A user with the appropriate role runs the following commands to configure and activate network policies:
Afterward, user1 tries to sign in to Snowflake from IP address 3.3.3.10. Will the login succeed?
A user-level network policy is enforced for user1. In bar_policy, 3.3.3.10 is explicitly included in BLOCKED_IP_LIST; Snowflake applies blocked-list entries before allowed-list entries, even when the address also matches an allowed CIDR range. The login is therefore denied.
BLOCKED_IP_LIST
Community Discussion