WAREHOUSE_GRANT ressource behavior

[bastgau]

Hello.

I have a question about the WAREHOUSE_GRANT resource. I'm using the last version.

- Installing snowflake-labs/snowflake v0.54.0...

I have an existing warehouse named : "WH_QUERY". The USAGE privilege is already given for the following role :

• SYSADMIN

For my new project, I plan to use terraform to manage the privileges and the objects attached to my project.

I initialize a new project and I plan, then I apply my terraform configuration.

The result is :

  # snowflake_warehouse_grant.warehouse_grant-dw_admin_pr03b will be created
  + resource "snowflake_warehouse_grant" "warehouse_grant-dw_admin_pr03b" {
      + enable_multiple_grants = false
      + id                     = (known after apply)
      + privilege              = "USAGE"
      + roles                  = [
          + "RL_B_00_DEV_MD_DE",
          + "RL_B_00_DEV_MN_DE",
          + "RL_B_00_DEV_SD_DE",
        ]
      + warehouse_name         = "WH_QUERY"
      + with_grant_option      = false
    }

Plan: 1 to add, 0 to change, 0 to destroy.

Without modifying my configuration, I execute a new terraform plan again.
And the new result is :

  # snowflake_warehouse_grant.warehouse_grant-dw_admin_pr03b will be updated in-place
  ~ resource "snowflake_warehouse_grant" "warehouse_grant-dw_admin_pr03b" {
        id                     = "WH_QUERY|||USAGE|RL_B_00_DEV_MN_DE,RL_B_00_DEV_MD_DE,RL_B_00_DEV_SD_DE|false"
      ~ roles                  = [
          - "SYSADMIN",
            # (3 unchanged elements hidden)
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

Is it a normal situation ?
If I do the similar experience with ROLE_GRANTS resource, the result is not identical and in the second case, there is no change during the second terraform plan.

Thanks for your help.

[bastgau]

After 6 months, I think that the situation is completely normal but it should be identical for the other GRANTS resources (ie. snowflake_table_grant).