grant create db privilege

Sage-Bionetworks · Feb 6, 2025 · cdcb9fd · cdcb9fd
1 parent fdb27e6
commit cdcb9fd
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/admin/grants.sql b/admin/grants.sql
@@ -505,6 +505,13 @@ GRANT ROLE SYNAPSE_DATA_WAREHOUSE_ANALYST TO ROLE SYNAPSE_DATA_WAREHOUSE_ADMIN;
 GRANT ROLE SYNAPSE_DATA_WAREHOUSE_DEV_ADMIN TO ROLE SYSADMIN;
 GRANT ROLE SYNAPSE_DATA_WAREHOUSE_DEV_ANALYST TO ROLE SYNAPSE_DATA_WAREHOUSE_DEV_ADMIN;
 
+-- CREATE DATABASE privileges on domain ADMIN roles
+USE ROLE ACCOUNTADMIN;
+GRANT CREATE DATABASE ON ACCOUNT TO ROLE SYNAPSE_DATA_WAREHOUSE_ADMIN;
+GRANT CREATE DATABASE ON ACCOUNT TO ROLE SYNAPSE_DATA_WAREHOUSE_DEV_ADMIN;
+-- Switch back to SECURITYADMIN role
+USE ROLE SECURITYADMIN;
+
 -- Allow SECURITYADMIN to deploy schemachange for versioned admin scripts
 GRANT USAGE
     ON DATABASE METADATA