Snowflake's global role namespace becomes unmanageable at scale, leading to 'role sprawl.' Database Roles solve this by scoping permissions locally within a single database, keeping the global namespace clean. They work by decoupling 'who' (functional account roles) from 'what' (data access), bridged via a GRANT statement. Key
Table of contents
The Architecture of Scope: How it WorksFrom Scopes to Sessions: The SQL WorkflowGet Pascal Pfäffle’s stories in your inboxWhy This Strategy Matters: The Three PillarsConclusionSort: