Creating input tables accessible by multiple account roles
Creating input tables accessible by multiple account roles including receiving, from a client computing system by a data visualizer, a request to create an input table at a destination location on a cloud-based data warehouse, wherein the request is associated with a first account role; determining, by the data visualizer, that the first account role has access to the destination location based on a set of permissions associated with the destination location; and creating, on the cloud-based data warehouse by the data visualizer, the input table that inherits the set of permissions from the destination location on the cloud-based data warehouse.
1 . A method for creating input tables accessible by multiple account roles, the method comprising:
receiving, from a client computing system by a data visualizer residing on an intermediary computing system between the client computing system and a cloud-based data warehouse, a request to create an input table at a destination location on the cloud-based data warehouse, wherein the request is associated with a first account role assigned to a first user account;
determining, by the data visualizer, that the first account role has access to the destination location based on a set of permissions associated with the destination location; and
creating, on the cloud-based data warehouse by the data visualizer, the input table that inherits the set of permissions from the destination location on the cloud-based data warehouse.
2 . The method of claim 1 , further comprising:
recording the creation of the input table to an audit log using a data visualizer service account.
3 . The method of claim 1 , wherein the set of permissions associated with the destination location indicate that both the first account role and a second account role are authorized to write to the destination location.
4 . The method of claim 1 , wherein the input table created within the destination location on the cloud-based data warehouse is accessible by a second account role.
5 . The method of claim 4 , wherein the input table within the destination location is accessible to a user account assigned to the second account role and not assigned to the first account role.
6 . The method of claim 1 , wherein the request is received using an identity provider account, and wherein the identity provider account provides a first authentication token used to access the data visualizer and a second authentication token used to access the cloud-based data warehouse.
7 . The method of claim 1 , wherein determining that the first account role has access to the destination location comprises:
retrieving, from the cloud-based data warehouse, a set of destination locations accessible by the first account role;
presenting, on the client computing system, the set of destination locations accessible by the first account role; and
receiving a selection of the destination location from the set of destination locations accessible by the first account role.
8 . The method of claim 1 , wherein creating the input table that inherits the set of permissions from the destination location comprises generating a structured database statement in a query language targeting the cloud-based data warehouse to generate the input table within the destination location.
9 . The method of claim 1 , wherein the request comprises a name of at least one column to be created in the input table.
10 . The method of claim 1 , wherein the data visualizer is on an intermediary computing system between the client computing system and the cloud-based data warehouse.
11 . An apparatus for creating input tables accessible by multiple account roles, the apparatus residing on an intermediary computing system between a client computing system and a cloud-based data warehouse, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
receiving, from the client computing system, a request to create an input table at a destination location on the cloud-based data warehouse, wherein the request is associated with a first account role assigned to a first user account;
determining that the first account role has access to the destination location based on a set of permissions associated with the destination location; and
creating, on the cloud-based data warehouse, the input table that inherits the set of permissions from the destination location on the cloud-based data warehouse.
12 . The apparatus of claim 11 , wherein the computer program instructions further cause the apparatus to carry out the steps of:
recording the creation of the input table to an audit log using a data visualizer service account.
13 . The apparatus of claim 11 , wherein the set of permissions associated with the destination location indicate that both the first account role and a second account role are authorized to write to the destination location.
14 . The apparatus of claim 11 , wherein the input table created within the destination location on the cloud-based data warehouse is accessible by a second account role.
15 . The apparatus of claim 14 , wherein the input table within the destination location is accessible to a user account assigned to the second account role and not assigned to the first account role.
16 . The apparatus of claim 11 , wherein the request is received using an identity provider account, and wherein the identity provider account provides a first authentication token used to access a data visualizer and a second authentication token used to access the cloud-based data warehouse.
17 . The apparatus of claim 11 , wherein determining that the first account role has access to the destination location comprises:
retrieving, from the cloud-based data warehouse, a set of destination locations accessible by the first account role;
presenting, on the client computing system, the set of destination locations accessible by the first account role; and
receiving a selection of the destination location from the set of destination locations accessible by the first account role.
18 . The apparatus of claim 11 , wherein creating the input table that inherits the set of permissions from the destination location comprises generating a structured database statement in a query language targeting the cloud-based data warehouse to generate the input table within the destination location.
19 . The apparatus of claim 11 , wherein the request comprises a name of at least one column to be created in the input table.
20 . A computer program product for creating input tables accessible by multiple account roles, the computer program product disposed upon a computer readable storage medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:
receiving, from a client computing system by a data visualizer that intermediates between the client computing system and a cloud-based data warehouse, a request to create an input table at a destination location on the cloud-based data warehouse, wherein the request is associated with a first account role assigned to a first user account;
determining that the first account role has access to the destination location based on a set of permissions associated with the destination location; and
creating, on the cloud-based data warehouse, the input table that inherits the set of permissions from the destination location on the cloud-based data warehouse.