Schema:

ACCOUNT_USAGE

SECRETS view

This Account Usage view provides the secrets in your account.

Each row in this view corresponds to a different secret.

Columns

Column NameData TypeDescription
idNUMBERInternal, system-generated identifier for the secret.
nameVARCHARName of the secret.
schema_idNUMBERInternal, system-generated identifier for the schema of the secret.
schemaVARCHARSchema that the secret belongs to.
database_idNUMBERInternal, system-generated identifier for the database of the secret.
databaseVARCHARDatabase that the secret belongs to.
ownerVARCHARName of the role that owns the secret; NULL if it has been dropped.
owner_role_typeVARCHAR(13)

The type of role that owns the object, for example ROLE.
If a Snowflake Native App owns the object, the value is APPLICATION.
Snowflake returns NULL if you delete the object because a deleted object does not have an owner role.

secret_typeVARCHARThe type of secret (GENERIC_STRING, OAUTH2, or PASSWORD).
oauth_access_token_expiry_timestampTIMESTAMP_LTZ(6)The expiry time of the OAuth access token stored in the secret.
oauth_refresh_token_expiry_timestampTIMESTAMP_LTZ(6)The expiry time of the OAuth refresh token stored in the secret.
oauth_scopesVARCHARA comma-separated list of scopes to use when making a request from the OAuth server by a role with USAGE on the integration during the OAuth client credentials flow.
api_authentication_integration_nameVARCHARThe name of the API Authentication Integration used by this secret for authentication.
commentVARCHARComment for the secret.
created_onTIMESTAMP_LTZ(6)Date and time when the secret was created.
last_altered_onTIMESTAMP_LTZ(6)Date and time when the secret was last altered.
deleted_onTIMESTAMP_LTZ(6)Date and time when the secret was dropped.
algorithmVARCHARAlgorithm used to generate the key for a symmetric key secret.
key_lengthVARCHARLength of the key used for a symmetric key secret.

Usage notes

  • Latency for the view may be up to 120 minutes (2 hours).
  • Sensitive values that the secret stores, such as the values for username, password, and OAuth refresh token, are not reported in this view.