Why does snowflake restrict bulk grant on pipes?

Question

This question is for my knowledge.

I tried this "grant operate on all pipes in database raw_db to role ingestor_role;" which failed saying that bulk grants on type pipe is restricted.

But that works with "future pipes".

Whats the reason behind this restriction?

Answer 1

The GRANT doc's do mention bulk grants are not supported.

Note that bulk grants on pipes are not allowed.

I assume this is related to the fact pipes are "running" things, and the ambiguity "how do you apply each class of change" to pipes in different states. Not that I have seen support evidence for thus, but I assume there are states a pipe can be in, that some of the GRANTs you apply to them "are not allowed".

Where-as FUTURE pipes "grants" happen as you create the pipes, and you can only create one pipe at a time. So those are independent, and the meaning of each change would make sense in that initial state.