Snowflake Row Access Policies

Snowflake Row Access Policies provide row-level security, letting organizations control which rows of a table or view each user is allowed to see. A policy is a schema-level object that evaluates conditions at query time, typically comparing the current role or user against a mapping table, and returns only the rows that condition allows.

Once a row access policy is attached to a table or view, every query automatically applies it, whether the data is reached from SQL, a BI tool, an application or a secure data share. This removes the need to build and maintain many filtered views for different audiences. Policies can reference mapping tables for flexible entitlement logic, work together with dynamic data masking for combined row and column protection, and are tracked through Access History for auditing. The feature is available on Snowflake Enterprise Edition and above.

Common uses include restricting sales data by region, separating tenants in multi-tenant SaaS applications, limiting healthcare records to authorized care teams and sharing a single dataset with many partners while each sees only its own rows.