Skip to main content

grants

Creates, updates, deletes, gets or lists a grants resource.

Overview

Namegrants
TypeResource
Idsnowflake.service.grants

Fields

The following fields are returned by SELECT queries:

successful

NameDatatypeDescription
namestringThe name of the securable
grantee_namestringThe name of the grantee
created_onstring (date-time)Date and time when the grant was created
granted_onstringThe type of of the securable
granted_tostringThe type of the grantee
privilegestringThe name of the privilege

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_service_role_grants_toselectdatabase_name, schema_name, service, name, endpointList all the grants given to the service role

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
database_namestringIdentifier (i.e. name) for the database to which the resource belongs. You can use the /api/v2/databases GET request to get a list of available databases.
endpointstringOrganization and Account Name (default: orgid-acctid)
namestringIdentifier (i.e. name) for the resource.
schema_namestringIdentifier (i.e. name) for the schema to which the resource belongs. You can use the /api/v2/databases/{database}/schemas GET request to get a list of available schemas for the specified database.
servicestringName of the service that contains the service role.

SELECT examples

List all the grants given to the service role

SELECT
name,
grantee_name,
created_on,
granted_on,
granted_to,
privilege
FROM snowflake.service.grants
WHERE database_name = '{{ database_name }}' -- required
AND schema_name = '{{ schema_name }}' -- required
AND service = '{{ service }}' -- required
AND name = '{{ name }}' -- required
AND endpoint = '{{ endpoint }}' -- required;