Design and implement RBAC for data warehouses and BI layers.
npx skills add https://github.com/nrakow/ae-skills-dev --skill access-control-nrakow
Please help me install this Agent Skill. Skill: access-control Source: https://github.com/nrakow/ae-skills-dev/tree/main/skills/access-control Command: npx skills add https://github.com/nrakow/ae-skills-dev --skill access-control-nrakow
RBAC is essential to enforce least-privilege access across data warehouses and BI tools, reducing risk from over-privileged users and simplifying audits.
Define roles in Snowflake, apply masking and row-level policies, and configure Terraform IAM to enforce least-privilege access.
High-intent search queries and answers about installing and using this skill.
To design RBAC in Snowflake, define a role hierarchy aligned to data assets and apply least-privilege grants. This includes generating SQL role grants, masking policies, and row access policies to restrict loaders, transformers, and reporters securely.
Implementing row-level security and data masking involves applying specific SQL policies to restrict data visibility. This process produces row access policies and masking policies within Snowflake to enforce granular least-privilege access controls.
Yes, you can manage data warehouse access control using Terraform IAM configurations. This approach generates Infrastructure as Code to enforce least-privilege access across Snowflake and BigQuery environments consistently.
The best way to audit RBAC for BI tools is to generate audit-ready checks alongside SQL role grants. This validates role hierarchies and access policies, ensuring least-privilege controls are maintained across data warehouses and BI layers.
Yes, this RBAC design approach supports both Snowflake and BigQuery environments. It scopes BI tool access and produces compatible configurations, including Terraform IAM, to enforce least-privilege access across these data warehouse platforms.
stolostronAdd a user to the Submariner team's Konflux RBAC with updated Web UI and cluster permissions.
rnavarychDesign secure GCP architectures with Cloud Run, Terraform, and Workload Identity Federation.
dylpickledevTrace data lineage from blank dashboards to identify root causes across transformations.
wilfriedagoConfigure Keycloak realms, clients, and authentication flows for SSO.
