Role hierarchy
A role hierarchy is an ordering of roles that establishes relative authority or precedence, and may determine which permissions or instructions take priority.
Snowflake Data Engineering
A role hierarchy is an access-control structure in which roles are granted to other roles so higher-level roles inherit lower-level privileges.
- How it is used
- Deploys centralized privilege management for Snowflake data pipelines and governance.
- How deep it goes
- Explains inheritance, role separation, managed schemas, future grants, and executable bakery configuration, while deferring broader policy internals.
- Examples
- Uses bakery database roles BAKERY_FULL, BAKERY_READ, DATA_ENGINEER, and DATA_ANALYST across RAW and RPT schemas.
- What you can do after
- Build it from scratch with Snowflake SQL by creating roles, assigning privileges, establishing inheritance, and testing permitted queries.
Read how Snowflake Data Engineering explains role hierarchy →
Authorization in Action
A role hierarchy is an authorization structure in which roles can inherit permissions from other roles to represent levels of responsibility.
- How it is used
- Structures RBAC permissions around progressive organizational responsibility and simplifies access changes when people change roles.
- How deep it goes
- Explains inherited-permission evaluation and separation-of-duty interactions, but stops short of dynamic context conditions.
- Examples
- Uses engineer and senior-engineer roles to demonstrate inherited code-approval and directly granted production-deployment permissions.
- What you can do after
- Evaluate authorization decisions by tracing assigned roles, inherited roles, and their combined permissions.
Related concepts
- prompthas part · An input, typically containing instructions or context, supplied to an artificial-intelligence model to guide or elicit its output.
- system prompthas part · A system prompt is a high-priority instruction or context supplied to an AI model to establish its role, task, behavioral guidance, or constraints.
- custom rolehas part · A custom role is a user-defined authorization role with an explicitly selected set of permissions or privileges.
- role-based access controlused by · Role-based access control is an authorization model that assigns permissions to roles and grants users or other principals access through their assigned roles.
- permissionproduces · A permission is an authorization specifying whether an identity or process may perform an action on or access a resource.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.