pulumi-snowflake 0.50.3a1710160126__py3-none-any.whl → 1.2.0a1736835738__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +224 -172
- pulumi_snowflake/_inputs.py +52857 -1665
- pulumi_snowflake/_utilities.py +41 -5
- pulumi_snowflake/account.py +188 -218
- pulumi_snowflake/account_authentication_policy_attachment.py +149 -0
- pulumi_snowflake/account_parameter.py +21 -48
- pulumi_snowflake/account_password_policy_attachment.py +7 -32
- pulumi_snowflake/account_role.py +250 -0
- pulumi_snowflake/alert.py +38 -47
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +704 -0
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +657 -0
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +692 -0
- pulumi_snowflake/api_integration.py +33 -52
- pulumi_snowflake/authentication_policy.py +622 -0
- pulumi_snowflake/config/__init__.pyi +76 -99
- pulumi_snowflake/config/outputs.py +5 -0
- pulumi_snowflake/config/vars.py +93 -124
- pulumi_snowflake/cortex_search_service.py +596 -0
- pulumi_snowflake/database.py +819 -213
- pulumi_snowflake/database_role.py +81 -44
- pulumi_snowflake/dynamic_table.py +42 -49
- pulumi_snowflake/email_notification_integration.py +33 -28
- pulumi_snowflake/{unsafe_execute.py → execute.py} +36 -39
- pulumi_snowflake/external_function.py +54 -75
- pulumi_snowflake/external_oauth_integration.py +593 -542
- pulumi_snowflake/external_table.py +67 -90
- pulumi_snowflake/external_volume.py +382 -0
- pulumi_snowflake/failover_group.py +57 -98
- pulumi_snowflake/file_format.py +33 -28
- pulumi_snowflake/function_java.py +1211 -0
- pulumi_snowflake/function_javascript.py +882 -0
- pulumi_snowflake/function_python.py +1212 -0
- pulumi_snowflake/function_scala.py +1212 -0
- pulumi_snowflake/function_sql.py +835 -0
- pulumi_snowflake/get_account_roles.py +129 -0
- pulumi_snowflake/get_accounts.py +53 -22
- pulumi_snowflake/get_alerts.py +22 -9
- pulumi_snowflake/get_connections.py +109 -0
- pulumi_snowflake/get_cortex_search_services.py +216 -0
- pulumi_snowflake/get_current_account.py +24 -13
- pulumi_snowflake/get_current_role.py +14 -7
- pulumi_snowflake/get_database.py +25 -9
- pulumi_snowflake/get_database_role.py +162 -0
- pulumi_snowflake/get_database_roles.py +79 -47
- pulumi_snowflake/get_databases.py +91 -73
- pulumi_snowflake/get_dynamic_tables.py +36 -19
- pulumi_snowflake/get_external_functions.py +28 -9
- pulumi_snowflake/get_external_tables.py +28 -9
- pulumi_snowflake/get_failover_groups.py +18 -7
- pulumi_snowflake/get_file_formats.py +28 -9
- pulumi_snowflake/get_functions.py +28 -9
- pulumi_snowflake/get_grants.py +207 -84
- pulumi_snowflake/get_masking_policies.py +91 -51
- pulumi_snowflake/get_materialized_views.py +28 -9
- pulumi_snowflake/get_network_policies.py +129 -0
- pulumi_snowflake/get_parameters.py +38 -15
- pulumi_snowflake/get_pipes.py +28 -9
- pulumi_snowflake/get_procedures.py +28 -9
- pulumi_snowflake/get_resource_monitors.py +37 -24
- pulumi_snowflake/get_row_access_policies.py +91 -51
- pulumi_snowflake/get_schemas.py +145 -41
- pulumi_snowflake/get_secrets.py +200 -0
- pulumi_snowflake/get_security_integrations.py +129 -0
- pulumi_snowflake/get_sequences.py +28 -9
- pulumi_snowflake/get_shares.py +18 -9
- pulumi_snowflake/get_stages.py +28 -9
- pulumi_snowflake/get_storage_integrations.py +16 -9
- pulumi_snowflake/get_streamlits.py +170 -0
- pulumi_snowflake/get_streams.py +114 -54
- pulumi_snowflake/get_system_generate_scim_access_token.py +18 -9
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +32 -7
- pulumi_snowflake/get_system_get_private_link_config.py +120 -5
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +15 -7
- pulumi_snowflake/get_tables.py +28 -9
- pulumi_snowflake/get_tags.py +130 -0
- pulumi_snowflake/get_tasks.py +134 -54
- pulumi_snowflake/get_users.py +116 -44
- pulumi_snowflake/get_views.py +114 -54
- pulumi_snowflake/get_warehouses.py +79 -26
- pulumi_snowflake/grant_account_role.py +28 -75
- pulumi_snowflake/grant_application_role.py +257 -0
- pulumi_snowflake/grant_database_role.py +35 -94
- pulumi_snowflake/grant_ownership.py +382 -0
- pulumi_snowflake/grant_privileges_to_account_role.py +42 -78
- pulumi_snowflake/grant_privileges_to_database_role.py +37 -383
- pulumi_snowflake/grant_privileges_to_share.py +96 -44
- pulumi_snowflake/legacy_service_user.py +3670 -0
- pulumi_snowflake/managed_account.py +40 -11
- pulumi_snowflake/masking_policy.py +213 -310
- pulumi_snowflake/materialized_view.py +62 -71
- pulumi_snowflake/network_policy.py +217 -61
- pulumi_snowflake/network_policy_attachment.py +5 -34
- pulumi_snowflake/network_rule.py +473 -0
- pulumi_snowflake/notification_integration.py +49 -84
- pulumi_snowflake/oauth_integration_for_custom_clients.py +906 -0
- pulumi_snowflake/{oauth_integration.py → oauth_integration_for_partner_applications.py} +191 -192
- pulumi_snowflake/object_parameter.py +10 -101
- pulumi_snowflake/outputs.py +49200 -2928
- pulumi_snowflake/password_policy.py +41 -28
- pulumi_snowflake/pipe.py +33 -4
- pulumi_snowflake/primary_connection.py +330 -0
- pulumi_snowflake/procedure_java.py +1273 -0
- pulumi_snowflake/procedure_javascript.py +895 -0
- pulumi_snowflake/procedure_python.py +1226 -0
- pulumi_snowflake/procedure_scala.py +1273 -0
- pulumi_snowflake/procedure_sql.py +895 -0
- pulumi_snowflake/provider.py +378 -613
- pulumi_snowflake/pulumi-plugin.json +2 -1
- pulumi_snowflake/resource_monitor.py +118 -327
- pulumi_snowflake/row_access_policy.py +200 -149
- pulumi_snowflake/{saml_integration.py → saml2_integration.py} +356 -299
- pulumi_snowflake/schema.py +949 -178
- pulumi_snowflake/scim_integration.py +286 -109
- pulumi_snowflake/secondary_connection.py +339 -0
- pulumi_snowflake/secondary_database.py +1080 -0
- pulumi_snowflake/secret_with_authorization_code_grant.py +548 -0
- pulumi_snowflake/secret_with_basic_authentication.py +500 -0
- pulumi_snowflake/secret_with_client_credentials.py +511 -0
- pulumi_snowflake/secret_with_generic_string.py +452 -0
- pulumi_snowflake/sequence.py +9 -34
- pulumi_snowflake/service_user.py +3585 -0
- pulumi_snowflake/share.py +33 -28
- pulumi_snowflake/shared_database.py +939 -0
- pulumi_snowflake/stage.py +95 -84
- pulumi_snowflake/storage_integration.py +46 -4
- pulumi_snowflake/stream_on_directory_table.py +517 -0
- pulumi_snowflake/stream_on_external_table.py +632 -0
- pulumi_snowflake/stream_on_table.py +666 -0
- pulumi_snowflake/stream_on_view.py +666 -0
- pulumi_snowflake/streamlit.py +671 -0
- pulumi_snowflake/table.py +86 -97
- pulumi_snowflake/table_column_masking_policy_application.py +7 -14
- pulumi_snowflake/table_constraint.py +29 -172
- pulumi_snowflake/tag.py +142 -74
- pulumi_snowflake/tag_association.py +40 -215
- pulumi_snowflake/task.py +3048 -418
- pulumi_snowflake/user.py +3351 -384
- pulumi_snowflake/user_authentication_policy_attachment.py +197 -0
- pulumi_snowflake/user_password_policy_attachment.py +5 -4
- pulumi_snowflake/user_public_keys.py +5 -0
- pulumi_snowflake/view.py +466 -215
- pulumi_snowflake/warehouse.py +184 -168
- {pulumi_snowflake-0.50.3a1710160126.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/METADATA +7 -6
- pulumi_snowflake-1.2.0a1736835738.dist-info/RECORD +148 -0
- {pulumi_snowflake-0.50.3a1710160126.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/WHEEL +1 -1
- pulumi_snowflake/account_grant.py +0 -343
- pulumi_snowflake/database_grant.py +0 -495
- pulumi_snowflake/external_table_grant.py +0 -690
- pulumi_snowflake/failover_group_grant.py +0 -388
- pulumi_snowflake/file_format_grant.py +0 -635
- pulumi_snowflake/function.py +0 -872
- pulumi_snowflake/function_grant.py +0 -745
- pulumi_snowflake/get_role.py +0 -121
- pulumi_snowflake/get_roles.py +0 -120
- pulumi_snowflake/grant_privileges_to_role.py +0 -825
- pulumi_snowflake/integration_grant.py +0 -440
- pulumi_snowflake/masking_policy_grant.py +0 -542
- pulumi_snowflake/materialized_view_grant.py +0 -689
- pulumi_snowflake/pipe_grant.py +0 -587
- pulumi_snowflake/procedure.py +0 -887
- pulumi_snowflake/procedure_grant.py +0 -745
- pulumi_snowflake/resource_monitor_grant.py +0 -387
- pulumi_snowflake/role.py +0 -273
- pulumi_snowflake/role_grants.py +0 -352
- pulumi_snowflake/role_ownership_grant.py +0 -338
- pulumi_snowflake/row_access_policy_grant.py +0 -540
- pulumi_snowflake/schema_grant.py +0 -647
- pulumi_snowflake/sequence_grant.py +0 -635
- pulumi_snowflake/session_parameter.py +0 -332
- pulumi_snowflake/stage_grant.py +0 -635
- pulumi_snowflake/stream.py +0 -614
- pulumi_snowflake/stream_grant.py +0 -635
- pulumi_snowflake/table_grant.py +0 -677
- pulumi_snowflake/tag_grant.py +0 -532
- pulumi_snowflake/tag_masking_policy_association.py +0 -210
- pulumi_snowflake/task_grant.py +0 -635
- pulumi_snowflake/user_grant.py +0 -394
- pulumi_snowflake/user_ownership_grant.py +0 -286
- pulumi_snowflake/view_grant.py +0 -705
- pulumi_snowflake/warehouse_grant.py +0 -440
- pulumi_snowflake-0.50.3a1710160126.dist-info/RECORD +0 -136
- {pulumi_snowflake-0.50.3a1710160126.dist-info → pulumi_snowflake-1.2.0a1736835738.dist-info}/top_level.txt +0 -0
|
@@ -1,825 +0,0 @@
|
|
|
1
|
-
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
|
-
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
|
-
|
|
5
|
-
import copy
|
|
6
|
-
import warnings
|
|
7
|
-
import pulumi
|
|
8
|
-
import pulumi.runtime
|
|
9
|
-
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
10
|
-
from . import _utilities
|
|
11
|
-
from . import outputs
|
|
12
|
-
from ._inputs import *
|
|
13
|
-
|
|
14
|
-
__all__ = ['GrantPrivilegesToRoleArgs', 'GrantPrivilegesToRole']
|
|
15
|
-
|
|
16
|
-
@pulumi.input_type
|
|
17
|
-
class GrantPrivilegesToRoleArgs:
|
|
18
|
-
def __init__(__self__, *,
|
|
19
|
-
role_name: pulumi.Input[str],
|
|
20
|
-
all_privileges: Optional[pulumi.Input[bool]] = None,
|
|
21
|
-
on_account: Optional[pulumi.Input[bool]] = None,
|
|
22
|
-
on_account_object: Optional[pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs']] = None,
|
|
23
|
-
on_schema: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs']] = None,
|
|
24
|
-
on_schema_object: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs']] = None,
|
|
25
|
-
privileges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
26
|
-
with_grant_option: Optional[pulumi.Input[bool]] = None):
|
|
27
|
-
"""
|
|
28
|
-
The set of arguments for constructing a GrantPrivilegesToRole resource.
|
|
29
|
-
:param pulumi.Input[str] role_name: The fully qualified name of the role to which privileges will be granted.
|
|
30
|
-
:param pulumi.Input[bool] all_privileges: Grant all privileges on the account role.
|
|
31
|
-
:param pulumi.Input[bool] on_account: If true, the privileges will be granted on the account.
|
|
32
|
-
:param pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs'] on_account_object: Specifies the account object on which privileges will be granted
|
|
33
|
-
:param pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs'] on_schema: Specifies the schema on which privileges will be granted.
|
|
34
|
-
:param pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs'] on_schema_object: Specifies the schema object on which privileges will be granted.
|
|
35
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] privileges: The privileges to grant on the account role.
|
|
36
|
-
:param pulumi.Input[bool] with_grant_option: Specifies whether the grantee can grant the privileges to other users.
|
|
37
|
-
"""
|
|
38
|
-
pulumi.set(__self__, "role_name", role_name)
|
|
39
|
-
if all_privileges is not None:
|
|
40
|
-
pulumi.set(__self__, "all_privileges", all_privileges)
|
|
41
|
-
if on_account is not None:
|
|
42
|
-
pulumi.set(__self__, "on_account", on_account)
|
|
43
|
-
if on_account_object is not None:
|
|
44
|
-
pulumi.set(__self__, "on_account_object", on_account_object)
|
|
45
|
-
if on_schema is not None:
|
|
46
|
-
pulumi.set(__self__, "on_schema", on_schema)
|
|
47
|
-
if on_schema_object is not None:
|
|
48
|
-
pulumi.set(__self__, "on_schema_object", on_schema_object)
|
|
49
|
-
if privileges is not None:
|
|
50
|
-
pulumi.set(__self__, "privileges", privileges)
|
|
51
|
-
if with_grant_option is not None:
|
|
52
|
-
pulumi.set(__self__, "with_grant_option", with_grant_option)
|
|
53
|
-
|
|
54
|
-
@property
|
|
55
|
-
@pulumi.getter(name="roleName")
|
|
56
|
-
def role_name(self) -> pulumi.Input[str]:
|
|
57
|
-
"""
|
|
58
|
-
The fully qualified name of the role to which privileges will be granted.
|
|
59
|
-
"""
|
|
60
|
-
return pulumi.get(self, "role_name")
|
|
61
|
-
|
|
62
|
-
@role_name.setter
|
|
63
|
-
def role_name(self, value: pulumi.Input[str]):
|
|
64
|
-
pulumi.set(self, "role_name", value)
|
|
65
|
-
|
|
66
|
-
@property
|
|
67
|
-
@pulumi.getter(name="allPrivileges")
|
|
68
|
-
def all_privileges(self) -> Optional[pulumi.Input[bool]]:
|
|
69
|
-
"""
|
|
70
|
-
Grant all privileges on the account role.
|
|
71
|
-
"""
|
|
72
|
-
return pulumi.get(self, "all_privileges")
|
|
73
|
-
|
|
74
|
-
@all_privileges.setter
|
|
75
|
-
def all_privileges(self, value: Optional[pulumi.Input[bool]]):
|
|
76
|
-
pulumi.set(self, "all_privileges", value)
|
|
77
|
-
|
|
78
|
-
@property
|
|
79
|
-
@pulumi.getter(name="onAccount")
|
|
80
|
-
def on_account(self) -> Optional[pulumi.Input[bool]]:
|
|
81
|
-
"""
|
|
82
|
-
If true, the privileges will be granted on the account.
|
|
83
|
-
"""
|
|
84
|
-
return pulumi.get(self, "on_account")
|
|
85
|
-
|
|
86
|
-
@on_account.setter
|
|
87
|
-
def on_account(self, value: Optional[pulumi.Input[bool]]):
|
|
88
|
-
pulumi.set(self, "on_account", value)
|
|
89
|
-
|
|
90
|
-
@property
|
|
91
|
-
@pulumi.getter(name="onAccountObject")
|
|
92
|
-
def on_account_object(self) -> Optional[pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs']]:
|
|
93
|
-
"""
|
|
94
|
-
Specifies the account object on which privileges will be granted
|
|
95
|
-
"""
|
|
96
|
-
return pulumi.get(self, "on_account_object")
|
|
97
|
-
|
|
98
|
-
@on_account_object.setter
|
|
99
|
-
def on_account_object(self, value: Optional[pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs']]):
|
|
100
|
-
pulumi.set(self, "on_account_object", value)
|
|
101
|
-
|
|
102
|
-
@property
|
|
103
|
-
@pulumi.getter(name="onSchema")
|
|
104
|
-
def on_schema(self) -> Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs']]:
|
|
105
|
-
"""
|
|
106
|
-
Specifies the schema on which privileges will be granted.
|
|
107
|
-
"""
|
|
108
|
-
return pulumi.get(self, "on_schema")
|
|
109
|
-
|
|
110
|
-
@on_schema.setter
|
|
111
|
-
def on_schema(self, value: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs']]):
|
|
112
|
-
pulumi.set(self, "on_schema", value)
|
|
113
|
-
|
|
114
|
-
@property
|
|
115
|
-
@pulumi.getter(name="onSchemaObject")
|
|
116
|
-
def on_schema_object(self) -> Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs']]:
|
|
117
|
-
"""
|
|
118
|
-
Specifies the schema object on which privileges will be granted.
|
|
119
|
-
"""
|
|
120
|
-
return pulumi.get(self, "on_schema_object")
|
|
121
|
-
|
|
122
|
-
@on_schema_object.setter
|
|
123
|
-
def on_schema_object(self, value: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs']]):
|
|
124
|
-
pulumi.set(self, "on_schema_object", value)
|
|
125
|
-
|
|
126
|
-
@property
|
|
127
|
-
@pulumi.getter
|
|
128
|
-
def privileges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
129
|
-
"""
|
|
130
|
-
The privileges to grant on the account role.
|
|
131
|
-
"""
|
|
132
|
-
return pulumi.get(self, "privileges")
|
|
133
|
-
|
|
134
|
-
@privileges.setter
|
|
135
|
-
def privileges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
136
|
-
pulumi.set(self, "privileges", value)
|
|
137
|
-
|
|
138
|
-
@property
|
|
139
|
-
@pulumi.getter(name="withGrantOption")
|
|
140
|
-
def with_grant_option(self) -> Optional[pulumi.Input[bool]]:
|
|
141
|
-
"""
|
|
142
|
-
Specifies whether the grantee can grant the privileges to other users.
|
|
143
|
-
"""
|
|
144
|
-
return pulumi.get(self, "with_grant_option")
|
|
145
|
-
|
|
146
|
-
@with_grant_option.setter
|
|
147
|
-
def with_grant_option(self, value: Optional[pulumi.Input[bool]]):
|
|
148
|
-
pulumi.set(self, "with_grant_option", value)
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
@pulumi.input_type
|
|
152
|
-
class _GrantPrivilegesToRoleState:
|
|
153
|
-
def __init__(__self__, *,
|
|
154
|
-
all_privileges: Optional[pulumi.Input[bool]] = None,
|
|
155
|
-
on_account: Optional[pulumi.Input[bool]] = None,
|
|
156
|
-
on_account_object: Optional[pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs']] = None,
|
|
157
|
-
on_schema: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs']] = None,
|
|
158
|
-
on_schema_object: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs']] = None,
|
|
159
|
-
privileges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
160
|
-
role_name: Optional[pulumi.Input[str]] = None,
|
|
161
|
-
with_grant_option: Optional[pulumi.Input[bool]] = None):
|
|
162
|
-
"""
|
|
163
|
-
Input properties used for looking up and filtering GrantPrivilegesToRole resources.
|
|
164
|
-
:param pulumi.Input[bool] all_privileges: Grant all privileges on the account role.
|
|
165
|
-
:param pulumi.Input[bool] on_account: If true, the privileges will be granted on the account.
|
|
166
|
-
:param pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs'] on_account_object: Specifies the account object on which privileges will be granted
|
|
167
|
-
:param pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs'] on_schema: Specifies the schema on which privileges will be granted.
|
|
168
|
-
:param pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs'] on_schema_object: Specifies the schema object on which privileges will be granted.
|
|
169
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] privileges: The privileges to grant on the account role.
|
|
170
|
-
:param pulumi.Input[str] role_name: The fully qualified name of the role to which privileges will be granted.
|
|
171
|
-
:param pulumi.Input[bool] with_grant_option: Specifies whether the grantee can grant the privileges to other users.
|
|
172
|
-
"""
|
|
173
|
-
if all_privileges is not None:
|
|
174
|
-
pulumi.set(__self__, "all_privileges", all_privileges)
|
|
175
|
-
if on_account is not None:
|
|
176
|
-
pulumi.set(__self__, "on_account", on_account)
|
|
177
|
-
if on_account_object is not None:
|
|
178
|
-
pulumi.set(__self__, "on_account_object", on_account_object)
|
|
179
|
-
if on_schema is not None:
|
|
180
|
-
pulumi.set(__self__, "on_schema", on_schema)
|
|
181
|
-
if on_schema_object is not None:
|
|
182
|
-
pulumi.set(__self__, "on_schema_object", on_schema_object)
|
|
183
|
-
if privileges is not None:
|
|
184
|
-
pulumi.set(__self__, "privileges", privileges)
|
|
185
|
-
if role_name is not None:
|
|
186
|
-
pulumi.set(__self__, "role_name", role_name)
|
|
187
|
-
if with_grant_option is not None:
|
|
188
|
-
pulumi.set(__self__, "with_grant_option", with_grant_option)
|
|
189
|
-
|
|
190
|
-
@property
|
|
191
|
-
@pulumi.getter(name="allPrivileges")
|
|
192
|
-
def all_privileges(self) -> Optional[pulumi.Input[bool]]:
|
|
193
|
-
"""
|
|
194
|
-
Grant all privileges on the account role.
|
|
195
|
-
"""
|
|
196
|
-
return pulumi.get(self, "all_privileges")
|
|
197
|
-
|
|
198
|
-
@all_privileges.setter
|
|
199
|
-
def all_privileges(self, value: Optional[pulumi.Input[bool]]):
|
|
200
|
-
pulumi.set(self, "all_privileges", value)
|
|
201
|
-
|
|
202
|
-
@property
|
|
203
|
-
@pulumi.getter(name="onAccount")
|
|
204
|
-
def on_account(self) -> Optional[pulumi.Input[bool]]:
|
|
205
|
-
"""
|
|
206
|
-
If true, the privileges will be granted on the account.
|
|
207
|
-
"""
|
|
208
|
-
return pulumi.get(self, "on_account")
|
|
209
|
-
|
|
210
|
-
@on_account.setter
|
|
211
|
-
def on_account(self, value: Optional[pulumi.Input[bool]]):
|
|
212
|
-
pulumi.set(self, "on_account", value)
|
|
213
|
-
|
|
214
|
-
@property
|
|
215
|
-
@pulumi.getter(name="onAccountObject")
|
|
216
|
-
def on_account_object(self) -> Optional[pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs']]:
|
|
217
|
-
"""
|
|
218
|
-
Specifies the account object on which privileges will be granted
|
|
219
|
-
"""
|
|
220
|
-
return pulumi.get(self, "on_account_object")
|
|
221
|
-
|
|
222
|
-
@on_account_object.setter
|
|
223
|
-
def on_account_object(self, value: Optional[pulumi.Input['GrantPrivilegesToRoleOnAccountObjectArgs']]):
|
|
224
|
-
pulumi.set(self, "on_account_object", value)
|
|
225
|
-
|
|
226
|
-
@property
|
|
227
|
-
@pulumi.getter(name="onSchema")
|
|
228
|
-
def on_schema(self) -> Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs']]:
|
|
229
|
-
"""
|
|
230
|
-
Specifies the schema on which privileges will be granted.
|
|
231
|
-
"""
|
|
232
|
-
return pulumi.get(self, "on_schema")
|
|
233
|
-
|
|
234
|
-
@on_schema.setter
|
|
235
|
-
def on_schema(self, value: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaArgs']]):
|
|
236
|
-
pulumi.set(self, "on_schema", value)
|
|
237
|
-
|
|
238
|
-
@property
|
|
239
|
-
@pulumi.getter(name="onSchemaObject")
|
|
240
|
-
def on_schema_object(self) -> Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs']]:
|
|
241
|
-
"""
|
|
242
|
-
Specifies the schema object on which privileges will be granted.
|
|
243
|
-
"""
|
|
244
|
-
return pulumi.get(self, "on_schema_object")
|
|
245
|
-
|
|
246
|
-
@on_schema_object.setter
|
|
247
|
-
def on_schema_object(self, value: Optional[pulumi.Input['GrantPrivilegesToRoleOnSchemaObjectArgs']]):
|
|
248
|
-
pulumi.set(self, "on_schema_object", value)
|
|
249
|
-
|
|
250
|
-
@property
|
|
251
|
-
@pulumi.getter
|
|
252
|
-
def privileges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
253
|
-
"""
|
|
254
|
-
The privileges to grant on the account role.
|
|
255
|
-
"""
|
|
256
|
-
return pulumi.get(self, "privileges")
|
|
257
|
-
|
|
258
|
-
@privileges.setter
|
|
259
|
-
def privileges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
260
|
-
pulumi.set(self, "privileges", value)
|
|
261
|
-
|
|
262
|
-
@property
|
|
263
|
-
@pulumi.getter(name="roleName")
|
|
264
|
-
def role_name(self) -> Optional[pulumi.Input[str]]:
|
|
265
|
-
"""
|
|
266
|
-
The fully qualified name of the role to which privileges will be granted.
|
|
267
|
-
"""
|
|
268
|
-
return pulumi.get(self, "role_name")
|
|
269
|
-
|
|
270
|
-
@role_name.setter
|
|
271
|
-
def role_name(self, value: Optional[pulumi.Input[str]]):
|
|
272
|
-
pulumi.set(self, "role_name", value)
|
|
273
|
-
|
|
274
|
-
@property
|
|
275
|
-
@pulumi.getter(name="withGrantOption")
|
|
276
|
-
def with_grant_option(self) -> Optional[pulumi.Input[bool]]:
|
|
277
|
-
"""
|
|
278
|
-
Specifies whether the grantee can grant the privileges to other users.
|
|
279
|
-
"""
|
|
280
|
-
return pulumi.get(self, "with_grant_option")
|
|
281
|
-
|
|
282
|
-
@with_grant_option.setter
|
|
283
|
-
def with_grant_option(self, value: Optional[pulumi.Input[bool]]):
|
|
284
|
-
pulumi.set(self, "with_grant_option", value)
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
class GrantPrivilegesToRole(pulumi.CustomResource):
|
|
288
|
-
@overload
|
|
289
|
-
def __init__(__self__,
|
|
290
|
-
resource_name: str,
|
|
291
|
-
opts: Optional[pulumi.ResourceOptions] = None,
|
|
292
|
-
all_privileges: Optional[pulumi.Input[bool]] = None,
|
|
293
|
-
on_account: Optional[pulumi.Input[bool]] = None,
|
|
294
|
-
on_account_object: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnAccountObjectArgs']]] = None,
|
|
295
|
-
on_schema: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaArgs']]] = None,
|
|
296
|
-
on_schema_object: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaObjectArgs']]] = None,
|
|
297
|
-
privileges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
298
|
-
role_name: Optional[pulumi.Input[str]] = None,
|
|
299
|
-
with_grant_option: Optional[pulumi.Input[bool]] = None,
|
|
300
|
-
__props__=None):
|
|
301
|
-
"""
|
|
302
|
-
> **Deprecation** This resource is deprecated and will be removed in a future major version release. Please use GrantPrivilegesToAccountRole instead. <deprecation>
|
|
303
|
-
|
|
304
|
-
## Example Usage
|
|
305
|
-
|
|
306
|
-
<!--Start PulumiCodeChooser -->
|
|
307
|
-
```python
|
|
308
|
-
import pulumi
|
|
309
|
-
import pulumi_snowflake as snowflake
|
|
310
|
-
|
|
311
|
-
##################################
|
|
312
|
-
### global privileges
|
|
313
|
-
##################################
|
|
314
|
-
# list of privileges
|
|
315
|
-
g1 = snowflake.GrantPrivilegesToRole("g1",
|
|
316
|
-
privileges=[
|
|
317
|
-
"MODIFY",
|
|
318
|
-
"USAGE",
|
|
319
|
-
],
|
|
320
|
-
role_name=snowflake_role["r"]["name"],
|
|
321
|
-
on_account=True)
|
|
322
|
-
# all privileges + grant option
|
|
323
|
-
g2 = snowflake.GrantPrivilegesToRole("g2",
|
|
324
|
-
role_name=snowflake_role["r"]["name"],
|
|
325
|
-
on_account=True,
|
|
326
|
-
all_privileges=True,
|
|
327
|
-
with_grant_option=True)
|
|
328
|
-
##################################
|
|
329
|
-
### account object privileges
|
|
330
|
-
##################################
|
|
331
|
-
# list of privileges
|
|
332
|
-
g3 = snowflake.GrantPrivilegesToRole("g3",
|
|
333
|
-
privileges=[
|
|
334
|
-
"CREATE",
|
|
335
|
-
"MONITOR",
|
|
336
|
-
],
|
|
337
|
-
role_name=snowflake_role["r"]["name"],
|
|
338
|
-
on_account_object=snowflake.GrantPrivilegesToRoleOnAccountObjectArgs(
|
|
339
|
-
object_type="DATABASE",
|
|
340
|
-
object_name=snowflake_database["d"]["name"],
|
|
341
|
-
))
|
|
342
|
-
# all privileges + grant option
|
|
343
|
-
g4 = snowflake.GrantPrivilegesToRole("g4",
|
|
344
|
-
role_name=snowflake_role["r"]["name"],
|
|
345
|
-
on_account_object=snowflake.GrantPrivilegesToRoleOnAccountObjectArgs(
|
|
346
|
-
object_type="DATABASE",
|
|
347
|
-
object_name=snowflake_database["d"]["name"],
|
|
348
|
-
),
|
|
349
|
-
all_privileges=True,
|
|
350
|
-
with_grant_option=True)
|
|
351
|
-
##################################
|
|
352
|
-
### schema privileges
|
|
353
|
-
##################################
|
|
354
|
-
# list of privileges
|
|
355
|
-
g5 = snowflake.GrantPrivilegesToRole("g5",
|
|
356
|
-
privileges=[
|
|
357
|
-
"MODIFY",
|
|
358
|
-
"CREATE TABLE",
|
|
359
|
-
],
|
|
360
|
-
role_name=snowflake_role["r"]["name"],
|
|
361
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
362
|
-
schema_name="\\"my_db\\".\\"my_schema\\"",
|
|
363
|
-
))
|
|
364
|
-
# all privileges + grant option
|
|
365
|
-
g6 = snowflake.GrantPrivilegesToRole("g6",
|
|
366
|
-
role_name=snowflake_role["r"]["name"],
|
|
367
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
368
|
-
schema_name="\\"my_db\\".\\"my_schema\\"",
|
|
369
|
-
),
|
|
370
|
-
all_privileges=True,
|
|
371
|
-
with_grant_option=True)
|
|
372
|
-
# all schemas in database
|
|
373
|
-
g7 = snowflake.GrantPrivilegesToRole("g7",
|
|
374
|
-
privileges=[
|
|
375
|
-
"MODIFY",
|
|
376
|
-
"CREATE TABLE",
|
|
377
|
-
],
|
|
378
|
-
role_name=snowflake_role["r"]["name"],
|
|
379
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
380
|
-
all_schemas_in_database=snowflake_database["d"]["name"],
|
|
381
|
-
))
|
|
382
|
-
# future schemas in database
|
|
383
|
-
g8 = snowflake.GrantPrivilegesToRole("g8",
|
|
384
|
-
privileges=[
|
|
385
|
-
"MODIFY",
|
|
386
|
-
"CREATE TABLE",
|
|
387
|
-
],
|
|
388
|
-
role_name=snowflake_role["r"]["name"],
|
|
389
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
390
|
-
future_schemas_in_database=snowflake_database["d"]["name"],
|
|
391
|
-
))
|
|
392
|
-
##################################
|
|
393
|
-
### schema object privileges
|
|
394
|
-
##################################
|
|
395
|
-
# list of privileges
|
|
396
|
-
g9 = snowflake.GrantPrivilegesToRole("g9",
|
|
397
|
-
privileges=[
|
|
398
|
-
"SELECT",
|
|
399
|
-
"REFERENCES",
|
|
400
|
-
],
|
|
401
|
-
role_name=snowflake_role["r"]["name"],
|
|
402
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
403
|
-
object_type="VIEW",
|
|
404
|
-
object_name="\\"my_db\\".\\"my_schema\\".\\"my_view\\"",
|
|
405
|
-
))
|
|
406
|
-
# all privileges + grant option
|
|
407
|
-
g10 = snowflake.GrantPrivilegesToRole("g10",
|
|
408
|
-
role_name=snowflake_role["r"]["name"],
|
|
409
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
410
|
-
object_type="VIEW",
|
|
411
|
-
object_name="\\"my_db\\".\\"my_schema\\".\\"my_view\\"",
|
|
412
|
-
),
|
|
413
|
-
all_privileges=True,
|
|
414
|
-
with_grant_option=True)
|
|
415
|
-
# all in database
|
|
416
|
-
g11 = snowflake.GrantPrivilegesToRole("g11",
|
|
417
|
-
privileges=[
|
|
418
|
-
"SELECT",
|
|
419
|
-
"INSERT",
|
|
420
|
-
],
|
|
421
|
-
role_name=snowflake_role["r"]["name"],
|
|
422
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
423
|
-
all=snowflake.GrantPrivilegesToRoleOnSchemaObjectAllArgs(
|
|
424
|
-
object_type_plural="TABLES",
|
|
425
|
-
in_database=snowflake_database["d"]["name"],
|
|
426
|
-
),
|
|
427
|
-
))
|
|
428
|
-
# all in schema
|
|
429
|
-
g12 = snowflake.GrantPrivilegesToRole("g12",
|
|
430
|
-
privileges=[
|
|
431
|
-
"SELECT",
|
|
432
|
-
"INSERT",
|
|
433
|
-
],
|
|
434
|
-
role_name=snowflake_role["r"]["name"],
|
|
435
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
436
|
-
all=snowflake.GrantPrivilegesToRoleOnSchemaObjectAllArgs(
|
|
437
|
-
object_type_plural="TABLES",
|
|
438
|
-
in_schema="\\"my_db\\".\\"my_schema\\"",
|
|
439
|
-
),
|
|
440
|
-
))
|
|
441
|
-
# future in database
|
|
442
|
-
g13 = snowflake.GrantPrivilegesToRole("g13",
|
|
443
|
-
privileges=[
|
|
444
|
-
"SELECT",
|
|
445
|
-
"INSERT",
|
|
446
|
-
],
|
|
447
|
-
role_name=snowflake_role["r"]["name"],
|
|
448
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
449
|
-
future=snowflake.GrantPrivilegesToRoleOnSchemaObjectFutureArgs(
|
|
450
|
-
object_type_plural="TABLES",
|
|
451
|
-
in_database=snowflake_database["d"]["name"],
|
|
452
|
-
),
|
|
453
|
-
))
|
|
454
|
-
# future in schema
|
|
455
|
-
g14 = snowflake.GrantPrivilegesToRole("g14",
|
|
456
|
-
privileges=[
|
|
457
|
-
"SELECT",
|
|
458
|
-
"INSERT",
|
|
459
|
-
],
|
|
460
|
-
role_name=snowflake_role["r"]["name"],
|
|
461
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
462
|
-
future=snowflake.GrantPrivilegesToRoleOnSchemaObjectFutureArgs(
|
|
463
|
-
object_type_plural="TABLES",
|
|
464
|
-
in_schema="\\"my_db\\".\\"my_schema\\"",
|
|
465
|
-
),
|
|
466
|
-
))
|
|
467
|
-
```
|
|
468
|
-
<!--End PulumiCodeChooser -->
|
|
469
|
-
|
|
470
|
-
## Import
|
|
471
|
-
|
|
472
|
-
format is role_name (string) | privileges (comma-delimited string) | all_privileges (bool) |with_grant_option (bool) | on_account (bool) | on_account_object (bool) | on_schema (bool) | on_schema_object (bool) | all (bool) | future (bool) | object_type (string) | object_name (string) | object_type_plural (string) | in_schema (bool) | schema_name (string) | in_database (bool) | database_name (string)
|
|
473
|
-
|
|
474
|
-
```sh
|
|
475
|
-
$ pulumi import snowflake:index/grantPrivilegesToRole:GrantPrivilegesToRole "test_role|MANAGE GRANTS,MONITOR USAGE|false|false|true|false|false|false|false|false||||false||false|"
|
|
476
|
-
```
|
|
477
|
-
|
|
478
|
-
:param str resource_name: The name of the resource.
|
|
479
|
-
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
480
|
-
:param pulumi.Input[bool] all_privileges: Grant all privileges on the account role.
|
|
481
|
-
:param pulumi.Input[bool] on_account: If true, the privileges will be granted on the account.
|
|
482
|
-
:param pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnAccountObjectArgs']] on_account_object: Specifies the account object on which privileges will be granted
|
|
483
|
-
:param pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaArgs']] on_schema: Specifies the schema on which privileges will be granted.
|
|
484
|
-
:param pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaObjectArgs']] on_schema_object: Specifies the schema object on which privileges will be granted.
|
|
485
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] privileges: The privileges to grant on the account role.
|
|
486
|
-
:param pulumi.Input[str] role_name: The fully qualified name of the role to which privileges will be granted.
|
|
487
|
-
:param pulumi.Input[bool] with_grant_option: Specifies whether the grantee can grant the privileges to other users.
|
|
488
|
-
"""
|
|
489
|
-
...
|
|
490
|
-
@overload
|
|
491
|
-
def __init__(__self__,
|
|
492
|
-
resource_name: str,
|
|
493
|
-
args: GrantPrivilegesToRoleArgs,
|
|
494
|
-
opts: Optional[pulumi.ResourceOptions] = None):
|
|
495
|
-
"""
|
|
496
|
-
> **Deprecation** This resource is deprecated and will be removed in a future major version release. Please use GrantPrivilegesToAccountRole instead. <deprecation>
|
|
497
|
-
|
|
498
|
-
## Example Usage
|
|
499
|
-
|
|
500
|
-
<!--Start PulumiCodeChooser -->
|
|
501
|
-
```python
|
|
502
|
-
import pulumi
|
|
503
|
-
import pulumi_snowflake as snowflake
|
|
504
|
-
|
|
505
|
-
##################################
|
|
506
|
-
### global privileges
|
|
507
|
-
##################################
|
|
508
|
-
# list of privileges
|
|
509
|
-
g1 = snowflake.GrantPrivilegesToRole("g1",
|
|
510
|
-
privileges=[
|
|
511
|
-
"MODIFY",
|
|
512
|
-
"USAGE",
|
|
513
|
-
],
|
|
514
|
-
role_name=snowflake_role["r"]["name"],
|
|
515
|
-
on_account=True)
|
|
516
|
-
# all privileges + grant option
|
|
517
|
-
g2 = snowflake.GrantPrivilegesToRole("g2",
|
|
518
|
-
role_name=snowflake_role["r"]["name"],
|
|
519
|
-
on_account=True,
|
|
520
|
-
all_privileges=True,
|
|
521
|
-
with_grant_option=True)
|
|
522
|
-
##################################
|
|
523
|
-
### account object privileges
|
|
524
|
-
##################################
|
|
525
|
-
# list of privileges
|
|
526
|
-
g3 = snowflake.GrantPrivilegesToRole("g3",
|
|
527
|
-
privileges=[
|
|
528
|
-
"CREATE",
|
|
529
|
-
"MONITOR",
|
|
530
|
-
],
|
|
531
|
-
role_name=snowflake_role["r"]["name"],
|
|
532
|
-
on_account_object=snowflake.GrantPrivilegesToRoleOnAccountObjectArgs(
|
|
533
|
-
object_type="DATABASE",
|
|
534
|
-
object_name=snowflake_database["d"]["name"],
|
|
535
|
-
))
|
|
536
|
-
# all privileges + grant option
|
|
537
|
-
g4 = snowflake.GrantPrivilegesToRole("g4",
|
|
538
|
-
role_name=snowflake_role["r"]["name"],
|
|
539
|
-
on_account_object=snowflake.GrantPrivilegesToRoleOnAccountObjectArgs(
|
|
540
|
-
object_type="DATABASE",
|
|
541
|
-
object_name=snowflake_database["d"]["name"],
|
|
542
|
-
),
|
|
543
|
-
all_privileges=True,
|
|
544
|
-
with_grant_option=True)
|
|
545
|
-
##################################
|
|
546
|
-
### schema privileges
|
|
547
|
-
##################################
|
|
548
|
-
# list of privileges
|
|
549
|
-
g5 = snowflake.GrantPrivilegesToRole("g5",
|
|
550
|
-
privileges=[
|
|
551
|
-
"MODIFY",
|
|
552
|
-
"CREATE TABLE",
|
|
553
|
-
],
|
|
554
|
-
role_name=snowflake_role["r"]["name"],
|
|
555
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
556
|
-
schema_name="\\"my_db\\".\\"my_schema\\"",
|
|
557
|
-
))
|
|
558
|
-
# all privileges + grant option
|
|
559
|
-
g6 = snowflake.GrantPrivilegesToRole("g6",
|
|
560
|
-
role_name=snowflake_role["r"]["name"],
|
|
561
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
562
|
-
schema_name="\\"my_db\\".\\"my_schema\\"",
|
|
563
|
-
),
|
|
564
|
-
all_privileges=True,
|
|
565
|
-
with_grant_option=True)
|
|
566
|
-
# all schemas in database
|
|
567
|
-
g7 = snowflake.GrantPrivilegesToRole("g7",
|
|
568
|
-
privileges=[
|
|
569
|
-
"MODIFY",
|
|
570
|
-
"CREATE TABLE",
|
|
571
|
-
],
|
|
572
|
-
role_name=snowflake_role["r"]["name"],
|
|
573
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
574
|
-
all_schemas_in_database=snowflake_database["d"]["name"],
|
|
575
|
-
))
|
|
576
|
-
# future schemas in database
|
|
577
|
-
g8 = snowflake.GrantPrivilegesToRole("g8",
|
|
578
|
-
privileges=[
|
|
579
|
-
"MODIFY",
|
|
580
|
-
"CREATE TABLE",
|
|
581
|
-
],
|
|
582
|
-
role_name=snowflake_role["r"]["name"],
|
|
583
|
-
on_schema=snowflake.GrantPrivilegesToRoleOnSchemaArgs(
|
|
584
|
-
future_schemas_in_database=snowflake_database["d"]["name"],
|
|
585
|
-
))
|
|
586
|
-
##################################
|
|
587
|
-
### schema object privileges
|
|
588
|
-
##################################
|
|
589
|
-
# list of privileges
|
|
590
|
-
g9 = snowflake.GrantPrivilegesToRole("g9",
|
|
591
|
-
privileges=[
|
|
592
|
-
"SELECT",
|
|
593
|
-
"REFERENCES",
|
|
594
|
-
],
|
|
595
|
-
role_name=snowflake_role["r"]["name"],
|
|
596
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
597
|
-
object_type="VIEW",
|
|
598
|
-
object_name="\\"my_db\\".\\"my_schema\\".\\"my_view\\"",
|
|
599
|
-
))
|
|
600
|
-
# all privileges + grant option
|
|
601
|
-
g10 = snowflake.GrantPrivilegesToRole("g10",
|
|
602
|
-
role_name=snowflake_role["r"]["name"],
|
|
603
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
604
|
-
object_type="VIEW",
|
|
605
|
-
object_name="\\"my_db\\".\\"my_schema\\".\\"my_view\\"",
|
|
606
|
-
),
|
|
607
|
-
all_privileges=True,
|
|
608
|
-
with_grant_option=True)
|
|
609
|
-
# all in database
|
|
610
|
-
g11 = snowflake.GrantPrivilegesToRole("g11",
|
|
611
|
-
privileges=[
|
|
612
|
-
"SELECT",
|
|
613
|
-
"INSERT",
|
|
614
|
-
],
|
|
615
|
-
role_name=snowflake_role["r"]["name"],
|
|
616
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
617
|
-
all=snowflake.GrantPrivilegesToRoleOnSchemaObjectAllArgs(
|
|
618
|
-
object_type_plural="TABLES",
|
|
619
|
-
in_database=snowflake_database["d"]["name"],
|
|
620
|
-
),
|
|
621
|
-
))
|
|
622
|
-
# all in schema
|
|
623
|
-
g12 = snowflake.GrantPrivilegesToRole("g12",
|
|
624
|
-
privileges=[
|
|
625
|
-
"SELECT",
|
|
626
|
-
"INSERT",
|
|
627
|
-
],
|
|
628
|
-
role_name=snowflake_role["r"]["name"],
|
|
629
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
630
|
-
all=snowflake.GrantPrivilegesToRoleOnSchemaObjectAllArgs(
|
|
631
|
-
object_type_plural="TABLES",
|
|
632
|
-
in_schema="\\"my_db\\".\\"my_schema\\"",
|
|
633
|
-
),
|
|
634
|
-
))
|
|
635
|
-
# future in database
|
|
636
|
-
g13 = snowflake.GrantPrivilegesToRole("g13",
|
|
637
|
-
privileges=[
|
|
638
|
-
"SELECT",
|
|
639
|
-
"INSERT",
|
|
640
|
-
],
|
|
641
|
-
role_name=snowflake_role["r"]["name"],
|
|
642
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
643
|
-
future=snowflake.GrantPrivilegesToRoleOnSchemaObjectFutureArgs(
|
|
644
|
-
object_type_plural="TABLES",
|
|
645
|
-
in_database=snowflake_database["d"]["name"],
|
|
646
|
-
),
|
|
647
|
-
))
|
|
648
|
-
# future in schema
|
|
649
|
-
g14 = snowflake.GrantPrivilegesToRole("g14",
|
|
650
|
-
privileges=[
|
|
651
|
-
"SELECT",
|
|
652
|
-
"INSERT",
|
|
653
|
-
],
|
|
654
|
-
role_name=snowflake_role["r"]["name"],
|
|
655
|
-
on_schema_object=snowflake.GrantPrivilegesToRoleOnSchemaObjectArgs(
|
|
656
|
-
future=snowflake.GrantPrivilegesToRoleOnSchemaObjectFutureArgs(
|
|
657
|
-
object_type_plural="TABLES",
|
|
658
|
-
in_schema="\\"my_db\\".\\"my_schema\\"",
|
|
659
|
-
),
|
|
660
|
-
))
|
|
661
|
-
```
|
|
662
|
-
<!--End PulumiCodeChooser -->
|
|
663
|
-
|
|
664
|
-
## Import
|
|
665
|
-
|
|
666
|
-
format is role_name (string) | privileges (comma-delimited string) | all_privileges (bool) |with_grant_option (bool) | on_account (bool) | on_account_object (bool) | on_schema (bool) | on_schema_object (bool) | all (bool) | future (bool) | object_type (string) | object_name (string) | object_type_plural (string) | in_schema (bool) | schema_name (string) | in_database (bool) | database_name (string)
|
|
667
|
-
|
|
668
|
-
```sh
|
|
669
|
-
$ pulumi import snowflake:index/grantPrivilegesToRole:GrantPrivilegesToRole "test_role|MANAGE GRANTS,MONITOR USAGE|false|false|true|false|false|false|false|false||||false||false|"
|
|
670
|
-
```
|
|
671
|
-
|
|
672
|
-
:param str resource_name: The name of the resource.
|
|
673
|
-
:param GrantPrivilegesToRoleArgs args: The arguments to use to populate this resource's properties.
|
|
674
|
-
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
675
|
-
"""
|
|
676
|
-
...
|
|
677
|
-
def __init__(__self__, resource_name: str, *args, **kwargs):
|
|
678
|
-
resource_args, opts = _utilities.get_resource_args_opts(GrantPrivilegesToRoleArgs, pulumi.ResourceOptions, *args, **kwargs)
|
|
679
|
-
if resource_args is not None:
|
|
680
|
-
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
|
681
|
-
else:
|
|
682
|
-
__self__._internal_init(resource_name, *args, **kwargs)
|
|
683
|
-
|
|
684
|
-
def _internal_init(__self__,
|
|
685
|
-
resource_name: str,
|
|
686
|
-
opts: Optional[pulumi.ResourceOptions] = None,
|
|
687
|
-
all_privileges: Optional[pulumi.Input[bool]] = None,
|
|
688
|
-
on_account: Optional[pulumi.Input[bool]] = None,
|
|
689
|
-
on_account_object: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnAccountObjectArgs']]] = None,
|
|
690
|
-
on_schema: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaArgs']]] = None,
|
|
691
|
-
on_schema_object: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaObjectArgs']]] = None,
|
|
692
|
-
privileges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
693
|
-
role_name: Optional[pulumi.Input[str]] = None,
|
|
694
|
-
with_grant_option: Optional[pulumi.Input[bool]] = None,
|
|
695
|
-
__props__=None):
|
|
696
|
-
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
697
|
-
if not isinstance(opts, pulumi.ResourceOptions):
|
|
698
|
-
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
|
699
|
-
if opts.id is None:
|
|
700
|
-
if __props__ is not None:
|
|
701
|
-
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
|
702
|
-
__props__ = GrantPrivilegesToRoleArgs.__new__(GrantPrivilegesToRoleArgs)
|
|
703
|
-
|
|
704
|
-
__props__.__dict__["all_privileges"] = all_privileges
|
|
705
|
-
__props__.__dict__["on_account"] = on_account
|
|
706
|
-
__props__.__dict__["on_account_object"] = on_account_object
|
|
707
|
-
__props__.__dict__["on_schema"] = on_schema
|
|
708
|
-
__props__.__dict__["on_schema_object"] = on_schema_object
|
|
709
|
-
__props__.__dict__["privileges"] = privileges
|
|
710
|
-
if role_name is None and not opts.urn:
|
|
711
|
-
raise TypeError("Missing required property 'role_name'")
|
|
712
|
-
__props__.__dict__["role_name"] = role_name
|
|
713
|
-
__props__.__dict__["with_grant_option"] = with_grant_option
|
|
714
|
-
super(GrantPrivilegesToRole, __self__).__init__(
|
|
715
|
-
'snowflake:index/grantPrivilegesToRole:GrantPrivilegesToRole',
|
|
716
|
-
resource_name,
|
|
717
|
-
__props__,
|
|
718
|
-
opts)
|
|
719
|
-
|
|
720
|
-
@staticmethod
|
|
721
|
-
def get(resource_name: str,
|
|
722
|
-
id: pulumi.Input[str],
|
|
723
|
-
opts: Optional[pulumi.ResourceOptions] = None,
|
|
724
|
-
all_privileges: Optional[pulumi.Input[bool]] = None,
|
|
725
|
-
on_account: Optional[pulumi.Input[bool]] = None,
|
|
726
|
-
on_account_object: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnAccountObjectArgs']]] = None,
|
|
727
|
-
on_schema: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaArgs']]] = None,
|
|
728
|
-
on_schema_object: Optional[pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaObjectArgs']]] = None,
|
|
729
|
-
privileges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
730
|
-
role_name: Optional[pulumi.Input[str]] = None,
|
|
731
|
-
with_grant_option: Optional[pulumi.Input[bool]] = None) -> 'GrantPrivilegesToRole':
|
|
732
|
-
"""
|
|
733
|
-
Get an existing GrantPrivilegesToRole resource's state with the given name, id, and optional extra
|
|
734
|
-
properties used to qualify the lookup.
|
|
735
|
-
|
|
736
|
-
:param str resource_name: The unique name of the resulting resource.
|
|
737
|
-
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
738
|
-
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
739
|
-
:param pulumi.Input[bool] all_privileges: Grant all privileges on the account role.
|
|
740
|
-
:param pulumi.Input[bool] on_account: If true, the privileges will be granted on the account.
|
|
741
|
-
:param pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnAccountObjectArgs']] on_account_object: Specifies the account object on which privileges will be granted
|
|
742
|
-
:param pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaArgs']] on_schema: Specifies the schema on which privileges will be granted.
|
|
743
|
-
:param pulumi.Input[pulumi.InputType['GrantPrivilegesToRoleOnSchemaObjectArgs']] on_schema_object: Specifies the schema object on which privileges will be granted.
|
|
744
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] privileges: The privileges to grant on the account role.
|
|
745
|
-
:param pulumi.Input[str] role_name: The fully qualified name of the role to which privileges will be granted.
|
|
746
|
-
:param pulumi.Input[bool] with_grant_option: Specifies whether the grantee can grant the privileges to other users.
|
|
747
|
-
"""
|
|
748
|
-
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
749
|
-
|
|
750
|
-
__props__ = _GrantPrivilegesToRoleState.__new__(_GrantPrivilegesToRoleState)
|
|
751
|
-
|
|
752
|
-
__props__.__dict__["all_privileges"] = all_privileges
|
|
753
|
-
__props__.__dict__["on_account"] = on_account
|
|
754
|
-
__props__.__dict__["on_account_object"] = on_account_object
|
|
755
|
-
__props__.__dict__["on_schema"] = on_schema
|
|
756
|
-
__props__.__dict__["on_schema_object"] = on_schema_object
|
|
757
|
-
__props__.__dict__["privileges"] = privileges
|
|
758
|
-
__props__.__dict__["role_name"] = role_name
|
|
759
|
-
__props__.__dict__["with_grant_option"] = with_grant_option
|
|
760
|
-
return GrantPrivilegesToRole(resource_name, opts=opts, __props__=__props__)
|
|
761
|
-
|
|
762
|
-
@property
|
|
763
|
-
@pulumi.getter(name="allPrivileges")
|
|
764
|
-
def all_privileges(self) -> pulumi.Output[Optional[bool]]:
|
|
765
|
-
"""
|
|
766
|
-
Grant all privileges on the account role.
|
|
767
|
-
"""
|
|
768
|
-
return pulumi.get(self, "all_privileges")
|
|
769
|
-
|
|
770
|
-
@property
|
|
771
|
-
@pulumi.getter(name="onAccount")
|
|
772
|
-
def on_account(self) -> pulumi.Output[Optional[bool]]:
|
|
773
|
-
"""
|
|
774
|
-
If true, the privileges will be granted on the account.
|
|
775
|
-
"""
|
|
776
|
-
return pulumi.get(self, "on_account")
|
|
777
|
-
|
|
778
|
-
@property
|
|
779
|
-
@pulumi.getter(name="onAccountObject")
|
|
780
|
-
def on_account_object(self) -> pulumi.Output[Optional['outputs.GrantPrivilegesToRoleOnAccountObject']]:
|
|
781
|
-
"""
|
|
782
|
-
Specifies the account object on which privileges will be granted
|
|
783
|
-
"""
|
|
784
|
-
return pulumi.get(self, "on_account_object")
|
|
785
|
-
|
|
786
|
-
@property
|
|
787
|
-
@pulumi.getter(name="onSchema")
|
|
788
|
-
def on_schema(self) -> pulumi.Output[Optional['outputs.GrantPrivilegesToRoleOnSchema']]:
|
|
789
|
-
"""
|
|
790
|
-
Specifies the schema on which privileges will be granted.
|
|
791
|
-
"""
|
|
792
|
-
return pulumi.get(self, "on_schema")
|
|
793
|
-
|
|
794
|
-
@property
|
|
795
|
-
@pulumi.getter(name="onSchemaObject")
|
|
796
|
-
def on_schema_object(self) -> pulumi.Output[Optional['outputs.GrantPrivilegesToRoleOnSchemaObject']]:
|
|
797
|
-
"""
|
|
798
|
-
Specifies the schema object on which privileges will be granted.
|
|
799
|
-
"""
|
|
800
|
-
return pulumi.get(self, "on_schema_object")
|
|
801
|
-
|
|
802
|
-
@property
|
|
803
|
-
@pulumi.getter
|
|
804
|
-
def privileges(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
805
|
-
"""
|
|
806
|
-
The privileges to grant on the account role.
|
|
807
|
-
"""
|
|
808
|
-
return pulumi.get(self, "privileges")
|
|
809
|
-
|
|
810
|
-
@property
|
|
811
|
-
@pulumi.getter(name="roleName")
|
|
812
|
-
def role_name(self) -> pulumi.Output[str]:
|
|
813
|
-
"""
|
|
814
|
-
The fully qualified name of the role to which privileges will be granted.
|
|
815
|
-
"""
|
|
816
|
-
return pulumi.get(self, "role_name")
|
|
817
|
-
|
|
818
|
-
@property
|
|
819
|
-
@pulumi.getter(name="withGrantOption")
|
|
820
|
-
def with_grant_option(self) -> pulumi.Output[Optional[bool]]:
|
|
821
|
-
"""
|
|
822
|
-
Specifies whether the grantee can grant the privileges to other users.
|
|
823
|
-
"""
|
|
824
|
-
return pulumi.get(self, "with_grant_option")
|
|
825
|
-
|