Snowflake

Snowflake Grant API

The grant API from Snowflake — 7 operation(s) for grant.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /api/v2/grants/{granteeType}/{granteeName}/{securableType}/{securableName}/privileges Grant privileges on one object to a role or user · Grant the Specified Privilege(s) on the Named Securable to the Named Grantee #
Ask an LLM
“How do I give a role SELECT on a specific table?”
“Can I let the grantee pass a privilege on to others with grant option?”
Tell an agent
Grant {privileges} on {securable_type} {securable_name} to {grantee_type} {grantee_name}.
Give {grantee_type} {grantee_name} {privileges} on {securable_type} {securable_name} with grant option {grant_option}.
POST /api/v2/grants/{granteeType}/{granteeName}/{bulkGrantType}/{securableTypePlural}/{scopeType}/{scopeName}/privileges Grant privileges on all or future objects in a scope · Grant the Specified Privilege(s) on All/future (as Specified by Bulkgranttype)… #
Ask an LLM
“How do I grant a role access to all tables in a schema, including ones created later?”
“Can I set up future grants so new views automatically get the same privileges?”
Tell an agent
Grant {privileges} on {bulk} {securables} in {scope_type} {scope_name} to {grantee_type} {grantee_name}.
Give {grantee_type} {grantee_name} {privileges} on {bulk} {securables} across {scope_type} {scope_name}.
DELETE /api/v2/grants/{granteeType}/{granteeName}/{securableType}/{securableName}/privileges/{privilege} Revoke a privilege on one object · Revoke the Specified Privilege on the Named Securable From the Named Grantee #
Ask an LLM
“How do I take SELECT on a single table away from a role?”
“Can I cascade a privilege revoke to grants the grantee passed on?”
Tell an agent destructive · confirm first
Revoke {privilege} on {securable_type} {securable_name} from {grantee_type} {grantee_name}.
Remove {privilege} on {securable_type} {securable_name} from {grantee_type} {grantee_name} using delete mode {mode}.
DELETE /api/v2/grants/{granteeType}/{granteeName}/{securableType}/{securableName}/privileges/{privilege}/grant-option Revoke only the grant option on one object · Revoke the Grant Option for the Specified Privilege on the Named Securable From… #
Ask an LLM
“Can I stop a role from re-granting a privilege while letting it keep the privilege itself?”
“What removes just the WITH GRANT OPTION from a privilege on a single object?”
Tell an agent destructive · confirm first
Revoke the grant option for {privilege} on {securable_type} {securable_name} from {grantee_type} {grantee_name}.
Stop {grantee_type} {grantee_name} re-granting {privilege} on {securable_type} {securable_name}, delete mode {mode}.
DELETE /api/v2/grants/{granteeType}/{granteeName}/{bulkGrantType}/{securableTypePlural}/{scopeType}/{scopeName}/privileges/{privilege} Revoke a privilege on all or future objects · Revoke the Specified Privilege on the Specified All/future Securable in the… #
Ask an LLM
“How do I undo a future grant on all tables in a schema?”
“Can I revoke a privilege from every object of one type across a database at once?”
Tell an agent destructive · confirm first
Revoke {privilege} on {bulk} {securables} in {scope_type} {scope_name} from {grantee_type} {grantee_name}.
Take {privilege} on {bulk} {securables} within {scope_type} {scope_name} away from {grantee_type} {grantee_name}, delete mode {mode}.
DELETE /api/v2/grants/{granteeType}/{granteeName}/{bulkGrantType}/{securableTypePlural}/{scopeType}/{scopeName}/privileges/{privilege}/grant-option Revoke the grant option on all or future objects · Revoke the Grant Option for the Specified Privilege on the Specified All/future… #
Ask an LLM
“Can I remove the grant option from a future grant but leave the privilege in place?”
“What strips re-grant rights from a bulk grant across a whole schema?”
Tell an agent destructive · confirm first
For the bulk grant of {privilege} on {bulk} {securables} in {scope_type} {scope_name}, drop only the grant option held by {grantee_type} {grantee_name}.
Stop {grantee_type} {grantee_name} re-granting {privilege} on {bulk} {securables} of {scope_type} {scope_name} ({mode}).
GET /api/v2/grants/{granteeType}/{granteeName} List privileges granted to a role or user · List of Privileges Associated With This Grantee Type and Name #
Ask an LLM
“What roles and privileges has a given role or user been granted?”
“Can I get the SHOW GRANTS TO output for a grantee through the API?”
Tell an agent
List everything granted to {grantee_type} {grantee_name}.
Show the privileges that {grantee_type} {grantee_name} currently holds.

Documentation

📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/account
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/alert
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/api-integration
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/catalog-integration
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/compute-pool
📖
Documentation
https://docs.snowflake.com/en/user-guide/snowflake-cortex/cortex-analyst/rest-api
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/cortex-inference
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/cortex-search-service
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/database-role
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/database
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/dynamic-table
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/event-table
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/external-volume
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/function
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/grant
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/iceberg-table
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/image-repository
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/managed-account
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/network-policy
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/notebook
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/notification-integration
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/pipe
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/procedure
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/result
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/role
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/schema
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/service
📖
Documentation
https://docs.snowflake.com/en/developer-guide/sql-api/index
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/stage
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/stream
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/table
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/task
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/user-defined-function
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/user
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/view
📖
Documentation
https://docs.snowflake.com/en/developer-guide/snowflake-rest-api/reference/warehouse

Specifications

⚙
OpenAPI
https://artifacts.apis.io/snowflake/openapi/snowflake-grant-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/snowflake/json-schema/snowflake-database-schema.json
📊
JSONSchema
https://artifacts.apis.io/snowflake/json-schema/snowflake-warehouse-schema.json

Other Resources

🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/account-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/alert-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/api-integration-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/catalog-integration-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/compute-pool-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/cortex-analyst-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/cortex-inference-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/cortex-search-service-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/database-role-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/database-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/dynamic-table-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/event-table-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/external-volume-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/function-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/grant-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/iceberg-table-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/image-repository-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/managed-account-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/network-policy-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/notebook-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/notification-integration-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/pipe-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/procedure-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/role-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/schema-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/service-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/sqlapi-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/snowflake-sql-rest-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/stage-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/stream-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/table-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/task-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/user-defined-function-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/user-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/view-context.jsonld
🔗
JSONLD
https://artifacts.apis.io/snowflake/json-ld/warehouse-context.jsonld
🔗
Overlay
https://artifacts.apis.io/snowflake/overlays/snowflake-grant-overlay.yaml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/snowflake:snowflake-grant-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

snowflake-grant-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: 0.0.1
  title: Snowflake Grant API
  description: The Snowflake Grant API is a REST API that you can use to show or manage privileges that have been provided to users and roles in a Snowflake database.
  contact:
    name: Snowflake, Inc.
    url: https://snowflake.com
    email: support@snowflake.com
servers:
- description: Snowflake REST Server
  url: https://org-account.snowflakecomputing.com
security:
- KeyPair: []
- ExternalOAuth: []
- SnowflakeOAuth: []
tags:
- name: Grant
paths:
  /api/v2/grants/{granteeType}/{granteeName}/{securableType}/{securableName}/privileges:
    post:
      summary: Grant the Specified Privilege(s) on the Named Securable to the Named Grantee
      description: Endpoint to indicate that the privileges listed in the request body should be granted.
      operationId: grantPrivilege
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: '#/components/parameters/securableType'
      - $ref: '#/components/parameters/securableName'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Grant'
            examples:
              GrantprivilegeRequestExample:
                summary: Default grantPrivilege request
                x-microcks-default: true
                value:
                  privileges:
                  - example_value
                  grant_option: true
                  created_on: '2026-01-15T10:30:00Z'
                  grantee_type: example_value
                  grantee_name: example_value
                  securable_type: example_value
                  securable_name: example_value
                  granted_by_role_type: example_value
                  granted_by_name: example_value
      responses:
        '200':
          $ref: common.yaml#/components/responses/200SuccessResponse
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /api/v2/grants/{granteeType}/{granteeName}/{bulkGrantType}/{securableTypePlural}/{scopeType}/{scopeName}/privileges:
    post:
      summary: Grant the Specified Privilege(s) on All/future (as Specified by Bulkgranttype)…
      description: Endpoint to indicate that the privileges listed in the request body should be granted to all securables of this type in the given scope.
      operationId: grantGroupPrivilege
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: '#/components/parameters/bulkGrantType'
      - $ref: '#/components/parameters/securableTypePlural'
      - $ref: '#/components/parameters/scopeType'
      - $ref: '#/components/parameters/scopeName'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Grant'
            examples:
              GrantgroupprivilegeRequestExample:
                summary: Default grantGroupPrivilege request
                x-microcks-default: true
                value:
                  privileges:
                  - example_value
                  grant_option: true
                  created_on: '2026-01-15T10:30:00Z'
                  grantee_type: example_value
                  grantee_name: example_value
                  securable_type: example_value
                  securable_name: example_value
                  granted_by_role_type: example_value
                  granted_by_name: example_value
      responses:
        '200':
          $ref: common.yaml#/components/responses/200SuccessResponse
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /api/v2/grants/{granteeType}/{granteeName}/{securableType}/{securableName}/privileges/{privilege}:
    delete:
      summary: Revoke the Specified Privilege on the Named Securable From the Named Grantee
      description: Endpoint to indicate that the privilege listed in the path should be revoked.
      operationId: revokePrivilege
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: '#/components/parameters/securableType'
      - $ref: '#/components/parameters/securableName'
      - $ref: '#/components/parameters/privilege'
      - $ref: '#/components/parameters/deleteMode'
      responses:
        '200':
          $ref: common.yaml#/components/responses/200SuccessResponse
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /api/v2/grants/{granteeType}/{granteeName}/{securableType}/{securableName}/privileges/{privilege}/grant-option:
    delete:
      summary: Revoke the Grant Option for the Specified Privilege on the Named Securable From…
      description: Endpoint to indicate that the grant option for the privilege listed in the path should be revoked.
      operationId: revokePrivilegeGrantOption
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: '#/components/parameters/securableType'
      - $ref: '#/components/parameters/securableName'
      - $ref: '#/components/parameters/privilege'
      - $ref: '#/components/parameters/deleteMode'
      responses:
        '200':
          $ref: common.yaml#/components/responses/200SuccessResponse
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  ? /api/v2/grants/{granteeType}/{granteeName}/{bulkGrantType}/{securableTypePlural}/{scopeType}/{scopeName}/privileges/{privilege}
  : delete:
      summary: Revoke the Specified Privilege on the Specified All/future Securable in the…
      description: Endpoint to indicate that the privilege listed on the group securable in the given scope should be revoked.
      operationId: revokeGroupPrivilege
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: '#/components/parameters/bulkGrantType'
      - $ref: '#/components/parameters/securableTypePlural'
      - $ref: '#/components/parameters/scopeType'
      - $ref: '#/components/parameters/scopeName'
      - $ref: '#/components/parameters/privilege'
      - $ref: '#/components/parameters/deleteMode'
      responses:
        '200':
          $ref: common.yaml#/components/responses/200SuccessResponse
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  ? /api/v2/grants/{granteeType}/{granteeName}/{bulkGrantType}/{securableTypePlural}/{scopeType}/{scopeName}/privileges/{privilege}/grant-option
  : delete:
      summary: Revoke the Grant Option for the Specified Privilege on the Specified All/future…
      description: Endpoint to indicate that the grant option for the privilege listed on the group securable in the given scope should be revoked.
      operationId: revokeGroupPrivilegeGrantOption
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: '#/components/parameters/bulkGrantType'
      - $ref: '#/components/parameters/securableTypePlural'
      - $ref: '#/components/parameters/scopeType'
      - $ref: '#/components/parameters/scopeName'
      - $ref: '#/components/parameters/privilege'
      - $ref: '#/components/parameters/deleteMode'
      responses:
        '200':
          $ref: common.yaml#/components/responses/200SuccessResponse
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /api/v2/grants/{granteeType}/{granteeName}:
    get:
      summary: List of Privileges Associated With This Grantee Type and Name
      description: List the roles and privileges granted to the specified grantee using the output of SHOW GRANTS TO
      operationId: listGrantsTo
      deprecated: true
      tags:
      - Grant
      parameters:
      - $ref: '#/components/parameters/granteeType'
      - $ref: '#/components/parameters/granteeName'
      - $ref: common.yaml#/components/parameters/showLimit
      responses:
        '200':
          description: successful
          headers:
            X-Snowflake-Request-ID:
              $ref: common.yaml#/components/headers/X-Snowflake-Request-ID
            Link:
              $ref: common.yaml#/components/headers/Link
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Grant'
              examples:
                Listgrantsto200Example:
                  summary: Default listGrantsTo 200 response
                  x-microcks-default: true
                  value:
                  - privileges:
                    - example_value
                    grant_option: true
                    created_on: '2026-01-15T10:30:00Z'
                    grantee_type: example_value
                    grantee_name: example_value
                    securable_type: example_value
                    securable_name: example_value
                    granted_by_role_type: example_value
                    granted_by_name: example_value
        '202':
          $ref: common.yaml#/components/responses/202SuccessAcceptedResponse
        '400':
          $ref: common.yaml#/components/responses/400BadRequest
        '401':
          $ref: common.yaml#/components/responses/401Unauthorized
        '403':
          $ref: common.yaml#/components/responses/403Forbidden
        '404':
          $ref: common.yaml#/components/responses/404NotFound
        '405':
          $ref: common.yaml#/components/responses/405MethodNotAllowed
        '408':
          $ref: common.yaml#/components/responses/408RequestTimeout
        '409':
          $ref: common.yaml#/components/responses/409Conflict
        '410':
          $ref: common.yaml#/components/responses/410Gone
        '429':
          $ref: common.yaml#/components/responses/429LimitExceeded
        '500':
          $ref: common.yaml#/components/responses/500InternalServerError
        '503':
          $ref: common.yaml#/components/responses/503ServiceUnavailable
        '504':
          $ref: common.yaml#/components/responses/504GatewayTimeout
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  parameters:
    granteeName:
      name: granteeName
      description: String that specifies the name of the privilege grantee.
      required: true
      in: path
      schema:
        example: SYSADMIN
        type: string
    scopeName:
      name: scopeName
      description: String that specifies the name of resource that is the scope of an ALL/FUTURE privilege
      required: true
      in: path
      schema:
        example: MY_DB.MY_SC
        type: string
    securableType:
      name: securableType
      description: String that specifies the type of resource that is being secured by a privilege.
      required: true
      in: path
      schema:
        example: DATABASE
        type: string
    granteeType:
      name: granteeType
      description: String that specifies the type of resource that is the privilege grantee.
      required: true
      in: path
      schema:
        example: role
        type: string
        enum:
        - user
        - role
        - application-role
        - database-role
        - share
    privilege:
      name: privilege
      description: String that specifies a privilege to be revoked
      required: true
      in: path
      schema:
        example: SELECT
        type: string
    securableTypePlural:
      name: securableTypePlural
      description: String that specifies the plural of the type of resource that is being secured by an ALL/FUTURE privilege. Must be either "schemas" or any plural object type that can nest under a schema such as "tables"
      required: true
      in: path
      schema:
        example: tables
        type: string
    scopeType:
      name: scopeType
      description: String that specifies the type of resource that is the scope of an ALL/FUTURE privilege. Can only be DATABASE or SCHEMA
      required: true
      in: path
      schema:
        example: schema
        type: string
        enum:
        - database
        - schema
    deleteMode:
      name: deleteMode
      description: If "cascade", recursively revoke the grant from sub-grantees to which this privilege was re-granted. Acceptable values are "restrict" or "cascade".
      required: false
      in: query
      schema:
        type: string
        example: restrict
    bulkGrantType:
      name: bulkGrantType
      description: String that species whether this group privilege should be on ALL or FUTURE resources of the specified plural type
      required: true
      in: path
      schema:
        example: all
        type: string
        enum:
        - all
        - future
    securableName:
      name: securableName
      description: String that specifies the name of resource that is being secured by a privilege.
      required: true
      in: path
      schema:
        example: MY_DB
        type: string
  schemas:
    Grant:
      description: Properties of a grant that can be granted to a role or user.
      type: object
      properties:
        privileges:
          type: array
          description: Privilege type
          items:
            type: string
          example:
          - CREATE DATABASE
          - EXECUTE TASK
        grant_option:
          type: boolean
          description: Can grantee pass this privilege down?
          example: true
        created_on:
          type: string
          format: date-time
          example: '2026-01-15T10:30:00Z'
        grantee_type:
          type: string
          description: Entity type being granted to
          example: ROLE
        grantee_name:
          type: string
          description: Specific name of object being granted to
          example: ACCOUNTADMIN
        securable_type:
          type: string
          description: Type of object granted on
          example: ACCOUNT
        securable_name:
          type: string
          description: Name of specific object granted on (not name of privilege!)
          example: example_value
        granted_by_role_type:
          type: string
          description: Type of role that granted this privilege to this grantee
          example: ROLE
        granted_by_name:
          type: string
          description: The role that granted this privilege to this grantee
          example: SUBADMIN
  securitySchemes:
    KeyPair:
      $ref: common.yaml#/components/securitySchemes/KeyPair
    ExternalOAuth:
      $ref: common.yaml#/components/securitySchemes/ExternalOAuth
    SnowflakeOAuth:
      $ref: common.yaml#/components/securitySchemes/SnowflakeOAuth