Skip to main content

group_grant_options

Creates, updates, deletes, gets or lists a group_grant_options resource.

Overview

Namegroup_grant_options
TypeResource
Idsnowflake.grants.group_grant_options

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
revokedeletegrantee_type, grantee_name, bulk_grant_type, securable_type_plural, scope_type, scope_name, privilege, endpointdeleteModeEndpoint to indicate that the grant option for the privilege listed on the group securable in the given scope should be revoked.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
bulk_grant_typestringString that species whether this group privilege should be on ALL or FUTURE resources of the specified plural type
endpointstringOrganization and account identifier (orgname-accountname) (default: orgname-accountname)
grantee_namestringString that specifies the name of the privilege grantee.
grantee_typestringString that specifies the type of resource that is the privilege grantee.
privilegestringString that specifies a privilege to be revoked
scope_namestringString that specifies the name of resource that is the scope of an ALL/FUTURE privilege
scope_typestringString that specifies the type of resource that is the scope of an ALL/FUTURE privilege. Can only be DATABASE or SCHEMA
securable_type_pluralstringString that specifies the plural of the type of resource that is being secured by an ALL/FUTURE privilege. Must be either "schemas" or any plural object type that can nest under a schema such as "tables"
deleteModestringIf "cascade", recursively revoke the grant from sub-grantees to which this privilege was re-granted. Acceptable values are "restrict" or "cascade".

DELETE examples

Endpoint to indicate that the grant option for the privilege listed on the group securable in the given scope should be revoked.

DELETE FROM snowflake.grants.group_grant_options
WHERE grantee_type = '{{ grantee_type }}' --required
AND grantee_name = '{{ grantee_name }}' --required
AND bulk_grant_type = '{{ bulk_grant_type }}' --required
AND securable_type_plural = '{{ securable_type_plural }}' --required
AND scope_type = '{{ scope_type }}' --required
AND scope_name = '{{ scope_name }}' --required
AND privilege = '{{ privilege }}' --required
AND endpoint = '{{ endpoint }}' --required
AND deleteMode = '{{ deleteMode }}'
;