Announcing Queries (alpha)

[spyglass-software]

Want to get more insight into who can access what?

Today we're introducing a handful of queries you can run to better understand your access structure.

We'll go through a few of those here, but run spyglass query for a full list of supported queries.

Prerequisites

See How do I set up the CLI? #43

You'll need the account-id from this step handy to run the following command.

Get Users Who Can Access an Object (table, view, etc.)

Run spyglass query:object-users <account-id> <object-id>.

Example run:

spyglass query:object-users skigdyn-wu58851 acme.prod.call_center

Example output:

 Username        Privilege Role Chain                                       
 ─────────────── ───────── ──────────────────────────────────────────────── 
 charles_stevens select    customer_support -> acme_prod_call_center_reader 
 chris_satchel   select    customer_support -> acme_prod_call_center_reader 
 chuck_stuart    select    customer_support -> acme_prod_call_center_reader 
 cindy_saveur    select    customer_support -> acme_prod_call_center_reader 
 earl_cruch      select    engineering -> acme_prod_call_center_reader      
 echo_carson     select    engineering -> acme_prod_call_center_reader      
 efram_clancy    select    engineering -> acme_prod_call_center_reader

Get a User's Role Hierarchy

Run spyglass query:user-roles<account-id> <username>.

Example run:

spyglass query:user-roles skigdyn-wu58851 chuck_stuart

Example output:

├─ customer_support
│  ├─ acme_prod_call_center_reader
│  ├─ acme_prod_catalog_returns_reader
│  ├─ acme_prod_catalog_sales_reader
│  ├─ acme_prod_customer_address_reader
│  ├─ acme_prod_customer_reader
│  ├─ acme_prod_store_returns_reader
│  ├─ acme_prod_store_sales_reader
│  ├─ acme_prod_web_returns_reader
│  └─ acme_prod_web_sales_reader
└─ sales_engineering