Dear Andy,

Snowflake is sending you this important message regarding an upcoming behavior change that may impact your account.  Please read below for more details:

Why we’re contacting you:
In the 2025_02 Bundle, which is expected to be enabled by default the week of May 4, 2025 in release 9.12 (dates subject to change), Snowflake announced BCR-1924, which introduced user-based access control (UBAC). UBAC simplifies user collaboration in Snowflake securable objects such as Streamlit applications.

UBAC allows object owners to grant privileges directly to users, streamlining the sharing process and eliminating the need to create or modify roles for every sharing scenario. This is particularly beneficial for sharing limited-audience and under-development assets with specific colleagues.  

What is changing?
With UBAC, principals with the permission to grant privileges, will be able to grant privileges directly to users. For example: 


(Unset) GRANT USAGE ON STREAMLIT streamlit_db.streamlit_schema.streamlit_app TO USER bob;

We understand that this new access control model may affect your governance practices. If you need to disable UBAC in your account after Bundle 2025_02 becomes enabled by default, set the account parameter DISABLE_USER_PRIVILEGE_GRANTS = TRUE

(Unset) ALTER ACCOUNT <name> SET DISABLE_USER_PRIVILEGE_GRANTS = TRUE

For more information, read the User-based access control private preview documentation. This preview topic provides use-case scenarios, FAQs that answer common questions, and further guidance, including;  when to use RBAC vs. UBAC, how to monitor UBAC usage, and best practices for integrating UBAC into your existing governance processes. 

We’re here to help:
If you have any questions regarding this change, please open a case with our support team and reference BCR-1924.

Sincerely,
Snowflake Global Technical Support



To provide the best experience and value to our customers, Snowflake is continually improving and enhancing our service offerings. As part of these ongoing efforts, changes to existing/established product behavior are sometimes required. Please see our behavior change policy to learn more about the process.

You received this email because you were identified as a contact for operational messages related to Snowflake.
Snowflake | Suite 3A, 106 East Babcock Street, Bozeman, Montana 59715