Expanded task view capabilities for MONITOR, OPERATE, MONITOR EXECUTION, and OWNER privileges (Pending)

Attention

This behavior change is in the 2025_01 bundle.

For the current status of the bundle, refer to Bundle History.

Enabling this behavior change bundle expands the ability of roles with these privileges to view task information.

Before the change:

Some task information was unavailable to roles with MONITOR, OPERATE, MONITOR EXECUTION, and OWNERSHIP privileges.

After the change:

Task information available with MONITOR, OPERATE, MONITOR EXECUTION, and OWNERSHIP privileges is expanded.

The following tables describe the task information that is now available when this behavior change bundle is enabled.

MONITOR and OPERATE privileges

Before the change

After the change

SHOW TASKS

DESCRIBE TASK

INFORMATION_SCHEMA table functions

TASK_HISTORY

CURRENT_TASK_GRAPHS

COMPLETE_TASK_GRAPHS

QUERY_HISTORY , QUERY_HISTORY_BY_*

For serverless tasks:

✔ All queries

✔ Stored-procedure child queries that ran with caller’s rights.

❌ Stored-procedure child queries that ran with owner’s rights.

For user-managed tasks:

❌ Task privileges do not determine what a role can view in QUERY_HISTORY.

For serverless tasks:

✔ All queries

✔ Stored-procedure child queries that ran with caller’s rights.

❌ Stored-procedure child queries that ran with owner’s rights.

For user-managed tasks:

✔ Task queries and stored-procedure child queries.

❌ Stored-procedure child queries that ran with owner’s rights require at least MONITOR privileges on the warehouse. Task privileges do not grant this visibility.

Snowsight

Task details > Run History, and Monitoring > Task History > Task Runs

Task details > Graph, and Monitoring > Task History > Task Graphs

MONITOR EXECUTION privilege

Before the change

After the change

SHOW TASKS

DESCRIBE TASK

INFORMATION_SCHEMA table functions

TASK_HISTORY

CURRENT_TASK_GRAPHS

COMPLETE_TASK_GRAPHS

QUERY_HISTORY , QUERY_HISTORY_BY_*

❌ Task privileges do not determine what a role can view in QUERY_HISTORY.

For serverless tasks:

✔ All queries

✔ Stored-procedure child queries that ran with caller’s rights.

❌ Stored-procedure child queries that ran with owner’s rights.

For user-managed tasks:

✔ Task queries and stored-procedure child queries.

❌ Stored-procedure child queries that ran with owner’s rights require at least MONITOR privileges on the warehouse. Task privileges do not grant this visibility.

Snowsight

Task details > Run History, and Monitoring > Task History > Task Runs

Task details > Graph, and Monitoring > Task History > Task Graphs

OWNERSHIP privilege

Before the change

After the change

SHOW TASKS

DESCRIBE TASK

INFORMATION_SCHEMA table functions

TASK_HISTORY

CURRENT_TASK_GRAPHS

COMPLETE_TASK_GRAPHS

QUERY_HISTORY , QUERY_HISTORY_BY_*

For serverless tasks:

✔ All queries

✔ Stored-procedure child queries that ran with caller’s rights.

❌ Stored-procedure child queries that ran with owner’s rights.

For user-managed tasks:

❌ Task privileges do not determine what a role can view in QUERY_HISTORY.

For serverless tasks:

✔ All queries

✔ Stored-procedure child queries that ran with caller’s rights.

❌ Stored-procedure child queries that ran with owner’s rights.

For user-managed tasks:

✔ Task queries and stored-procedure child queries.

❌ Stored-procedure child queries that ran with owner’s rights require at least MONITOR privileges on the warehouse. Task privileges do not grant this visibility.

Snowsight

Task details > Run History, and Monitoring > Task History > Task Runs

Task details > Graph, and Monitoring > Task History > Task Graphs

Ref: 1799