Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for grant ownership on user #956

Closed
advaitvdeo opened this issue Mar 30, 2022 · 3 comments
Closed

Support for grant ownership on user #956

advaitvdeo opened this issue Mar 30, 2022 · 3 comments
Labels
feature-request Used to mark issues with provider's missing functionalities

Comments

@advaitvdeo
Copy link

Is your feature request related to a problem? Please describe.

I have users in snowflake who wants to set key/pair authentication for themselves along with OAuth authentication that we already have for them. In case of key/pair auth, users are going to generate their respective key/pair and they want to run "ALTER USER" command on their respective users to set rsa_public_key.
We want to enable this for individual user by changing the owner of user ID to that user itself.
Currently when we run terraform pipeline, owner of the user if the BOT user that creates that user in snowflake.
snowflake_user resource does not have any field to setup owner of that user.

Describe the solution you'd like

Similar to snowflake_role_ownership_grant, we should have snowflake_user_ownership_grant, where we should be able to assign ownership on a user to any row that we want.
This way, we can create a OWNER_ROLE and grant OWNERSHIP privilege on user to this OWNER_ROLE and then grant this OWNER_ROLE to the user or to the default role of user.

Additional context

NA

@aidanmelen
Copy link
Contributor

aidanmelen commented Apr 5, 2022

I wrote the snowflake_role_ownership_grant resource. I have been meaning to implement the snowflake_user_ownership_grant resource. Busy work week so I will try to make another contribution this weekend!

@aidanmelen
Copy link
Contributor

My shameless plug... you can use the terraform-provider-snowsql to manage arbitrary snowflake objects with SnowSQL statements. This is useful for when resources are not yet implemented by this provider.

@aidanmelen
Copy link
Contributor

@sfc-gh-jalin sfc-gh-jalin added the feature-request Used to mark issues with provider's missing functionalities label Jun 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Used to mark issues with provider's missing functionalities
Projects
None yet
Development

No branches or pull requests

3 participants