IssueTracker

What would you like to accomplish:

I would like to have an option in Cloud Spanner (PostgreSQL) that allows you to grant the ‘CREATE’ permission to a ROLE in order to be able to create new tables through PostgreSQL queries under the scope of FGAC controls.

How this might work:

Whenever users attempt to grant the CREATE permission to a ROLE using ‘GRANT CREATE TO <ROLE>’, the following error message is displayed: Error parsing Spanner DDL statement. This is because CREATE is not read as another permission to grant, as per the official documentation, which shows that the only permissions users are allowed to grant are: SELECT, INSERT, UPDATE.

It is also not a feasible option to create tables through PostgreSQL queries as ‘CREATE’ is not a recognised statement.

With the information above, we would like for Cloud Spanner to have ‘CREATE’ read as another statement.