From the course: Intro to Snowflake for Devs, Data Scientists, Data Engineers

Unlock this course with a free trial

Join today to access over 24,600 courses taught by industry experts.

Role-based access control (RBAC): Part 2

Role-based access control (RBAC): Part 2

- Let's pick up where we left off. In the last part, we talked about how privileges, the ability to do something, can be assigned to roles and those roles can be assigned to users. An important thing to note is you can also assign roles to other roles, so you can have a hierarchy where the top roles inherit the privileges of roles lower down, but we're not going to show examples of that here. Now I want to talk about Snowflake's five other automatically generated roles in addition to account admin. These are org admin, security admin, user admin, sys admin, and public. To save time, I'm not going to cover org admin here. It's a role that can span multiple accounts, so it's unlikely you'll run into it in the wild. The easiest way to see what each of these roles does is to run the Show Grants To Role command. Let's start with security admin. You could see that this only has a handful of privileges, but these are powerful. They let the security admin set account level security policies…

Contents