Snowflake の Programmatic access tokens で Tableau Cloud へのワークブックのパブリッシュから抽出更新までを試してみた

USE ROLE SYSADMIN;
CREATE OR REPLACE DATABASE sampledb;
USE SCHEMA sampledb.public;

CREATE OR REPLACE TABLE CUSTOMERS (
    CUSTOMER_ID INT,
    FIRST_NAME STRING,
    LAST_NAME STRING,
    EMAIL STRING,
    SIGNUP_DATE DATE
);

INSERT INTO CUSTOMERS (CUSTOMER_ID, FIRST_NAME, LAST_NAME, EMAIL, SIGNUP_DATE) VALUES
(1, 'Taro', 'Yamada', 'taro.yamada@example.com', '2023-01-15'),
(2, 'Hanako', 'Suzuki', 'hanako.suzuki@example.com', '2023-02-20'),
(3, 'John', 'Smith', 'john.smith@example.com', '2023-03-10'),
(4, 'Emma', 'Tanaka', 'emma.tanaka@example.com', '2023-04-05'),
(5, 'Kenta', 'Kobayashi', 'kenta.kobayashi@example.com', '2023-05-01');

USE ROLE USERADMIN;
--ロールを作成
CREATE ROLE tableu_role;
--SYSADMINに紐づけ
USE ROLE SECURITYADMIN;
GRANT ROLE tableu_role TO ROLE SYSADMIN;
--仮想ウェアハウスの使用権限を与える
GRANT USAGE ON WAREHOUSE COMPUTE_WH TO ROLE tableu_role; 
--テーブルの参照権限を与える
GRANT USAGE ON DATABASE sampledb TO ROLE tableu_role;
GRANT USAGE ON SCHEMA sampledb.public TO ROLE tableu_role;
GRANT SELECT ON ALL TABLES IN SCHEMA sampledb.public TO ROLE tableu_role;

--ユーザー作成
USE ROLE USERADMIN;
CREATE USER tableau_user
    DEFAULT_ROLE = PUBLIC
    TYPE = SERVICE;
--ユーザーがTableau用ロールを使用できるようにする
USE ROLE SECURITYADMIN;
GRANT ROLE tableu_role TO USER tableau_user;

USE ROLE SECURITYADMIN;
CREATE NETWORK POLICY IF NOT EXISTS tableau_user_net_policy
    ALLOWED_IP_LIST = ('141.163.208.0/23','xx.xx.xx.xx');
--ユーザーにネットワークポリシーを適用
ALTER USER tableau_user SET NETWORK_POLICY = tableau_user_net_policy;

ALTER USER tableau_user ADD PROGRAMMATIC ACCESS TOKEN  tableau_token
  days_to_expiry = 365 -- アクセストークンの有効期限：最大365日
  role_restriction = 'TABLEAU_ROLE'; 

INSERT INTO CUSTOMERS (CUSTOMER_ID, FIRST_NAME, LAST_NAME, EMAIL, SIGNUP_DATE) VALUES
(6, 'Satoshi', 'Nakamoto', 'satoshi.nakamoto@example.com', '2023-06-12'),
(7, 'Aiko', 'Fujimoto', 'aiko.fujimoto@example.com', '2023-07-03'),
(8, 'David', 'Lee', 'david.lee@example.com', '2023-08-21'),
(9, 'Naoko', 'Inoue', 'naoko.inoue@example.com', '2023-09-15'),
(10, 'Carlos', 'Garcia', 'carlos.garcia@example.com', '2023-10-01');