Getting Started with Organizations¶

Organization Creation¶

Snowflake customers never directly create an organization. For users who sign-up for a Snowflake account using the self-service option, an organization is automatically created with a system-generated name when the account is created. For entities who work directly with Snowflake personnel to set up accounts, Snowflake creates the organization to which the accounts belong using a custom name. In either case, users can create additional accounts that belong to the organization after it is created with the initial account.

Viewing the Name of Your Organization and Its Accounts¶

If you are the organization administrator, you can view the name of your organization and its accounts through the web interface or using SQL:

SQL

Execute a SHOW ORGANIZATION ACCOUNTS command.

Snowsight

Select Admin » Accounts. The organization name is listed above the account names.

Users with any role, not just ORGADMIN, can execute the CURRENT_ORGANIZATION_NAME function to return the organization of the current account.

Users with any role can also find the organization name and account name for a specific account that they have previously signed in to. See Finding the Organization and Account Name for an Account.

Changing the Name of Your Organization¶

If you want to change the name of an organization, for example to change a system-generated name to a more user-friendly one, contact Snowflake Support.

When you contact Snowflake Support, you must decide whether users can temporarily access accounts in the organization using the original account URL. If you keep the original account URL, it is automatically dropped after 90 days, at which time users must use the new account URL to access the account. If you want to drop the account URL before the 90 days expire, see Dropping an Account URL.

Enabling the ORGADMIN Role in an Account¶

An organization administrator uses an account with the ORGADMIN role enabled to work with data and features that pertain to all accounts in the organization. Once the ORGADMIN role is enabled, the organization administrator can log in to the account and use the role to perform organization-focused tasks like listing all accounts in the organization and creating new accounts.

Every organization has at least one account with the ORGADMIN role enabled. The organization administrator can use the ALTER ACCOUNT … SET IS_ORG_ADMIN command to enable the role in additional accounts.

For example, to enable the ORGADMIN role for existing account my_account1, the organization administrator can execute the following command from an account that already has the ORGADMIN role enabled:

USE ROLE orgadmin;

ALTER ACCOUNT my_account1 SET IS_ORG_ADMIN = TRUE;

Keep the following in mind when enabling the ORGADMIN role:

• By default, the ORGADMIN role can be enabled in a maximum of 8 accounts. If your organization requires more accounts with the ORGADMIN role, contact Snowflake Support.

• The ORGADMIN role cannot be enabled for a reader account.

Disabling the ORGADMIN Role¶

An organization administrator can use the ALTER ACCOUNT command to remove the ORGADMIN role from an account by setting the IS_ORG_ADMIN property to FALSE. For example:

ALTER ACCOUNT my_account1 SET IS_ORG_ADMIN = FALSE;

Assigning the ORGADMIN Role to a User or Role¶

Once enabled in an account, the ORGADMIN role can be granted to any user or role in the account by an ACCOUNTADMIN using the GRANT ROLE command. For more information about system roles and best practices for managing access control, see Access Control Considerations.

-- Assume the ACCOUNTADMIN role
USE ROLE accountadmin;

-- Grant the ORGADMIN role to a user
GRANT ROLE orgadmin TO USER user1;

-- Grant ORGADMIN to a role
GRANT ROLE orgadmin TO ROLE custom_role;

Dropping an Account URL¶

A new account URL is created for accounts when:

• Organizations are renamed.

• Organizations are merged.

• The account is moved from one organization to another.

If the original account URL is saved during one of these events, users can continue to use the original URL for 90 days, at which time it is dropped. If you want to drop the old URL before the 90 days expires, execute the ALTER ACCOUNT … DROP OLD ORGANIZATION URL command for the account.

For example, to drop the original account URL for an account that had its organization changed, execute:

USE ROLE orgadmin;

ALTER ACCOUNT my_account1 DROP OLD ORGANIZATION URL;