Merge pull request #41 from Sage-Bionetworks/create-governance-role

Create governance role

admin/grants.sql

@@ -160,6 +160,10 @@ GRANT ROLE FAIR TO USER "[email protected]";
 GRANT ROLE DPE_OPS TO USER "[email protected]";
 GRANT ROLE DPE_OPS TO USER "[email protected]";
 
+GRANT ROLE GOVERNANCE TO USER "[email protected]";
+GRANT ROLE GOVERNANCE TO USER "[email protected]";
+GRANT ROLE GOVERNANCE TO USER "[email protected]";
+
 -- Create governance privileges
 GRANT ROLE MASKING_ADMIN
 TO USER "[email protected]";
@@ -298,6 +302,24 @@ TO ROLE DATA_ENGINEER;
 -- TO ROLE DATA_ENGINEER;
 -- GRANT ALL PRIVILEGES ON ALL STREAMS IN DATABASE SYNAPSE_DATA_WAREHOUSE_DEV
 -- TO ROLE DATA_ENGINEER;
+GRANT USAGE ON DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT USAGE ON ALL SCHEMAS IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT SELECT ON ALL TABLES IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT SELECT ON ALL VIEWS IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT SELECT ON ALL DYNAMIC TABLES IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT USAGE ON FUTURE SCHEMAS IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT SELECT ON FUTURE TABLES IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT SELECT ON FUTURE VIEWS IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
+GRANT SELECT ON FUTURE DYNAMIC TABLES IN DATABASE SYNAPSE_DATA_WAREHOUSE
+TO ROLE GOVERNANCE;
 
 
 -- Sage database privileges

admin/roles.sql

@@ -21,3 +21,5 @@ CREATE ROLE IF NOT EXISTS AD;
 
 -- FAIR
 CREATE ROLE IF NOT EXISTS FAIR;
+-- GOVERNANCE
+CREATE ROLE IF NOT EXISTS GOVERNANCE;