Before ingesting Amazon Redshift metadata into Dawiso, prepare your account for authentication by configuring an Amazon Redshift group and granting it the necessary permissions.
Dawiso queries INFORMATION_SCHEMA views to retrieve metadata for your assets.
Create a group
Create a new group using the following statement:
CREATE GROUP dawiso_integration_group;
- If you choose a different group name, make sure to replace it in all following example statements.
Create a user
Create a new user secured with a strong password and add the user to the newly created group:
CREATE USER dawiso_integration_user password 'my_password' IN GROUP dawiso_integration_group;
- Make sure to replace
my_passwordwith a secure password.
Grant permissions to the group
Use these statements to grant necessary permissions to INFORMATION_SCHEMA views for all object types scanned into Dawiso:
GRANT temp ON DATABASE <my_database> TO GROUP dawiso_integration_group;
GRANT usage on schema information_schema TO GROUP dawiso_integration_group;
GRANT SELECT ON information_schema.key_column_usage TO GROUP dawiso_integration_group;
GRANT SELECT ON information_schema.table_constraints TO GROUP dawiso_integration_group;
GRANT SELECT ON information_schema.routines TO GROUP dawiso_integration_group;
GRANT SELECT ON ALL TABLES IN SCHEMA pg_catalog TO GROUP dawiso_integration_group;
GRANT ALL ON ALL PROCEDURES IN SCHEMA information_schema TO GROUP dawiso_integration_group;
GRANT ALL ON ALL FUNCTIONS IN SCHEMA information_schema TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.svv_all_schemas TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.svv_table_info TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.svv_all_columns TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.svv_redshift_databases TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.svv_external_tables TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.svv_tables TO GROUP dawiso_integration_group;
GRANT SELECT ON pg_catalog.pg_proc TO GROUP dawiso_integration_group;
GRANT usage ON SCHEMA <my_schema> TO GROUP dawiso_integration_group;
GRANT SELECT ON ALL TABLES IN SCHEMA <my_schema> TO GROUP dawiso_integration_group;
GRANT ALL ON ALL PROCEDURES IN SCHEMA <my_schema> TO GROUP dawiso_integration_group;
GRANT ALL ON ALL FUNCTIONS IN SCHEMA <my_schema> TO GROUP dawiso_integration_group;
Make sure to replace the following values:
<my_database>with your real database name.<my_schema>with your real schema name.
Repeat this setup for every database and schema you want to ingest to Dawiso.