Zurück zu Utils

Snowflake · View

system_role_usage

Alle Statements, die unter ACCOUNTADMIN, SYSADMIN oder SECURITYADMIN ausgeführt wurden, einschließlich fehlgeschlagener Versuche. Nützlich für Audits und die Erkennung unerwarteter Verwendung von Administratorrollen.

Quelle: SNOWFLAKE.ACCOUNT_USAGE.QUERY_HISTORY · Latenz: ~45min

SpalteBeschreibung
dateDatum
user_nameBenutzer
role_nameVerwendete Systemrolle
query_typez.B. SELECT, ALTER, GRANT
execution_statusSUCCESS, FAIL oder INCIDENT
statementVollständiger Abfragetext

Quellcode

create_admin_views.sql
create or replace view system_role_usage
    comment = 'Statements executed under ACCOUNTADMIN, SYSADMIN or SECURITYADMIN, including failed attempts (source: SNOWFLAKE.ACCOUNT_USAGE)'
as
select start_time::date as date
     , user_name
     , role_name
     , query_type
     , execution_status
     , query_text as statement
  from snowflake.account_usage.query_history
 where upper(role_name) in ('ACCOUNTADMIN', 'SYSADMIN', 'SECURITYADMIN')
 order by start_time desc;