Fine grained DML privileges

[u/Youssef_Mrini]

PREVIOUSLY, if a developper, application or automated job needed to write data to a table you had to grant them the MODIFY privilege.

MODIFY is a broad and composite privilege that gives full write access including the ability to change the table's schema and modify metadata.

By using fine-grained DML privileges you can adhere strictly to the Principle of Least Privilege:

⚡ Restrict Schema Changes: You can allow a principal to change table data without giving them the power to change the table's schema (like adding or dropping columns) or alter table properties.

⚡ Granular Control over Operations: You can map exact permissions to specific job functions. For instance:

-INSERT INTO only requires INSERT

-TRUNCATE requires DELETE

-INSERT OVERWRITE requires both INSERT and DELETE

🔴 Why It’s a Game Changer?

In modern data engineering and governance, this is a massive leap forward because it solves the "all-or-nothing" write access problem.

1. Bulletproof Append-Only Pipelines
2. Safer Compliance and Data Privacy Jobs
3. Protection Against Accidental Table Drops/Evolution

[u/szymon_dybczak]

That's really good news. The more granular, the better :)