turbot/snowflake
steampipe plugin install snowflake

Table: snowflake_user_grant - Query Snowflake User Grants using SQL

A User Grant in Snowflake is a permission set that is assigned to a user, allowing them to access and manipulate data within the Snowflake data warehouse. These grants define the level of access a user has to database objects and are crucial for maintaining data security and integrity. User Grants in Snowflake include permissions to perform various operations such as SELECT, INSERT, UPDATE, DELETE, and more on Snowflake objects.

Table Usage Guide

The snowflake_user_grant table provides insights into User Grants within Snowflake. As a Database Administrator or Security Analyst, you can explore user-specific grant details through this table, including what operations a user can perform, on which database objects, and the scope of these permissions. Use it to monitor and manage user permissions, ensuring appropriate access levels and maintaining data security within your Snowflake data warehouse.

Schema for snowflake_user_grant

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
accounttextThe Snowflake account ID.
created_ontimestamp with time zoneDate and time when the role was granted to the user/role.
granted_bytextName of the object that granted access on the user.
granted_totextType of the object. Only USER for this table.
regiontextThe Snowflake region in which the account is located.
roletextName of the role that has been granted to user.
usernametext=Name of the snowflake user.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- snowflake

You can pass the configuration to the command with the --config argument:

steampipe_export_snowflake --config '<your_config>' snowflake_user_grant