Snowflake show users provides database administrators and security teams a powerful, centralized way to list and manage user accounts across your data cloud. This capability supports compliance audits, role governance, and streamlined access reviews in multi-team environments.
By combining policy controls with real-time metadata, Snowflake show users delivers actionable visibility without disrupting ongoing analytics workloads.
| User Name | Login Name | Default Role | Created On | Disabled |
|---|---|---|---|---|
| ANALYST_JANE | jane.snowflake.com | ANALYST_ROLE | 2024-01-15 09:12:00 | No |
| DATAENG_ALEX | alex_edinburgh | SYSADMIN | 2023-11-03 14:45:00 | No |
| BI_MARCO | marco.reporting | SECURITYADMIN | 2024-03-22 10:01:00 | Yes |
| SUPPORT_LIA | lia_support | SYSADMIN | 2024-05-01 08:30:00 | No |
Managing User Accounts with Snowflake show users
Snowflake show users delivers a concise, SQL-driven view of all user identities defined within your account. This command surfaces key attributes such as login names, assigned default roles, and timestamps that indicate when each identity was created or modified.
For security and governance teams, the output supports rapid traceability between human operators and service accounts. You can filter by name, inspect disabled entries, and integrate results into broader audit workflows without exporting extensive system catalogs.
Operational teams benefit from consistent column ordering and predictable pagination behavior, enabling scripted monitoring and scheduled policy checks. Regular execution of Snowflake show users keeps identity sprawl visible and reinforces least-privilege practices across business units.
Filtering and Querying User Metadata
Snowflake extend show users with WHERE clauses to target specific identities, account teams, or environments. You can combine conditions on login name, role, and disabled status to narrow results for compliance sprints or access recertification.
Using pattern matching on user names helps locate dormant accounts, shared service identities, or test accounts that no longer align with current data strategies. Conditional filters also support scheduled cleanup, reducing risk from stale credentials that may linger across schemas.
When paired with role-based access controls, filtered outputs ensure that junior analysts see only the subset of users relevant to their scope, while security officers retain full account visibility for oversight.
Security, Compliance, and Governance Use Cases
Regulatory frameworks often demand auditable proof of who can access sensitive data assets, and Snowflake show users provides a reliable source of identity metadata. Security teams correlate these records with access history to detect excessive privileges or misaligned role assignments.
During internal or external audits, governance stakeholders rely on timestamped user listings to demonstrate controlled provisioning, timely deprovisioning, and segregation of duties. Integrating this command into periodic review cycles supports streamlined evidence collection with minimal manual overhead.
Operational resilience improves when incident response workflows reference a stable inventory of users, enabling faster triage during suspicious activity or policy violations.
Performance Considerations and Best Practices
Snowflake show users operates efficiently across enterprise accounts, but query patterns can influence runtime in large deployments. Limiting scope with specific name filters or leveraging result caching keeps interactive sessions responsive during governance reviews.
Scheduling heavy metadata scans during off-peak windows reduces contention with analytics pipelines, ensuring that routine show commands do not degrade concurrent query performance.
Documenting standard filters, approved roles, and exception handling procedures helps maintain consistent interpretations of user status across security, finance, and engineering teams.
Optimizing Identity Visibility and Governance
- Run scheduled Snowflake show users exports to build a historical record of user lifecycle events.
- Correlate output with access history to identify inactive or over-privileged accounts.
- Standardize naming conventions to simplify filtering and improve clarity during audits.
- Integrate results into automated dashboards for continuous policy compliance and trend analysis.
- Define clear exception handling steps for flagged accounts to accelerate remediation workflows.
FAQ
Reader questions
How do I list all active users in my Snowflake account?
Execute SHOW USERS and filter out disabled entries by adding a WHERE clause that checks the disabled column for a false value.
Can I restrict which roles see certain users when I run show users?
Yes, combine role-based access controls with row-level security on identity views so that each role only sees the subset of users relevant to its responsibilities.
What information does Snowflake show users return for service accounts?
The command returns service account login names, assigned default roles, creation timestamps, and disabled status, enabling precise tracking of automated identities.
How frequently should I run show users to maintain an up-to-date identity inventory?
Run the command at least weekly for compliance-driven environments and immediately after any major provisioning or deprovisioning event to keep your inventory current.