QuestionQ60

Manage and administer Snowflake accounts, data security, and governance

A development team has created a new schema for a new project. The developers hold the DEV_TEAM role, which was configured with these statements:

USE ROLE SECURITYADMIN;  
CREATE ROLE DEV_TEAM;  
GRANT USAGE, CREATE SCHEMA ON DATABASE DEV_DB01 TO ROLE DEV_TEAM;  
GRANT USAGE ON WAREHOUSE DEV_WH TO ROLE DEV_TEAM;  

Each team member's access is configured with the following statements:

USE ROLE SECURITYADMIN;  
CREATE ROLE JDOE_PROFILE;  
CREATE USER JDOE LOGIN_NAME = ’JDOE’ DEFAULT_ROLE=’JDOE PROFILE’;  
GRANT ROLE JDOE_PROFILE TO USER JDOE;  
GRANT ROLE DEV_TEAM TO ROLE JDOE_PROFILE;  

New tables created by any developer cannot be accessed by the team as a whole. How can an Administrator resolve this issue?

Explanation

Future grants define the initial privileges automatically granted to a specified role when new objects of the specified type are created in a schema or database. Granting the required future table privileges to DEV_TEAM makes subsequently created tables accessible through that shared role. A managed-access schema centralizes grant decisions but does not itself grant DEV_TEAM privileges on the tables.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!