database_grant: ALL privilege will always create resource about terraform-provider-snowflake HOT 4 CLOSED

I believe I'm also seeing this exact same issue with snowflake_schema_grant and the "ownership" privilege.

-/+ resource "snowflake_schema_grant" "ownership" {
        database_name = "MY_DATABASE"
      ~ id            = "MY_DATABASE|PUBLIC||OWNERSHIP" -> (known after apply)
        privilege     = "OWNERSHIP"
      ~ roles         = [ # forces replacement
          + "MY_USER",
        ]
        schema_name   = "PUBLIC"
      - shares        = [] -> null
    }

from terraform-provider-snowflake.

I thought perhaps a workaround to this would be to write multiple privileges in the string.
Sadly, not.

For example it is valid to run this SQL:
GRANT USAGE, CREATE SCHEMA ON DATABASE "TEST_DATABASE" TO ROLE "ALL_ROLE";

I tried this out and it fails because there is validation requiring there to be only one privilege specified.

e.g.

resource "snowflake_database_grant" "all" {
  database_name = "${snowflake_database.test_database.name}"
  privilege = "USAGE, CREATE SCHEMA"
  roles = ["${snowflake_role.all_role.name}"]
}

Got this error

Error: snowflake_database_grant.all: expected privilege to be one of [ALL CREATE SCHEMA IMPORTED PRIVILEGES MODIFY MONITOR OWNERSHIP REFERENCE_USAGE USAGE], got USAGE, CREATE SCHEMA

I tried a few variations, none of these work:

privilege = "USAGE CREATE SCHEMA"
privilege = "USAGE|CREATE SCHEMA"
privilege = ["USAGE", "CREATE SCHEMA"]

Of course the list doesn't work, the property is a string.

The README says:

Across the entire Snowflake account, all of the databases to which a single grant is attached must be declared by a single snowflake_database_grant resource.

How is it possible to specify multiple databases in a single snowflake_database_grant resource? The database_name property is also a string.

from terraform-provider-snowflake.

+1

from terraform-provider-snowflake.

Going to close this as we are going to be removing support for ALL grants.

If still occurring after that, feel free to re-open.

from terraform-provider-snowflake.