From the course: Intro to Snowflake for Devs, Data Scientists, Data Engineers
Unlock this course with a free trial
Join today to access over 24,600 courses taught by industry experts.
Role-based access control (RBAC): Part 2 - Snowflake Tutorial
From the course: Intro to Snowflake for Devs, Data Scientists, Data Engineers
Role-based access control (RBAC): Part 2
- Let's pick up where we left off. In the last part, we talked about how privileges, the ability to do something, can be assigned to roles and those roles can be assigned to users. An important thing to note is you can also assign roles to other roles, so you can have a hierarchy where the top roles inherit the privileges of roles lower down, but we're not going to show examples of that here. Now I want to talk about Snowflake's five other automatically generated roles in addition to account admin. These are org admin, security admin, user admin, sys admin, and public. To save time, I'm not going to cover org admin here. It's a role that can span multiple accounts, so it's unlikely you'll run into it in the wild. The easiest way to see what each of these roles does is to run the Show Grants To Role command. Let's start with security admin. You could see that this only has a handful of privileges, but these are powerful. They let the security admin set account level security policies…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.