Row access policies in Snowflake - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a row access policy in Snowflake?

A row access policy controls which rows a user can see or query in a table based on conditions. It helps protect sensitive data by filtering rows dynamically.

intermediate

How do you apply a row access policy to a table in Snowflake?

You attach the row access policy to a table column using the ALTER TABLE command with ADD ROW ACCESS POLICY. This enforces the policy when querying the table.

beginner

What is the purpose of the USING clause in a row access policy?

The USING clause defines the condition that determines if a row is visible to the user. It returns TRUE for rows the user can access and FALSE for rows to hide.

intermediate

Can row access policies be combined with masking policies in Snowflake?

Yes, row access policies filter rows, while masking policies hide or transform column data. Using both together enhances data security by controlling both row visibility and column content.

beginner

What happens if a user queries a table with a row access policy and no rows meet the policy condition?

The user sees an empty result set because the policy filters out all rows. This prevents unauthorized access to any data in the table.

What does a row access policy in Snowflake control?

A The number of users accessing the table

B Which columns a user can see in a table

C The size of the table

D Which rows a user can see in a table

Row access policies control row-level visibility, not columns or table size.

How do you attach a row access policy to a table?

A Using GRANT SELECT

B Using CREATE MASKING POLICY

C Using ALTER TABLE ADD ROW ACCESS POLICY

D Using DROP POLICY

You attach row access policies with ALTER TABLE ADD ROW ACCESS POLICY.

What does the USING clause in a row access policy specify?

A The condition to filter rows

B The columns to mask

C The user roles allowed

D The table name

The USING clause defines the condition that filters rows.

If no rows meet the row access policy condition, what is the query result?

A Empty result set

B Error message

C All rows returned

D Partial columns returned

The query returns no rows if none meet the policy condition.

Can row access policies and masking policies be used together?

A No, masking policies replace row access policies

B Yes, they control rows and columns separately

C Yes, but only on different tables

D No, only one policy type can be applied

They can be combined to control both row visibility and column data.

Explain how a row access policy works in Snowflake and why it is useful.

Think about how you hide certain rows from some users.

Describe the steps to create and apply a row access policy in Snowflake.

Consider policy creation and linking to a table.