From dc0541f089cbdbfa4adc655e50878db6d13df8b1 Mon Sep 17 00:00:00 2001 From: Ian Rose Date: Thu, 2 Nov 2023 08:03:43 -0700 Subject: [PATCH] Document how to revoke orgadmin --- docs/new-project-setup.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/docs/new-project-setup.md b/docs/new-project-setup.md index 7c1e4802..d782c0c8 100644 --- a/docs/new-project-setup.md +++ b/docs/new-project-setup.md @@ -24,6 +24,13 @@ USE ROLE accountadmin; GRANT ROLE orgadmin TO USER ; ``` +If you later want to revoke the `orgadmin` role from your user or any other, you can do so with: + +```sql +USE ROLE accountadmin; +REVOKE ROLE orgadmin FROM USER ; +``` + ### Get access to AWS We typically create our Snowflake architecture using Terraform. @@ -151,7 +158,7 @@ You should substitute the appropriate names there. to your `dev` directory. 1. In the "elt" module of `main.tf`, change the `source` parameter to point to `"github.com/cagov/data-infrastructure.git//terraform/snowflake/modules/elt?ref="` - where `` is the short hash of the most recent commit in this repository. + where `` is the short hash of the most recent commit in the `data-infrastructure` repository. 1. In the `dev` directory, create a new backend configuration file called `--dev.tfbackend`. The file will point to the S3 bucket in which we are storing terraform state: ```hcl