Scripts, SQL, and Stored Procedures that are useful in using and adopting the use of using ROLE for security access in Redshift.

• pr_migrate_groups_to_roles.sql - Stored procedure that creates roles based on the existing groups and performs the grants needed to replace groups in favor of roles.

  • Parameter: dryrun boolean true: indicates that the stored procedure will NOT create any roles or perform any grants. Instead, the procedure will only output through RAISE INFO, the commands that will be executed when dryrun is false. false: indicates that the stored proceudre WILL create roles and perform grants. The procedure also outputs the commands being executed with RAISE INFO.

• Queries to display grants to groups and roles:

  • query_create_model_group_grants.sql
  • query_create_model_role_grants.sql
  • query_database_group_grants.sql
  • query_database_role_grants.sql
  • query_datashare_group_grants.sql
  • query_datashare_role_grants.sql
  • query_defaults_group_grants.sql
  • query_defaults_role_grants.sql
  • query_language_group_grants.sql
  • query_language_role_grants.sql
  • query_model_group_grants.sql
  • query_model_role_grants.sql
  • query_routine_group_grants.sql
  • query_routine_role_grants.sql
  • query_schema_group_grants.sql
  • query_schema_role_grants.sql
  • query_table_group_grants.sql
  • query_table_role_grants.sql
  • query_users_in_groups.sql
  • query_users_in_roles.sql

See CONTRIBUTING for more information.

This library is licensed under the MIT-0 License. See the LICENSE file.