Manage privileges for auto-fulfillment¶

If you’re the organization administrator for an account (i.e., if you are using the ORGADMIN role), delegate the privileges required to set up Cross-Cloud Auto-Fulfillment (auto-fulfillment) to the ACCOUNTADMIN role in the accounts in your organization.

You can delegate the privileges, revoke the privileges, and determine if the privileges have been delegated to a specific account. You can only delegate privileges to other accounts in your organization.

Delegate privileges to set up auto-fulfillment¶

To enable users with the ACCOUNTADMIN role to set up Cross-Cloud Auto-Fulfillment, call the system function named SYSTEM$ENABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT. The arguments for this system function are described below.

Calling this system function requires the ORGADMIN role.

SELECT SYSTEM$ENABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT(
  '<account_name>'
  );

Copy

Where:

account_name: Specifies the name of the account in which to enable users with the ACCOUNTADMIN role to manage Cross-Cloud Auto-Fulfillment. See Finding the organization and account name for an account.

Grant privileges to set up auto-fulfillment¶

After delegating privileges to the ACCOUNTADMIN role, the ACCOUNTADMIN role can grant the MANAGE LISTING AUTO FULFILLMENT privilege to other roles in the account.

USE ROLE ACCOUNTADMIN;
GRANT MANAGE LISTING AUTO FULFILLMENT ON ACCOUNT TO ROLE <role_name>;

Copy

Check if an account can set up auto-fulfillment¶

To determine whether users with the ACCOUNTADMIN role in a specific account are permitted to set up auto-fulfillment, call the system function named SYSTEM$IS_GLOBAL_DATA_SHARING_ENABLED_FOR_ACCOUNT. The arguments for this system function are described below.

Calling this system function requires the ORGADMIN role.

SELECT SYSTEM$IS_GLOBAL_DATA_SHARING_ENABLED_FOR_ACCOUNT(
  '<account_name>'
  );

Copy

Where:

account_name: Specifies the name of the account for which you want to check if users with the ACCOUNTADMIN role can manage auto-fulfillment. See Finding the organization and account name for an account.

Revoke privileges to set up auto-fulfillment¶

To prevent users with the ACCOUNTADMIN role from setting up Cross-Cloud Auto-Fulfillment, call the system function named SYSTEM$DISABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT. The arguments for this system function are described below.

Calling this system function requires the ORGADMIN role.

SELECT SYSTEM$DISABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT(
  '<account_name>'
  );

Copy

Where:

account_name: Specifies the name of the account in which to prevent users with the ACCOUNTADMIN role from manage Cross-Cloud Auto-Fulfillment. See Finding the organization and account name for an account.