snowflake-enterprise-rbac
Configure Snowflake enterprise RBAC with system roles, custom role hierarchies, SSO/SCIM integration, and least-privilege access patterns. Use when implementing role-based access control, configuring SSO with SAML/OIDC, or setting up organization-level governance in Snowflake. Trigger with phrases like "snowflake RBAC", "snowflake roles", "snowflake SSO", "snowflake SCIM", "snowflake permissions", "snowflake access control". '
Profile →npx skills add jeremylongshore/claude-code-plugins-plus-skills --skill snowflake-enterprise-rbac --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Snowflake Enterprise RBAC ## Overview Configure enterprise-grade access control using Snowflake's system-defined roles, custom role hierarchies, SSO via SAML/OIDC, and SCIM for automated user provisioning. ## Snowflake System Roles | Role | Purpose | Use For | |------|---------|---------| | ACCOUNTADMIN | Top-level admin | Billing, resource monitors, replication | | SECURITYADMIN | Security management | Users, roles, grants, network policies | | SYSADMIN | Object management | Databases, warehouses, schemas, tables | | USERADMIN | User management | Create users and roles | | PUBLIC | Default for all users | Minimal access, applied automatically | **Best Practice:** Never use ACCOUNTADMIN as a default role. Create custom roles and grant them to SYSADMIN. ## Instructions ### Step 1: Design Custom Role Hierarchy ```sql -- Functional roles (what people do) CREATE ROLE DATA_ENGINEER; CREATE ROLE DATA_ANALYST; CREATE ROLE DATA_SCIENTIST; CREATE ROLE BI_VIEWER; CREATE ROLE APP_SERVICE; -- Service accounts -- Access roles (what they can access) CREATE ROLE RAW_DATA_READER; CREATE ROLE CURATED_DATA_READER; CREATE ROLE CURATED_DATA_WRITER; CREATE ROLE GOLD_DATA_READER; -- Role hierarchy (bo
- Overview
- Snowflake System Roles
- Instructions
- Step 1: Design Custom Role Hierarchy
- Step 2: Grant Object Privileges
- Step 3: Configure SSO with SAML
- Step 4: Configure SCIM for Automated User Provisioning
- Step 5: Audit Role Grants
- RBAC Checklist
- Error Handling
- Resources
- Next Steps
What does the snowflake-enterprise-rbac skill do?
Configure Snowflake enterprise RBAC with system roles, custom role hierarchies, SSO/SCIM integration, and least-privilege access patterns. Use when implementing role-based access control, configuring SSO with SAML/OIDC, or setting up organization-level governance in Snowflake. Trigger with phrases like "snowflake RBAC", "snowflake roles", "snowflake SSO", "snowflake SCIM", "snowflake permissions", "snowflake access control". '
How do I install it?
Run `npx skills add jeremylongshore/claude-code-plugins-plus-skills --skill snowflake-enterprise-rbac --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From jeremylongshore/claude-code-plugins-plus-skills, a repository with 2,630 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.