Rbac

---
name: rbac
title: Snowflake RBAC Patterns
summary: Router skill for designing Snowflake Role-Based Access Control hierarchies and access role patterns.
description: |
  Use when designing or refactoring Snowflake RBAC: choosing a role hierarchy, creating database/schema access roles, setting up functional roles, deciding between primary and secondary roles, or referencing roles in masking and row access policies. Routes to focused sub-flows for each layer of the hierarchy. Triggers: rbac, role hierarchy, access roles, functional roles, schema access role, database access role, warehouse access role, secondary roles, policy roles, role design, grant, managed access schema, future grants
tools:
  - snowflake_sql_execute
  - Read
  - Write
  - Edit
  - Grep
  - Glob
prompt: Help me design an RBAC hierarchy for my Snowflake account.
language: en
status: Published
author: Snowflake Solutions Team
type: community
---

# Snowflake RBAC Patterns

## Overview

This skill is a router for designing Snowflake Role-Based Access Control. It helps you pick a role hierarchy that fits your account, then routes to focused sub-flows for each layer (account roles, environment admins, domain admins, database access roles, schema access roles) and cross-cutting concerns (personas, warehouses, secondary roles, policy roles).