fix: support multiple grant_privilege_to_role resources on the same role

[sfc-gh-ngaberel]

When using two grant_privileges_to_role resources for the same role, they conflict with each other and try to delete each other’s grants. This makes managing permissions difficult as grants for a single role have to be managed in a single place, no modularity is possible.

The following snippet will consistently drift:

resource "snowflake_role" "r" {
	name = "testrole"
}

resource "snowflake_grant_privileges_to_role" "g1" {
	role_name  = snowflake_role.r.name
	privileges = ["CREATE ACCOUNT", "CREATE ROLE"]
	on_account = true
}

resource "snowflake_grant_privileges_to_role" "g2" {
	role_name  = snowflake_role.r.name
	privileges = ["IMPORT SHARE", "MANAGE GRANTS"]
	on_account = true
}

Test Plan

• new acceptance test

References

[github-actions]

Integration tests failure for 757997d23cf04f9ee1abecb0588ebb28f22e49a5

[github-actions]

Integration tests failure for 5da4e292fd47962203dd0aff4fb3854c8b7252f7

[github-actions]

Integration tests success for 4df4f62947561c8fe13a0ea99487ff760a6b88c2