Reputation: 135
My objective is to create a custom role, with least privileges that provides capability to "Get Data" in Data Marketplace. This is primarily intended from "consumer" perspective and NOT "provider" perspective
Here are the options I tried, but still "Get Data" button is disabled. What other privileges are required to enable "Get Data" button.
Option-1
Conclusion: "Get Data" button is still disabled when using DX_CONSUMER_ROLE
Option-2
Conclusion: "Get Data" button is still disabled when using CSTM_SYSADMIN_ROLE
Per Snowflake documentation, it mentions IMPORT SHARE is good enough, but I am unsuccessful so far. What am I missing here. Any advise.
Here is further observations after above original post ...
Looks like custom role cannot be used to enable marketplace "GET DATA" button and it has to be IMPORT SHARE for SYSADMIN. From operationalization perspective within an organization, I personally prefer to segregate regular SYSADMIN (who can creates local DBs) vs MARKETPLACE Consumer SYSADMIN (who can only imports shares from marketplace). Appreciate if someone can suggest a workaround to accommodate this.
Thanks
Upvotes: 0
Views: 146
Reputation: 1180
Thought I would share my example that this worked for me in my testing for a bare minimum "get data" from the marketplace type of role:
create role marketplace_consumer_role;
grant IMPORT SHARE on account to role marketplace_consumer_role;
grant CREATE DATABASE on account to role marketplace_consumer_role;
Upvotes: 1