Categories:

User & Security DDL (Users)

# DESCRIBE USER¶

Describes a user, including the current values for the user’s properties, as well as the default values.

DESCRIBE can be abbreviated to DESC.

## Syntax¶

DESC[RIBE] USER <name>


## Parameters¶

name

Specifies the identifier for the user to describe. If the identifier contains spaces or special characters, the entire string must be enclosed in double quotes. Identifiers enclosed in double quotes are also case-sensitive.

## Usage Notes¶

• Individual users can see their own properties by executing this command and specifying their own name. Only the role with the OWNERSHIP privilege on a user, or a higher role, can execute this command to see the properties of another user.

• The user object property MINS_TO_BYPASS_NETWORK_POLICY defines the number of minutes in which a user can access Snowflake without conforming to an existing network policy. The number of minutes can only be set by Snowflake (Default: NULL) and is intended as a temporary workaround to allow user access to Snowflake. To set a value for this property, please contact Snowflake Support.

• This command does not show the session parameter defaults for a user. Instead, use SHOW PARAMETERS IN USER.

• The user object property PASSWORD_LAST_SET_TIME defaults to Null if no password has been set yet. Values of 292278994-08-17 07:12:55.807 or 1969-12-31 23:59:59.999 indicate the password was set before the inclusion of this row. A value of 1969-12-31 23:59:59.999 can also indicate an expired password and the user needs to change their password.

• To post-process the output of this command, you can use the RESULT_SCAN function, which treats the output as a table that can be queried.