liveBook · Manning

Future grant

As explained in Snowflake Data Engineering

A future grant is a Snowflake privilege grant that is automatically applied to objects of a specified type created later in a schema or database.

A future grant automatically applies a privilege to objects of a specified type created later in a schema or database. It keeps access roles aligned with evolving schemas without granting each new object manually. section 10.1.3

Configure future grants after establishing the target role and schema:

  • Pair future grants with managed access schemas and a role structure that separates access roles from functional roles. section 10.1.3

Reporting-schema access

In BAKERY_DB.RPT, BAKERY_READ receives SELECT on all existing tables and views, then receives SELECT automatically on future tables and views. A later RPT.EMPLOYEE view is therefore available to DATA_ANALYST through its granted access role.

How Snowflake Data Engineering covers it

How deep it goes
Defines the role and managed-schema pattern, then gives executable grants for future tables and views.
Examples
Uses BAKERY_DB.RPT with BAKERY_READ, DATA_ANALYST, future tables, future views, and the RPT.EMPLOYEE view.
What it assumes
Assumes roles and schemas exist, while demonstrating the separation between access roles and functional roles.
What you can do after
Configure automatic SELECT access with Snowflake GRANT statements for future tables and views in a schema.
How it connects
Connects RBAC, access roles, functional roles, managed access schemas, schemas, tables, and views.
Cover of Snowflake Data Engineering
liveBookmanning.com
Read Snowflake Data Engineering on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Snowflake Data Engineering. The section links point to the parts of the book it draws on.