☁️ Amazon Redshift

-- Margin user/group details--------------
SET margin_password = '<a secure password>';
SET margin_database = '<database>';                -- e.g. 'analytics'
SET source_schema   = '<schema>';                  -- e.g. 'public'
SET source_table    = '<table>';                   -- e.g. 'events'

-- Create Margin user and group
CREATE USER margin_user PASSWORD '${margin_password}';
CREATE GROUP margin_role;
ALTER GROUP margin_role ADD USER margin_user;

-- Grant access to the source data
GRANT SELECT ON ALL TABLES IN SCHEMA ${source_schema} TO GROUP margin_role;

-- For specific tables only
GRANT SELECT ON TABLE ${source_schema}.${source_table} TO GROUP margin_role;

-- Set up default privileges for future tables
ALTER DEFAULT PRIVILEGES IN SCHEMA ${source_schema} 
GRANT SELECT ON TABLES TO GROUP margin_role;

-- If you need to restrict access to sensitive data, create a filtered view
CREATE OR REPLACE VIEW margin.secure_${source_table}_view AS
SELECT
    id,
    event_name,
    timestamp,
    non_sensitive_column1,
    non_sensitive_column2
    -- Omit sensitive columns like PII, financial data, etc.
FROM ${source_schema}.${source_table};

-- Grant access to the view
GRANT SELECT ON margin.secure_${source_table}_view TO GROUP margin_role;