Enable sharing from a Business critical account to a non-business critical account¶
By default, Snowflake does not allow sharing data with a direct share from a Business Critical to a non-Business Critical account. For more details, see Data sharing and Business Critical accounts.
To override this default setting, a user with a role granted the OVERRIDE SHARE RESTRICTIONS global privilege can specify the SHARE_RESTRICTIONS parameter for a specific share offered by their provider account.
Attention
Snowflake is not responsible for ensuring that HIPAA (and HITRUST) accounts who engage in data sharing have a signed BAA with each other; this is at the discretion of the accounts that are sharing data. Note that failure to have a signed BAA may impact the HIPAA (and HITRUST) compliance of both accounts, particularly the provider account.
Also, if you have Business Critical account, to maintain the expected level of data protection provided by Business Critical, we strongly recommend considering the following before requesting Snowflake to enable Secure Data Sharing with non-Business Critical accounts:
Do not share sensitive data with non-Business Critical accounts.
Consider creating a second, non-Business Critical account where you store less sensitive data and share this data with non-Business Critical accounts.
If you are using Tri-Secret Secure with your Business Critical account and you share data with other accounts, Snowflake treats the data access from these accounts as if the access occurred from within your own account. Specifically, granting access to the consumer account might require Snowflake to access the key management service on the cloud platform that hosts your Snowflake account.
These are only recommendations and are not enforced by Snowflake. The decision to share data is always at the discretion of the data provider and Snowflake does not assume any responsibility for data that is improperly shared.