Understanding System-designed Roles

Claro's Snowflake account holds some of the most sensitive data imaginable — credit scores, repayment history, and personal financial records across millions of users. As the data team grows, different colleagues need different levels of access: engineers creating databases, the security team managing authentication policies, and account admins overseeing billing.

Snowflake ships with five system-defined roles, each with a distinct, intended responsibility. Assigning the wrong role to the wrong person creates either a security gap or an over-privileged account.