Expanded task view capabilities for MONITOR, OPERATE, MONITOR EXECUTION, and OWNER privileges (Pending)¶
Attention
This behavior change is in the 2025_01 bundle.
For the current status of the bundle, refer to Bundle History.
Enabling this behavior change bundle expands the ability of roles with these privileges to view task information.
- Before the change:
Some task information was unavailable to roles with MONITOR, OPERATE, MONITOR EXECUTION, and OWNERSHIP privileges.
- After the change:
Task information available with MONITOR, OPERATE, MONITOR EXECUTION, and OWNERSHIP privileges is expanded.
The following tables describe the task information that is now available when this behavior change bundle is enabled.
MONITOR and OPERATE privileges¶
Before the change |
After the change |
|
---|---|---|
✔ |
✔ |
|
✔ |
✔ |
|
INFORMATION_SCHEMA table functions |
||
❌ |
✔ |
|
❌ |
✔ |
|
❌ |
✔ |
|
For serverless tasks: ✔ All queries ✔ Stored-procedure child queries that ran with caller’s rights. ❌ Stored-procedure child queries that ran with owner’s rights. For user-managed tasks: ❌ Task privileges do not determine what a role can view in QUERY_HISTORY. |
For serverless tasks: ✔ All queries ✔ Stored-procedure child queries that ran with caller’s rights. ❌ Stored-procedure child queries that ran with owner’s rights. For user-managed tasks: ✔ Task queries and stored-procedure child queries. ❌ Stored-procedure child queries that ran with owner’s rights require at least MONITOR privileges on the warehouse. Task privileges do not grant this visibility. |
|
Snowsight |
||
Task details > Run History, and Monitoring > Task History > Task Runs |
❌ |
✔ |
Task details > Graph, and Monitoring > Task History > Task Graphs |
✔ |
✔ |
MONITOR EXECUTION privilege¶
Before the change |
After the change |
|
---|---|---|
✔ |
✔ |
|
✔ |
✔ |
|
INFORMATION_SCHEMA table functions |
||
✔ |
✔ |
|
✔ |
✔ |
|
✔ |
✔ |
|
❌ Task privileges do not determine what a role can view in QUERY_HISTORY. |
For serverless tasks: ✔ All queries ✔ Stored-procedure child queries that ran with caller’s rights. ❌ Stored-procedure child queries that ran with owner’s rights. For user-managed tasks: ✔ Task queries and stored-procedure child queries. ❌ Stored-procedure child queries that ran with owner’s rights require at least MONITOR privileges on the warehouse. Task privileges do not grant this visibility. |
|
Snowsight |
||
Task details > Run History, and Monitoring > Task History > Task Runs |
✔ |
✔ |
Task details > Graph, and Monitoring > Task History > Task Graphs |
✔ |
✔ |
OWNERSHIP privilege¶
Before the change |
After the change |
|
---|---|---|
✔ |
✔ |
|
✔ |
✔ |
|
INFORMATION_SCHEMA table functions |
||
✔ |
✔ |
|
✔ |
✔ |
|
✔ |
✔ |
|
For serverless tasks: ✔ All queries ✔ Stored-procedure child queries that ran with caller’s rights. ❌ Stored-procedure child queries that ran with owner’s rights. For user-managed tasks: ❌ Task privileges do not determine what a role can view in QUERY_HISTORY. |
For serverless tasks: ✔ All queries ✔ Stored-procedure child queries that ran with caller’s rights. ❌ Stored-procedure child queries that ran with owner’s rights. For user-managed tasks: ✔ Task queries and stored-procedure child queries. ❌ Stored-procedure child queries that ran with owner’s rights require at least MONITOR privileges on the warehouse. Task privileges do not grant this visibility. |
|
Snowsight |
||
Task details > Run History, and Monitoring > Task History > Task Runs |
✔ |
✔ |
Task details > Graph, and Monitoring > Task History > Task Graphs |
✔ |
✔ |
Ref: 1799