When I was working with Snowflake on a project, it seemed security (assigning roles to users, assigning permissions etc.) is not as straight forward as it is in SQL Server. That’s why I bought the book Snowflake Security – Securing Your Snowflake Data Cloud, written by Ben Herzberg and Yoav Cohen, and published by Apress. The book itself is quite short – it is quite a niche topic – as it is only 185 pages long. This makes it quite digestible. I enjoyed the book, but in my opinion the chapter on authorization & data access control was a bit too theoretical and not enough practical. Since authorization was the exact reason I bought the book for, I would have liked more detailed examples on how to set-up a role hierarchy in Snowflake.
Anyway, the book is still practical and talks about many aspects of security in Snowflake. It talks about infrastructure (for example the different editions of Snowflake and time-travel), encryption, authentication (how to set up integration with Azure AD for example, or how to use MFA), authorization (again, a bit too theoretical about different access control methods), auditing & monitoring (a great long chapter with many examples queries on how to use the different system views and functions), data sharing and a final chapter about how you can use Snowflake to analyze security data.
I would definitely recommend the book for anyone who is going to be the “Snowflake DBA” at their company. You’ll learn many things about the different security aspects of Snowflake, and the book contains good example queries and even some tips on how to create a dashboard in Snowsight.
You can find the slidedeck for my Techorama session "Microsoft Fabric for Dummies" on github.
On Wednesday May 15th 2024 I will give a free webinar on MSSQLTips.com about Microsoft…
I loaded some built-in sample data from Wide World Importers into a Fabric warehouse. You…
It was great being at dataMinds Saturday 2024 this past weekend. A great crowd of…
Today I was having a nice discussion with some colleagues about Fabric and pricing/licensing came…
I recently purchased and read the book Deciphering Data Architectures - Choosing Between a Modern…
View Comments
I would recommend the Snowflake DBA training class too. The security model is really not unlike SQL Server with one exception - all objects are owned by roles, not users. It actually makes security simpler for the DBA. Roles serve two purposes: to aggregate permission, and aggregate users. The latter purpose is similar to what we do with AD groups.