GRANTS_TO_USERS view¶

Important

This view is only available in the organization account. For more information, see Premium views in the organization account.

This Organization Usage view can be used to query the roles that have been granted to a user.

Columns¶

Column Name	Data Type	Description
ORGANIZATION_NAME	VARCHAR	Name of the organization.
ACCOUNT_LOCATOR	VARCHAR	System-defined identifier for an account.
ACCOUNT_NAME	VARCHAR	User-defined identifier for an account.
CREATED_ON	TIMESTAMP_LTZ	Time and date (in the UTC time zone) when the role is granted.
DELETED_ON	TIMESTAMP_LTZ	Date and time when the pipe was deleted.
ROLE	VARCHAR	Identifier for the role granted to the user.
GRANTED_TO	VARCHAR	For this view, the value is `USER`.
GRANTEE_NAME	VARCHAR	Name of the user to whom the privilege is granted.
GRANTED_BY	VARCHAR	Identifier for the role that granted the privilege.

This view records current grants and historical grants, including grants that were revoked and granted again. When a single grant occurs and as long as it remains active (i.e. not revoked):
- The view includes one row for the grant of the same role to the same user.
- A regrant of the same role to the same user is not recorded as a new row. Instead, the DELETED_ON column remains NULL while the grant is active.
When a grant is revoked from the user, the DELETED_ON column for the grant is updated from NULL to the timestamp when the grant was revoked.
After revoking the role from the user, a grant of the same role to the same user is recorded in a new row. In this new row, the DELETED_ON column value is NULL because the grant is now active.