Snowflake Native App Connector

-- In the following, replace KUMOAPP_NAME, DB_NAME, SCHEMA_NAME and WAREHOUSE_NAME with
-- those that will be used to build models with Kumo.

SET KUMOAPP_NAME='<KUMOAPP_NAME>';
SET DB_NAME='<DB_NAME>';
SET SCHEMA_NAME='<DB_NAME>.<SCHEMA>';
SET WAREHOUSE_NAME='<WAREHOUSE_NAME>';

GRANT USAGE ON WAREHOUSE IDENTIFIER($WAREHOUSE_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);

GRANT USAGE ON DATABASE IDENTIFIER($DB_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);
GRANT USAGE ON SCHEMA IDENTIFIER($SCHEMA_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);
GRANT SELECT, REFERENCES ON ALL TABLES IN SCHEMA IDENTIFIER($SCHEMA_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);
GRANT SELECT, REFERENCES ON ALL VIEWS IN SCHEMA IDENTIFIER($SCHEMA_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);
GRANT SELECT, REFERENCES ON ALL MATERIALIZED VIEWS IN SCHEMA IDENTIFIER($SCHEMA_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);
GRANT CREATE TABLE ON SCHEMA IDENTIFIER($SCHEMA_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);
GRANT DROP TABLE ON SCHEMA IDENTIFIER($SCHEMA_NAME) TO APPLICATION IDENTIFIER($KUMOAPP_NAME);

-- Use ACCOUNTADMIN or a role with proper privileges
USE ROLE ACCOUNTADMIN; -- or SECURITYADMIN with proper grants

-- Create database role
CREATE DATABASE ROLE if not exists <YOUR_DB>.kumo_db_role;

-- Grant database and schema usage
GRANT USAGE ON DATABASE <YOUR_DB> TO DATABASE ROLE <YOUR_DB>.kumo_db_role;
GRANT USAGE ON SCHEMA <YOUR_DB>.<YOUR_SCHEMA> TO DATABASE ROLE <YOUR_DB>.kumo_db_role;

-- Grant privileges on existing tables
GRANT SELECT ON ALL TABLES IN DATABASE <YOUR_DB> TO DATABASE ROLE <YOUR_DB>.kumo_db_role;

-- Grant future privileges (choose either database OR schema level)
GRANT SELECT ON FUTURE TABLES IN DATABASE <YOUR_DB> TO DATABASE ROLE <YOUR_DB>.kumo_db_role;
-- Schema level if needed 
-- GRANT ALL ON FUTURE TABLES IN SCHEMA <YOUR_DB>.<YOUR_SCHEMA> TO DATABASE ROLE <YOUR_DB>.kumo_db_role;

-- Grant the database role to the application
GRANT DATABASE ROLE <YOUR_DB>.kumo_db_role TO APPLICATION <YOUR_KUMO_APP>;