Introduction

• Snowflake combines both Role-based Access Control (RBAC) and

Discretionary Access Control (DAC) models to provide a robust
access control framework that offers both scalability and granularity at
object level.
• Account Level
• DB Level
• Schema Level
• Object Level

• Additionally, Snowflake also provides mechanism to control access

based on the data – Row Access Policies
Row Access Policy
• A Row Access Policy is a set of conditions defined on a snowflake
artifact that determines what data users are allowed to see.
• Row Access Policies are typically used to enforce security
requirements such as: Restricting access to sensitive or confidential
data based on user roles or attributes.
• Implementing data segmentation based on geographic location or
organizational hierarchy.
• Filtering rows based on dynamic criteria such as time-based access controls.
Row Access Policy Implementation

Step 1:

Grant Select Grant Select Grant Select

Grant Select
Create Role Privilege on Privilege on on
On Schema
DB Warehouse Table/View

C:\Users\enmxkxa\
Documents\xyz\Demo_R&A.

Step 2:

Create Row Access Policy Add Row Access policy to table/view