feat: optimize default_roles_definition + add dynamic table permissions

getindata · Jan 5, 2024 · d4fcd4e · d4fcd4e
1 parent 622dfb0
commit d4fcd4e
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/locals.tf b/locals.tf
@@ -27,11 +27,11 @@ locals {
     }
     transformer = {
       database_grants = ["USAGE", "MONITOR", "CREATE SCHEMA"]
-      schema_grants   = ["USAGE", "CREATE TEMPORARY TABLE", "CREATE TAG", "CREATE PIPE", "CREATE PROCEDURE", "CREATE MATERIALIZED VIEW", "CREATE TABLE", "CREATE FILE FORMAT", "CREATE STAGE", "CREATE TASK", "CREATE FUNCTION", "CREATE EXTERNAL TABLE", "CREATE SEQUENCE", "CREATE VIEW", "CREATE STREAM"]
+      schema_grants   = ["USAGE", "CREATE TEMPORARY TABLE", "CREATE TAG", "CREATE PIPE", "CREATE PROCEDURE", "CREATE MATERIALIZED VIEW", "CREATE TABLE", "CREATE FILE FORMAT", "CREATE STAGE", "CREATE TASK", "CREATE FUNCTION", "CREATE EXTERNAL TABLE", "CREATE SEQUENCE", "CREATE VIEW", "CREATE STREAM", "CREATE DYNAMIC TABLE"]
     }
     admin = {
-      database_grants = ["USAGE", "MONITOR", "MODIFY", "CREATE SCHEMA"]
-      schema_grants   = ["USAGE", "MONITOR", "MODIFY", "CREATE TEMPORARY TABLE", "CREATE TAG", "CREATE PIPE", "CREATE PROCEDURE", "CREATE MATERIALIZED VIEW", "CREATE ROW ACCESS POLICY", "CREATE TABLE", "CREATE FILE FORMAT", "CREATE STAGE", "CREATE TASK", "CREATE FUNCTION", "CREATE EXTERNAL TABLE", "ADD SEARCH OPTIMIZATION", "CREATE SEQUENCE", "CREATE MASKING POLICY", "CREATE VIEW", "CREATE STREAM"]
+      database_grants = ["ALL PRIVILEGES"]
+      schema_grants   = ["ALL PRIVILEGES"]
     }
   }