[❄️ Snowflake Official] The removal of deprecated grant resources

[sfc-gh-jcieslak]

Hey, as you may have already seen in other threads, we announced that with the latest release we concluded grants redesign (more details).
During the grants redesign, we introduced a new set of resources that were made to fully replace the old grant resources. Right now, we don't support deprecated resources and recently we closed all the GitHub issues opened for the deprecated grant resources. As there's an alternative for every deprecated grant resource, we decided to remove the deprecated ones on June 26, 2024 (Wed). You still will be able to use the old grant resources afterward, but only with the older provider versions. Although this will be possible, we always recommend upgrading to the latest provider version as it's the most stable one containing more features, edge cases covered, and bugs resolved. The removal is only about grant resources, every other deprecated resource is planned to be removed in the next major version release (v1.0.0). To support the migration, we recently published a resource migration guide that describes the process of "no downtime" migration with the help of state manipulation tools.
We are looking forward to hear your thoughts. In case of any errors during the migration, please open a GitHub issue.
Here's the list of resources that we're planning to remove:

• snowflake_account_grant
• snowflake_database_grant
• snowflake_external_table_grant
• snowflake_failover_group_grant
• snowflake_file_format_grant
• snowflake_function_grant
• snowflake_integration_grant
• snowflake_masking_policy_grant
• snowflake_materialized_view_grant
• snowflake_pipe_grant
• snowflake_procedure_grant
• snowflake_resource_monitor_grant
• snowflake_role_grants
• snowflake_row_access_policy_grant
• snowflake_schema_grant
• snowflake_sequence_grant
• snowflake_stage_grant
• snowflake_stream_grant
• snowflake_table_grant
• snowflake_tag_grant
• snowflake_task_grant
• snowflake_user_grant
• snowflake_view_grant
• snowflake_warehouse_grant
• snowflake_grant_privileges_to_role

[ajbosco]

This is likely the most hostile change I have ever seen on a project towards users. Why have you made it more difficult for people who actually use your project?

[tabletcorry]

Agreed that this is an extremely challenging set of changes to migrate past. Especially frustrating are some of the other changes that appear to be resource name changes for no purpose other than the rename.

All of these changes require a tremendous amount of downstream work which Snowflake appears to be trivializing. State changes are easy to describe in a doc, but scale ver poorly, especially in large deployments.

Very disappointing to see in a previously stable terraform provider.

[jamiekt]

It would be useful if you could publish, for each deprecated resource, which resource one is supposed to use instead. Perhaps you have already published that somewhere, if so please could you provide a link to it?

[sfc-gh-jcieslak]

Hey, in our registry, we have a section where deprecated resources are listed with their counterparts. As the resources are no longer there, you have to go back to previous versions. Here's the list: https://registry.terraform.io/providers/Snowflake-Labs/snowflake/0.90.0/docs#currently-deprecated-resources. It may be not always correct as the old grant resources had multiple functions in one resource. For example, for granting privileges to shares, we now have snowflake_grant_privileges_to_share, and for granting privileges to account role snowflake_grant_privileges_to_account_role, but snowflake_table_grant (reference) resource had those two functions inside it. Thank you for bringing this up. I'll try to update this post, so It will contain the correct mappings and
we'll try to put this list in several other places so It won't be hidden as it is now. I'll let you know when it will be updated, but for now, try to use the registry link I put above.

[jamiekt]

Thank you @sfc-gh-jcieslak. I do think it would be a good idea to update this post with this information, or at least link to https://registry.terraform.io/providers/Snowflake-Labs/snowflake/0.90.0/docs#currently-deprecated-resources as the source of truth.