rbac

Design and validate scalable Snowflake RBAC hierarchies across environments and domains.

15|6|Updated Jan 20, 2026
One-click install
npx skills add https://github.com/Snowflake-Labs/coco-skills --skill rbac-snowflake-labs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rbac
Source: https://github.com/Snowflake-Labs/coco-skills/tree/main/skills/rbac
Command: npx skills add https://github.com/Snowflake-Labs/coco-skills --skill rbac-snowflake-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Router for Snowflake RBAC patterns to standardize domain, data product, and environment access models and streamline governance.

Core Features & Use Cases

  • Defines a scalable RBAC architecture across environments and domains.
  • Provides templates and guidance for environment admins, domain admins, data product admins, and schema/database roles.
  • Use cases include designing new RBAC hierarchies, refactoring existing roles, and governance consolidation.

Quick Start

Provide a recommended RBAC pattern for my account with 2 environments and 1 domain.

Frequently Asked Questions about rbac

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a scalable Snowflake RBAC hierarchy across multiple environments?▼

Design scalable Snowflake RBAC hierarchies by applying standardized templates for environment admins, domain admins, and data product admins. This approach enforces role inheritance and least privilege across single-account or multi-account patterns before any permissions are granted.

What is the best way to standardize domain and data product access roles in Snowflake?▼

Standardize domain and data product access by routing RBAC patterns through predefined schema and database role templates. This enforces governance consolidation and ensures consistent least privilege access models across your Snowflake environments.

Can I validate Snowflake role permissions before executing CREATE or GRANT statements?▼

Yes, you can validate Snowflake role permissions by documenting stopping points before executing CREATE or GRANT actions. This governance prompt mechanism ensures RBAC hierarchies are fully reviewed and compliant with least privilege principles.

How do I refactor existing Snowflake roles to consolidate governance and access flows?▼

Refactor existing Snowflake roles by applying environment admin, domain admin, and schema access flow templates. This RBAC pattern routing streamlines governance consolidation and validates role inheritance across your account architecture.

Does this RBAC router support multi-account Snowflake architecture patterns?▼

Yes, this RBAC router supports both single-account and multi-account Snowflake architecture patterns. It provides scalable templates for domain admin and data product admin roles, enforcing least privilege and inheritance across distributed environments.

Why do I need a standardized RBAC pattern for separating environment and domain admins in Snowflake?▼

You need standardized RBAC patterns to separate environment and domain admins in Snowflake to enforce least privilege and scalable governance. Structured role hierarchies prevent permission sprawl and standardize access flows across data products.