Snowflake data providers can share data from multiple databases by using secure views. A secure view can reference objects suchas schemas, tables, and other views contained in one or more databases, as long as those databases belong to the same account.
Sharing a secure view that references objects from multiple databases is different from sharing data contained in asingle database.
In addition to performing all the standard steps to share data, you must also grant the REFERENCE_USAGE privilegeon each database referenced by a secure view that you wish to share. However, you do not need to grant REFERENCE_USAGE on thedatabase that contains the secure view.
Note
You cannot use database roles to share data from multiple databases. You cannot grant the REFERENCE_USAGE privilege to adatabase role and you cannot use a database role to grant a secure viewthat references objects from multiple databases to a share.
You must grant the REFERENCE_USAGE privilege separately on each database referenced in a secure view, before granting thesecure view to a share.
To share a secure view that references objects from multiple databases:
Connect to your Snowflake account as a user with the ACCOUNTADMIN role or a role granted the CREATE SHARE global privilege.For more details about the CREATE SHARE privilege, see Enabling non-ACCOUNTADMIN roles to perform data sharing tasks.
Create a share using CREATE SHARE.
Grant the USAGE privilege on the database you wish to share using GRANT <privilege> … TO SHARE.
Note
If you are sharing a secure view that references objects contained in multiple databases, you only need to grant the USAGE privilegeto the database where the secure view is created. You can only grant USAGE to one database per share.
Granting the USAGE privilege to the database associates the share with a database, which is required to grant other privilegesto the share.
Grant the USAGE privilege on each schema in the database you wish to share using GRANT <privilege> … TO SHARE.
Grant the REFERENCE_USAGE privilege on each additional database that contains objects referenced by the view you wish to share usingGRANT <privilege> … TO SHARE.
Add the view to the share by granting the SELECT privilege on the view using GRANT <privilege> … TO SHARE.
Add one or more consumer accounts to the share using ALTER SHARE.
The share is now ready to be consumed by the specified accounts.
Note
To share a secure view that references a UDF in a different database, you must make the UDF secure. For more details about creating asecure UDF, see Creating a Secure UDF or Stored Procedure.
Examples¶
Refer to the following examples for creating secure views.
Sharing data from multiple database with consumers in other regions¶
You can share data from multiple databases with consumer accounts in other regions and cloud platforms by using a replication group.Include the share and each database the share references in the group to replicate data to a Snowflake account in another region.You can then add consumer accounts to the replicated share. For detailed instructions,see Sharing data securely across regions and cloud platforms.
