Docs Packages
  1. Packages
  2. Snowflake
  3. API Docs
  4. GrantPrivilegesToAccountRole
Snowflake v0.55.0 published on Friday, Jun 7, 2024 by Pulumi
pulumi/pulumi-snowflake

snowflake.GrantPrivilegesToAccountRole

Explore with Pulumi AI

snowflake logo
Snowflake v0.55.0 published on Friday, Jun 7, 2024 by Pulumi
pulumi/pulumi-snowflake

    Import

    Import examples

    Grant all privileges OnAccountObject (Database)

    $ pulumi import snowflake:index/grantPrivilegesToAccountRole:GrantPrivilegesToAccountRole `"\"test_db_role\"|false|false|ALL|OnAccountObject|DATABASE|\"test_db\""`

    Grant list of privileges OnAllSchemasInDatabase

    $ pulumi import snowflake:index/grantPrivilegesToAccountRole:GrantPrivilegesToAccountRole `"\"test_db_role\"|false|false|CREATE TAG,CREATE TABLE|OnSchema|OnAllSchemasInDatabase|\"test_db\""`

    Grant list of privileges on table

    $ pulumi import snowflake:index/grantPrivilegesToAccountRole:GrantPrivilegesToAccountRole \"test_table\""`

    Grant list of privileges OnAll tables in schema

    $ pulumi import snowflake:index/grantPrivilegesToAccountRole:GrantPrivilegesToAccountRole \"test_schema\""`

    Create GrantPrivilegesToAccountRole Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GrantPrivilegesToAccountRole(name: string, args: GrantPrivilegesToAccountRoleArgs, opts?: CustomResourceOptions);
    @overload
def GrantPrivilegesToAccountRole(resource_name: str,
                                 args: GrantPrivilegesToAccountRoleArgs,
                                 opts: Optional[ResourceOptions] = None)

@overload
def GrantPrivilegesToAccountRole(resource_name: str,
                                 opts: Optional[ResourceOptions] = None,
                                 account_role_name: Optional[str] = None,
                                 all_privileges: Optional[bool] = None,
                                 always_apply: Optional[bool] = None,
                                 always_apply_trigger: Optional[str] = None,
                                 on_account: Optional[bool] = None,
                                 on_account_object: Optional[GrantPrivilegesToAccountRoleOnAccountObjectArgs] = None,
                                 on_schema: Optional[GrantPrivilegesToAccountRoleOnSchemaArgs] = None,
                                 on_schema_object: Optional[GrantPrivilegesToAccountRoleOnSchemaObjectArgs] = None,
                                 privileges: Optional[Sequence[str]] = None,
                                 with_grant_option: Optional[bool] = None)
    func NewGrantPrivilegesToAccountRole(ctx *Context, name string, args GrantPrivilegesToAccountRoleArgs, opts ...ResourceOption) (*GrantPrivilegesToAccountRole, error)
    public GrantPrivilegesToAccountRole(string name, GrantPrivilegesToAccountRoleArgs args, CustomResourceOptions? opts = null)
    public GrantPrivilegesToAccountRole(String name, GrantPrivilegesToAccountRoleArgs args)
public GrantPrivilegesToAccountRole(String name, GrantPrivilegesToAccountRoleArgs args, CustomResourceOptions options)

    type: snowflake:GrantPrivilegesToAccountRole
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args GrantPrivilegesToAccountRoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GrantPrivilegesToAccountRoleArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GrantPrivilegesToAccountRoleArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GrantPrivilegesToAccountRoleArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GrantPrivilegesToAccountRoleArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var grantPrivilegesToAccountRoleResource = new Snowflake.GrantPrivilegesToAccountRole("grantPrivilegesToAccountRoleResource", new()
{
    AccountRoleName = "string",
    AllPrivileges = false,
    AlwaysApply = false,
    AlwaysApplyTrigger = "string",
    OnAccount = false,
    OnAccountObject = new Snowflake.Inputs.GrantPrivilegesToAccountRoleOnAccountObjectArgs
    {
        ObjectName = "string",
        ObjectType = "string",
    },
    OnSchema = new Snowflake.Inputs.GrantPrivilegesToAccountRoleOnSchemaArgs
    {
        AllSchemasInDatabase = "string",
        FutureSchemasInDatabase = "string",
        SchemaName = "string",
    },
    OnSchemaObject = new Snowflake.Inputs.GrantPrivilegesToAccountRoleOnSchemaObjectArgs
    {
        All = new Snowflake.Inputs.GrantPrivilegesToAccountRoleOnSchemaObjectAllArgs
        {
            ObjectTypePlural = "string",
            InDatabase = "string",
            InSchema = "string",
        },
        Future = new Snowflake.Inputs.GrantPrivilegesToAccountRoleOnSchemaObjectFutureArgs
        {
            ObjectTypePlural = "string",
            InDatabase = "string",
            InSchema = "string",
        },
        ObjectName = "string",
        ObjectType = "string",
    },
    Privileges = new[]
    {
        "string",
    },
    WithGrantOption = false,
});

    example, err := snowflake.NewGrantPrivilegesToAccountRole(ctx, "grantPrivilegesToAccountRoleResource", &snowflake.GrantPrivilegesToAccountRoleArgs{
	AccountRoleName:    pulumi.String("string"),
	AllPrivileges:      pulumi.Bool(false),
	AlwaysApply:        pulumi.Bool(false),
	AlwaysApplyTrigger: pulumi.String("string"),
	OnAccount:          pulumi.Bool(false),
	OnAccountObject: &snowflake.GrantPrivilegesToAccountRoleOnAccountObjectArgs{
		ObjectName: pulumi.String("string"),
		ObjectType: pulumi.String("string"),
	},
	OnSchema: &snowflake.GrantPrivilegesToAccountRoleOnSchemaArgs{
		AllSchemasInDatabase:    pulumi.String("string"),
		FutureSchemasInDatabase: pulumi.String("string"),
		SchemaName:              pulumi.String("string"),
	},
	OnSchemaObject: &snowflake.GrantPrivilegesToAccountRoleOnSchemaObjectArgs{
		All: &snowflake.GrantPrivilegesToAccountRoleOnSchemaObjectAllArgs{
			ObjectTypePlural: pulumi.String("string"),
			InDatabase:       pulumi.String("string"),
			InSchema:         pulumi.String("string"),
		},
		Future: &snowflake.GrantPrivilegesToAccountRoleOnSchemaObjectFutureArgs{
			ObjectTypePlural: pulumi.String("string"),
			InDatabase:       pulumi.String("string"),
			InSchema:         pulumi.String("string"),
		},
		ObjectName: pulumi.String("string"),
		ObjectType: pulumi.String("string"),
	},
	Privileges: pulumi.StringArray{
		pulumi.String("string"),
	},
	WithGrantOption: pulumi.Bool(false),
})

    var grantPrivilegesToAccountRoleResource = new GrantPrivilegesToAccountRole("grantPrivilegesToAccountRoleResource", GrantPrivilegesToAccountRoleArgs.builder()
    .accountRoleName("string")
    .allPrivileges(false)
    .alwaysApply(false)
    .alwaysApplyTrigger("string")
    .onAccount(false)
    .onAccountObject(GrantPrivilegesToAccountRoleOnAccountObjectArgs.builder()
        .objectName("string")
        .objectType("string")
        .build())
    .onSchema(GrantPrivilegesToAccountRoleOnSchemaArgs.builder()
        .allSchemasInDatabase("string")
        .futureSchemasInDatabase("string")
        .schemaName("string")
        .build())
    .onSchemaObject(GrantPrivilegesToAccountRoleOnSchemaObjectArgs.builder()
        .all(GrantPrivilegesToAccountRoleOnSchemaObjectAllArgs.builder()
            .objectTypePlural("string")
            .inDatabase("string")
            .inSchema("string")
            .build())
        .future(GrantPrivilegesToAccountRoleOnSchemaObjectFutureArgs.builder()
            .objectTypePlural("string")
            .inDatabase("string")
            .inSchema("string")
            .build())
        .objectName("string")
        .objectType("string")
        .build())
    .privileges("string")
    .withGrantOption(false)
    .build());

    grant_privileges_to_account_role_resource = snowflake.GrantPrivilegesToAccountRole("grantPrivilegesToAccountRoleResource",
    account_role_name="string",
    all_privileges=False,
    always_apply=False,
    always_apply_trigger="string",
    on_account=False,
    on_account_object=snowflake.GrantPrivilegesToAccountRoleOnAccountObjectArgs(
        object_name="string",
        object_type="string",
    ),
    on_schema=snowflake.GrantPrivilegesToAccountRoleOnSchemaArgs(
        all_schemas_in_database="string",
        future_schemas_in_database="string",
        schema_name="string",
    ),
    on_schema_object=snowflake.GrantPrivilegesToAccountRoleOnSchemaObjectArgs(
        all=snowflake.GrantPrivilegesToAccountRoleOnSchemaObjectAllArgs(
            object_type_plural="string",
            in_database="string",
            in_schema="string",
        ),
        future=snowflake.GrantPrivilegesToAccountRoleOnSchemaObjectFutureArgs(
            object_type_plural="string",
            in_database="string",
            in_schema="string",
        ),
        object_name="string",
        object_type="string",
    ),
    privileges=["string"],
    with_grant_option=False)

    const grantPrivilegesToAccountRoleResource = new snowflake.GrantPrivilegesToAccountRole("grantPrivilegesToAccountRoleResource", {
    accountRoleName: "string",
    allPrivileges: false,
    alwaysApply: false,
    alwaysApplyTrigger: "string",
    onAccount: false,
    onAccountObject: {
        objectName: "string",
        objectType: "string",
    },
    onSchema: {
        allSchemasInDatabase: "string",
        futureSchemasInDatabase: "string",
        schemaName: "string",
    },
    onSchemaObject: {
        all: {
            objectTypePlural: "string",
            inDatabase: "string",
            inSchema: "string",
        },
        future: {
            objectTypePlural: "string",
            inDatabase: "string",
            inSchema: "string",
        },
        objectName: "string",
        objectType: "string",
    },
    privileges: ["string"],
    withGrantOption: false,
});

    type: snowflake:GrantPrivilegesToAccountRole
properties:
    accountRoleName: string
    allPrivileges: false
    alwaysApply: false
    alwaysApplyTrigger: string
    onAccount: false
    onAccountObject:
        objectName: string
        objectType: string
    onSchema:
        allSchemasInDatabase: string
        futureSchemasInDatabase: string
        schemaName: string
    onSchemaObject:
        all:
            inDatabase: string
            inSchema: string
            objectTypePlural: string
        future:
            inDatabase: string
            inSchema: string
            objectTypePlural: string
        objectName: string
        objectType: string
    privileges:
        - string
    withGrantOption: false

    GrantPrivilegesToAccountRole Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The GrantPrivilegesToAccountRole resource accepts the following input properties:

    AccountRoleName string
    The fully qualified name of the account role to which privileges will be granted.
    AllPrivileges bool
    Grant all privileges on the account role.
    AlwaysApply bool
    AlwaysApplyTrigger string
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    OnAccount bool
    If true, the privileges will be granted on the account.
    OnAccountObject GrantPrivilegesToAccountRoleOnAccountObject
    Specifies the account object on which privileges will be granted
    OnSchema GrantPrivilegesToAccountRoleOnSchema
    Specifies the schema on which privileges will be granted.
    OnSchemaObject GrantPrivilegesToAccountRoleOnSchemaObject
    Specifies the schema object on which privileges will be granted.
    Privileges List<string>
    The privileges to grant on the account role.
    WithGrantOption bool
    Specifies whether the grantee can grant the privileges to other users.
    AccountRoleName string
    The fully qualified name of the account role to which privileges will be granted.
    AllPrivileges bool
    Grant all privileges on the account role.
    AlwaysApply bool
    AlwaysApplyTrigger string
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    OnAccount bool
    If true, the privileges will be granted on the account.
    OnAccountObject GrantPrivilegesToAccountRoleOnAccountObjectArgs
    Specifies the account object on which privileges will be granted
    OnSchema GrantPrivilegesToAccountRoleOnSchemaArgs
    Specifies the schema on which privileges will be granted.
    OnSchemaObject GrantPrivilegesToAccountRoleOnSchemaObjectArgs
    Specifies the schema object on which privileges will be granted.
    Privileges []string
    The privileges to grant on the account role.
    WithGrantOption bool
    Specifies whether the grantee can grant the privileges to other users.
    accountRoleName String
    The fully qualified name of the account role to which privileges will be granted.
    allPrivileges Boolean
    Grant all privileges on the account role.
    alwaysApply Boolean
    alwaysApplyTrigger String
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    onAccount Boolean
    If true, the privileges will be granted on the account.
    onAccountObject GrantPrivilegesToAccountRoleOnAccountObject
    Specifies the account object on which privileges will be granted
    onSchema GrantPrivilegesToAccountRoleOnSchema
    Specifies the schema on which privileges will be granted.
    onSchemaObject GrantPrivilegesToAccountRoleOnSchemaObject
    Specifies the schema object on which privileges will be granted.
    privileges List<String>
    The privileges to grant on the account role.
    withGrantOption Boolean
    Specifies whether the grantee can grant the privileges to other users.
    accountRoleName string
    The fully qualified name of the account role to which privileges will be granted.
    allPrivileges boolean
    Grant all privileges on the account role.
    alwaysApply boolean
    alwaysApplyTrigger string
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    onAccount boolean
    If true, the privileges will be granted on the account.
    onAccountObject GrantPrivilegesToAccountRoleOnAccountObject
    Specifies the account object on which privileges will be granted
    onSchema GrantPrivilegesToAccountRoleOnSchema
    Specifies the schema on which privileges will be granted.
    onSchemaObject GrantPrivilegesToAccountRoleOnSchemaObject
    Specifies the schema object on which privileges will be granted.
    privileges string[]
    The privileges to grant on the account role.
    withGrantOption boolean
    Specifies whether the grantee can grant the privileges to other users.
    account_role_name str
    The fully qualified name of the account role to which privileges will be granted.
    all_privileges bool
    Grant all privileges on the account role.
    always_apply bool
    always_apply_trigger str
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    on_account bool
    If true, the privileges will be granted on the account.
    on_account_object GrantPrivilegesToAccountRoleOnAccountObjectArgs
    Specifies the account object on which privileges will be granted
    on_schema GrantPrivilegesToAccountRoleOnSchemaArgs
    Specifies the schema on which privileges will be granted.
    on_schema_object GrantPrivilegesToAccountRoleOnSchemaObjectArgs
    Specifies the schema object on which privileges will be granted.
    privileges Sequence[str]
    The privileges to grant on the account role.
    with_grant_option bool
    Specifies whether the grantee can grant the privileges to other users.
    accountRoleName String
    The fully qualified name of the account role to which privileges will be granted.
    allPrivileges Boolean
    Grant all privileges on the account role.
    alwaysApply Boolean
    alwaysApplyTrigger String
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    onAccount Boolean
    If true, the privileges will be granted on the account.
    onAccountObject Property Map
    Specifies the account object on which privileges will be granted
    onSchema Property Map
    Specifies the schema on which privileges will be granted.
    onSchemaObject Property Map
    Specifies the schema object on which privileges will be granted.
    privileges List<String>
    The privileges to grant on the account role.
    withGrantOption Boolean
    Specifies whether the grantee can grant the privileges to other users.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GrantPrivilegesToAccountRole resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing GrantPrivilegesToAccountRole Resource

    Get an existing GrantPrivilegesToAccountRole resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: GrantPrivilegesToAccountRoleState, opts?: CustomResourceOptions): GrantPrivilegesToAccountRole
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_role_name: Optional[str] = None,
        all_privileges: Optional[bool] = None,
        always_apply: Optional[bool] = None,
        always_apply_trigger: Optional[str] = None,
        on_account: Optional[bool] = None,
        on_account_object: Optional[GrantPrivilegesToAccountRoleOnAccountObjectArgs] = None,
        on_schema: Optional[GrantPrivilegesToAccountRoleOnSchemaArgs] = None,
        on_schema_object: Optional[GrantPrivilegesToAccountRoleOnSchemaObjectArgs] = None,
        privileges: Optional[Sequence[str]] = None,
        with_grant_option: Optional[bool] = None) -> GrantPrivilegesToAccountRole
    func GetGrantPrivilegesToAccountRole(ctx *Context, name string, id IDInput, state *GrantPrivilegesToAccountRoleState, opts ...ResourceOption) (*GrantPrivilegesToAccountRole, error)
    public static GrantPrivilegesToAccountRole Get(string name, Input<string> id, GrantPrivilegesToAccountRoleState? state, CustomResourceOptions? opts = null)
    public static GrantPrivilegesToAccountRole get(String name, Output<String> id, GrantPrivilegesToAccountRoleState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountRoleName string
    The fully qualified name of the account role to which privileges will be granted.
    AllPrivileges bool
    Grant all privileges on the account role.
    AlwaysApply bool
    AlwaysApplyTrigger string
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    OnAccount bool
    If true, the privileges will be granted on the account.
    OnAccountObject GrantPrivilegesToAccountRoleOnAccountObject
    Specifies the account object on which privileges will be granted
    OnSchema GrantPrivilegesToAccountRoleOnSchema
    Specifies the schema on which privileges will be granted.
    OnSchemaObject GrantPrivilegesToAccountRoleOnSchemaObject
    Specifies the schema object on which privileges will be granted.
    Privileges List<string>
    The privileges to grant on the account role.
    WithGrantOption bool
    Specifies whether the grantee can grant the privileges to other users.
    AccountRoleName string
    The fully qualified name of the account role to which privileges will be granted.
    AllPrivileges bool
    Grant all privileges on the account role.
    AlwaysApply bool
    AlwaysApplyTrigger string
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    OnAccount bool
    If true, the privileges will be granted on the account.
    OnAccountObject GrantPrivilegesToAccountRoleOnAccountObjectArgs
    Specifies the account object on which privileges will be granted
    OnSchema GrantPrivilegesToAccountRoleOnSchemaArgs
    Specifies the schema on which privileges will be granted.
    OnSchemaObject GrantPrivilegesToAccountRoleOnSchemaObjectArgs
    Specifies the schema object on which privileges will be granted.
    Privileges []string
    The privileges to grant on the account role.
    WithGrantOption bool
    Specifies whether the grantee can grant the privileges to other users.
    accountRoleName String
    The fully qualified name of the account role to which privileges will be granted.
    allPrivileges Boolean
    Grant all privileges on the account role.
    alwaysApply Boolean
    alwaysApplyTrigger String
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    onAccount Boolean
    If true, the privileges will be granted on the account.
    onAccountObject GrantPrivilegesToAccountRoleOnAccountObject
    Specifies the account object on which privileges will be granted
    onSchema GrantPrivilegesToAccountRoleOnSchema
    Specifies the schema on which privileges will be granted.
    onSchemaObject GrantPrivilegesToAccountRoleOnSchemaObject
    Specifies the schema object on which privileges will be granted.
    privileges List<String>
    The privileges to grant on the account role.
    withGrantOption Boolean
    Specifies whether the grantee can grant the privileges to other users.
    accountRoleName string
    The fully qualified name of the account role to which privileges will be granted.
    allPrivileges boolean
    Grant all privileges on the account role.
    alwaysApply boolean
    alwaysApplyTrigger string
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    onAccount boolean
    If true, the privileges will be granted on the account.
    onAccountObject GrantPrivilegesToAccountRoleOnAccountObject
    Specifies the account object on which privileges will be granted
    onSchema GrantPrivilegesToAccountRoleOnSchema
    Specifies the schema on which privileges will be granted.
    onSchemaObject GrantPrivilegesToAccountRoleOnSchemaObject
    Specifies the schema object on which privileges will be granted.
    privileges string[]
    The privileges to grant on the account role.
    withGrantOption boolean
    Specifies whether the grantee can grant the privileges to other users.
    account_role_name str
    The fully qualified name of the account role to which privileges will be granted.
    all_privileges bool
    Grant all privileges on the account role.
    always_apply bool
    always_apply_trigger str
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    on_account bool
    If true, the privileges will be granted on the account.
    on_account_object GrantPrivilegesToAccountRoleOnAccountObjectArgs
    Specifies the account object on which privileges will be granted
    on_schema GrantPrivilegesToAccountRoleOnSchemaArgs
    Specifies the schema on which privileges will be granted.
    on_schema_object GrantPrivilegesToAccountRoleOnSchemaObjectArgs
    Specifies the schema object on which privileges will be granted.
    privileges Sequence[str]
    The privileges to grant on the account role.
    with_grant_option bool
    Specifies whether the grantee can grant the privileges to other users.
    accountRoleName String
    The fully qualified name of the account role to which privileges will be granted.
    allPrivileges Boolean
    Grant all privileges on the account role.
    alwaysApply Boolean
    alwaysApplyTrigger String
    This is a helper field and should not be set. Its main purpose is to help to achieve the functionality described by the always_apply field.
    onAccount Boolean
    If true, the privileges will be granted on the account.
    onAccountObject Property Map
    Specifies the account object on which privileges will be granted
    onSchema Property Map
    Specifies the schema on which privileges will be granted.
    onSchemaObject Property Map
    Specifies the schema object on which privileges will be granted.
    privileges List<String>
    The privileges to grant on the account role.
    withGrantOption Boolean
    Specifies whether the grantee can grant the privileges to other users.

    Supporting Types

    GrantPrivilegesToAccountRoleOnAccountObject, GrantPrivilegesToAccountRoleOnAccountObjectArgs

    ObjectName string
    The fully qualified name of the object on which privileges will be granted.
    ObjectType string
    The object type of the account object on which privileges will be granted. Valid values are: USER | RESOURCE MONITOR | WAREHOUSE | COMPUTE POOL | DATABASE | INTEGRATION | FAILOVER GROUP | REPLICATION GROUP | EXTERNAL VOLUME
    ObjectName string
    The fully qualified name of the object on which privileges will be granted.
    ObjectType string
    The object type of the account object on which privileges will be granted. Valid values are: USER | RESOURCE MONITOR | WAREHOUSE | COMPUTE POOL | DATABASE | INTEGRATION | FAILOVER GROUP | REPLICATION GROUP | EXTERNAL VOLUME
    objectName String
    The fully qualified name of the object on which privileges will be granted.
    objectType String
    The object type of the account object on which privileges will be granted. Valid values are: USER | RESOURCE MONITOR | WAREHOUSE | COMPUTE POOL | DATABASE | INTEGRATION | FAILOVER GROUP | REPLICATION GROUP | EXTERNAL VOLUME
    objectName string
    The fully qualified name of the object on which privileges will be granted.
    objectType string
    The object type of the account object on which privileges will be granted. Valid values are: USER | RESOURCE MONITOR | WAREHOUSE | COMPUTE POOL | DATABASE | INTEGRATION | FAILOVER GROUP | REPLICATION GROUP | EXTERNAL VOLUME
    object_name str
    The fully qualified name of the object on which privileges will be granted.
    object_type str
    The object type of the account object on which privileges will be granted. Valid values are: USER | RESOURCE MONITOR | WAREHOUSE | COMPUTE POOL | DATABASE | INTEGRATION | FAILOVER GROUP | REPLICATION GROUP | EXTERNAL VOLUME
    objectName String
    The fully qualified name of the object on which privileges will be granted.
    objectType String
    The object type of the account object on which privileges will be granted. Valid values are: USER | RESOURCE MONITOR | WAREHOUSE | COMPUTE POOL | DATABASE | INTEGRATION | FAILOVER GROUP | REPLICATION GROUP | EXTERNAL VOLUME

    GrantPrivilegesToAccountRoleOnSchema, GrantPrivilegesToAccountRoleOnSchemaArgs

    AllSchemasInDatabase string
    The fully qualified name of the database.
    FutureSchemasInDatabase string
    The fully qualified name of the database.
    SchemaName string
    The fully qualified name of the schema.
    AllSchemasInDatabase string
    The fully qualified name of the database.
    FutureSchemasInDatabase string
    The fully qualified name of the database.
    SchemaName string
    The fully qualified name of the schema.
    allSchemasInDatabase String
    The fully qualified name of the database.
    futureSchemasInDatabase String
    The fully qualified name of the database.
    schemaName String
    The fully qualified name of the schema.
    allSchemasInDatabase string
    The fully qualified name of the database.
    futureSchemasInDatabase string
    The fully qualified name of the database.
    schemaName string
    The fully qualified name of the schema.
    all_schemas_in_database str
    The fully qualified name of the database.
    future_schemas_in_database str
    The fully qualified name of the database.
    schema_name str
    The fully qualified name of the schema.
    allSchemasInDatabase String
    The fully qualified name of the database.
    futureSchemasInDatabase String
    The fully qualified name of the database.
    schemaName String
    The fully qualified name of the schema.

    GrantPrivilegesToAccountRoleOnSchemaObject, GrantPrivilegesToAccountRoleOnSchemaObjectArgs

    All GrantPrivilegesToAccountRoleOnSchemaObjectAll
    Configures the privilege to be granted on all objects in either a database or schema.
    Future GrantPrivilegesToAccountRoleOnSchemaObjectFuture
    Configures the privilege to be granted on future objects in either a database or schema.
    ObjectName string
    The fully qualified name of the object on which privileges will be granted.
    ObjectType string
    The object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICY | ALERT | AUTHENTICATION POLICY | DATA METRIC FUNCTION | DYNAMIC TABLE | EVENT TABLE | EXTERNAL TABLE | FILE FORMAT | FUNCTION | GIT REPOSITORY | HYBRID TABLE | IMAGE REPOSITORY | ICEBERG TABLE | MASKING POLICY | MATERIALIZED VIEW | MODEL | NETWORK RULE | PACKAGES POLICY | PASSWORD POLICY | PIPE | PROCEDURE | PROJECTION POLICY | ROW ACCESS POLICY | SECRET | SERVICE | SESSION POLICY | SEQUENCE | STAGE | STREAM | TABLE | TAG | TASK | VIEW | STREAMLIT
    All GrantPrivilegesToAccountRoleOnSchemaObjectAll
    Configures the privilege to be granted on all objects in either a database or schema.
    Future GrantPrivilegesToAccountRoleOnSchemaObjectFuture
    Configures the privilege to be granted on future objects in either a database or schema.
    ObjectName string
    The fully qualified name of the object on which privileges will be granted.
    ObjectType string
    The object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICY | ALERT | AUTHENTICATION POLICY | DATA METRIC FUNCTION | DYNAMIC TABLE | EVENT TABLE | EXTERNAL TABLE | FILE FORMAT | FUNCTION | GIT REPOSITORY | HYBRID TABLE | IMAGE REPOSITORY | ICEBERG TABLE | MASKING POLICY | MATERIALIZED VIEW | MODEL | NETWORK RULE | PACKAGES POLICY | PASSWORD POLICY | PIPE | PROCEDURE | PROJECTION POLICY | ROW ACCESS POLICY | SECRET | SERVICE | SESSION POLICY | SEQUENCE | STAGE | STREAM | TABLE | TAG | TASK | VIEW | STREAMLIT
    all GrantPrivilegesToAccountRoleOnSchemaObjectAll
    Configures the privilege to be granted on all objects in either a database or schema.
    future GrantPrivilegesToAccountRoleOnSchemaObjectFuture
    Configures the privilege to be granted on future objects in either a database or schema.
    objectName String
    The fully qualified name of the object on which privileges will be granted.
    objectType String
    The object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICY | ALERT | AUTHENTICATION POLICY | DATA METRIC FUNCTION | DYNAMIC TABLE | EVENT TABLE | EXTERNAL TABLE | FILE FORMAT | FUNCTION | GIT REPOSITORY | HYBRID TABLE | IMAGE REPOSITORY | ICEBERG TABLE | MASKING POLICY | MATERIALIZED VIEW | MODEL | NETWORK RULE | PACKAGES POLICY | PASSWORD POLICY | PIPE | PROCEDURE | PROJECTION POLICY | ROW ACCESS POLICY | SECRET | SERVICE | SESSION POLICY | SEQUENCE | STAGE | STREAM | TABLE | TAG | TASK | VIEW | STREAMLIT
    all GrantPrivilegesToAccountRoleOnSchemaObjectAll
    Configures the privilege to be granted on all objects in either a database or schema.
    future GrantPrivilegesToAccountRoleOnSchemaObjectFuture
    Configures the privilege to be granted on future objects in either a database or schema.
    objectName string
    The fully qualified name of the object on which privileges will be granted.
    objectType string
    The object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICY | ALERT | AUTHENTICATION POLICY | DATA METRIC FUNCTION | DYNAMIC TABLE | EVENT TABLE | EXTERNAL TABLE | FILE FORMAT | FUNCTION | GIT REPOSITORY | HYBRID TABLE | IMAGE REPOSITORY | ICEBERG TABLE | MASKING POLICY | MATERIALIZED VIEW | MODEL | NETWORK RULE | PACKAGES POLICY | PASSWORD POLICY | PIPE | PROCEDURE | PROJECTION POLICY | ROW ACCESS POLICY | SECRET | SERVICE | SESSION POLICY | SEQUENCE | STAGE | STREAM | TABLE | TAG | TASK | VIEW | STREAMLIT
    all GrantPrivilegesToAccountRoleOnSchemaObjectAll
    Configures the privilege to be granted on all objects in either a database or schema.
    future GrantPrivilegesToAccountRoleOnSchemaObjectFuture
    Configures the privilege to be granted on future objects in either a database or schema.
    object_name str
    The fully qualified name of the object on which privileges will be granted.
    object_type str
    The object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICY | ALERT | AUTHENTICATION POLICY | DATA METRIC FUNCTION | DYNAMIC TABLE | EVENT TABLE | EXTERNAL TABLE | FILE FORMAT | FUNCTION | GIT REPOSITORY | HYBRID TABLE | IMAGE REPOSITORY | ICEBERG TABLE | MASKING POLICY | MATERIALIZED VIEW | MODEL | NETWORK RULE | PACKAGES POLICY | PASSWORD POLICY | PIPE | PROCEDURE | PROJECTION POLICY | ROW ACCESS POLICY | SECRET | SERVICE | SESSION POLICY | SEQUENCE | STAGE | STREAM | TABLE | TAG | TASK | VIEW | STREAMLIT
    all Property Map
    Configures the privilege to be granted on all objects in either a database or schema.
    future Property Map
    Configures the privilege to be granted on future objects in either a database or schema.
    objectName String
    The fully qualified name of the object on which privileges will be granted.
    objectType String
    The object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICY | ALERT | AUTHENTICATION POLICY | DATA METRIC FUNCTION | DYNAMIC TABLE | EVENT TABLE | EXTERNAL TABLE | FILE FORMAT | FUNCTION | GIT REPOSITORY | HYBRID TABLE | IMAGE REPOSITORY | ICEBERG TABLE | MASKING POLICY | MATERIALIZED VIEW | MODEL | NETWORK RULE | PACKAGES POLICY | PASSWORD POLICY | PIPE | PROCEDURE | PROJECTION POLICY | ROW ACCESS POLICY | SECRET | SERVICE | SESSION POLICY | SEQUENCE | STAGE | STREAM | TABLE | TAG | TASK | VIEW | STREAMLIT

    GrantPrivilegesToAccountRoleOnSchemaObjectAll, GrantPrivilegesToAccountRoleOnSchemaObjectAllArgs

    ObjectTypePlural string
    The plural object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICIES | ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | IMAGE REPOSITORIES | ICEBERG TABLES | MASKING POLICIES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PACKAGES POLICIES | PASSWORD POLICIES | PIPES | PROCEDURES | PROJECTION POLICIES | ROW ACCESS POLICIES | SECRETS | SERVICES | SESSION POLICIES | SEQUENCES | STAGES | STREAMS | TABLES | TAGS | TASKS | VIEWS | STREAMLITS.
    InDatabase string
    InSchema string
    ObjectTypePlural string
    The plural object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICIES | ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | IMAGE REPOSITORIES | ICEBERG TABLES | MASKING POLICIES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PACKAGES POLICIES | PASSWORD POLICIES | PIPES | PROCEDURES | PROJECTION POLICIES | ROW ACCESS POLICIES | SECRETS | SERVICES | SESSION POLICIES | SEQUENCES | STAGES | STREAMS | TABLES | TAGS | TASKS | VIEWS | STREAMLITS.
    InDatabase string
    InSchema string
    objectTypePlural String
    The plural object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICIES | ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | IMAGE REPOSITORIES | ICEBERG TABLES | MASKING POLICIES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PACKAGES POLICIES | PASSWORD POLICIES | PIPES | PROCEDURES | PROJECTION POLICIES | ROW ACCESS POLICIES | SECRETS | SERVICES | SESSION POLICIES | SEQUENCES | STAGES | STREAMS | TABLES | TAGS | TASKS | VIEWS | STREAMLITS.
    inDatabase String
    inSchema String
    objectTypePlural string
    The plural object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICIES | ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | IMAGE REPOSITORIES | ICEBERG TABLES | MASKING POLICIES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PACKAGES POLICIES | PASSWORD POLICIES | PIPES | PROCEDURES | PROJECTION POLICIES | ROW ACCESS POLICIES | SECRETS | SERVICES | SESSION POLICIES | SEQUENCES | STAGES | STREAMS | TABLES | TAGS | TASKS | VIEWS | STREAMLITS.
    inDatabase string
    inSchema string
    object_type_plural str
    The plural object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICIES | ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | IMAGE REPOSITORIES | ICEBERG TABLES | MASKING POLICIES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PACKAGES POLICIES | PASSWORD POLICIES | PIPES | PROCEDURES | PROJECTION POLICIES | ROW ACCESS POLICIES | SECRETS | SERVICES | SESSION POLICIES | SEQUENCES | STAGES | STREAMS | TABLES | TAGS | TASKS | VIEWS | STREAMLITS.
    in_database str
    in_schema str
    objectTypePlural String
    The plural object type of the schema object on which privileges will be granted. Valid values are: AGGREGATION POLICIES | ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | IMAGE REPOSITORIES | ICEBERG TABLES | MASKING POLICIES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PACKAGES POLICIES | PASSWORD POLICIES | PIPES | PROCEDURES | PROJECTION POLICIES | ROW ACCESS POLICIES | SECRETS | SERVICES | SESSION POLICIES | SEQUENCES | STAGES | STREAMS | TABLES | TAGS | TASKS | VIEWS | STREAMLITS.
    inDatabase String
    inSchema String

    GrantPrivilegesToAccountRoleOnSchemaObjectFuture, GrantPrivilegesToAccountRoleOnSchemaObjectFutureArgs

    ObjectTypePlural string
    The plural object type of the schema object on which privileges will be granted. Valid values are: ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | ICEBERG TABLES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PASSWORD POLICIES | PIPES | PROCEDURES | SECRETS | SERVICES | SEQUENCES | STAGES | STREAMS | TABLES | TASKS | VIEWS.
    InDatabase string
    InSchema string
    ObjectTypePlural string
    The plural object type of the schema object on which privileges will be granted. Valid values are: ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | ICEBERG TABLES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PASSWORD POLICIES | PIPES | PROCEDURES | SECRETS | SERVICES | SEQUENCES | STAGES | STREAMS | TABLES | TASKS | VIEWS.
    InDatabase string
    InSchema string
    objectTypePlural String
    The plural object type of the schema object on which privileges will be granted. Valid values are: ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | ICEBERG TABLES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PASSWORD POLICIES | PIPES | PROCEDURES | SECRETS | SERVICES | SEQUENCES | STAGES | STREAMS | TABLES | TASKS | VIEWS.
    inDatabase String
    inSchema String
    objectTypePlural string
    The plural object type of the schema object on which privileges will be granted. Valid values are: ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | ICEBERG TABLES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PASSWORD POLICIES | PIPES | PROCEDURES | SECRETS | SERVICES | SEQUENCES | STAGES | STREAMS | TABLES | TASKS | VIEWS.
    inDatabase string
    inSchema string
    object_type_plural str
    The plural object type of the schema object on which privileges will be granted. Valid values are: ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | ICEBERG TABLES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PASSWORD POLICIES | PIPES | PROCEDURES | SECRETS | SERVICES | SEQUENCES | STAGES | STREAMS | TABLES | TASKS | VIEWS.
    in_database str
    in_schema str
    objectTypePlural String
    The plural object type of the schema object on which privileges will be granted. Valid values are: ALERTS | AUTHENTICATION POLICIES | DATA METRIC FUNCTIONS | DYNAMIC TABLES | EVENT TABLES | EXTERNAL TABLES | FILE FORMATS | FUNCTIONS | GIT REPOSITORIES | HYBRID TABLES | ICEBERG TABLES | MATERIALIZED VIEWS | MODELS | NETWORK RULES | PASSWORD POLICIES | PIPES | PROCEDURES | SECRETS | SERVICES | SEQUENCES | STAGES | STREAMS | TABLES | TASKS | VIEWS.
    inDatabase String
    inSchema String

    Package Details

    Repository
    Snowflake pulumi/pulumi-snowflake
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the snowflake Terraform Provider.
    snowflake logo
    Snowflake v0.55.0 published on Friday, Jun 7, 2024 by Pulumi
    pulumi/pulumi-snowflake