Snowflake Admin

This section consists of four widgets which provide you basic information about your Snowflake account.

• Account Name: The name of your Snowflake account.
• Account Region: The geographical region in which the account exists.
• Account Version: The Snowflake version used by your organization.
• Account Admin: The number of account administrators in the Snowflake account.

This pie chart shows your Snowflake account's user count and default role. Snowflake defaults to PUBLIC. When you create a new user, the user is assigned PUBLIC role. Other default roles can be created as needed. Snowflake allows default roles for all users.

This pie chart shows default role names and user counts. The pie chart has several colors for default roles. Hovering on any pie chart color displays the default role name and number of users assigned to it. View just default roles by filtering the data.

By clicking on a default role, you may view extensive information about its users. Alert, Username, Default Role, Email, Default Warehouse, Warehouse size, MFA enabled status, Created date, Password Rotation Date, and Last Login are listed in this table.

This pie chart shows the overall number of roles in your Snowflake account as well as the number of users assigned to each role. You can create roles that are not default in addition to the default roles. Every user must have at least one default role as well as an unlimited number of non-default roles.

This pie chart shows a list of all the roles (default and non-default) that are active in your Snowflake account. The pie chart is colored, and each hue symbolizes a different role. Hovering over a color displays the role name and the number of users to whom the position is allocated. Filters can be used to display data solely for specified roles.

Note The total number of Snowflake users in your account may be greater than the sum of all users in this chart because a single user may be assigned several roles, and so a single user is counted in each role that is allocated to them.

This table displays all the user data. You can check important data like default role assigned to each user, default warehouse assigned for each user, and so on. The various columns in this table are described as follows.

• Alert: Highlights account issues.
• Username: The name of the user.
• Default Role: The default role assigned to the user.
• Email: The Email ID of the user.
• Default WH: The default warehouse assigned to the user.
• Warehouse_Size: The size of the warehouse assigned to the user.
• MFA Enabled: The status of multi factor authentication (true or false) on the user account.
• Created: The date and time when the user was added to Snowflake.
• Password Rotate Date: The date and time when the user password was last changed.
• Last Login: The date and tie when the user last logged in.

ADOC offers several filters for viewing a customized list of users. You can see a list of users who have been allocated to a given position, a list of users who have not enabled multi factor authentication, and so on. A warning symbol (a red triangle with an exclamation point) appears against the Username columns of users who have not enabled multi factor authentication.

This section consists of four widgets which provide you basic information about your Snowflake account.

• Account Name: The name of your Snowflake account.
• Account Region: The geographical region in which the account exists.
• Account Version: The Snowflake version used by your organization.
• Alerts: The number of alerts for the Snowflake account.

The Guard Rails table provides important details about your Snowflake account and warehouses. The columns in this table are as follows.

• Alert: Highlights account issues.
• Level: The level at which the Guardrail information is displayed. This can be account level or warehouse level.
• Name: The name of the Snowflake account or the warehouse.
• Resource Monito r: The name of the resource monitor assigned to the account or warehouse. Resource monitors allow you to control costs and avoid unwanted spends. If you have not created a resource monitor, this column is empty and you see a warning symbol (red triangle with an exclamation) near the Level column. To learn more about resource monitors, see the official Snowflake document.
• Statement Timeout: The time after which an SQL statement whose execution is in progress, is terminated. If an SQL statement takes too long to get executed, it generally implies that the statement is incorrect or inefficient and hence ends up scanning lots of tables thus resulting in increased costs. You can set an appropriate value for this function. To learn more about this function, see the official Snowflake document.
• Statement Queued Timeout: The time after which an SQL statement which is waiting in queue to be executed, is terminated. You can set an appropriate value for this function. To learn more about this function, see the official Snowflake document.
• Auto Suspend: This column specifies the time duration of inactivity after which a warehouse is automatically suspended, helping to optimize resource usage and reduce costs.

The number of Database users is shown in this horizontal bar graph. User numbers are on the x axis and database names on the y. The y axis shows only the database names selected in the User Adoption tab's filters. Each bar represents a database, and hovering over it shows the number of users.

By clicking on the database name, you will be sent to the Query Studio page with detailed insights on the database.

This table displays all the data related to login failure. You can use this table to audit the failed logins to check if there was any suspicious activity on your Snowflake account. The columns in this table are described as follows.

• User: The user whose login failed.
• Client IP: The IP from which the user attempted the failed login.
• Client Type: The client type used during the failed login attempt.
• Auth Type: The authentication type used during the failed login attempt.
• Failure Count: The number of failed login attempts registered by the user.

This table displays the list of roles assigned to a user and also the effective roles that a user is entitled to. Snowflake allows you to create role hierarchies in which a role can have sub-roles nested under it. A user who is assigned a parent role automatically gets all the child roles nested under the parent roles. You can apply filters on this table to check the list of users who are account admin as well as system admin, and so on.

• User: The username
• Roles Granted: The roles assigned to the user.
• Effective Roles: The net roles granted to the user.

This table displays a granular level of information. You can view minute details like the privilege a user has on a database, the operations that a user can execute on a database, and so on. You can apply filters on this table to check the list of users who own a specific database and so on.

• User: The name of the user.
• Roles Granted: The role assigned to the user.
• Privilege: The privilege the user has.
• Database: The database on which the privilege is applicable.
• Schema: The schema on which the privilege is applicable.
• Resource Name: The resource name (table, view) on which the privilege is applicable.

This table displays the list of users who have not logged in to Snowflake for the past 90 or more days or new users whose Snowflake account was created 30 or more days ago but never completed their first login. You can apply the Name filter to filter data for a specific user. This table has two columns.

• Name: The name of the dormant user.
• Last Login: The date and time when the dormant user last logged in.

This table lists roles which were created but are not assigned to any user. You can apply the Role filter to filter data for a specific Role. This table has two columns.

• Role: The name of the unused role.
• Created date: The date and time when the unused role was created.

This table lists database Tables which have not been used in the past 90 days. ADOC defines Unused tables as those tables on which the Select query was not executed for the past 90 days. By default, this table displays list of Tables which are not used for the past 90 days. However, you can increase or decrease the number of days criteria for a Table to be considered unused. You can filter the values by Table name. You can apply filters based on Table name, Schema, Database, Storage Used, and Last Altered metrics

• Table: The name of the unused Table.
• Schema: The schema to which the unused Table belongs to.
• Catalog: The database to which the unused Table belongs to.
• Storage Used: The amount of storage used by the unused Table.
• Last Altered: The date and time when the unused Table was last altered.
• Last Accessed: The date and time when the unused Table was last accessed.

Note The Unused tables which are huge in size are flagged by ADOC by using a red triangle with an exclamation sign against the table name.

This table lists the users who are using drivers which are currently deprecated. This table has three columns.

• User: The name of the user using deprecated version of the driver.
• Driver: The name of the deprecated driver being used.
• Version: The version number of the deprecated driver being used.

This table lists Warehouses which have not been used in the past 30 days. ADOC defines. By default, this table displays list of Warehouses which are not used for the past 30 days. However, you can increase or decrease the number of days criteria for a Warehouse to be considered unused. You can filter the values by Warehouse name or Warehouse size or a combination of both name and size.

• Name: The name of the idle warehouse
• Size: The size of the idle warehouse
• Last Activity: The date and time when an activity was last recorded on the idle Warehouse.