steampipe plugin install turbot

Table: turbot_grant

A grant is the assignment of a permission to a Turbot user or group on a resource or resource group.

Examples

Basic info

select
id,
identity_status,
identity_email,
identity_profile_id,
identity_trunk_title,
level_title,
resource_trunk_title
from
turbot_grant;

List grants for an identity

select
id,
identity_email,
identity_family_name,
level_title,
level_trunk_title,
from
turbot_grant
where
identity_email = 'xyz@gmail.com';

List SuperUser grants

select
id,
identity_email,
identity_family_name,
level_title,
resource_trunk_title
from
turbot_grant
where
level_uri = 'tmod:@turbot/turbot-iam#/permission/levels/superuser';

List grants for inactive identities

select
id,
identity_email,
identity_status,
resource_trunk_title
from
turbot_grant
where
identity_status = 'Inactive';

Schema for turbot_grant

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
create_timestamptimestamp with time zoneThe create time of the grant.
filtertextFilter used for this grant list.
idbigint=Unique identifier of the grant.
identity_akasjsonbAKA (also known as) identifiers for the identity
identity_display_nametextDisplay name of the identity.
identity_emailtextEmail identity for the identity.
identity_family_nametextFamily name of the identity.
identity_given_nametextGiven name of the identity.
identity_last_login_timestamptimestamp with time zoneLast login timestamp.
identity_profile_idtextProfile id of the identity.
identity_statustextStatus of the identity.
identity_trunk_titletextFull title (including ancestor trunk) of the grant identity.
level_titletextThe title of the level.
level_trunk_titletextFull title (including ancestor trunk) of the level.
level_uritextThe URI of the level.
resource_idbigintUnique identifier of the resource.
resource_trunk_titletextFull title (including ancestor trunk) of the resource.
resource_type_trunk_titletextFull title (including ancestor trunk) of the grant type.
resource_type_uritextURI of the resource type.
timestamptimestamp with time zoneTimestamp when the grant was last modified (created, updated or deleted).
update_timestamptimestamp with time zoneWhen the grant was last updated in Turbot.
version_idbigintUnique identifier for this version of the identity.
workspacetextSpecifies the workspace URL.