Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs(ingest/snowflake): update permissions for dynamic tables #12074

Merged
merged 3 commits into from
Dec 12, 2024
+9 −0
Merged

docs(ingest/snowflake): update permissions for dynamic tables #12074

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2b3ff43
docs(ingest/snowflake): update permissions for dynamic tables
mayurinehate Dec 9, 2024
aa46f07
Merge branch 'master' into snowflake_dynamic_permissions
mayurinehate Dec 11, 2024
bc6b821
Merge branch 'master' into snowflake_dynamic_permissions
mayurinehate Dec 12, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions docs/quick-ingestion-guides/snowflake/setup.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,8 @@ In order to configure ingestion from Snowflake, you'll first have to ensure you
grant select on future external tables in database identifier($db_var) to role datahub_role;
grant select on all views in database identifier($db_var) to role datahub_role;
grant select on future views in database identifier($db_var) to role datahub_role;
grant select on all dynamic tables in database identifier($db_var) to role datahub_role;
grant select on future dynamic tables in database identifier($db_var) to role datahub_role;

-- Grant access to view tables and views
grant references on all tables in database identifier($db_var) to role datahub_role;
Expand All @@ -51,6 +53,9 @@ In order to configure ingestion from Snowflake, you'll first have to ensure you
grant references on future external tables in database identifier($db_var) to role datahub_role;
grant references on all views in database identifier($db_var) to role datahub_role;
grant references on future views in database identifier($db_var) to role datahub_role;
-- Grant access to dynamic tables
grant monitor on all dynamic tables in database identifier($db_var) to role datahub_role;
grant monitor on future dynamic tables in database identifier($db_var) to role datahub_role;

-- Assign privileges to extract lineage and usage statistics from Snowflake by executing the below query.
grant imported privileges on database snowflake to role datahub_role;
Expand Down
4 changes: 4 additions & 0 deletions metadata-ingestion/docs/sources/snowflake/snowflake_pre.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,12 +23,16 @@ grant references on all external tables in database "<your-database>" to role da
grant references on future external tables in database "<your-database>" to role datahub_role;
grant references on all views in database "<your-database>" to role datahub_role;
grant references on future views in database "<your-database>" to role datahub_role;
grant monitor on all dynamic tables in database "<your-database>" to role datahub_role;
grant monitor on future dynamic tables in database "<your-database>" to role datahub_role;

// If you ARE using Snowflake Profiling or Classification feature: Grant select privileges to your tables
grant select on all tables in database "<your-database>" to role datahub_role;
grant select on future tables in database "<your-database>" to role datahub_role;
grant select on all external tables in database "<your-database>" to role datahub_role;
grant select on future external tables in database "<your-database>" to role datahub_role;
grant select on all dynamic tables in database "<your-database>" to role datahub_role;
grant select on future dynamic tables in database "<your-database>" to role datahub_role;

// Create a new DataHub user and assign the DataHub role to it
create user datahub_user display_name = 'DataHub' password='' default_role = datahub_role default_warehouse = '<your-warehouse>';
Expand Down
Loading