Table: turbot_grant

A grant is the assignment of a permission to a Turbot user or group on a resource or resource group.

Examples

Basic info

select
  id,
  identity_status,
  identity_email,
  identity_profile_id,
  identity_trunk_title,
  level_title,
  resource_trunk_title
from
  turbot_grant;

List grants for an identity

select
  id,
  identity_email,
  identity_family_name,
  level_title,
  level_trunk_title,
from
  turbot_grant
where
  identity_email = 'xyz@gmail.com';

List SuperUser grants

select
  id,
  identity_email,
  identity_family_name,
  level_title,
  resource_trunk_title
from
  turbot_grant
where
  level_uri = 'tmod:@turbot/turbot-iam#/permission/levels/superuser';

List grants for inactive identities

select
  id,
  identity_email,
  identity_status,
  resource_trunk_title
from
  turbot_grant
where
  identity_status = 'Inactive';

Schema for turbot_grant

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
create_timestamp	timestamp with time zone		The create time of the grant.
filter	text		Filter used for this grant list.
id	bigint	=	Unique identifier of the grant.
identity_akas	jsonb		AKA (also known as) identifiers for the identity
identity_display_name	text		Display name of the identity.
identity_email	text		Email identity for the identity.
identity_family_name	text		Family name of the identity.
identity_given_name	text		Given name of the identity.
identity_last_login_timestamp	timestamp with time zone		Last login timestamp.
identity_profile_id	text		Profile id of the identity.
identity_status	text		Status of the identity.
identity_trunk_title	text		Full title (including ancestor trunk) of the grant identity.
level_title	text		The title of the level.
level_trunk_title	text		Full title (including ancestor trunk) of the level.
level_uri	text		The URI of the level.
resource_id	bigint		Unique identifier of the resource.
resource_trunk_title	text		Full title (including ancestor trunk) of the resource.
resource_type_trunk_title	text		Full title (including ancestor trunk) of the grant type.
resource_type_uri	text		URI of the resource type.
timestamp	timestamp with time zone		Timestamp when the grant was last modified (created, updated or deleted).
update_timestamp	timestamp with time zone		When the grant was last updated in Turbot.
version_id	bigint		Unique identifier for this version of the identity.
workspace	text		Specifies the workspace URL.