Manage users in Snowflake Open Catalog¶
A service admin can perform the following actions to manage users through the Snowflake Open Catalog web interface:
Create and drop users.
Grant and revoke user roles. For more information about user roles, see User roles.
If you created a Snowflake Open Catalog account, you are a service admin in the account.
Create a user¶
Sign in to Snowflake Open Catalog.
From the menu on the left, select Users.
Select + User.
For User Name, enter a unique identifier for the user.
The user signs in to Snowflake Open Catalog with this identifier.
Optional: For Email, specify an email address for the user.
Optional: To grant the service admin role to the user, move the Grant service admin toggle to On.
For Password and Verify Password, enter the password for the user.
Select Create.
Grant to a user the catalog admin role to a catalog¶
You can only grant the catalog admin role to a catalog that you created.
Sign in to Open Catalog.
From the menu on the left, select Users.
Select the relevant catalog admin user.
Select + Grant catalog admin.
Grant user access to a catalog:
From the drop down menu, select the catalog you want to grant the catalog admin access to.
Select Add.
Note
You can only grant catalog admin access to catalogs that you’ve created, not to catalogs created by other service admins.
Optional: Repeat the previous step to grant catalog admin access to additional catalogs.
Select Close.
Revoke your own catalog admin role to a catalog¶
A service admin user can revoke their catalog admin privileges to a catalog that they created.
Step 1: Revoke your service admin role¶
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select the relevant service admin user.
Move the Service admin toggle to Off.
Select Revoke.
Select Close.
Step 2: Revoke your catalog admin privileges from the catalog¶
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select your user account.
In Granted catalog admin on, select x next to the relevant catalog.
Select Revoke.
Select Close.
Revoke a user’s catalog admin role for a catalog¶
When you revoke a user’s catalog admin privileges to a catalog, the user can no longer manage or access the catalog.
Sign in to Open Catalog.
From the menu on the left, select Users.
Select the user whose catalog privileges you want to revoke.
From the Granted catalog admin on field, select x next to the relevant catalog.
Select Revoke.
Select Close.
Grant to a user the service admin role¶
Sign in to Open Catalog.
From the menu on the left, select Users.
Select the relevant user.
Move the Grant service admin toggle to On.
Select Grant.
Select Close.
Revoke a user’s service admin role¶
Note
If needed, you can revoke the service admin role granted to your own user account.
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select the relevant user.
Move the Service admin toggle to Off.
Select Revoke.
Select Close.
Drop a user¶
Dropping a user removes the user credentials from Open Catalog.
Important
If the user you’re dropping created a catalog that no other user has catalog admin privileges to, the user you’re dropping must first grant to another user catalog admin privileges to the catalog. Otherwise, no user can access the catalog after you drop the user, and you’ll need to contact Snowflake customer support to gain access to the catalog.
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select the user you want to drop.
Select Drop User.
Select Drop.