Zurück zu Utils
Snowflake · View
privilege_changes
Alle GRANT- und REVOKE-Statements, unabhängig von der verwendeten Rolle. Einschließlich fehlgeschlagener Versuche. Bietet einen vollständigen Audit-Trail für Berechtigungs- und Zugriffsänderungen.
Quelle: SNOWFLAKE.ACCOUNT_USAGE.QUERY_HISTORY · Latenz: ~45min
| Spalte | Beschreibung |
|---|---|
| date | Datum |
| user_name | Benutzer |
| role_name | Verwendete Rolle |
| query_type | GRANT oder REVOKE |
| execution_status | SUCCESS, FAIL oder INCIDENT |
| statement | Vollständiger Abfragetext |
Quellcode
create_admin_views.sql
create or replace view privilege_changes
comment = 'GRANT and REVOKE statements with the user and role that executed them (source: SNOWFLAKE.ACCOUNT_USAGE)'
as
select start_time::date as date
, user_name
, role_name
, query_type
, execution_status
, query_text as statement
from snowflake.account_usage.query_history
where query_type in ('GRANT', 'REVOKE')
order by start_time desc;