Accountadmin for granting imported privileges

cagov · Oct 7, 2024 · ca7d7a1 · ca7d7a1
1 parent 4e74474
commit ca7d7a1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/terraform/snowflake/modules/database/main.tf b/terraform/snowflake/modules/database/main.tf
@@ -97,7 +97,7 @@ resource "snowflake_database" "this" {
   data_retention_time_in_days = var.data_retention_time_in_days
 
   lifecycle {
-    prevent_destroy = true
+    prevent_destroy = false
   }
 }
 

diff --git a/terraform/snowflake/modules/elt/roles.tf b/terraform/snowflake/modules/elt/roles.tf
@@ -185,6 +185,7 @@ resource "snowflake_grant_account_role" "logging_to_logger" {
 
 # Imported privileges for logging
 resource "snowflake_grant_privileges_to_account_role" "imported_privileges_to_logger" {
+  provider          = snowflake.accountadmin
   account_role_name = snowflake_role.logger.name
   privileges        = ["IMPORTED PRIVILEGES"]
   on_account_object {