Administering Snowflake

Administer Snowflake by using the Admin area of Snowsight. Use the Admin area to:

  • Understand the cost of using Snowflake.

  • Manage Snowflake warehouses.

  • Set up and view details about resource monitors.

  • Manage users and roles.

  • Administer Snowflake accounts in your organization.

  • Administer network policies and monitor session activity.

  • Set up payment and payout methods.

  • Review and accept the Provider and Consumer Terms of Service.

  • Set organization contacts for Snowflake security, privacy, and product notifications.

  • Connect to Snowflake partners to explore extended functionality.

Using the Admin Area

This section gives a brief overview of how to use the Admin area of Snowsight.

The Admin area includes the following:

Cost Management

The Admin » Cost Management area of Snowsight requires a warehouse. Snowflake recommends an X-Small warehouse for this purpose. Snowsight uses the default warehouse for your user profile.

For information about using pages in the Cost Management area, see:

Warehouses

The Warehouses page lets you view and manage your Snowflake warehouses. The Warehouses page provides a detailed table of your warehouses.

This section provides a brief overview of how to navigate and use the Warehouses page.

Interface

Description

Filter warehouses

In the upper-right corner of the page, search and filter the table of your warehouses. You can filter by:

  • Status

    • All (default)

    • Suspended

    • Started

    • Resuming

    • Resizing

    • Suspending

  • Size

    • All (default)

    • X-Small

    • Small

    • Medium

    • Large

    • X-Large

    • 6X-Large

Create warehouse

In the upper-right corner of the page, select Warehouse to create a warehouse.

For assistive technology, the more button.

Warehouse menu

Each row of the warehouses table includes a menu of actions for the corresponding warehouse.

The warehouse menu lets you do the following:

  • Edit the warehouse. You can configure the following warehouse options:

    • Name

    • Size

    • Comment

    • Multi-cluster Warehouse

    • Mode

    • Clusters

    • Auto Resume

    • Auto Suspend

    • Suspend After (min)

  • Suspend or resume the warehouse.

  • Drop the warehouse.

  • Transfer ownership of the warehouse to another role.

For more information, Snowflake provides detailed technical documentation about warehouses.

The warehouses table includes the following columns:

  • Name

  • Status

  • Size

  • Clusters

  • Running

  • Queued

  • Owner

  • Created

To view additional details about a warehouse, select a warehouse in the table.

Warehouse Details

When you select a warehouse in the warehouses table, the warehouse details page appears.

This section provides a brief overview of how to navigate and use the warehouse details page.

Interface

Description

Basic details

Basic details about your warehouse are located at the top of the page. Hover over the details to view additional information.

For assistive technology, the more button.

Warehouse details menu

The warehouse details menu, located in the upper-right corner of the page, lets you do the following:

  • Edit the warehouse. You can configure the following warehouse options:

    • Name

    • Size

    • Comment

    • Multi-cluster Warehouse

    • Mode

    • Clusters

    • Auto Resume

    • Auto Suspend

    • Suspend After (min)

  • Suspend or resume the warehouse.

  • Drop the warehouse.

  • Transfer ownership of the warehouse to another role.

For more information, Snowflake provides detailed technical documentation about warehouses.

The warehouse details page includes the following sections:

  • Warehouse Activity

  • Details

  • Privileges

Warehouse Activity

The Warehouse Activity section provides a graph of activity over a period of time:

  • Hour

  • Day

  • Week

  • 2 Weeks (default)

Details

The Details section provides additional information about your warehouse, including:

  • The status of the warehouse.

  • The size of the warehouse.

  • Maximum and minimum number of clusters the warehouse can use.

  • The scaling policy.

  • The number of tasks that are running and queued.

  • The period of no activity before the warehouse is automatically suspended.

  • If the warehouse is suspended, whether to automatically resume the warehouse when needed.

  • The last time the warehouse resumed operation.

Privileges

Use the Privileges section to view, grant, and revoke privileges on the warehouse.

Users & Roles

The Users & Roles area of Snowsight includes two pages:

  • Users

  • Roles

This section provides a brief overview of how to navigate and use the Users & Roles area.

Interface

Description

Users and Roles pages

In the upper-left corner of the Users & Roles area, select the Users page (default) or the Roles page.

Users

The Users page lets you view and manage Snowflake users for your account. The Users page provides a detailed table of your users.

This section provides a brief overview of how to navigate and use the Users page.

Interface

Description

Filter users

In the upper-right corner of the page, search and filter the users table. You can filter by:

  • Owner

    • All (default)

    • (Empty)

    • A specific role, such as ACCOUNTADMIN.

  • Status

    • All (default)

    • (Empty)

    • Disabled

    • Enabled

    • Expired

    • Frozen

    • Locked

    • Temporary

Create user

In the upper-right corner of the page, select User to create a user.

For assistive technology, the more button.

User menu

Each row of the users table includes a menu of actions for the corresponding user.

The user menu lets you do the following:

  • Edit the user. You can configure the following user options:

    • User Name

    • Email

    • Comment

    • Login Name

    • Display Name

    • First Name

    • Last Name

    • Default Role

    • Default Warehouse

    • Default Namespace

  • Reset the user’s password.

  • Disable the user.

  • Drop the user.

  • Grant a role to the user.

  • Revoke a role from the user.

For more information, Snowflake provides detailed technical documentation about managing users.

Comment

If a user has a comment, the comment icon appears in the row for the corresponding user. To view the comment, hover over the comment icon.

The users table includes the following columns:

  • Name

  • Display Name

  • Status

  • Last Login

  • MFA (Multi-factor authentication)

  • Owner

To view additional details about a user, select a user in the table.

User Details

When you select a user in the users table, the user details page appears.

This section provides a brief overview of how to navigate and use the user details page.

Interface

Description

User details menu

The user details menu, located in the upper-right corner of the page, lets you do the following:

  • Edit the user. You can configure the following user options:

    • User Name

    • Email

    • Comment

    • Login Name

    • Display Name

    • First Name

    • Last Name

    • Default Role

    • Default Warehouse

    • Default Namespace

  • Reset the user’s password.

  • Disable the user.

  • Drop the user.

  • Grant a role to the user.

  • Revoke a role from the user.

For more information, Snowflake provides detailed technical documentation about managing users.

The user details page includes the following sections:

  • About

  • Privileges

  • Granted Roles

About

The About section provides additional information about your user, including:

  • The user’s login name.

  • The user’s display name.

  • The default role, warehouse, and namespace for the user.

  • Whether multi-factor authentication is enabled for the user.

  • The last time the user logged in.

  • The status of the user.

  • The number of roles granted to the user.

Privileges

Use the Privileges section to manage a user’s global Snowflake privileges. The Privileges section lets you grant global privileges on roles to your user, such as APPLY SESSION POLICY and MONITOR.

For more information, Snowflake provides detailed technical documentation about users and privileges.

Granted Roles

The Granted Roles section lists the roles granted to the user. Use the Granted Roles section to view, grant, and revoke roles.

Roles

The Roles page lets you view and manage roles for your account. The Roles page provides the following:

  • A graph that shows the relationships between your roles.

  • A detailed table of your roles.

This section provides a brief overview of how to navigate and use the Roles page.

Interface

Description

Roles tabs

The Roles page includes the following tabs:

  • Graph

  • Table

Create role

In the upper-right corner of the page, select Role to create a role.

Graph

The Graph tab provides the roles graph. The roles graph displays the hierarchy of roles in your account. Paths in the graph show inheritance. The graph is organized in descending order of hierarchy, representing inheritance from parent to child roles.

This section provides a brief overview of how to navigate and use the roles graph.

Interface

Description

Role and user explorer

The role and user explorer, located next to the left nav, lets you select individual roles and users. The selected role or user becomes the focus of the roles graph.

At the top of the role and user explorer, switch between Roles and Users to select a focus. Search the explorer to filter roles and users by name.

Roles graph

The roles graph, located in the center of the page, provides a visual hierarchy of your roles.

On the graph, select a role to view additional details about the role.

Graph navigation

In the upper-right corner of the graph, zoom in and out, and center the graph on the focused role or user.

Details

When you select a role, Details about the role appear on the right side of the graph.

Manage Grants provides the following actions:

  • Grant Role

  • Grant to Role

  • Grant to User

  • Revoke Grant of Role

  • Revoke Grant to Role

  • Revoke Grant to User

  • Manage Global Privileges

Details menu

The details menu, located in the upper-right corner of the details, lets you do the following:

  • Center the graph on the selected role.

  • View the role detail page.

For more information, Snowflake provides detailed technical documentation about managing roles.

Note

Database roles are not shown in the roles graph or popovers in the roles graph.

Table

The roles table includes the following columns:

  • Name

  • Granted Roles

  • Granted To Roles

  • Users

  • Created

  • Owner

To view additional details about a role, select a role in the table.

Role Details

When you select a role in the roles table, the role details page appears.

This section provides a brief overview of how to navigate and use the role details page.

Interface

Description

Basic details

Basic details about the role are located at the top of the page.

For assistive technology, the more button.

Role details menu

The role details menu, located in the upper-right corner of the page, lets you do the following:

  • Grant a different role to this role.

  • Grant this role to a different role or user.

  • Revoke a different role from this role.

  • Revoke this role from a different role or user.

  • View, grant, and revoke global privileges.

  • Edit the role. You can configure the following role options:

    • Name

    • Comment

  • Drop the role

For more information, Snowflake provides detailed technical documentation about managing roles.

The role details page includes the following sections:

  • About

  • Privileges

  • Role grants

  • User grants

About

The About section provides additional information about your role, including:

  • The number of other roles granted to this role.

  • The number of other roles that are granted this role.

  • The number of other users that are granted this role.

Privileges

Use the Privileges section to manage a role’s global Snowflake privileges. The Privileges section lets you grant global privileges on other roles to this role, such as APPLY SESSION POLICY and MONITOR.

For more information, Snowflake provides detailed technical documentation about roles and privileges.

Role Grants

The role grants section includes two tabs:

  • Granted Roles

  • Granted to Roles

Use the tabs to view, grant, and revoke roles. You can search the tables to filter by name.

The Granted Roles tab provides a table of other roles granted to this role.

The Granted to Roles tab provides a table of other roles that are granted this role.

User Grants

The user grants section provides a table of users that are granted this role. Use the section to view, grant, and revoke roles. You can search the table to filter by name.

Security

The Security area of Snowsight includes two pages:

This section provides a brief overview of how to navigate and use the Security area.

Interface

Description

Network Policies and Sessions pages

In the upper-left corner of the Security area, select the Network Policies page (default) or the Sessions page.

Network Policies

For information about using Snowsight to manage the network policies that control network traffic to Snowflake, see Controlling network traffic with network policies.

Sessions

The Sessions page provides a detailed table of open Snowflake sessions. The sessions table includes the following columns:

  • Session ID

  • User Name

  • Start Time

  • Client Driver

  • Client Net Address

  • Authentication

This section provides a brief overview of how to navigate and use the Sessions page.

Interface

Description

Filters

In the upper-right corner of the page, search and filter the sessions table. You can filter by:

  • User Name

    • All (default)

    • A specific user.

  • Client Driver

    • All (default)

    • Go

    • PythonConnector

  • Authentication

    • All (default)

    • OAuth

    • Password

    • Fed SAML 2.0

To learn more, Snowflake provides detailed technical documentation about sessions.

Billing & Terms

To navigate to the Billing & Terms section, sign in to Snowsight and select Admin » Billing & Terms. This page lets you set up billing options, accept terms, and access billing statements. It contains three tabs:

  • Billing & Terms

  • Payment Methods

  • Billing Documents

Billing & Terms

The Billing & Terms tab includes two sub-sections:

Payment Methods

The Payment Methods tab lets you configure the credit card that you want to use with Snowflake.

Billing Documents

The Billing Documents tab lets you view and download billing usage statements starting with July 2023. You must have the ACCOUNTADMIN and ORGADMIN roles and be in an account that has the ORGADMIN role enabled. Customers who signed a contract through a Snowflake reseller cannot view or download usage statements.

The retention period for statements is 1 year. However, a statement contains historical usage for all months of the current contract. This allows you to obtain information about historical costs older than one year if the contract is a multi-year contract. For example, if a 3-year contract started in July 2021, the July 2024 statement contains usage from 2021.

To get usage statements older than 1 year, send a request to accounts.receivable@snowflake.com.

Note

The Billing Documents tab is not currently supported in US SnowGov Regions on AWS GovCloud and Microsoft Azure Government.

About notification contacts for Snowflake

To receive security, privacy, and product notifications from Snowflake, specify the email addresses to receive those notifications in the Notification Contacts page of Snowsight.

Setting up contacts depends on your role:

  • Users without the ACCOUNTADMIN role or the ORGADMIN role cannot view Contacts.

  • If the ORGADMIN role is granted to your user, you can view and set up contact information for the organization.

  • If the ACCOUNTADMIN role is granted to your user, you can view and set up contact information for a specific account. If no contacts are provided at the account level, notification contacts set at the organization level are used. If you have the ACCOUNTADMIN role but are not granted the ORGADMIN role, you cannot see notification contacts set up at the organization level.

If you have privileges to do so, you can set up notification contacts for your entire Snowflake organization, or configure specific notification contacts for each account. You can specify multiple email addresses for each type of notification.

The following notification types are sent by Snowflake:

  • Security notifications

  • Privacy notifications

  • Product notifications, including:

    • Behavior change notifications, about upcoming behavior changes that might affect your account. See About Behavior Changes.

    • Driver support notifications, such as notifications related to client versions and driver support. See Client versions & support policy.

    • Operational status notifications, such as notifications related to Snowflake’s operational status.

    • Time-sensitive notifications, such as notifications that might require immediate attention or action.

Emails are sent in accordance with the Snowflake Policy Notice.

Set up notification contacts for Snowflake

To set up notification contacts for Snowflake, you must be granted the ACCOUNTADMIN role or the ORGADMIN role.

Set up notification contacts:

  1. Sign in to Snowsight.

  2. Go to Admin » Contacts.

  3. If you have the ORGADMIN role, you see the Organization tab. If you want to specify account-level notification contacts, select Account.

  4. For each type of notification that you want to set up, select Edit or the pencil icon.

  5. Add one or more email addresses, pressing Enter to add each address. You cannot use commas to separate multiple email addresses.

  6. Select Save to save the email addresses as notification contacts.

For example, if you want the Snowflake administrators to get all product notifications, but want the on-call Snowflake administrators to see the time-sensitive notifications, do the following:

In this example, all product notifications, including the time-sensitive notifications, are sent to snowflake-admin-info@example.com. Only the time-sensitive notifications are sent to the on-call administrators.

Alternatively, if you want different groups to get different types of notifications, you could set up notification contacts differently:

  • For Product Notifications, enter the email address: snowflake-admin-info@example.com to get all product notifications.

  • For Behavior Change Notifications, enter the email address: snowflake-admin-testing@example.com to send behavior change emails to the administrators responsible for testing Snowflake.

  • For Driver Support Notifications, enter the email address: snowflake-admin-connect@example.com to send client version and driver support details to the team responsible for maintaining the clients and drivers that people in your organization use to connect to Snowflake.

  • For Operational Status Notifications, enter the email address: snowflake-users@example.com to send all Snowflake users status messages about Snowflake, to reduce the number of questions sent to your team.

  • For Time Sensitive Notifications, enter the email address: snowflake-admin-oncall@example.com to alert the administrators on call about any time-sensitive issues.

If you want one group to get all product notifications for the entire organization, the privacy testing group to get specific notifications for the VPS account in your organization, and the analyst testing group to get specific notifications for your other account, you could do something like the following example:

In this example, the administrators for the entire Snowflake organization get all product notifications for all accounts in the organization, and the testing groups for each account get the behavior change notifications for the accounts that they manage.

Accounts

The Accounts page of Snowsight lets you view and manage accounts for your organization. The Accounts page provides a detailed table of your accounts.

This section provides a brief overview of how to navigate and use the Accounts page.

Interface

Description

Filters

In the upper-right corner of the page, search and filter the accounts table. You can filter by:

  • Edition

    • All (default)

    • Standard

    • Enterprise

    • Business Critical

  • Cloud

    • All (default)

    • AWS

    • Azure

    • GCP

  • Region

    • All (default)

    • Regions that have at least one account.

To learn more, Snowflake provides detailed technical documentation about editions, cloud platforms, and regions.

Create account

Use Account, located in the upper-right corner of the page, to create an account for your organization.

Note

Account is only visible if you are using the ORGADMIN role.