product.yml

databases:
  - name: "P_{{ env }}_{{ product }}"
    schemas:
      - name: MAIN
      - name: INTEGRATION
      - name: SHARED
warehouses:
  - name: "P_{{ env }}_{{ product }}_WH"
    parameters:
      - name: WAREHOUSE_SIZE
        value: "{{ warehouse_size }}"
      - name: INITIALLY_SUSPENDED
        value: true
      - name: SCALING_POLICY
        value: "{{ scaling_policy }}"
      - name: AUTO_SUSPEND
        value: "{{ auto_suspend }}"
      - name: AUTO_RESUME
        value: "{{ auto_resume }}"
      - name: MIN_CLUSTER_COUNT
        value: "{{ min_cluster_count }}"
      - name: MAX_CLUSTER_COUNT
        value: "{{ max_cluster_count }}"
roles:
  # Warehouse
  - name: AR_P_{{ env }}_{{ product }}_WH
  - name: AR_P_{{ env }}_{{ product }}_WH_ADMIN
  # Data
  - name: DR_P_{{ env }}_{{ product }}_RW
  - name: DR_P_{{ env }}_{{ product }}_RO
  - name: DR_P_{{ env }}_{{ product }}_SHARED
  # Functional
  - name: FR_P_{{ env }}_{{ product }}_ADMIN
  - name: FR_P_{{ env }}_{{ product }}_ENGINEER
  - name: FR_P_{{ env }}_{{ product }}_READER
privileges:
    # Warehouse
    # ADMIN
  - privilege: "ALL PRIVILEGES"
    objectType: "WAREHOUSE"
    objectName: "P_{{ env }}_{{ product }}_WH"
    roleName: "AR_P_{{ env }}_{{ product }}_WH_ADMIN"
    grantOption: true
    # USER
  - privilege: "USAGE"
    objectType: "WAREHOUSE"
    objectName: "P_{{ env }}_{{ product }}_WH"
    roleName: "AR_P_{{ env }}_{{ product }}_WH"
    grantOption: false
    # Database
    # ADMIN
  - privilege: "ALL PRIVILEGES"
    objectType: "DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "FR_P_{{ env }}_{{ product }}_ADMIN"
    grantOption: true
    # USER
  - privilege: "USAGE"
    objectType: "DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "USAGE"
    objectType: "DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
  - privilege: "USAGE"
    objectType: "DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_SHARED"
    grantOption: false
    # Schema
    # ADMIN
  - privilege: "ALL PRIVILEGES"
    objectType: "ALL SCHEMAS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: true
    # USER
  - privilege: "USAGE"
    objectType: "ALL SCHEMAS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
  - privilege: "USAGE"
    objectType: "SCHEMA"
    objectName: "P_{{ env }}_{{ product }}.SHARED"
    roleName: "DR_P_{{ env }}_{{ product }}_SHARED"
    grantOption: false
    # Table
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE TABLES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE TABLES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE TABLES IN SCHEMA"
    objectName: "P_{{ env }}_{{ product }}.SHARED"
    roleName: "DR_P_{{ env }}_{{ product }}_SHARED"
    grantOption: false
    # External Table
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE EXTERNAL TABLES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE EXTERNAL TABLES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE EXTERNAL TABLES IN SCHEMA"
    objectName: "P_{{ env }}_{{ product }}.SHARED"
    roleName: "DR_P_{{ env }}_{{ product }}_SHARED"
    grantOption: false
    # View
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE VIEWS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE VIEWS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE VIEWS IN SCHEMA"
    objectName: "P_{{ env }}_{{ product }}.SHARED"
    roleName: "DR_P_{{ env }}_{{ product }}_SHARED"
    grantOption: false
    # Materialized View
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE MATERIALIZED VIEWS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE MATERIALIZED VIEWS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
  - privilege: "SELECT"
    objectType: "FUTURE MATERIALIZED VIEWS IN SCHEMA"
    objectName: "P_{{ env }}_{{ product }}.SHARED"
    roleName: "DR_P_{{ env }}_{{ product }}_SHARED"
    grantOption: false
    # Stream
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE STREAMS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
    # Task
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE TASKS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "MONITOR"
    objectType: "FUTURE TASKS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
    # Stage
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE STAGES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
  - privilege: "READ"
    objectType: "FUTURE STAGES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RO"
    grantOption: false
    # File Format
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE FILE FORMATS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
    # Sequence
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE SEQUENCES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
    # Function
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE FUNCTIONS IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
    # Procedure
  - privilege: "ALL PRIVILEGES"
    objectType: "FUTURE PROCEDURES IN DATABASE"
    objectName: "P_{{ env }}_{{ product }}"
    roleName: "DR_P_{{ env }}_{{ product }}_RW"
    grantOption: false
roleGrants:
  - name: "AR_P_{{ env }}_{{ product }}_WH"
    roles:
      - "FR_P_{{ env }}_{{ product }}_READER"
  - name: "AR_A_TASK_OPERATOR"
    roles:
      - "FR_P_{{ env }}_{{ product }}_ENGINEER"
  - name: "AR_I_ADLS_PHDATA_SNOWFLAKE_STAGE"
    roles:
      - "FR_P_{{ env }}_{{ product }}_ENGINEER"
  - name: "AR_P_{{ env }}_{{ product }}_WH_ADMIN"
    roles:
      - "FR_P_{{ env }}_{{ product }}_ENGINEER"
  - name: "DR_P_{{ env }}_{{ product }}_SHARED"
    roles:
      - "DR_P_{{ env }}_{{ product }}_RO"
  - name: "DR_P_{{ env }}_{{ product }}_RO"
    roles:
      - "DR_P_{{ env }}_{{ product }}_RW"
  - name: "DR_P_{{ env }}_{{ product }}_RO"
    roles:
      - "FR_P_{{ env }}_{{ product }}_READER"
  - name: "DR_P_{{ env }}_{{ product }}_RW"
    roles:
      - "FR_P_{{ env }}_{{ product }}_ENGINEER"
  - name: "FR_P_{{ env }}_{{ product }}_ENGINEER"
    roles:
      - "FR_P_{{ env }}_{{ product }}_ADMIN"
  - name: "FR_P_{{ env }}_{{ product }}_ADMIN"
    roles:
      - "SYSADMIN"