CREATE AGGREGATION POLICY¶
Creates a new aggregation policy in the current/specified schema or replaces an existing aggregation policy.
After creating an aggregation policy, assign the aggregation policy to a table using an ALTER TABLE command or a view using an ALTER VIEW command.
- See also:
Syntax¶
CREATE [ OR REPLACE ] AGGREGATION POLICY [ IF NOT EXISTS ] <name>
AS () RETURNS AGGREGATION_CONSTRAINT -> <body>
[ COMMENT = '<string_literal>' ]
Parameters¶
name
Identifier for the aggregation policy; must be unique for your schema.
The identifier value must start with an alphabetic character and cannot contain spaces or special characters unless the entire identifier string is enclosed in double quotes (e.g.
"My object"
). Identifiers enclosed in double quotes are also case-sensitive.For more details, see Identifier requirements.
body
SQL expression that determines the restrictions of an aggregation policy.
To define the constraints of the aggregation policy, use the SQL expression to call one or more of the following functions:
- NO_AGGREGATION_CONSTRAINT
When the policy body returns a value from this function, queries can return data from an aggregation-constrained table or view without restriction. For example, the body of the policy could call this function when an administrator needs to obtain unaggregated results from the aggregation-constrained table or view.
Call NO_AGGREGATION_CONSTRAINT without an argument.
- AGGREGATION_CONSTRAINT
When the policy body returns a value from this function, queries must aggregate data in order to return results. Use the MIN_GROUP_SIZE argument to specify how many records must be included in each aggregation group.
The syntax of the AGGREGATION_CONSTRAINT function is:
AGGREGATION_CONSTRAINT ( { MIN_GROUP_SIZE => <integer_expression> | MIN_ROW_COUNT => <integer_expression>, MIN_ENTITY_COUNT => <integer_expression> } )
Where:
MIN_GROUP_SIZE => integer_expression
Specifies how many rows or entities must be included in the groups returned by a query against the aggregation-constrained table or view.
There is a difference between passing a
1
and a0
as the argument to the function. Both require results to be aggregated.Passing a
1
also requires that each aggregation group contain at least one record from the aggregation-constrained table. So for outer joins, at least one record from the aggregation-constrained table must match a record from an unprotected table.Passing a
0
allows the query to return groups that consist entirely of records from another table. So for outer joins between an aggregation-constrained table and an unprotected table, a group could consist of records from the unprotected table that do not match any records in the aggregation-constrained table.
MIN_ROW_COUNT => integer_expression, MIN_ENTITY_COUNT => integer_expression
If you are using entity-level privacy with the aggregation policy, specifies how many rows and entities must be included in the groups returned by a query against the aggregation-constrained table or view. Do not use the
MIN_GROUP_SIZE
parameter when using these parameters. If you want to specify the number of rows or the number of entities, useMIN_GROUP_SIZE
alone.
The body of a policy cannot reference user-defined functions, tables, or views.
COMMENT = 'string_literal'
Adds a comment or overwrites an existing comment for the aggregation policy.
Access control requirements¶
A role used to execute this SQL command must have the following privileges at a minimum:
Privilege |
Object |
Notes |
---|---|---|
CREATE AGGREGATION POLICY |
Schema |
Note that operating on any object in a schema also requires the USAGE privilege on the parent database and schema.
For instructions on creating a custom role with a specified set of privileges, see Creating custom roles.
For general information about roles and privilege grants for performing SQL actions on securable objects, see Overview of Access Control.
For additional details on aggregation policy DDL and privileges, see Privileges and commands.
Usage notes¶
If you want to update an existing aggregation policy and need to see the current body of the policy, run the DESCRIBE AGGREGATION POLICY command or GET_DDL function.
Regarding metadata:
Attention
Customers should ensure that no personal data (other than for a User object), sensitive data, export-controlled data, or other regulated data is entered as metadata when using the Snowflake service. For more information, see Metadata fields in Snowflake.
Examples¶
Create an aggregation policy that requires queries to return groups of five or more rows:
CREATE AGGREGATION POLICY my_policy AS () RETURNS AGGREGATION_CONSTRAINT -> AGGREGATION_CONSTRAINT(MIN_GROUP_SIZE => 5);
Create an aggregation policy that allows a user with role admin
to return unaggregated results while requiring all other queries
to return groups of five or more rows:
CREATE AGGREGATION POLICY my_policy AS () RETURNS AGGREGATION_CONSTRAINT -> CASE WHEN CURRENT_ROLE() = 'ADMIN' THEN NO_AGGREGATION_CONSTRAINT() ELSE AGGREGATION_CONSTRAINT(MIN_GROUP_SIZE => 5) END;