Skip to main content

GRANT PRIVILEGE

Description​

Grant a privilege on a specified data object. See the permissions documentation for more details.

To grant roles on Onehouse resources, use GRANT ROLE.

Data Privilege Limitation

Data privileges on Lakes, Databases, and Tables are currently not enforced on SQL, Spark, and Open Engines Clusters. Support will be added soon.

For now, data privileges may be used to manage data access for Flows and Table Services.

Syntax​

GRANT PRIVILEGE <privilege> ON <object_type> <object_name> TO <principal_type> <principal_identifier>

Examples​

GRANT PRIVILEGE SELECT ON LAKE 'ilake' TO GROUP 'eng_team'

Required parameters​

  • privilege: Specify one of {ALL_PRIVILEGES|DESCRIBE|CREATE|SELECT|INSERT|UPDATE|DELETE|ALTER|DROP}.
  • object_type: Specify one of {LAKE|DATABASE|TABLE}.
  • object_name: Specify the name of the object to grant the privilege on.
  • principal_type: Specify one of {USER|GROUP|SERVICE_PRINCIPAL}.
  • principal_identifier: Specify one of {<user_email>|<group_id>|<service_principal_id>}.