Snowflake RBAC Patterns

Overview

This skill is a router for designing Snowflake Role-Based Access Control. It helps you pick a role hierarchy that fits your account, then routes to focused sub-flows for each layer (account roles, environment admins, domain admins, database access roles, schema access roles) and cross-cutting concerns (personas, warehouses, secondary roles, policy roles).

If you are new to RBAC, start with architecture-patterns/INSTRUCTIONS.md to decide which layers your organization actually needs. Most accounts do not need all six.

When to Use

Use this skill when you need to:

• Design a fresh RBAC hierarchy for a new Snowflake account.
• Refactor an existing role mess into a clean access-role pattern.
• Create read/write/create roles for databases or schemas.
• Decide between functional (persona) roles and data-product access roles.
• Reference roles correctly in masking or row access policies.

When NOT to Use