Schema:

ACCOUNT_USAGE

ROLES view¶

This Account Usage view can be used to query a list of all roles defined in the account. The data is retained for 365 days (1 year).

Columns¶

Column Name

Data Type

Description

ROLE_ID

NUMBER

Internal/system-generated identifier for the role.

CREATED_ON

TIMESTAMP_LTZ

Date and time (in the UTC time zone) when the role was created.

DELETED_ON

TIMESTAMP_LTZ

Date and time (in the UTC time zone) when the role was deleted.

NAME

VARCHAR

Name of the role.

COMMENT

VARCHAR

Comment for the role.

OWNER

VARCHAR

Role with the OWNERSHIP privilege on the object.

ROLE_TYPE

TEXT

Either ROLE, DATABASE_ROLE, or INSTANCE_ROLE.

ROLE_DATABASE_NAME

TEXT

Name of the database that contains the database role if the role is a database role.

ROLE_INSTANCE_ID

NUMBER

Internal/system-generated identifier for the class instance that the role belongs to.

OWNER_ROLE_TYPE

TEXT

The type of role that owns the object, for example ROLE. . If a Snowflake Native App owns the object, the value is APPLICATION. . Snowflake returns NULL if you delete the object because a deleted object does not have an owner role.

Usage notes¶

  • Latency for the view may be up to 120 minutes (2 hours).

  • The view does not include database roles for databases created from shares.

Internal Snowflake role for Snowsight¶

The first time Snowsight is accessed in an account, Snowflake creates the internal APPADMIN and WORKSHEETS_APP_RL roles to support the web interface. These roles are used to cache query results in an internal stage in your account. This cached data is encrypted and protected by the key hierarchy for the account. The limited privileges granted to these internal roles only allow Snowsight to access the internal stage to store those results. Thes roles cannot list objects in your account or access data in your tables. For more information, see Getting started with Snowsight.