Manage users in Snowflake Open Catalog¶
A service admin can take the following actions to manage users through the Snowflake Open Catalog web interface:
Create and drop users.
Grant user roles to users and revoke user roles from users. For more information about user roles, see User roles.
If you created a Snowflake Open Catalog account, you are a service admin in the account.
Create a user¶
Sign in to Snowflake Open Catalog.
From the menu on the left, select Users.
Select + User.
In the User Name field, enter a unique identifier for the user. The user uses this identifier to sign in to Snowflake Open Catalog.
In the Email field, optionally specify an email address for the user.
If you want to grant the user with the service admin role, move the Grant service admin toggle to On.
In the Password and Verify Password fields, enter the password for the user.
Select Create.
Grant a user with the catalog admin role to a catalog¶
You can only grant a user the catalog admin role to a catalog that you created.
Sign in to Open Catalog.
From the menu on the left, select Users.
Select the catalog admin user who you want to grant access to a catalog.
Select + Grant catalog admin.
Grant the user access to a catalog:
From the drop down menu, select the catalog you want to grant the catalog admin access to.
Select Add.
Note
You can only grant the catalog admin access to catalogs that you’ve created. You can’t grant the catalog admin access to catalogs created by other service admins.
If needed, repeat the previous step to grant the catalog admin access to additional catalogs.
Select Close.
Revoke your own catalog admin role to a catalog¶
A service admin user can revoke their catalog admin privileges to a catalog that they created.
Step 1: Revoke your service admin role¶
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select the service admin user you want to revoke.
Move the Service admin toggle to Off.
Select Revoke.
Select Close.
Step 2: Revoke your catalog admin privileges from the catalog¶
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select your user account.
From the Granted catalog admin on field, select x next to the catalog you want to revoke your catalog admin privileges from.
Select Revoke.
Select Close.
Revoke a user’s catalog admin role for a catalog¶
When you revoke a user’s catalog admin privileges to a catalog, the user can no longer manage or access the catalog.
Sign in to Open Catalog.
From the menu on the left, select Users.
Select the user whose catalog privileges you want to revoke.
From the Granted catalog admin on field, select x for the catalog you want to revoke the catalog admin privileges.
Select Revoke.
Select Close.
Grant a user the service admin role¶
Sign in to Open Catalog.
From the menu on the left, select Users.
Select the user that you want to grant the service admin role.
Move the Grant service admin toggle to On.
Select Grant.
Select Close.
Revoke a user’s service admin role¶
Note
If needed, you can revoke the service admin role granted to your own user account.
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select the user whose service admin role you want to revoke.
Move the Service admin toggle to Off.
Select Revoke.
Select Close.
Drop a user¶
Dropping a user removes the user credentials from Open Catalog.
Important
If the user you’re dropping created a catalog that no other user has catalog admin privileges to, the user you’re dropping must first grant another user catalog admin privileges to the catalog. Otherwise, no user can access the catalog after you drop the user and you’ll need to contact Snowflake customer support to gain access to the catalog.
Sign in to Open Catalog.
From the menu on the left, select Users.
From the list of users, select the user you want to drop.
Select Drop User.
Select Drop.