new snowflake.RoleGrants('snowflake_user_reader_role_grant', {
  roleName: readRole.name,
  roles: ['SYSADMIN'],
  users: [readUser.name],
});