From 77c6666fc01cd2b07df857c29b20d443ba5b3e1d Mon Sep 17 00:00:00 2001
From: Ioannis Foukarakis <ioannis.foukarakis@mattermost.com>
Date: Wed, 20 Dec 2023 15:56:13 +0200
Subject: [PATCH 1/2] Add rudderstack role

---
 .dbt.env.example          |  9 ++++++++-
 load/snowflake/roles.yaml | 28 ++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+), 1 deletion(-)

diff --git a/.dbt.env.example b/.dbt.env.example
index cceb1cab7..6a068a6aa 100644
--- a/.dbt.env.example
+++ b/.dbt.env.example
@@ -5,4 +5,11 @@ SNOWFLAKE_TRANSFORM_SCHEMA=scratch
 SNOWFLAKE_TRANSFORM_ROLE=<your snowflake role>
 SNOWFLAKE_WAREHOUSE=<a warehouse available from the transform role>
 SNOWFLAKE_SCHEMA=<default schema to use>
-SNOWFLAKE_ROLE=<the same as SNOWFLAKE_TRANSFORM_ROLE>
\ No newline at end of file
+SNOWFLAKE_ROLE=<the same as SNOWFLAKE_TRANSFORM_ROLE>
+
+PERMISSION_BOT_USER=<username for permissions>
+PERMISSION_BOT_PASSWORD=<password for permission users>
+PERMISSION_BOT_ACCOUNT=<account id i.e. xyz.region>
+PERMISSION_BOT_DATABASE=<database to use for updating permissions>
+PERMISSION_BOT_ROLE=<role to use>
+PERMISSION_BOT_WAREHOUSE=<warehouse to use for updating permissions>
\ No newline at end of file
diff --git a/load/snowflake/roles.yaml b/load/snowflake/roles.yaml
index e56fbaef9..52c1bca25 100644
--- a/load/snowflake/roles.yaml
+++ b/load/snowflake/roles.yaml
@@ -104,6 +104,25 @@ roles:
                 write:
                     - raw.*.*
                     - analytics.*.*
+    - rudderstack:
+        warehouses:
+            - rudderstack_m
+        privileges:
+            databases:
+                read:
+                    - raw
+                write:
+                    - raw
+            schemas:
+                read:
+                    - raw.*
+                write:
+                    - raw.*
+            tables:
+                read:
+                    - raw.*.*
+                write:
+                    - raw.*.*
 
     - reporting:
         warehouses:
@@ -123,6 +142,7 @@ roles:
                 read:
                     - analytics.*.*
                     - snowflake.account_usage.*
+
     - reporting_all:
         warehouses:
             - reporting_s
@@ -228,6 +248,11 @@ users:
         member_of:
             - stitch
 
+    - rudderstack:
+        can_login: yes
+        member_of:
+            - rudderstack
+
     - permission_bot:
         can_login: yes
         member_of:
@@ -272,3 +297,6 @@ warehouses:
 
     - transform_m:
         size: medium
+
+    - rudderstack_m:
+        size: medium

From 6a77e74e7ac9c012e6767158725714863aabde4e Mon Sep 17 00:00:00 2001
From: Ioannis Foukarakis <ioannis.foukarakis@mattermost.com>
Date: Wed, 20 Dec 2023 16:14:54 +0200
Subject: [PATCH 2/2] Add existing role

---
 load/snowflake/roles.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/load/snowflake/roles.yaml b/load/snowflake/roles.yaml
index 52c1bca25..56695e02b 100644
--- a/load/snowflake/roles.yaml
+++ b/load/snowflake/roles.yaml
@@ -252,6 +252,7 @@ users:
         can_login: yes
         member_of:
             - rudderstack
+            - stitch
 
     - permission_bot:
         can_login: yes