Permissions and plan mode

Introduction to Snowflake CoCo CLI

James Cha-Earley

Senior Developer Advocate, Snowflake

You decide

Querying data, changing it and running commands, all decided by you

The plan

Step one, what runs and what asks

The plan

Step two, permission modes

The plan

Step three, plan a change

The plan

Step four, a read-only session

Runs without asking

Requests that only read and run right away

Asks for approval

Requests that make a change and wait for you

Approving a change

Asked for: monthly revenue, no cancelled orders

$$

The Execute SQL box with three choices

The three options

Option one, Yes

The three options

Option two, Allow CREATE in any schema

The three options

Option three, No

Permission modes

Confirm actions, the default mode

Permission modes

Bypass safeguards, beside confirm actions

Switching with Shift+Tab

The status bar in confirm actions mode

Switching with Shift+Tab

The status bar in bypass safeguards mode

Press Shift+Tab to switch modes

Plan mode with Ctrl+P

Small changes, approved one statement at a time

Plan mode with Ctrl+P

Bigger changes, where you see the whole approach first

Plan mode with Ctrl+P

Press Ctrl+P, or type /plan

The status bar with plan mode on

Reading the plan

A plan with its steps, its SQL and a verification query

Approving the plan

Tab adds an instruction before you approve

The plan confirmation with an instruction to round revenue to two decimals

The new table

The table created, with a preview of its monthly revenue

Read-only sessions

Start with cortex --sql-read-only

$$

The welcome screen and status bar of a read-only session

Writes are refused

Snowflake rejects it, even after you approve

$$

A create statement rejected with an access control error in red

Turning it off with /guardrails

Type /guardrails, then remove the restriction

$$

The guardrails menu with the option to remove the current restriction

Commands from this video

Shift+Tab, Ctrl+P or the plan command, Tab, the read-only flag and the guardrails command

Let's practice!

Introduction to Snowflake CoCo CLI

Preparing Video For Download...