Titlebook: Snowflake Access Control; Mastering the Featur Jessica Megan Larson Book 2022 Jessica Megan Larson 2022 Snowflake Data Cloud.Role Based Acc

LAITY

经典

安抚

招致

Secondary Roles work, specifically for users that work cross-functionally and need to assume multiple roles. One of the solutions I mentioned was role inheritance, which we will cover in the next chapter. The other solution I mentioned is secondary roles.

carotid-bruit

Schema-Level Privilegesisions are more geared towards administrative roles, specialized roles like monitoring and logging, and setting up access for downstream data. In this chapter, we’re going to cover permissioning at the schema level, as shown in Figure 11-1.

大漩涡

残废的火焰

Column-Level Permissioning and Data Maskinget of rows they’re allowed to see. We could do this via row access policies, or using secure views combined with logic and/or a mapping table. In this chapter, we’re going to cover column-level permissioning and data masking, which we can visualize in the graphic shown in Figure 14-1.

Omnipotent

Secure Data Sharingcan structure our permissions so that the different levels work together, and how to best approach different problems. In this chapter, we’re going to cover data sharing across multiple accounts, which we can see in Figure 15-1.

Absenteeism

978-1-4842-8037-9Jessica Megan Larson 2022

脆弱吧

Assuming a Primary RoleWe’ve covered the different role paradigms, whether functional or team, and we’ve addressed the different privileges Snowflake provides. We’ve discussed how we can draft roles so that they are manageable and scalable. Now we’re going to cover how we actually use these roles in practice.