_ version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ strkey_ wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa_
public_ intkey_ wo_ version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3_
stage_ strvpce_ dns_ name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search_
path str - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- show_
outputs Sequence[LegacyService User Show Output Args] - Outputs the result of
SHOW USERfor the given user. - simulated_
data_ strsharing_ consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement_
queued_ inttimeout_ in_ seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement_
timeout_ intin_ seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict_
json_ booloutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time_
input_ strformat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time_
output_ strformat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp_
day_ boolis_ always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp_
input_ strformat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp_
ltz_ stroutput_ format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp_
ntz_ stroutput_ format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp_
output_ strformat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp_
type_ strmapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp_
tz_ stroutput_ format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone str
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace_
level str - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction_
abort_ boolon_ error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction_
default_ strisolation_ level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two_
digit_ intcentury_ start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported_
ddl_ straction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use_
cached_ boolresult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- user_
type str - Specifies a type for the user.
- week_
of_ intyear_ policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week_
start int - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
- abort
Detached BooleanQuery - Specifies the action that Snowflake performs for in-progress queries if connectivity is lost due to abrupt termination of a session (e.g. network outage, browser termination, service interruption). For more information, check ABORT_DETACHED_QUERY docs.
- active
Python StringProfiler - Sets the profiler to use for the session when profiling Python handler code. Valid values are (case-insensitive):
LINE|MEMORY. For more information, check ACTIVE_PYTHON_PROFILER docs. - autocommit Boolean
- Specifies whether autocommit is enabled for the session. Autocommit determines whether a DML statement, when executed without an active transaction, is automatically committed after the statement successfully completes. For more information, see Transactions. For more information, check AUTOCOMMIT docs.
- binary
Input StringFormat - The format of VARCHAR values passed as input to VARCHAR-to-BINARY conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64|UTF8. For more information, check BINARY_INPUT_FORMAT docs. - binary
Output StringFormat - The format for VARCHAR values returned as output by BINARY-to-VARCHAR conversion functions. For more information, see Binary input and output. Valid values are (case-insensitive):
HEX|BASE64. For more information, check BINARY_OUTPUT_FORMAT docs. - client
Enable BooleanLog Info Statement Parameters - Enables users to log the data values bound to PreparedStatements. For more information, check CLIENT_ENABLE_LOG_INFO_STATEMENT_PARAMETERS docs.
- client
Memory NumberLimit - Parameter that specifies the maximum amount of memory the JDBC driver or ODBC driver should use for the result set from queries (in MB). For more information, check CLIENT_MEMORY_LIMIT docs.
- client
Metadata BooleanRequest Use Connection Ctx - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases/schemas to the current database/schema. The narrower search typically returns fewer rows and executes more quickly. For more information, check CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX docs.
- client
Metadata BooleanUse Session Database - For specific ODBC functions and JDBC methods, this parameter can change the default search scope from all databases to the current database. The narrower search typically returns fewer rows and executes more quickly (more details on the usage). For more information, check CLIENT_METADATA_USE_SESSION_DATABASE docs.
- client
Prefetch NumberThreads - Parameter that specifies the number of threads used by the client to pre-fetch large result sets. The driver will attempt to honor the parameter value, but defines the minimum and maximum values (depending on your system’s resources) to improve performance. For more information, check CLIENT_PREFETCH_THREADS docs.
- client
Result NumberChunk Size - Parameter that specifies the maximum size of each set (or chunk) of query results to download (in MB). The JDBC driver downloads query results in chunks. For more information, check CLIENT_RESULT_CHUNK_SIZE docs.
- client
Result BooleanColumn Case Insensitive - Parameter that indicates whether to match column name case-insensitively in ResultSet.get* methods in JDBC. For more information, check CLIENT_RESULT_COLUMN_CASE_INSENSITIVE docs.
- client
Session BooleanKeep Alive - Parameter that indicates whether to force a user to log in again after a period of inactivity in the session. For more information, check CLIENT_SESSION_KEEP_ALIVE docs.
- client
Session NumberKeep Alive Heartbeat Frequency - Number of seconds in-between client attempts to update the token for the session. For more information, check CLIENT_SESSION_KEEP_ALIVE_HEARTBEAT_FREQUENCY docs.
- client
Timestamp StringType Mapping - Specifies the TIMESTAMP_* variation to use when binding timestamp variables for JDBC or ODBC applications that use the bind API to load data. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ. For more information, check CLIENT_TIMESTAMP_TYPE_MAPPING docs. - comment String
- Specifies a comment for the user.
- csv
Timestamp StringFormat - Specifies the format for TIMESTAMP values in CSV files downloaded from Snowsight. If this parameter is not set, TIMESTAMP_LTZ_OUTPUT_FORMAT will be used for TIMESTAMP_LTZ values, TIMESTAMP_TZ_OUTPUT_FORMAT will be used for TIMESTAMP_TZ and TIMESTAMP_NTZ_OUTPUT_FORMAT for TIMESTAMP_NTZ values. For more information, see Date and time input and output formats or Download your query results. For more information, check CSV_TIMESTAMP_FORMAT docs.
- date
Input StringFormat - Specifies the input format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_INPUT_FORMAT docs.
- date
Output StringFormat - Specifies the display format for the DATE data type. For more information, see Date and time input and output formats. For more information, check DATE_OUTPUT_FORMAT docs.
- days
To NumberExpiry - Specifies the number of days after which the user status is set to
Expiredand the user is no longer allowed to log in. This is useful for defining temporary users (i.e. users who should only have access to Snowflake for a limited time period). In general, you should not set this property for account administrators (i.e. users with theACCOUNTADMINrole) because Snowflake locks them out when they becomeExpired. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint". - default
Namespace String - Specifies the namespace (database only or database and schema) that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the namespace exists.
- default
Role String - Specifies the role that is active by default for the user’s session upon login. Note that specifying a default role for a user does not grant the role to the user. The role must be granted explicitly to the user using the GRANT ROLE command. In addition, the CREATE USER operation does not verify that the role exists. For more information about this resource, see docs.
- default
Secondary StringRoles Option - Specifies the secondary roles that are active for the user’s session upon login. Valid values are (case-insensitive):
DEFAULT|NONE|ALL. More information can be found in doc. - default
Warehouse String - Specifies the virtual warehouse that is active by default for the user’s session upon login. Note that the CREATE USER operation does not verify that the warehouse exists. For more information about this resource, see docs.
- default
Workload Property MapIdentity - Configures the default workload identity for the user. This is used for workload identity federation to allow third-party services to authenticate as this user. Only applicable for service users and legacy service users. This field is enabled by default as part of the
USER_ENABLE_DEFAULT_WORKLOAD_IDENTITYexperimental feature. You can opt out by listingUSER_ENABLE_DEFAULT_WORKLOAD_IDENTITYinexperimentalFeaturesDisabledin the provider block. This experiment will be promoted in v2.24.0 or v2.25.0. If this experiment is opted out, attempting to set this field will result in an error. The provider will not get WIF information from Snowflake. - disabled String
- Specifies whether the user is disabled, which prevents logging in and aborts all the currently-running queries for the user. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- display
Name String - Name displayed for the user in the Snowflake web interface.
- email String
- Email address for the user.
- enable
Get BooleanDdl Use Data Type Alias - Specifies whether the output returned by the GET_DDL function contains data type synonyms specified in the original DDL statement. Data type synonyms are also called data type aliases. For more information, check ENABLE_GET_DDL_USE_DATA_TYPE_ALIAS docs.
- enable
Unload BooleanPhysical Type Optimization - Specifies whether to set the schema for unloaded Parquet files based on the logical column data types (i.e. the types in the unload SQL query or source table) or on the unloaded column values (i.e. the smallest data types and precision that support the values in the output columns of the unload SQL statement or source table). For more information, check ENABLE_UNLOAD_PHYSICAL_TYPE_OPTIMIZATION docs.
- enable
Unredacted BooleanQuery Syntax Error - Controls whether query text is redacted if a SQL query fails due to a syntax or parsing error. If FALSE, the content of a failed query is redacted in the views, pages, and functions that provide a query history. Only users with a role that is granted or inherits the AUDIT privilege can set the ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR parameter. When using the ALTER USER command to set the parameter to TRUE for a particular user, modify the user that you want to see the query text, not the user who executed the query (if those are different users). For more information, check ENABLE_UNREDACTED_QUERY_SYNTAX_ERROR docs.
- error
On BooleanNondeterministic Merge - Specifies whether to return an error when the MERGE command is used to update or delete a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_MERGE docs.
- error
On BooleanNondeterministic Update - Specifies whether to return an error when the UPDATE command is used to update a target row that joins multiple source rows and the system cannot determine the action to perform on the target row. For more information, check ERROR_ON_NONDETERMINISTIC_UPDATE docs.
- fully
Qualified StringName - Fully qualified name of the resource. For more information, see object name resolution.
- geography
Output StringFormat - Display format for GEOGRAPHY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOGRAPHY_OUTPUT_FORMAT docs. - geometry
Output StringFormat - Display format for GEOMETRY values. Valid values are (case-insensitive):
GeoJSON|WKT|WKB|EWKT|EWKB. For more information, check GEOMETRY_OUTPUT_FORMAT docs. - hybrid
Table NumberLock Timeout - Number of seconds to wait while trying to acquire row-level locks on a hybrid table, before timing out and aborting the statement. For more information, check HYBRID_TABLE_LOCK_TIMEOUT docs.
- jdbc
Treat BooleanDecimal As Int - Specifies how JDBC processes columns that have a scale of zero (0). For more information, check JDBC_TREAT_DECIMAL_AS_INT docs.
- jdbc
Treat BooleanTimestamp Ntz As Utc - Specifies how JDBC processes TIMESTAMP_NTZ values (more details). For more information, check JDBC_TREAT_TIMESTAMP_NTZ_AS_UTC docs.
- jdbc
Use BooleanSession Timezone - Specifies whether the JDBC Driver uses the time zone of the JVM or the time zone of the session (specified by the TIMEZONE parameter) for the getDate(), getTime(), and getTimestamp() methods of the ResultSet class. For more information, check JDBC_USE_SESSION_TIMEZONE docs.
- js
Treat BooleanInteger As Bigint - Specifies how the Snowflake Node.js Driver processes numeric columns that have a scale of zero (0), for example INTEGER or NUMBER(p, 0). For more information, check JS_TREAT_INTEGER_AS_BIGINT docs.
- json
Indent Number - Specifies the number of blank spaces to indent each new element in JSON output in the session. Also specifies whether to insert newline characters after each element. For more information, check JSON_INDENT docs.
- lock
Timeout Number - Number of seconds to wait while trying to lock a resource, before timing out and aborting the statement. For more information, check LOCK_TIMEOUT docs.
- log
Event StringLevel - Specifies the severity level of log events (rows with record type EVENT) that should be ingested and made available in the active event table. Log events at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_EVENT_LEVEL docs. - log
Level String - Specifies the severity level of messages that should be ingested and made available in the active event table. Messages at the specified level (and at more severe levels) are ingested. Valid values are (case-insensitive):
TRACE|DEBUG|INFO|WARN|ERROR|FATAL|OFF. For more information, check LOG_LEVEL docs. - login
Name String - The name users use to log in. If not supplied, snowflake will use name instead. Login names are always case-insensitive.
- mins
To NumberUnlock - Specifies the number of minutes until the temporary lock on the user login is cleared. To protect against unauthorized user login, Snowflake places a temporary lock on a user after five consecutive unsuccessful login attempts. When creating a user, this property can be set to prevent them from logging in until the specified amount of time passes. To remove a lock immediately for a user, specify a value of 0 for this parameter. Note because this value changes continuously after setting it, the provider is currently NOT handling the external changes to it. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- multi
Statement NumberCount - Number of statements to execute when using the multi-statement capability. For more information, check MULTI_STATEMENT_COUNT docs.
- must
Change StringPassword - Specifies whether the user is forced to change their password on next login (including their first/initial login) into the system. Available options are: "true" or "false". When the value is not set in the configuration the provider will put "default" there which means to use the Snowflake default for this value.
- name String
- Name of the user. Note that if you do not supply loginname this will be used as loginname. Check the docs. Due to technical limitations (read more here), avoid using the following characters:
|,.,". - network
Policy String - Specifies the network policy to enforce for your account. Network policies enable restricting access to your account based on users’ IP address. For more details, see Controlling network traffic with network policies. For more information, check NETWORK_POLICY docs.
- noorder
Sequence BooleanAs Default - Specifies whether the ORDER or NOORDER property is set by default when you create a new sequence or add a new table column. The ORDER and NOORDER properties determine whether or not the values are generated for the sequence or auto-incremented column in increasing or decreasing order. For more information, check NOORDER_SEQUENCE_AS_DEFAULT docs.
- odbc
Treat BooleanDecimal As Int - Specifies how ODBC processes columns that have a scale of zero (0). For more information, check ODBC_TREAT_DECIMAL_AS_INT docs.
- parameters List<Property Map>
- Outputs the result of
SHOW PARAMETERS IN USERfor the given user. - password String
- Password for the user. WARNING: this will put the password in the terraform state file. Use carefully. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
- prevent
Unload BooleanTo Internal Stages - Specifies whether to prevent data unload operations to internal (Snowflake) stages using COPY INTO location statements. For more information, check PREVENT_UNLOAD_TO_INTERNAL_STAGES docs.
- python
Profiler StringModules - Specifies the list of Python modules to include in a report when profiling Python handler code. For more information, check PYTHON_PROFILER_MODULES docs.
- python
Profiler StringTarget Stage - Specifies the fully-qualified name of the stage in which to save a report when profiling Python handler code. For more information, check PYTHON_PROFILER_TARGET_STAGE docs.
- query
Tag String - Optional string that can be used to tag queries and other SQL statements executed within a session. The tags are displayed in the output of the QUERY_HISTORY, QUERY_HISTORY_BY_* functions. For more information, check QUERY_TAG docs.
- quoted
Identifiers BooleanIgnore Case - If true, the case of quoted identifiers is ignored. For more information, check QUOTED_IDENTIFIERS_IGNORE_CASE docs.
- rows
Per NumberResultset - Specifies the maximum number of rows returned in a result set. A value of 0 specifies no maximum. For more information, check ROWS_PER_RESULTSET docs.
- rsa
Public StringKey - Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer.
- rsa
Public StringKey2 - Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer.
- rsa
Public StringKey2Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s second RSA public key; used to rotate the public and private keys for key-pair authentication based on an expiration schedule set by your organization. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKey2WoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKey2WoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public NumberKey2Wo Version - Version counter for
rsaPublicKey2Wo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKey2Woto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public StringKey Wo - NOTE: This field is write-only and its value will not be updated in state as part of read operations.
Specifies the user’s RSA public key; used for key-pair authentication. Must be on 1 line without header and trailer. The value of this field is never saved in the Terraform plan or state, so it can be set from an ephemeral resource. Requires Terraform 1.11 or later. Because Terraform can not detect changes to a write-only value, changes to this field are applied only when
rsaPublicKeyWoVersionchanges. External changes for this field won't be detected; to push the value from your configuration to Snowflake again, incrementrsaPublicKeyWoVersion. Conflicts with the non-write-only variant of this field. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - rsa
Public NumberKey Wo Version - Version counter for
rsaPublicKeyWo. Because Terraform can not detect changes to a write-only value, increment this field to push the current value ofrsaPublicKeyWoto Snowflake. Removing both fields unsets the value. This field can be only used whenWRITE_ONLY_ATTRIBUTESoption is specified in provider block in theexperimentalFeaturesEnabledfield. - s3Stage
Vpce StringDns Name - Specifies the DNS name of an Amazon S3 interface endpoint. Requests sent to the internal stage of an account via AWS PrivateLink for Amazon S3 use this endpoint to connect. For more information, see Accessing Internal stages with dedicated interface endpoints. For more information, check S3_STAGE_VPCE_DNS_NAME docs.
- search
Path String - Specifies the path to search to resolve unqualified object names in queries. For more information, see Name resolution in queries. Comma-separated list of identifiers. An identifier can be a fully or partially qualified schema name. For more information, check SEARCH_PATH docs.
- show
Outputs List<Property Map> - Outputs the result of
SHOW USERfor the given user. - simulated
Data StringSharing Consumer - Specifies the name of a consumer account to simulate for testing/validating shared data, particularly shared secure views. When this parameter is set in a session, shared views return rows as if executed in the specified consumer account rather than the provider account. For more information, check SIMULATED_DATA_SHARING_CONSUMER docs.
- statement
Queued NumberTimeout In Seconds - Amount of time, in seconds, a SQL statement (query, DDL, DML, etc.) remains queued for a warehouse before it is canceled by the system. This parameter can be used in conjunction with the MAX_CONCURRENCY_LEVEL parameter to ensure a warehouse is never backlogged. For more information, check STATEMENT_QUEUED_TIMEOUT_IN_SECONDS docs.
- statement
Timeout NumberIn Seconds - Amount of time, in seconds, after which a running SQL statement (query, DDL, DML, etc.) is canceled by the system. For more information, check STATEMENT_TIMEOUT_IN_SECONDS docs.
- strict
Json BooleanOutput - This parameter specifies whether JSON output in a session is compatible with the general standard (as described by http://json.org). By design, Snowflake allows JSON input that contains non-standard values; however, these non-standard values might result in Snowflake outputting JSON that is incompatible with other platforms and languages. This parameter, when enabled, ensures that Snowflake outputs valid/compatible JSON. For more information, check STRICT_JSON_OUTPUT docs.
- time
Input StringFormat - Specifies the input format for the TIME data type. For more information, see Date and time input and output formats. Any valid, supported time format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of times stored in the system during the session). For more information, check TIME_INPUT_FORMAT docs.
- time
Output StringFormat - Specifies the display format for the TIME data type. For more information, see Date and time input and output formats. For more information, check TIME_OUTPUT_FORMAT docs.
- timestamp
Day BooleanIs Always24h - Specifies whether the DATEADD function (and its aliases) always consider a day to be exactly 24 hours for expressions that span multiple days. For more information, check TIMESTAMP_DAY_IS_ALWAYS_24H docs.
- timestamp
Input StringFormat - Specifies the input format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. Any valid, supported timestamp format or AUTO (AUTO specifies that Snowflake attempts to automatically detect the format of timestamps stored in the system during the session). For more information, check TIMESTAMP_INPUT_FORMAT docs.
- timestamp
Ltz StringOutput Format - Specifies the display format for the TIMESTAMP_LTZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_LTZ_OUTPUT_FORMAT docs.
- timestamp
Ntz StringOutput Format - Specifies the display format for the TIMESTAMP_NTZ data type. For more information, check TIMESTAMP_NTZ_OUTPUT_FORMAT docs.
- timestamp
Output StringFormat - Specifies the display format for the TIMESTAMP data type alias. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_OUTPUT_FORMAT docs.
- timestamp
Type StringMapping - Specifies the TIMESTAMP_* variation that the TIMESTAMP data type alias maps to. Valid values are (case-insensitive):
TIMESTAMP_LTZ|TIMESTAMP_NTZ|TIMESTAMP_TZ. For more information, check TIMESTAMP_TYPE_MAPPING docs. - timestamp
Tz StringOutput Format - Specifies the display format for the TIMESTAMP_TZ data type. If no format is specified, defaults to TIMESTAMP_OUTPUT_FORMAT. For more information, see Date and time input and output formats. For more information, check TIMESTAMP_TZ_OUTPUT_FORMAT docs.
- timezone String
- Specifies the time zone for the session. You can specify a time zone name or a link name from release 2021a of the IANA Time Zone Database (e.g. America/Los_Angeles, Europe/London, UTC, Etc/GMT, etc.). For more information, check TIMEZONE docs.
- trace
Level String - Controls how trace events are ingested into the event table. Valid values are (case-insensitive):
ALWAYS|ON_EVENT|PROPAGATE|OFF. For more information, check TRACE_LEVEL docs. - transaction
Abort BooleanOn Error - Specifies the action to perform when a statement issued within a non-autocommit transaction returns with an error. For more information, check TRANSACTION_ABORT_ON_ERROR docs.
- transaction
Default StringIsolation Level - Specifies the isolation level for transactions in the user session. Valid values are (case-insensitive):
READ COMMITTED. For more information, check TRANSACTION_DEFAULT_ISOLATION_LEVEL docs. - two
Digit NumberCentury Start - Specifies the “century start” year for 2-digit years (i.e. the earliest year such dates can represent). This parameter prevents ambiguous dates when importing or converting data with the
YYdate format component (i.e. years represented as 2 digits). For more information, check TWO_DIGIT_CENTURY_START docs. - unsupported
Ddl StringAction - Determines if an unsupported (i.e. non-default) value specified for a constraint property returns an error. Valid values are (case-insensitive):
IGNORE|FAIL. For more information, check UNSUPPORTED_DDL_ACTION docs. - use
Cached BooleanResult - Specifies whether to reuse persisted query results, if available, when a matching query is submitted. For more information, check USE_CACHED_RESULT docs.
- user
Type String - Specifies a type for the user.
- week
Of NumberYear Policy - Specifies how the weeks in a given year are computed.
0: The semantics used are equivalent to the ISO semantics, in which a week belongs to a given year if at least 4 days of that week are in that year.1: January 1 is included in the first week of the year and December 31 is included in the last week of the year. For more information, check WEEK_OF_YEAR_POLICY docs. - week
Start Number - Specifies the first day of the week (used by week-related date functions).
0: Legacy Snowflake behavior is used (i.e. ISO-like semantics).1(Monday) to7(Sunday): All the week-related functions use weeks that start on the specified day of the week. For more information, check WEEK_START docs.
Supporting Types
LegacyServiceUserDefaultWorkloadIdentity, LegacyServiceUserDefaultWorkloadIdentityArgs
- Aws
Legacy
Service User Default Workload Identity Aws - AWS workload identity configuration.
- Azure
Legacy
Service User Default Workload Identity Azure - Azure workload identity configuration.
- Gcp
Legacy
Service User Default Workload Identity Gcp - GCP workload identity configuration.
- Oidc
Legacy
Service User Default Workload Identity Oidc - Generic OIDC workload identity configuration.
- Aws
Legacy
Service User Default Workload Identity Aws - AWS workload identity configuration.
- Azure
Legacy
Service User Default Workload Identity Azure - Azure workload identity configuration.
- Gcp
Legacy
Service User Default Workload Identity Gcp - GCP workload identity configuration.
- Oidc
Legacy
Service User Default Workload Identity Oidc - Generic OIDC workload identity configuration.
- aws
Legacy
Service User Default Workload Identity Aws - AWS workload identity configuration.
- azure
Legacy
Service User Default Workload Identity Azure - Azure workload identity configuration.
- gcp
Legacy
Service User Default Workload Identity Gcp - GCP workload identity configuration.
- oidc
Legacy
Service User Default Workload Identity Oidc - Generic OIDC workload identity configuration.
- aws
Legacy
Service User Default Workload Identity Aws - AWS workload identity configuration.
- azure
Legacy
Service User Default Workload Identity Azure - Azure workload identity configuration.
- gcp
Legacy
Service User Default Workload Identity Gcp - GCP workload identity configuration.
- oidc
Legacy
Service User Default Workload Identity Oidc - Generic OIDC workload identity configuration.
- aws
Legacy
Service User Default Workload Identity Aws - AWS workload identity configuration.
- azure
Legacy
Service User Default Workload Identity Azure - Azure workload identity configuration.
- gcp
Legacy
Service User Default Workload Identity Gcp - GCP workload identity configuration.
- oidc
Legacy
Service User Default Workload Identity Oidc - Generic OIDC workload identity configuration.
- aws Property Map
- AWS workload identity configuration.
- azure Property Map
- Azure workload identity configuration.
- gcp Property Map
- GCP workload identity configuration.
- oidc Property Map
- Generic OIDC workload identity configuration.
LegacyServiceUserDefaultWorkloadIdentityAws, LegacyServiceUserDefaultWorkloadIdentityAwsArgs
LegacyServiceUserDefaultWorkloadIdentityAzure, LegacyServiceUserDefaultWorkloadIdentityAzureArgs
LegacyServiceUserDefaultWorkloadIdentityGcp, LegacyServiceUserDefaultWorkloadIdentityGcpArgs
- Subject string
- The GCP service account subject identifier.
- Subject string
- The GCP service account subject identifier.
- subject string
- The GCP service account subject identifier.
- subject String
- The GCP service account subject identifier.
- subject string
- The GCP service account subject identifier.
- subject str
- The GCP service account subject identifier.
- subject String
- The GCP service account subject identifier.
LegacyServiceUserDefaultWorkloadIdentityOidc, LegacyServiceUserDefaultWorkloadIdentityOidcArgs
- Issuer string
- The OIDC issuer URL.
- Subject string
- The OIDC subject identifier.
- Oidc
Audience List<string>Lists - List of allowed OIDC audiences.
- Issuer string
- The OIDC issuer URL.
- Subject string
- The OIDC subject identifier.
- Oidc
Audience []stringLists - List of allowed OIDC audiences.
- issuer string
- The OIDC issuer URL.
- subject string
- The OIDC subject identifier.
- oidc_
audience_ list(string)lists - List of allowed OIDC audiences.
- issuer String
- The OIDC issuer URL.
- subject String
- The OIDC subject identifier.
- oidc
Audience List<String>Lists - List of allowed OIDC audiences.
- issuer string
- The OIDC issuer URL.
- subject string
- The OIDC subject identifier.
- oidc
Audience string[]Lists - List of allowed OIDC audiences.
- issuer str
- The OIDC issuer URL.
- subject str
- The OIDC subject identifier.
- oidc_
audience_ Sequence[str]lists - List of allowed OIDC audiences.
- issuer String
- The OIDC issuer URL.
- subject String
- The OIDC subject identifier.
- oidc
Audience List<String>Lists - List of allowed OIDC audiences.
LegacyServiceUserParameter, LegacyServiceUserParameterArgs
- Abort
Detached List<LegacyQueries Service User Parameter Abort Detached Query> - Active
Python List<LegacyProfilers Service User Parameter Active Python Profiler> - Autocommits
List<Legacy
Service User Parameter Autocommit> - Binary
Input List<LegacyFormats Service User Parameter Binary Input Format> - Binary
Output List<LegacyFormats Service User Parameter Binary Output Format> - Client
Enable List<LegacyLog Info Statement Parameters Service User Parameter Client Enable Log Info Statement Parameter> - Client
Memory List<LegacyLimits Service User Parameter Client Memory Limit> - Client
Metadata List<LegacyRequest Use Connection Ctxes Service User Parameter Client Metadata Request Use Connection Ctx> - Client
Metadata List<LegacyUse Session Databases Service User Parameter Client Metadata Use Session Database> - Client
Prefetch List<LegacyThreads Service User Parameter Client Prefetch Thread> - Client
Result List<LegacyChunk Sizes Service User Parameter Client Result Chunk Size> - Client
Result List<LegacyColumn Case Insensitives Service User Parameter Client Result Column Case Insensitive> - Client
Session List<LegacyKeep Alive Heartbeat Frequencies Service User Parameter Client Session Keep Alive Heartbeat Frequency> - Client
Session List<LegacyKeep Alives Service User Parameter Client Session Keep Alife> - Client
Timestamp List<LegacyType Mappings Service User Parameter Client Timestamp Type Mapping> - Csv
Timestamp List<LegacyFormats Service User Parameter Csv Timestamp Format> - Date
Input List<LegacyFormats Service User Parameter Date Input Format> - Date
Output List<LegacyFormats Service User Parameter Date Output Format> - Enable
Get List<LegacyDdl Use Data Type Aliases Service User Parameter Enable Get Ddl Use Data Type Alias> - Enable
Unload List<LegacyPhysical Type Optimizations Service User Parameter Enable Unload Physical Type Optimization> - Enable
Unredacted List<LegacyQuery Syntax Errors Service User Parameter Enable Unredacted Query Syntax Error> - Error
On List<LegacyNondeterministic Merges Service User Parameter Error On Nondeterministic Merge> - Error
On List<LegacyNondeterministic Updates Service User Parameter Error On Nondeterministic Update> - Geography
Output List<LegacyFormats Service User Parameter Geography Output Format> - Geometry
Output List<LegacyFormats Service User Parameter Geometry Output Format> - Hybrid
Table List<LegacyLock Timeouts Service User Parameter Hybrid Table Lock Timeout> - Jdbc
Treat List<LegacyDecimal As Ints Service User Parameter Jdbc Treat Decimal As Int> - Jdbc
Treat List<LegacyTimestamp Ntz As Utcs Service User Parameter Jdbc Treat Timestamp Ntz As Utc> - Jdbc
Use List<LegacySession Timezones Service User Parameter Jdbc Use Session Timezone> - Js
Treat List<LegacyInteger As Bigints Service User Parameter Js Treat Integer As Bigint> - Json
Indents List<LegacyService User Parameter Json Indent> - Lock
Timeouts List<LegacyService User Parameter Lock Timeout> - Log
Event List<LegacyLevels Service User Parameter Log Event Level> - Log
Levels List<LegacyService User Parameter Log Level> - Multi
Statement List<LegacyCounts Service User Parameter Multi Statement Count> - Network
Policies List<LegacyService User Parameter Network Policy> - Noorder
Sequence List<LegacyAs Defaults Service User Parameter Noorder Sequence As Default> - Odbc
Treat List<LegacyDecimal As Ints Service User Parameter Odbc Treat Decimal As Int> - Prevent
Unload List<LegacyTo Internal Stages Service User Parameter Prevent Unload To Internal Stage> - Python
Profiler List<LegacyModules Service User Parameter Python Profiler Module> - Python
Profiler List<LegacyTarget Stages Service User Parameter Python Profiler Target Stage> -
List<Legacy
Service User Parameter Query Tag> - Quoted
Identifiers List<LegacyIgnore Cases Service User Parameter Quoted Identifiers Ignore Case> - Rows
Per List<LegacyResultsets Service User Parameter Rows Per Resultset> - S3Stage
Vpce List<LegacyDns Names Service User Parameter S3Stage Vpce Dns Name> - Search
Paths List<LegacyService User Parameter Search Path> - Simulated
Data List<LegacySharing Consumers Service User Parameter Simulated Data Sharing Consumer> - Statement
Queued List<LegacyTimeout In Seconds Service User Parameter Statement Queued Timeout In Second> - Statement
Timeout List<LegacyIn Seconds Service User Parameter Statement Timeout In Second> - Strict
Json List<LegacyOutputs Service User Parameter Strict Json Output> - Time
Input List<LegacyFormats Service User Parameter Time Input Format> - Time
Output List<LegacyFormats Service User Parameter Time Output Format> - Timestamp
Day List<LegacyIs Always24hs Service User Parameter Timestamp Day Is Always24h> - Timestamp
Input List<LegacyFormats Service User Parameter Timestamp Input Format> - Timestamp
Ltz List<LegacyOutput Formats Service User Parameter Timestamp Ltz Output Format> - Timestamp
Ntz List<LegacyOutput Formats Service User Parameter Timestamp Ntz Output Format> - Timestamp
Output List<LegacyFormats Service User Parameter Timestamp Output Format> - Timestamp
Type List<LegacyMappings Service User Parameter Timestamp Type Mapping> - Timestamp
Tz List<LegacyOutput Formats Service User Parameter Timestamp Tz Output Format> - Timezones
List<Legacy
Service User Parameter Timezone> - Trace
Levels List<LegacyService User Parameter Trace Level> - Transaction
Abort List<LegacyOn Errors Service User Parameter Transaction Abort On Error> - Transaction
Default List<LegacyIsolation Levels Service User Parameter Transaction Default Isolation Level> - Two
Digit List<LegacyCentury Starts Service User Parameter Two Digit Century Start> - Unsupported
Ddl List<LegacyActions Service User Parameter Unsupported Ddl Action> - Use
Cached List<LegacyResults Service User Parameter Use Cached Result> - Week
Of List<LegacyYear Policies Service User Parameter Week Of Year Policy> - Week
Starts List<LegacyService User Parameter Week Start>
- Abort
Detached []LegacyQueries Service User Parameter Abort Detached Query - Active
Python []LegacyProfilers Service User Parameter Active Python Profiler - Autocommits
[]Legacy
Service User Parameter Autocommit - Binary
Input []LegacyFormats Service User Parameter Binary Input Format - Binary
Output []LegacyFormats Service User Parameter Binary Output Format - Client
Enable []LegacyLog Info Statement Parameters Service User Parameter Client Enable Log Info Statement Parameter - Client
Memory []LegacyLimits Service User Parameter Client Memory Limit - Client
Metadata []LegacyRequest Use Connection Ctxes Service User Parameter Client Metadata Request Use Connection Ctx - Client
Metadata []LegacyUse Session Databases Service User Parameter Client Metadata Use Session Database - Client
Prefetch []LegacyThreads Service User Parameter Client Prefetch Thread - Client
Result []LegacyChunk Sizes Service User Parameter Client Result Chunk Size - Client
Result []LegacyColumn Case Insensitives Service User Parameter Client Result Column Case Insensitive - Client
Session []LegacyKeep Alive Heartbeat Frequencies Service User Parameter Client Session Keep Alive Heartbeat Frequency - Client
Session []LegacyKeep Alives Service User Parameter Client Session Keep Alife - Client
Timestamp []LegacyType Mappings Service User Parameter Client Timestamp Type Mapping - Csv
Timestamp []LegacyFormats Service User Parameter Csv Timestamp Format - Date
Input []LegacyFormats Service User Parameter Date Input Format - Date
Output []LegacyFormats Service User Parameter Date Output Format - Enable
Get []LegacyDdl Use Data Type Aliases Service User Parameter Enable Get Ddl Use Data Type Alias - Enable
Unload []LegacyPhysical Type Optimizations Service User Parameter Enable Unload Physical Type Optimization - Enable
Unredacted []LegacyQuery Syntax Errors Service User Parameter Enable Unredacted Query Syntax Error - Error
On []LegacyNondeterministic Merges Service User Parameter Error On Nondeterministic Merge - Error
On []LegacyNondeterministic Updates Service User Parameter Error On Nondeterministic Update - Geography
Output []LegacyFormats Service User Parameter Geography Output Format - Geometry
Output []LegacyFormats Service User Parameter Geometry Output Format - Hybrid
Table []LegacyLock Timeouts Service User Parameter Hybrid Table Lock Timeout - Jdbc
Treat []LegacyDecimal As Ints Service User Parameter Jdbc Treat Decimal As Int - Jdbc
Treat []LegacyTimestamp Ntz As Utcs Service User Parameter Jdbc Treat Timestamp Ntz As Utc - Jdbc
Use []LegacySession Timezones Service User Parameter Jdbc Use Session Timezone - Js
Treat []LegacyInteger As Bigints Service User Parameter Js Treat Integer As Bigint - Json
Indents []LegacyService User Parameter Json Indent - Lock
Timeouts []LegacyService User Parameter Lock Timeout - Log
Event []LegacyLevels Service User Parameter Log Event Level - Log
Levels []LegacyService User Parameter Log Level - Multi
Statement []LegacyCounts Service User Parameter Multi Statement Count - Network
Policies []LegacyService User Parameter Network Policy - Noorder
Sequence []LegacyAs Defaults Service User Parameter Noorder Sequence As Default - Odbc
Treat []LegacyDecimal As Ints Service User Parameter Odbc Treat Decimal As Int - Prevent
Unload []LegacyTo Internal Stages Service User Parameter Prevent Unload To Internal Stage - Python
Profiler []LegacyModules Service User Parameter Python Profiler Module - Python
Profiler []LegacyTarget Stages Service User Parameter Python Profiler Target Stage -
[]Legacy
Service User Parameter Query Tag - Quoted
Identifiers []LegacyIgnore Cases Service User Parameter Quoted Identifiers Ignore Case - Rows
Per []LegacyResultsets Service User Parameter Rows Per Resultset - S3Stage
Vpce []LegacyDns Names Service User Parameter S3Stage Vpce Dns Name - Search
Paths []LegacyService User Parameter Search Path - Simulated
Data []LegacySharing Consumers Service User Parameter Simulated Data Sharing Consumer - Statement
Queued []LegacyTimeout In Seconds Service User Parameter Statement Queued Timeout In Second - Statement
Timeout []LegacyIn Seconds Service User Parameter Statement Timeout In Second - Strict
Json []LegacyOutputs Service User Parameter Strict Json Output - Time
Input []LegacyFormats Service User Parameter Time Input Format - Time
Output []LegacyFormats Service User Parameter Time Output Format - Timestamp
Day []LegacyIs Always24hs Service User Parameter Timestamp Day Is Always24h - Timestamp
Input []LegacyFormats Service User Parameter Timestamp Input Format - Timestamp
Ltz []LegacyOutput Formats Service User Parameter Timestamp Ltz Output Format - Timestamp
Ntz []LegacyOutput Formats Service User Parameter Timestamp Ntz Output Format - Timestamp
Output []LegacyFormats Service User Parameter Timestamp Output Format - Timestamp
Type []LegacyMappings Service User Parameter Timestamp Type Mapping - Timestamp
Tz []LegacyOutput Formats Service User Parameter Timestamp Tz Output Format - Timezones
[]Legacy
Service User Parameter Timezone - Trace
Levels []LegacyService User Parameter Trace Level - Transaction
Abort []LegacyOn Errors Service User Parameter Transaction Abort On Error - Transaction
Default []LegacyIsolation Levels Service User Parameter Transaction Default Isolation Level - Two
Digit []LegacyCentury Starts Service User Parameter Two Digit Century Start - Unsupported
Ddl []LegacyActions Service User Parameter Unsupported Ddl Action - Use
Cached []LegacyResults Service User Parameter Use Cached Result - Week
Of []LegacyYear Policies Service User Parameter Week Of Year Policy - Week
Starts []LegacyService User Parameter Week Start
- abort_
detached_ list(object)queries - active_
python_ list(object)profilers - autocommits list(object)
- binary_
input_ list(object)formats - binary_
output_ list(object)formats - client_
enable_ list(object)log_ info_ statement_ parameters - client_
memory_ list(object)limits - client_
metadata_ list(object)request_ use_ connection_ ctxes - client_
metadata_ list(object)use_ session_ databases - client_
prefetch_ list(object)threads - client_
result_ list(object)chunk_ sizes - client_
result_ list(object)column_ case_ insensitives - client_
session_ list(object)keep_ alive_ heartbeat_ frequencies - client_
session_ list(object)keep_ alives - client_
timestamp_ list(object)type_ mappings - csv_
timestamp_ list(object)formats - date_
input_ list(object)formats - date_
output_ list(object)formats - enable_
get_ list(object)ddl_ use_ data_ type_ aliases - enable_
unload_ list(object)physical_ type_ optimizations - enable_
unredacted_ list(object)query_ syntax_ errors - error_
on_ list(object)nondeterministic_ merges - error_
on_ list(object)nondeterministic_ updates - geography_
output_ list(object)formats - geometry_
output_ list(object)formats - hybrid_
table_ list(object)lock_ timeouts - jdbc_
treat_ list(object)decimal_ as_ ints - jdbc_
treat_ list(object)timestamp_ ntz_ as_ utcs - jdbc_
use_ list(object)session_ timezones - js_
treat_ list(object)integer_ as_ bigints - json_
indents list(object) - lock_
timeouts list(object) - log_
event_ list(object)levels - log_
levels list(object) - multi_
statement_ list(object)counts - network_
policies list(object) - noorder_
sequence_ list(object)as_ defaults - odbc_
treat_ list(object)decimal_ as_ ints - prevent_
unload_ list(object)to_ internal_ stages - python_
profiler_ list(object)modules - python_
profiler_ list(object)target_ stages - list(object)
- quoted_
identifiers_ list(object)ignore_ cases - rows_
per_ list(object)resultsets - s3_
stage_ list(object)vpce_ dns_ names - search_
paths list(object) - simulated_
data_ list(object)sharing_ consumers - statement_
queued_ list(object)timeout_ in_ seconds - statement_
timeout_ list(object)in_ seconds - strict_
json_ list(object)outputs - time_
input_ list(object)formats - time_
output_ list(object)formats - timestamp_
day_ list(object)is_ always24hs - timestamp_
input_ list(object)formats - timestamp_
ltz_ list(object)output_ formats - timestamp_
ntz_ list(object)output_ formats - timestamp_
output_ list(object)formats - timestamp_
type_ list(object)mappings - timestamp_
tz_ list(object)output_ formats - timezones list(object)
- trace_
levels list(object) - transaction_
abort_ list(object)on_ errors - transaction_
default_ list(object)isolation_ levels - two_
digit_ list(object)century_ starts - unsupported_
ddl_ list(object)actions - use_
cached_ list(object)results - week_
of_ list(object)year_ policies - week_
starts list(object)
- abort
Detached List<LegacyQueries Service User Parameter Abort Detached Query> - active
Python List<LegacyProfilers Service User Parameter Active Python Profiler> - autocommits
List<Legacy
Service User Parameter Autocommit> - binary
Input List<LegacyFormats Service User Parameter Binary Input Format> - binary
Output List<LegacyFormats Service User Parameter Binary Output Format> - client
Enable List<LegacyLog Info Statement Parameters Service User Parameter Client Enable Log Info Statement Parameter> - client
Memory List<LegacyLimits Service User Parameter Client Memory Limit> - client
Metadata List<LegacyRequest Use Connection Ctxes Service User Parameter Client Metadata Request Use Connection Ctx> - client
Metadata List<LegacyUse Session Databases Service User Parameter Client Metadata Use Session Database> - client
Prefetch List<LegacyThreads Service User Parameter Client Prefetch Thread> - client
Result List<LegacyChunk Sizes Service User Parameter Client Result Chunk Size> - client
Result List<LegacyColumn Case Insensitives Service User Parameter Client Result Column Case Insensitive> - client
Session List<LegacyKeep Alive Heartbeat Frequencies Service User Parameter Client Session Keep Alive Heartbeat Frequency> - client
Session List<LegacyKeep Alives Service User Parameter Client Session Keep Alife> - client
Timestamp List<LegacyType Mappings Service User Parameter Client Timestamp Type Mapping> - csv
Timestamp List<LegacyFormats Service User Parameter Csv Timestamp Format> - date
Input List<LegacyFormats Service User Parameter Date Input Format> - date
Output List<LegacyFormats Service User Parameter Date Output Format> - enable
Get List<LegacyDdl Use Data Type Aliases Service User Parameter Enable Get Ddl Use Data Type Alias> - enable
Unload List<LegacyPhysical Type Optimizations Service User Parameter Enable Unload Physical Type Optimization> - enable
Unredacted List<LegacyQuery Syntax Errors Service User Parameter Enable Unredacted Query Syntax Error> - error
On List<LegacyNondeterministic Merges Service User Parameter Error On Nondeterministic Merge> - error
On List<LegacyNondeterministic Updates Service User Parameter Error On Nondeterministic Update> - geography
Output List<LegacyFormats Service User Parameter Geography Output Format> - geometry
Output List<LegacyFormats Service User Parameter Geometry Output Format> - hybrid
Table List<LegacyLock Timeouts Service User Parameter Hybrid Table Lock Timeout> - jdbc
Treat List<LegacyDecimal As Ints Service User Parameter Jdbc Treat Decimal As Int> - jdbc
Treat List<LegacyTimestamp Ntz As Utcs Service User Parameter Jdbc Treat Timestamp Ntz As Utc> - jdbc
Use List<LegacySession Timezones Service User Parameter Jdbc Use Session Timezone> - js
Treat List<LegacyInteger As Bigints Service User Parameter Js Treat Integer As Bigint> - json
Indents List<LegacyService User Parameter Json Indent> - lock
Timeouts List<LegacyService User Parameter Lock Timeout> - log
Event List<LegacyLevels Service User Parameter Log Event Level> - log
Levels List<LegacyService User Parameter Log Level> - multi
Statement List<LegacyCounts Service User Parameter Multi Statement Count> - network
Policies List<LegacyService User Parameter Network Policy> - noorder
Sequence List<LegacyAs Defaults Service User Parameter Noorder Sequence As Default> - odbc
Treat List<LegacyDecimal As Ints Service User Parameter Odbc Treat Decimal As Int> - prevent
Unload List<LegacyTo Internal Stages Service User Parameter Prevent Unload To Internal Stage> - python
Profiler List<LegacyModules Service User Parameter Python Profiler Module> - python
Profiler List<LegacyTarget Stages Service User Parameter Python Profiler Target Stage> -
List<Legacy
Service User Parameter Query Tag> - quoted
Identifiers List<LegacyIgnore Cases Service User Parameter Quoted Identifiers Ignore Case> - rows
Per List<LegacyResultsets Service User Parameter Rows Per Resultset> - s3Stage
Vpce List<LegacyDns Names Service User Parameter S3Stage Vpce Dns Name> - search
Paths List<LegacyService User Parameter Search Path> - simulated
Data List<LegacySharing Consumers Service User Parameter Simulated Data Sharing Consumer> - statement
Queued List<LegacyTimeout In Seconds Service User Parameter Statement Queued Timeout In Second> - statement
Timeout List<LegacyIn Seconds Service User Parameter Statement Timeout In Second> - strict
Json List<LegacyOutputs Service User Parameter Strict Json Output> - time
Input List<LegacyFormats Service User Parameter Time Input Format> - time
Output List<LegacyFormats Service User Parameter Time Output Format> - timestamp
Day List<LegacyIs Always24hs Service User Parameter Timestamp Day Is Always24h> - timestamp
Input List<LegacyFormats Service User Parameter Timestamp Input Format> - timestamp
Ltz List<LegacyOutput Formats Service User Parameter Timestamp Ltz Output Format> - timestamp
Ntz List<LegacyOutput Formats Service User Parameter Timestamp Ntz Output Format> - timestamp
Output List<LegacyFormats Service User Parameter Timestamp Output Format> - timestamp
Type List<LegacyMappings Service User Parameter Timestamp Type Mapping> - timestamp
Tz List<LegacyOutput Formats Service User Parameter Timestamp Tz Output Format> - timezones
List<Legacy
Service User Parameter Timezone> - trace
Levels List<LegacyService User Parameter Trace Level> - transaction
Abort List<LegacyOn Errors Service User Parameter Transaction Abort On Error> - transaction
Default List<LegacyIsolation Levels Service User Parameter Transaction Default Isolation Level> - two
Digit List<LegacyCentury Starts Service User Parameter Two Digit Century Start> - unsupported
Ddl List<LegacyActions Service User Parameter Unsupported Ddl Action> - use
Cached List<LegacyResults Service User Parameter Use Cached Result> - week
Of List<LegacyYear Policies Service User Parameter Week Of Year Policy> - week
Starts List<LegacyService User Parameter Week Start>
- abort
Detached LegacyQueries Service User Parameter Abort Detached Query[] - active
Python LegacyProfilers Service User Parameter Active Python Profiler[] - autocommits
Legacy
Service User Parameter Autocommit[] - binary
Input LegacyFormats Service User Parameter Binary Input Format[] - binary
Output LegacyFormats Service User Parameter Binary Output Format[] - client
Enable LegacyLog Info Statement Parameters Service User Parameter Client Enable Log Info Statement Parameter[] - client
Memory LegacyLimits Service User Parameter Client Memory Limit[] - client
Metadata LegacyRequest Use Connection Ctxes Service User Parameter Client Metadata Request Use Connection Ctx[] - client
Metadata LegacyUse Session Databases Service User Parameter Client Metadata Use Session Database[] - client
Prefetch LegacyThreads Service User Parameter Client Prefetch Thread[] - client
Result LegacyChunk Sizes Service User Parameter Client Result Chunk Size[] - client
Result LegacyColumn Case Insensitives Service User Parameter Client Result Column Case Insensitive[] - client
Session LegacyKeep Alive Heartbeat Frequencies Service User Parameter Client Session Keep Alive Heartbeat Frequency[] - client
Session LegacyKeep Alives Service User Parameter Client Session Keep Alife[] - client
Timestamp LegacyType Mappings Service User Parameter Client Timestamp Type Mapping[] - csv
Timestamp LegacyFormats Service User Parameter Csv Timestamp Format[] - date
Input LegacyFormats Service User Parameter Date Input Format[] - date
Output LegacyFormats Service User Parameter Date Output Format[] - enable
Get LegacyDdl Use Data Type Aliases Service User Parameter Enable Get Ddl Use Data Type Alias[] - enable
Unload LegacyPhysical Type Optimizations Service User Parameter Enable Unload Physical Type Optimization[] - enable
Unredacted LegacyQuery Syntax Errors Service User Parameter Enable Unredacted Query Syntax Error[] - error
On LegacyNondeterministic Merges Service User Parameter Error On Nondeterministic Merge[] - error
On LegacyNondeterministic Updates Service User Parameter Error On Nondeterministic Update[] - geography
Output LegacyFormats Service User Parameter Geography Output Format[] - geometry
Output LegacyFormats Service User Parameter Geometry Output Format[] - hybrid
Table LegacyLock Timeouts Service User Parameter Hybrid Table Lock Timeout[] - jdbc
Treat LegacyDecimal As Ints Service User Parameter Jdbc Treat Decimal As Int[] - jdbc
Treat LegacyTimestamp Ntz As Utcs Service User Parameter Jdbc Treat Timestamp Ntz As Utc[] - jdbc
Use LegacySession Timezones Service User Parameter Jdbc Use Session Timezone[] - js
Treat LegacyInteger As Bigints Service User Parameter Js Treat Integer As Bigint[] - json
Indents LegacyService User Parameter Json Indent[] - lock
Timeouts LegacyService User Parameter Lock Timeout[] - log
Event LegacyLevels Service User Parameter Log Event Level[] - log
Levels LegacyService User Parameter Log Level[] - multi
Statement LegacyCounts Service User Parameter Multi Statement Count[] - network
Policies LegacyService User Parameter Network Policy[] - noorder
Sequence LegacyAs Defaults Service User Parameter Noorder Sequence As Default[] - odbc
Treat LegacyDecimal As Ints Service User Parameter Odbc Treat Decimal As Int[] - prevent
Unload LegacyTo Internal Stages Service User Parameter Prevent Unload To Internal Stage[] - python
Profiler LegacyModules Service User Parameter Python Profiler Module[] - python
Profiler LegacyTarget Stages Service User Parameter Python Profiler Target Stage[] -
Legacy
Service User Parameter Query Tag[] - quoted
Identifiers LegacyIgnore Cases Service User Parameter Quoted Identifiers Ignore Case[] - rows
Per LegacyResultsets Service User Parameter Rows Per Resultset[] - s3Stage
Vpce LegacyDns Names Service User Parameter S3Stage Vpce Dns Name[] - search
Paths LegacyService User Parameter Search Path[] - simulated
Data LegacySharing Consumers Service User Parameter Simulated Data Sharing Consumer[] - statement
Queued LegacyTimeout In Seconds Service User Parameter Statement Queued Timeout In Second[] - statement
Timeout LegacyIn Seconds Service User Parameter Statement Timeout In Second[] - strict
Json LegacyOutputs Service User Parameter Strict Json Output[] - time
Input LegacyFormats Service User Parameter Time Input Format[] - time
Output LegacyFormats Service User Parameter Time Output Format[] - timestamp
Day LegacyIs Always24hs Service User Parameter Timestamp Day Is Always24h[] - timestamp
Input LegacyFormats Service User Parameter Timestamp Input Format[] - timestamp
Ltz LegacyOutput Formats Service User Parameter Timestamp Ltz Output Format[] - timestamp
Ntz LegacyOutput Formats Service User Parameter Timestamp Ntz Output Format[] - timestamp
Output LegacyFormats Service User Parameter Timestamp Output Format[] - timestamp
Type LegacyMappings Service User Parameter Timestamp Type Mapping[] - timestamp
Tz LegacyOutput Formats Service User Parameter Timestamp Tz Output Format[] - timezones
Legacy
Service User Parameter Timezone[] - trace
Levels LegacyService User Parameter Trace Level[] - transaction
Abort LegacyOn Errors Service User Parameter Transaction Abort On Error[] - transaction
Default LegacyIsolation Levels Service User Parameter Transaction Default Isolation Level[] - two
Digit LegacyCentury Starts Service User Parameter Two Digit Century Start[] - unsupported
Ddl LegacyActions Service User Parameter Unsupported Ddl Action[] - use
Cached LegacyResults Service User Parameter Use Cached Result[] - week
Of LegacyYear Policies Service User Parameter Week Of Year Policy[] - week
Starts LegacyService User Parameter Week Start[]
- abort_
detached_ Sequence[Legacyqueries Service User Parameter Abort Detached Query] - active_
python_ Sequence[Legacyprofilers Service User Parameter Active Python Profiler] - autocommits
Sequence[Legacy
Service User Parameter Autocommit] - binary_
input_ Sequence[Legacyformats Service User Parameter Binary Input Format] - binary_
output_ Sequence[Legacyformats Service User Parameter Binary Output Format] - client_
enable_ Sequence[Legacylog_ info_ statement_ parameters Service User Parameter Client Enable Log Info Statement Parameter] - client_
memory_ Sequence[Legacylimits Service User Parameter Client Memory Limit] - client_
metadata_ Sequence[Legacyrequest_ use_ connection_ ctxes Service User Parameter Client Metadata Request Use Connection Ctx] - client_
metadata_ Sequence[Legacyuse_ session_ databases Service User Parameter Client Metadata Use Session Database] - client_
prefetch_ Sequence[Legacythreads Service User Parameter Client Prefetch Thread] - client_
result_ Sequence[Legacychunk_ sizes Service User Parameter Client Result Chunk Size] - client_
result_ Sequence[Legacycolumn_ case_ insensitives Service User Parameter Client Result Column Case Insensitive] - client_
session_ Sequence[Legacykeep_ alive_ heartbeat_ frequencies Service User Parameter Client Session Keep Alive Heartbeat Frequency] - client_
session_ Sequence[Legacykeep_ alives Service User Parameter Client Session Keep Alife] - client_
timestamp_ Sequence[Legacytype_ mappings Service User Parameter Client Timestamp Type Mapping] - csv_
timestamp_ Sequence[Legacyformats Service User Parameter Csv Timestamp Format] - date_
input_ Sequence[Legacyformats Service User Parameter Date Input Format] - date_
output_ Sequence[Legacyformats Service User Parameter Date Output Format] - enable_
get_ Sequence[Legacyddl_ use_ data_ type_ aliases Service User Parameter Enable Get Ddl Use Data Type Alias] - enable_
unload_ Sequence[Legacyphysical_ type_ optimizations Service User Parameter Enable Unload Physical Type Optimization] - enable_
unredacted_ Sequence[Legacyquery_ syntax_ errors Service User Parameter Enable Unredacted Query Syntax Error] - error_
on_ Sequence[Legacynondeterministic_ merges Service User Parameter Error On Nondeterministic Merge] - error_
on_ Sequence[Legacynondeterministic_ updates Service User Parameter Error On Nondeterministic Update] - geography_
output_ Sequence[Legacyformats Service User Parameter Geography Output Format] - geometry_
output_ Sequence[Legacyformats Service User Parameter Geometry Output Format] - hybrid_
table_ Sequence[Legacylock_ timeouts Service User Parameter Hybrid Table Lock Timeout] - jdbc_
treat_ Sequence[Legacydecimal_ as_ ints Service User Parameter Jdbc Treat Decimal As Int] - jdbc_
treat_ Sequence[Legacytimestamp_ ntz_ as_ utcs Service User Parameter Jdbc Treat Timestamp Ntz As Utc] - jdbc_
use_ Sequence[Legacysession_ timezones Service User Parameter Jdbc Use Session Timezone] - js_
treat_ Sequence[Legacyinteger_ as_ bigints Service User Parameter Js Treat Integer As Bigint] - json_
indents Sequence[LegacyService User Parameter Json Indent] - lock_
timeouts Sequence[LegacyService User Parameter Lock Timeout] - log_
event_ Sequence[Legacylevels Service User Parameter Log Event Level] - log_
levels Sequence[LegacyService User Parameter Log Level] - multi_
statement_ Sequence[Legacycounts Service User Parameter Multi Statement Count] - network_
policies Sequence[LegacyService User Parameter Network Policy] - noorder_
sequence_ Sequence[Legacyas_ defaults Service User Parameter Noorder Sequence As Default] - odbc_
treat_ Sequence[Legacydecimal_ as_ ints Service User Parameter Odbc Treat Decimal As Int] - prevent_
unload_ Sequence[Legacyto_ internal_ stages Service User Parameter Prevent Unload To Internal Stage] - python_
profiler_ Sequence[Legacymodules Service User Parameter Python Profiler Module] - python_
profiler_ Sequence[Legacytarget_ stages Service User Parameter Python Profiler Target Stage] -
Sequence[Legacy
Service User Parameter Query Tag] - quoted_
identifiers_ Sequence[Legacyignore_ cases Service User Parameter Quoted Identifiers Ignore Case] - rows_
per_ Sequence[Legacyresultsets Service User Parameter Rows Per Resultset] - s3_
stage_ Sequence[Legacyvpce_ dns_ names Service User Parameter S3Stage Vpce Dns Name] - search_
paths Sequence[LegacyService User Parameter Search Path] - simulated_
data_ Sequence[Legacysharing_ consumers Service User Parameter Simulated Data Sharing Consumer] - statement_
queued_ Sequence[Legacytimeout_ in_ seconds Service User Parameter Statement Queued Timeout In Second] - statement_
timeout_ Sequence[Legacyin_ seconds Service User Parameter Statement Timeout In Second] - strict_
json_ Sequence[Legacyoutputs Service User Parameter Strict Json Output] - time_
input_ Sequence[Legacyformats Service User Parameter Time Input Format] - time_
output_ Sequence[Legacyformats Service User Parameter Time Output Format] - timestamp_
day_ Sequence[Legacyis_ always24hs Service User Parameter Timestamp Day Is Always24h] - timestamp_
input_ Sequence[Legacyformats Service User Parameter Timestamp Input Format] - timestamp_
ltz_ Sequence[Legacyoutput_ formats Service User Parameter Timestamp Ltz Output Format] - timestamp_
ntz_ Sequence[Legacyoutput_ formats Service User Parameter Timestamp Ntz Output Format] - timestamp_
output_ Sequence[Legacyformats Service User Parameter Timestamp Output Format] - timestamp_
type_ Sequence[Legacymappings Service User Parameter Timestamp Type Mapping] - timestamp_
tz_ Sequence[Legacyoutput_ formats Service User Parameter Timestamp Tz Output Format] - timezones
Sequence[Legacy
Service User Parameter Timezone] - trace_
levels Sequence[LegacyService User Parameter Trace Level] - transaction_
abort_ Sequence[Legacyon_ errors Service User Parameter Transaction Abort On Error] - transaction_
default_ Sequence[Legacyisolation_ levels Service User Parameter Transaction Default Isolation Level] - two_
digit_ Sequence[Legacycentury_ starts Service User Parameter Two Digit Century Start] - unsupported_
ddl_ Sequence[Legacyactions Service User Parameter Unsupported Ddl Action] - use_
cached_ Sequence[Legacyresults Service User Parameter Use Cached Result] - week_
of_ Sequence[Legacyyear_ policies Service User Parameter Week Of Year Policy] - week_
starts Sequence[LegacyService User Parameter Week Start]
- abort
Detached List<Property Map>Queries - active
Python List<Property Map>Profilers - autocommits List<Property Map>
- binary
Input List<Property Map>Formats - binary
Output List<Property Map>Formats - client
Enable List<Property Map>Log Info Statement Parameters - client
Memory List<Property Map>Limits - client
Metadata List<Property Map>Request Use Connection Ctxes - client
Metadata List<Property Map>Use Session Databases - client
Prefetch List<Property Map>Threads - client
Result List<Property Map>Chunk Sizes - client
Result List<Property Map>Column Case Insensitives - client
Session List<Property Map>Keep Alive Heartbeat Frequencies - client
Session List<Property Map>Keep Alives - client
Timestamp List<Property Map>Type Mappings - csv
Timestamp List<Property Map>Formats - date
Input List<Property Map>Formats - date
Output List<Property Map>Formats - enable
Get List<Property Map>Ddl Use Data Type Aliases - enable
Unload List<Property Map>Physical Type Optimizations - enable
Unredacted List<Property Map>Query Syntax Errors - error
On List<Property Map>Nondeterministic Merges - error
On List<Property Map>Nondeterministic Updates - geography
Output List<Property Map>Formats - geometry
Output List<Property Map>Formats - hybrid
Table List<Property Map>Lock Timeouts - jdbc
Treat List<Property Map>Decimal As Ints - jdbc
Treat List<Property Map>Timestamp Ntz As Utcs - jdbc
Use List<Property Map>Session Timezones - js
Treat List<Property Map>Integer As Bigints - json
Indents List<Property Map> - lock
Timeouts List<Property Map> - log
Event List<Property Map>Levels - log
Levels List<Property Map> - multi
Statement List<Property Map>Counts - network
Policies List<Property Map> - noorder
Sequence List<Property Map>As Defaults - odbc
Treat List<Property Map>Decimal As Ints - prevent
Unload List<Property Map>To Internal Stages - python
Profiler List<Property Map>Modules - python
Profiler List<Property Map>Target Stages - List<Property Map>
- quoted
Identifiers List<Property Map>Ignore Cases - rows
Per List<Property Map>Resultsets - s3Stage
Vpce List<Property Map>Dns Names - search
Paths List<Property Map> - simulated
Data List<Property Map>Sharing Consumers - statement
Queued List<Property Map>Timeout In Seconds - statement
Timeout List<Property Map>In Seconds - strict
Json List<Property Map>Outputs - time
Input List<Property Map>Formats - time
Output List<Property Map>Formats - timestamp
Day List<Property Map>Is Always24hs - timestamp
Input List<Property Map>Formats - timestamp
Ltz List<Property Map>Output Formats - timestamp
Ntz List<Property Map>Output Formats - timestamp
Output List<Property Map>Formats - timestamp
Type List<Property Map>Mappings - timestamp
Tz List<Property Map>Output Formats - timezones List<Property Map>
- trace
Levels List<Property Map> - transaction
Abort List<Property Map>On Errors - transaction
Default List<Property Map>Isolation Levels - two
Digit List<Property Map>Century Starts - unsupported
Ddl List<Property Map>Actions - use
Cached List<Property Map>Results - week
Of List<Property Map>Year Policies - week
Starts List<Property Map>
LegacyServiceUserParameterAbortDetachedQuery, LegacyServiceUserParameterAbortDetachedQueryArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterActivePythonProfiler, LegacyServiceUserParameterActivePythonProfilerArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterAutocommit, LegacyServiceUserParameterAutocommitArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterBinaryInputFormat, LegacyServiceUserParameterBinaryInputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterBinaryOutputFormat, LegacyServiceUserParameterBinaryOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientEnableLogInfoStatementParameter, LegacyServiceUserParameterClientEnableLogInfoStatementParameterArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientMemoryLimit, LegacyServiceUserParameterClientMemoryLimitArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientMetadataRequestUseConnectionCtx, LegacyServiceUserParameterClientMetadataRequestUseConnectionCtxArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientMetadataUseSessionDatabase, LegacyServiceUserParameterClientMetadataUseSessionDatabaseArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientPrefetchThread, LegacyServiceUserParameterClientPrefetchThreadArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientResultChunkSize, LegacyServiceUserParameterClientResultChunkSizeArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientResultColumnCaseInsensitive, LegacyServiceUserParameterClientResultColumnCaseInsensitiveArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientSessionKeepAlife, LegacyServiceUserParameterClientSessionKeepAlifeArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientSessionKeepAliveHeartbeatFrequency, LegacyServiceUserParameterClientSessionKeepAliveHeartbeatFrequencyArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterClientTimestampTypeMapping, LegacyServiceUserParameterClientTimestampTypeMappingArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterCsvTimestampFormat, LegacyServiceUserParameterCsvTimestampFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterDateInputFormat, LegacyServiceUserParameterDateInputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterDateOutputFormat, LegacyServiceUserParameterDateOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterEnableGetDdlUseDataTypeAlias, LegacyServiceUserParameterEnableGetDdlUseDataTypeAliasArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterEnableUnloadPhysicalTypeOptimization, LegacyServiceUserParameterEnableUnloadPhysicalTypeOptimizationArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterEnableUnredactedQuerySyntaxError, LegacyServiceUserParameterEnableUnredactedQuerySyntaxErrorArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterErrorOnNondeterministicMerge, LegacyServiceUserParameterErrorOnNondeterministicMergeArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterErrorOnNondeterministicUpdate, LegacyServiceUserParameterErrorOnNondeterministicUpdateArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterGeographyOutputFormat, LegacyServiceUserParameterGeographyOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterGeometryOutputFormat, LegacyServiceUserParameterGeometryOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterHybridTableLockTimeout, LegacyServiceUserParameterHybridTableLockTimeoutArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterJdbcTreatDecimalAsInt, LegacyServiceUserParameterJdbcTreatDecimalAsIntArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterJdbcTreatTimestampNtzAsUtc, LegacyServiceUserParameterJdbcTreatTimestampNtzAsUtcArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterJdbcUseSessionTimezone, LegacyServiceUserParameterJdbcUseSessionTimezoneArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterJsTreatIntegerAsBigint, LegacyServiceUserParameterJsTreatIntegerAsBigintArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterJsonIndent, LegacyServiceUserParameterJsonIndentArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterLockTimeout, LegacyServiceUserParameterLockTimeoutArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterLogEventLevel, LegacyServiceUserParameterLogEventLevelArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterLogLevel, LegacyServiceUserParameterLogLevelArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterMultiStatementCount, LegacyServiceUserParameterMultiStatementCountArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterNetworkPolicy, LegacyServiceUserParameterNetworkPolicyArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterNoorderSequenceAsDefault, LegacyServiceUserParameterNoorderSequenceAsDefaultArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterOdbcTreatDecimalAsInt, LegacyServiceUserParameterOdbcTreatDecimalAsIntArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterPreventUnloadToInternalStage, LegacyServiceUserParameterPreventUnloadToInternalStageArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterPythonProfilerModule, LegacyServiceUserParameterPythonProfilerModuleArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterPythonProfilerTargetStage, LegacyServiceUserParameterPythonProfilerTargetStageArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterQueryTag, LegacyServiceUserParameterQueryTagArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterQuotedIdentifiersIgnoreCase, LegacyServiceUserParameterQuotedIdentifiersIgnoreCaseArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterRowsPerResultset, LegacyServiceUserParameterRowsPerResultsetArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterS3StageVpceDnsName, LegacyServiceUserParameterS3StageVpceDnsNameArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterSearchPath, LegacyServiceUserParameterSearchPathArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterSimulatedDataSharingConsumer, LegacyServiceUserParameterSimulatedDataSharingConsumerArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterStatementQueuedTimeoutInSecond, LegacyServiceUserParameterStatementQueuedTimeoutInSecondArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterStatementTimeoutInSecond, LegacyServiceUserParameterStatementTimeoutInSecondArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterStrictJsonOutput, LegacyServiceUserParameterStrictJsonOutputArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimeInputFormat, LegacyServiceUserParameterTimeInputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimeOutputFormat, LegacyServiceUserParameterTimeOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampDayIsAlways24h, LegacyServiceUserParameterTimestampDayIsAlways24hArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampInputFormat, LegacyServiceUserParameterTimestampInputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampLtzOutputFormat, LegacyServiceUserParameterTimestampLtzOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampNtzOutputFormat, LegacyServiceUserParameterTimestampNtzOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampOutputFormat, LegacyServiceUserParameterTimestampOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampTypeMapping, LegacyServiceUserParameterTimestampTypeMappingArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimestampTzOutputFormat, LegacyServiceUserParameterTimestampTzOutputFormatArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTimezone, LegacyServiceUserParameterTimezoneArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTraceLevel, LegacyServiceUserParameterTraceLevelArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTransactionAbortOnError, LegacyServiceUserParameterTransactionAbortOnErrorArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTransactionDefaultIsolationLevel, LegacyServiceUserParameterTransactionDefaultIsolationLevelArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterTwoDigitCenturyStart, LegacyServiceUserParameterTwoDigitCenturyStartArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterUnsupportedDdlAction, LegacyServiceUserParameterUnsupportedDdlActionArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterUseCachedResult, LegacyServiceUserParameterUseCachedResultArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterWeekOfYearPolicy, LegacyServiceUserParameterWeekOfYearPolicyArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserParameterWeekStart, LegacyServiceUserParameterWeekStartArgs
- Default string
- Description string
- Key string
- Level string
- Value string
- Default string
- Description string
- Key string
- Level string
- Value string
- default string
- description string
- key string
- level string
- value string
- default_ String
- description String
- key String
- level String
- value String
- default string
- description string
- key string
- level string
- value string
- default str
- description str
- key str
- level str
- value str
- default String
- description String
- key String
- level String
- value String
LegacyServiceUserShowOutput, LegacyServiceUserShowOutputArgs
- Comment string
- Created
On string - Days
To stringExpiry - Default
Namespace string - Default
Role string - Default
Secondary stringRoles - Default
Warehouse string - Disabled bool
- Display
Name string - Email string
- Expires
At stringTime - Ext
Authn boolDuo - Ext
Authn stringUid - First
Name string - Has
Mfa bool - Has
Password bool - Has
Rsa boolPublic Key - Has
Workload boolIdentity - Last
Name string - Last
Success stringLogin - Locked
Until stringTime - Login
Name string - Mins
To stringBypass Mfa - Mins
To stringUnlock - Must
Change boolPassword - Name string
- Owner string
- Snowflake
Lock bool - Type string
- Comment string
- Created
On string - Days
To stringExpiry - Default
Namespace string - Default
Role string - Default
Secondary stringRoles - Default
Warehouse string - Disabled bool
- Display
Name string - Email string
- Expires
At stringTime - Ext
Authn boolDuo - Ext
Authn stringUid - First
Name string - Has
Mfa bool - Has
Password bool - Has
Rsa boolPublic Key - Has
Workload boolIdentity - Last
Name string - Last
Success stringLogin - Locked
Until stringTime - Login
Name string - Mins
To stringBypass Mfa - Mins
To stringUnlock - Must
Change boolPassword - Name string
- Owner string
- Snowflake
Lock bool - Type string
- comment string
- created_
on string - days_
to_ stringexpiry - default_
namespace string - default_
role string - default_
secondary_ stringroles - default_
warehouse string - disabled bool
- display_
name string - email string
- expires_
at_ stringtime - ext_
authn_ boolduo - ext_
authn_ stringuid - first_
name string - has_
mfa bool - has_
password bool - has_
rsa_ boolpublic_ key - has_
workload_ boolidentity - last_
name string - last_
success_ stringlogin - locked_
until_ stringtime - login_
name string - mins_
to_ stringbypass_ mfa - mins_
to_ stringunlock - must_
change_ boolpassword - name string
- owner string
- snowflake_
lock bool - type string
- comment String
- created
On String - days
To StringExpiry - default
Namespace String - default
Role String - default
Secondary StringRoles - default
Warehouse String - disabled Boolean
- display
Name String - email String
- expires
At StringTime - ext
Authn BooleanDuo - ext
Authn StringUid - first
Name String - has
Mfa Boolean - has
Password Boolean - has
Rsa BooleanPublic Key - has
Workload BooleanIdentity - last
Name String - last
Success StringLogin - locked
Until StringTime - login
Name String - mins
To StringBypass Mfa - mins
To StringUnlock - must
Change BooleanPassword - name String
- owner String
- snowflake
Lock Boolean - type String
- comment string
- created
On string - days
To stringExpiry - default
Namespace string - default
Role string - default
Secondary stringRoles - default
Warehouse string - disabled boolean
- display
Name string - email string
- expires
At stringTime - ext
Authn booleanDuo - ext
Authn stringUid - first
Name string - has
Mfa boolean - has
Password boolean - has
Rsa booleanPublic Key - has
Workload booleanIdentity - last
Name string - last
Success stringLogin - locked
Until stringTime - login
Name string - mins
To stringBypass Mfa - mins
To stringUnlock - must
Change booleanPassword - name string
- owner string
- snowflake
Lock boolean - type string
- comment str
- created_
on str - days_
to_ strexpiry - default_
namespace str - default_
role str - default_
secondary_ strroles - default_
warehouse str - disabled bool
- display_
name str - email str
- expires_
at_ strtime - ext_
authn_ boolduo - ext_
authn_ struid - first_
name str - has_
mfa bool - has_
password bool - has_
rsa_ boolpublic_ key - has_
workload_ boolidentity - last_
name str - last_
success_ strlogin - locked_
until_ strtime - login_
name str - mins_
to_ strbypass_ mfa - mins_
to_ strunlock - must_
change_ boolpassword - name str
- owner str
- snowflake_
lock bool - type str
- comment String
- created
On String - days
To StringExpiry - default
Namespace String - default
Role String - default
Secondary StringRoles - default
Warehouse String - disabled Boolean
- display
Name String - email String
- expires
At StringTime - ext
Authn BooleanDuo - ext
Authn StringUid - first
Name String - has
Mfa Boolean - has
Password Boolean - has
Rsa BooleanPublic Key - has
Workload BooleanIdentity - last
Name String - last
Success StringLogin - locked
Until StringTime - login
Name String - mins
To StringBypass Mfa - mins
To StringUnlock - must
Change BooleanPassword - name String
- owner String
- snowflake
Lock Boolean - type String
Import
$ pulumi import snowflake:index/legacyServiceUser:LegacyServiceUser example '"<user_name>"'
Note: pulumi preview+apply may be needed after successful import to fill out all the missing fields (like password) in state.
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Snowflake pulumi/pulumi-snowflake
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
snowflakeTerraform Provider.
Viewing docs for Snowflake v2.23.0
published on Friday, Nov 6, 2026 by Pulumi
published on Friday, Nov 6, 2026 by Pulumi