Manage privileges for auto-fulfillment¶

If you’re the organization administrator for an account (i.e., if you are using the ORGADMIN role), delegate the privileges required to set up Cross-Cloud Auto-Fulfillment (auto-fulfillment) to the ACCOUNTADMIN role in the accounts in your organization.

After delegating privileges to the ACCOUNTADMIN role, the ACCOUNTADMIN role can grant the MANAGE LISTING AUTO FULFILLMENT privilege to other roles in the account. See About listing providers.

You can delegate the privileges, revoke the privileges, and determine if the privileges have been delegated to a specific account. You can only delegate privileges to other accounts in your organization.

Delegate privileges to set up auto-fulfillment¶

To enable users with the ACCOUNTADMIN role to set up Cross-Cloud Auto-Fulfillment, call the system function named SYSTEM$ENABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT. The arguments for this system function are described below.

Calling this system function requires the ORGADMIN role.

SELECT SYSTEM$ENABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT(
  '<account_name>'
  );

Copy

Where:

account_name: Specifies the name of the account in which to enable users with the ACCOUNTADMIN role to manage Cross-Cloud Auto-Fulfillment. See Account Identifiers.

Check if an account can set up auto-fulfillment¶

To determine whether users with the ACCOUNTADMIN role in a specific account are permitted to set up auto-fulfillment, call the system function named SYSTEM$IS_GLOBAL_DATA_SHARING_ENABLED_FOR_ACCOUNT. The arguments for this system function are described below.

Calling this system function requires the ORGADMIN role.

SELECT SYSTEM$IS_GLOBAL_DATA_SHARING_ENABLED_FOR_ACCOUNT(
  '<account_name>'
  );

Copy

Where:

account_name: Specifies the name of the account for which you want to check if users with the ACCOUNTADMIN role can manage auto-fulfillment. See Account Identifiers.

Revoke privileges to set up auto-fulfillment¶

To prevent users with the ACCOUNTADMIN role from setting up Cross-Cloud Auto-Fulfillment, call the system function named SYSTEM$DISABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT. The arguments for this system function are described below.

Calling this system function requires the ORGADMIN role.

SELECT SYSTEM$DISABLE_GLOBAL_DATA_SHARING_FOR_ACCOUNT(
  '<account_name>'
  );

Copy

Where:

account_name: Specifies the name of the account in which to prevent users with the ACCOUNTADMIN role from manage Cross-Cloud Auto-Fulfillment. See Account Identifiers.