Snowflake Inc.
Granting access rights to objects

Abstract:

A method for sharing data in a multi-tenant database includes granting, by one or more processors, a second role object in a target account access rights to an alias object, wherein the alias object references an object at a top of an object hierarchy. The method also includes granting the second role object in the target account access rights to a first role object included in a share object in a sharer account, wherein the share object includes a first role object having a set of grants to one or more resources of the sharer account, and wherein the target account accesses the one or more resources using the set of grants of the share object and using the alias object without copying the one or more resources.