Secure your Snowflake account by mastering the role-based and discretionary access control model — from system-defined roles and the privilege hierarchy to custom roles, authentication methods, and network policies.

RBAC, DAC, and the Securable Object Hierarchy

Options

ACCOUNTADMIN

SECURITYADMIN

SYSADMIN

Understanding System-designed Roles

Diagnose a missing USAGE privilege

The Right Role for User Management

Custom Roles

Program

Sequence to Build a Custom Role

Account Roles vs Database Roles

Activating a Secondary Role

Authentication and Network Policies

Network policy configuration

Key-pair

SSO / SAML

Password + MFA

Understanding Authentication Methods

Securing Your Snowflake Account

Implement column- and row-level security, apply object tags and automated data classification, interpret data lineage, and configure encryption and alerting to protect Claro's sensitive financial data.

Column-Level and Row-Level Security

Dynamic Data Masking Policy

Row-level vs Column-level Security

Object Tagging, Data Classification, and Privacy Policies

Tag a column for PII sensitivity

Applying an object tag

Automate PII detection across a large schema

Data Lineage and Trust Center

Navigating Data Lineage

Interpret a Trust Center Finding

Encryption, Alerts, and Notifications

Choose the Right Encryption Configuration

Structure a Snowflake Alert Definition

Data Governance

Monitor and control Snowflake compute costs using resource monitors and ACCOUNT_USAGE views, protect data with Time Travel and failover groups, and build an audit trail with event tables and LOGIN_HISTORY.

Resource Monitors and Credit Calculation

Resource Monitor Actions

Calculate Credit Consumption

Monitoring with ACCOUNT_USAGE

Read a Metering History Result Set

ACCOUNT_USAGE vs INFORMATION_SCHEMA

Data Protection and Business Continuity

Use Time Travel to Query Historical Data

Creating a zero-copy clone

Replication vs Failover Groups

Logging, Tracing, and Audit

What LOGIN_HISTORY captures

Log levels and Event tables

Attributing queries with QUERY_TAG

Cost Management and Monitoring

Enable secure data collaboration using Snowflake's provider, consumer, and reader account model, explore privacy-preserving Data Clean Rooms, and navigate the Snowflake Marketplace for live data listings and Native Apps.

Secure Data Sharing

Data Sharing Account Roles

Share a subset of Data Safely

What can and cannot be shared

Data Clean Rooms

Data Clean Rooms vs Standard Sharing

Clean Room Capabilities and Limitations

The Snowflake Marketplace

Mount a Free Marketplace Data Listing

Data Listings vs Native Apps

Congratulations!

Data Collaboration, Sharing, and the Marketplace

Learn how to secure, govern, and manage Snowflake at scale. From role-based access control and data masking to cost monitoring and secure data sharing, you'll build the skills needed to run a compliant, well-governed Snowflake account — and prepare for the SnowPro Core certification.

18:39Claude responded: Master Snowflake administration from the ground up.Master Snowflake administration from the ground up. This course covers everything you need to secure, govern, monitor, and collaborate in Snowflake — starting with access control fundamentals like RBAC, DAC, and the securable object hierarchy, before moving into data governance tools including dynamic data masking, row access policies, object tagging, and data classification. You'll then tackle cost management using resource monitors and ACCOUNT_USAGE views, explore data protection features like Time Travel, Fail-safe, and zero-copy cloning, and finish with Snowflake's collaboration capabilities — secure data sharing, Data Clean Rooms, and the Snowflake Marketplace. By the end, you'll have the practical skills and conceptual foundation to manage a production Snowflake environment with confidence, and be well-prepared for the SnowPro Core certification exam.

Learn to secure, govern, and manage Snowflake at scale. Cover RBAC, data masking, cost monitoring, Time Travel, and secure data sharing. 

Snowflake Management, Governance & Collaboration

Essentials for Snowflake SnowPro® Core Certification

An automated pipeline loads repayment data into Claro's Snowflake account at 3am - no human is present

A Snowpark Python script runs inside a CI/CD pipeline and must authenticate without user interaction

Claro's corporate employees sign in via Okta, the company's identity provider

Claro's US and EU offices both use Microsoft Entra ID: all staff accounts are centralized through it

A data engineer is testing queries locally and needs a quick way to authenticate

A compliance analyst accesses Snowsight from their browser — the team requires two-factor verification

Understanding Authentication Methods

Snowflake Management, Governance & Collaboration

Hands-on interactive exercise