Skip to content

Network Policy - User level

In this tutorial we will show how you can create a network policy that is only applied to an individual user.

Video

Video in development

Requirement

  • Snowflake account, you can use a free trial. We also assume no complex security needs.

Walk Through

We'll need a user to apply the policy to. Typically this is applied to a service user with an Key Pair but you can apply it to who ever you want. You'll also want to update your I.P addresses since these are just for an example.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
use role accountadmin;

-- Create the user. Optional add type = 'service' for service accounts.
create user <username>;

-- Create a network policy and apply it to the user. 
create network policy <policy_name>  allowed_ip_list = ('<IP ADDRESS>');

-- Apply the policy on the user.
alter user <username> set network_policy = <policy_name> ;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
use role accountadmin;

-- Create the user. Optional add type = 'service' for service accounts.
create user danielwilczak;

-- Create a network policy and apply it to the user. 
create network policy my_policy allowed_ip_list = ('34.230.230.9');

-- Apply the policy on the user.
alter user danielwilczak set network_policy = my_policy;
status
Statement executed successfully.

Now the network policy has been applied to your user.