hi all i ve been using meltano to manage privileges in our s Meltano #announcements

hi all. i've been using meltano to manage privileg...

jonathan_talmi

09/09/2019, 3:19 PM

hi all. i've been using meltano to manage privileges in our snowflake instance, and i was wondering if roles.yml currently supports assigning roles to other roles. e.g.:

micael_bergeron

09/09/2019, 3:23 PM

It should support ROLES, yes. you might want to check https://meltano.com/docs/meltano-cli.html#spec-file for the actual lingo, but I think it should look like this:

Copy code

roles:
    - sysadmin:
        member_of:
            - custom

micael_bergeron

09/09/2019, 3:25 PM

@yannis_roussos can you confirm/infirm my thoughts?

yannis_roussos

09/09/2019, 3:42 PM

@jonathan_talmi yes it does. That's one of the core functionalities supported by

meltano permissions

. You can check the spec file used to manage Gitlab's Snowflake roles for some real world examples: https://gitlab.com/gitlab-data/analytics/blob/master/load/snowflake/roles.yml

jonathan_talmi

09/09/2019, 3:58 PM

awesome, looks good. trying it now.

jonathan_talmi

09/09/2019, 5:21 PM

it looks like my grants are in reverse order. i have the following yaml in my roles section:

Copy code

- david:
      member_of:
        - analyst

which appears to become:

GRANT ROLE analyst TO ROLE david;

edit: just reread the comments above and saw that my yaml is most likely in reverse order. the parent is member of the child. you can ignore this message 😛

micael_bergeron

09/09/2019, 6:11 PM

That's a bummer, but hey 🙂

5 Views

Open in Slack

Previous Next