Snowflake Database – Managing User Access Control and More

Snowflake 的访问控制方法结合了自由访问控制 (DAC) 的各个方面，其中每个对象都有一个所有者，所有者可以反过来授予对该对象的访问权限。还包括基于角色的访问控制 (RBAC) 的方面，其中将访问权限分配给角色，而角色又分配给用户。

为了理解 Snowflake 中的访问控制，需要一些关键概念。这些包括：

安全对象：可以授予访问权限的实体。

角色：可以授予特权的实体。角色依次分配给用户。请注意，角色也可以分配给其他角色，创建角色层次结构，这是在 Snowflake 中需要理解的关键概念

权限：对对象执行某些操作的能力。可以使用多个不同的权限来控制授予的访问权限。

用户：Snowflake 识别的用户身份，无论是与个人还是应用程序相关联。

在 Snowflake 基于角色的访问模型中，通过分配给角色的权限允许访问安全对象，而角色又分配给其他角色或用户。此外，每个安全对象都有一个可以授予其他角色访问权限的所有者。该模型与基于用户的访问控制模型不同，后者将权限和特权分配给每个用户或用户组。Snowflake 模型旨在提供大量的控制和灵活性。

完成本课程后，您将对这些概念以及更多内容有一个完整的理解。

Genre: eLearning | MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz
Language: English | Size: 1.33 GB | Duration: 3h 3m
Become an expert with Snowflake access control including users, roles, role-based access, privileges and more

What you’ll learn
User Access Management
Roles and Role Hierarchy
Role-based Access
Privileges and their scope to objects and assignment to roles
Quick ways to improve your Snowflake user access security
Column Security (Data Masking)
Many useful queries

Description
Snowflake’s approach to access control combines aspects from Discretionary Access Control (DAC) where each object has an owner, who can in turn grant access to that object. Also included are aspects from Role-based Access Control (RBAC) where access privileges are assigned to roles, which are in turn assigned to users.

There are key concepts that are necessary in order to understand access control in Snowflake. These include:

Securable objects: Entities to which access can be granted.

Roles: An entity to which privileges can be granted. Roles are in turn assigned to users. Note that roles can also be assigned to other roles, creating a role hierarchy which is a critical concept to understand in Snowflake

Privileges: The ability to perform some action on an object. Multiple distinct privileges may be used to control the granularity of access granted.

Users: A user identity recognized by Snowflake, whether associated with a person or application.

In the Snowflake role-based access model, access to securable objects is allowed via privileges assigned to roles, which are in turn assigned to other roles or users. In addition, each securable object has an owner that can grant access to other roles. This model differs from user-based access control models, where rights and privileges are assigned to each user or group of users. The Snowflake model is designed to provide a significant amount of both control and flexibility.

After completing this course you will have a complete understanding of these concepts and more.

Who this course is for:
Snowflake developers
Snowflake administrators
Snowflake architects