Skip to content

Required Privileges

PerfScope follows a least-privilege approach and only requires privileges necessary to perform query-performance analysis.

Privilege Purpose
USAGE ON WAREHOUSE Allows PerfScope to execute analytical queries using the selected warehouse.
Access to required Snowflake system metadata Allows PerfScope to analyze query and account usage information exposed to the application.

Where supported and requested by the application, an administrator may grant:

GRANT USAGE
ON WAREHOUSE <your_warehouse>
TO APPLICATION PERFSCOPE;

and, where applicable:

GRANT IMPORTED PRIVILEGES
ON DATABASE SNOWFLAKE
TO APPLICATION PERFSCOPE;

PerfScope does not require

PerfScope is designed so that its core functionality does not require:

  • Access to your application tables solely for performance ranking
  • External network access
  • External access integrations
  • Third-party API credentials
  • Export of Snowflake query metadata to an external service
  • Continued use of ACCOUNTADMIN after administrative setup

Note

Snowflake Native App privileges are governed by the application's manifest and by privileges explicitly approved by the consumer. Your Snowflake administrator should review the privileges presented during installation.