Table: snowflake_user_grant - Query Snowflake User Grants using SQL

A User Grant in Snowflake is a permission set that is assigned to a user, allowing them to access and manipulate data within the Snowflake data warehouse. These grants define the level of access a user has to database objects and are crucial for maintaining data security and integrity. User Grants in Snowflake include permissions to perform various operations such as SELECT, INSERT, UPDATE, DELETE, and more on Snowflake objects.

Table Usage Guide

The snowflake_user_grant table provides insights into User Grants within Snowflake. As a Database Administrator or Security Analyst, you can explore user-specific grant details through this table, including what operations a user can perform, on which database objects, and the scope of these permissions. Use it to monitor and manage user permissions, ensuring appropriate access levels and maintaining data security within your Snowflake data warehouse.

Schema for snowflake_user_grant

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account	text	=, !=, ~~, ~~, !~~, !~~	The Snowflake account ID.
created_on	timestamp with time zone		Date and time when the role was granted to the user/role.
granted_by	text		Name of the object that granted access on the user.
granted_to	text		Type of the object. Only USER for this table.
region	text		The Snowflake region in which the account is located.
role	text		Name of the role that has been granted to user.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
username	text	=	Name of the snowflake user.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- snowflake

You can pass the configuration to the command with the --config argument:

steampipe_export_snowflake --config '<your_config>' snowflake_user_grant