[Bug]: snowflake_grant_database_role doesn't grant to database roles

[bkimjin]

Terraform CLI Version

1.9.5

Terraform Provider Version

0.99.0

Company Name

No response

Terraform Configuration

resource "snowflake_database_role" "database_role" {
  database = var.database
  name     = var.database_role_name
}

resource "snowflake_database_role" "parent_database_role" {
  database = var.database
  name     = var.parent_database_role_name
}

resource "snowflake_grant_database_role" "g" {
  database_role_name        = "\"${var.database}\".\"${snowflake_database_role.database_role.name}\""
  parent_database_role_name = "\"${var.database}\".\"${snowflake_database_role.parent_database_role.name}\""
}

Category

category:resource

Object type(s)

resource:grant_database_role

Expected Behavior

Create a Snowflake query that follows this format:
GRANT DATABASE ROLE "DATABASE_NAME"."CHILD_DATABASE_ROLE" TO DATABASE ROLE "DATABASE_NAME"."PARENT_DATABASE_ROLE";

Actual Behavior

GRANT DATABASE ROLE "DATABASE_NAME"."CHILD_DATABASE_ROLE" TO ROLE "DATABASE_NAME.PARENT_DATABASE_ROLE";

Steps to Reproduce

1. copy the configuration
2. run terraform apply

How much impact is this issue causing?

Medium

Logs

No response

Additional Information

Current workaround is to use snowflake_unsafe_executes

Would you like to implement a fix?

• Yeah, I'll take it 😎

[sfc-gh-jmichalak]

Hi @bkimjin 👋

I can't reproduce this issue. Please provide logs with TF_LOG=DEBUG.

Also, fully_qualified_name field is now recommended, like this:

resource "snowflake_grant_database_role" "g" {
  database_role_name        = snowflake_database_role.database_role.fully_qualified_name
  parent_database_role_name = snowflake_database_role.parent_database_role.fully_qualified_name
}

We'll update the docs.

[bkimjin]

It looks like this was a user error. I mistakenly used parent_role_name instead of parent_database_role_name.

[sfc-gh-asawicki]

Great to hear that @bkimjin. Is there anything left to solve in this issue or can we close it? :)

[bkimjin]

I'll go ahead and close, thanks!