skills.rest
sfc-gh-miwhitaker
sfc-gh-miwhitakerCOMMUNITY
Explore all skills by this author →
GitHub

cowork-only-users

Provision CoWork-only Snowflake users without Snowsight or SQL access.

3|1|Updated Mar 2, 2026
Search Tags:#Snowflake#role management#user provisioning#CoWork#admin runbook
One-click install
npx skills add https://github.com/sfc-gh-miwhitaker/sfe-public --skill cowork-only-users
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cowork-only-users
Source: https://github.com/sfc-gh-miwhitaker/sfe-public/tree/main/guide-cowork-only-users/.claude/skills/cowork-only-users
Command: npx skills add https://github.com/sfc-gh-miwhitaker/sfe-public --skill cowork-only-users

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides an admin runbook for provisioning Snowflake CoWork-only users, ensuring secure and efficient access with no Snowsight or SQL access.

Core Features & Use Cases

  • Admin Runbook: Step-by-step guide for setting up CoWork-only users.
  • Role Management: Covers the CORTEX_AGENT_USER role and CoWork object setup.
  • User Provisioning: Supports single and bulk user provisioning.
  • Use Case: For Snowflake admins who need to grant CoWork access to a group of users without Snowsight or SQL access.

Quick Start

Run the 'sql/setup_role.sql' script to create the COWORK_USER role and grant necessary permissions.

Frequently Asked Questions about cowork-only-users

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I provision Snowflake users with CoWork-only access?▼

Provision Snowflake CoWork-only users by running the admin runbook setup script to create the COWORK_USER role, ensuring secure access without Snowsight or SQL. This guides role setup, user creation, and agent management.

Can I set up Snowflake users to use CoWork without granting Snowsight or SQL access?▼

Yes, you can restrict users to CoWork without Snowsight or SQL access by assigning the specific COWORK_USER role. This role grants CoWork-specific permissions while blocking standard interface and query execution.

What is the best way to bulk provision CoWork-only users in Snowflake?▼

The best way to bulk provision CoWork-only users is using the admin runbook, which supports both single and bulk user provisioning alongside the CORTEX_AGENT_USER role setup for secure agent management.

Do I need admin privileges to create the COWORK_USER role in Snowflake?▼

Yes, you need Snowflake admin privileges to create the COWORK_USER role and execute the setup script. The runbook requires an existing Snowflake account with administrative access to grant necessary permissions.

What permissions does the setup script grant to the CoWork user role?▼

The setup script grants CoWork-specific object permissions and agent management access to the COWORK_USER role. It ensures users can interact with CoWork agents while maintaining secure access restrictions.

Why should I restrict Snowflake users to CoWork-only instead of standard account access?▼

Restricting users to CoWork-only access limits exposure to sensitive data and query interfaces by removing Snowsight and SQL permissions. This ensures secure, focused interaction with CoWork agents.

Related Skills

Explore More Software Engineering Skills→
sfc-gh-miwhitakersfc-gh-miwhitaker
3

snowflake-cost-visibility

Configure Snowflake budgets, resource monitors, and role-based access control.

Community
Intermediate
CarbeneAICarbeneAI
9

Observability

Monitor real-time multi-agent activity and tool usage via WebSocket streaming.

Community
Advanced
microsoftmicrosoft
242

azure-role-selector

Identify least-privilege Azure RBAC roles and generate CLI and Bicep assignment snippets.

Official
Intermediate
sfc-gh-miwhitakersfc-gh-miwhitaker
3

agent-to-agent-orchestration

Guide selection and implementation of inter-Snowflake Cortex Agent communication mechanisms.

Community
Intermediate