試験SnowPro-Core-JPN トピック1 問題2 スレッド

Details around the privileges that have been granted for all objects in an account. The ACCESS_HISTORY view in Snowflake provides a comprehensive log of access control changes, including grants and revocations of privileges on all securable objects within the account. This information is crucial for auditing and monitoring the security posture of your Snowflake environment.
Here's how to understand and use the ACCESS_HISTORY view:
* Purpose of ACCESS_HISTORY View: It is designed to track changes in access controls, such as when a user or role is granted or revoked privileges on various Snowflake objects. This includes tables, schemas, databases, and more.
* Querying ACCESS_HISTORY: To access this view, you can use the following SQL query pattern:
SELECT * FROM SNOWFLAKE.ACCOUNT_USAGE.ACCESS_HISTORY WHERE EVENT_TYPE =
'GRANT' OR EVENT_TYPE = 'REVOKE';
* Interpreting the Results: The results from the ACCESS_HISTORY view include the object type, the specific privilege granted or revoked, the grantee (who received or lost the privilege), and the timestamp of the event. This data is invaluable for audits and compliance checks.
Reference: For detailed information on the ACCESS_HISTORY view and how to interpret its data, please visit the official Snowflake documentation:
https://docs.snowflake.com/en/sql-reference/account-usage/access_history.html