Schema Secure

Schema Secure’s Access Roles app simplifies and automates access management in Snowflake. By linking database roles directly to functional roles, it strengthens security, reduces manual errors, and promotes compliance with industry best practices.

<p><br/></p>

This is a Snowflake Native App that creates schema access roles (as database roles) from either Streamlit or a stored procedure `CORE.SET_UP_SCHEMA_ACCESS_ROLES(QUALIFIED_TARGET_SCHEMA_NAMES ARRAY)`.

<p><br/></p>

There are three access roles created for each schema:

- read-only role: has the read/usage privileges on all current and future objects in a schema
- read/create role: inherits the read-only role and has the `CREATE <object type> ON SCHEMA <schema name>` privileges for most object types
- schema owner role: inherits the read/create role and has `OWNERSHIP` on the schema (this role is also granted to `SYSADMIN`, following Snowflake best practices)

<p><br/></p>

These schema access roles allow you to control access to schemas by simply granting them to functional roles. Then, as new objects are created or new object types are released by Snowflake, the privileges these access roles contain will flow downstream to the functional roles which inherit them.

<p><br/></p>

Example:

-- Create the schema access roles and grant them their privileges<br/>CALL CORE.SET_UP_SCHEMA_ACCESS_ROLES(['ACCOUNTING.TAX', 'ANALYTICS_DEV_DB.WEB_EVENTS_STAGE']);

<p><br/></p>

Schema Secure requires some setup in order to create the schema access roles. Please refer to the README ("Settings" -> "About" -> "Setup" in the Streamlit) to complete the required setup.

<p><br/></p>

The free trial will allow you to set up schema access roles for 1 schema, enabling you to preview the functionality and see the power of establishing this re-usable foundation.

原始信息汇总

Schema Secure 数据集概述

概述

Schema Secure 是一款 Snowflake 原生应用，用于简化和自动化 Snowflake 中的访问管理。通过将数据库角色直接与功能角色关联，增强安全性、减少手动错误并符合行业最佳实践。

功能

• 为每个模式创建三种访问角色：
  • 只读角色：拥有模式中所有当前和未来对象的读取/使用权限。
  • 读/创建角色：继承只读角色，并拥有大多数对象类型的创建权限。
  • 模式所有者角色：继承读/创建角色，并拥有模式的所有权（该角色也会授予 SYSADMIN）。

业务需求

• 数据治理：提供透明且可审计的角色管理工作流，确保所有访问均受控并记录。
• 操作效率：自动化数据库角色的创建和分配，显著减少设置时间。
• 可扩展的角色管理：支持从小团队到大型多部门企业的角色分配。
• 安全与合规：通过明确的基于角色的权限防止未经授权的访问。

使用示例

• 创建模式访问角色并授予权限： sql CALL CORE.SET_UP_SCHEMA_ACCESS_ROLES([ACCOUNTING.TAX, ANALYTICS_DEV_DB.WEB_EVENTS_STAGE]);

安全

• 已完成 Snowflake 安全审查。
• 数据受 Snowflake 基于角色的访问控制保护。

类别

• 身份
• 安全

联系方式

• 销售：[e-mail]
• 支持：[e-mail]

关于 Schema Secure

Schema Secure, LLC 拥有 6 年以上的 Snowflake 终端用户和管理员经验，致力于提供工具使 Snowflake 权限管理简单、可扩展且安全。