|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/snowflake-database-managing-user-access-control-and-more/
课程评论：没有评论
**课程名称：** Snowflake 数据库 - 用户访问控制管理及其他 **课程概述：** 本课程深入探讨 Snowflake 数据库中强大的访问控制机制。Snowflake 结合了**自主访问控制 (DAC)** 和**基于角色的访问控制 (RBAC)** 的优点。在 DAC 模型中，每个对象都有一个所有者，可以授权他人访问。在 RBAC 模型中，权限被分配给角色，然后角色再分配给用户。 **核心概念：** * **可授权对象 (Securable objects):** Snowflake 中可以授予访问权限的实体。 * **角色 (Roles):** 可以被授予权限的实体。角色可以分配给用户，也可以分配给其他角色，形成角色层级结构，这是理解 Snowflake 访问控制的关键。 * **权限 (Privileges):** 执行对象上特定操作的能力。通过不同的权限可以精细控制访问级别。 * **用户 (Users):** Snowflake 能够识别的用户身份，可以是个人或应用程序。 **Snowflake 访问控制模型：** Snowflake 的访问控制模型通过将权限授予角色，再将角色分配给其他角色或用户来实现对可授权对象的访问。此外，每个可授权对象都有一个所有者，可以向其他角色授予访问权限。这种模型与将权限直接分配给每个用户或用户组的用户基础访问控制模型不同，旨在提供高度的控制灵活性。 **学习目标：** 完成本课程后，您将全面掌握 Snowflake 访问控制的各项概念，并能熟练运用其强大的功能。
Snowflake's approach to access control combines aspects from Discretionary Access Control (DAC) where each object has an owner, who can in turn grant access to that object. Also included are aspects from Role-based Access Control (RBAC) where access privileges are assigned to roles, which are in turn assigned to users.There are key concepts that are necessary in order to understand access control in Snowflake. These include:Securable objects: Entities to which access can be granted.Roles: An entity to which privileges can be granted. Roles are in turn assigned to users. Note that roles can also be assigned to other roles, creating a role hierarchy which is a critical concept to understand in SnowflakePrivileges: The ability to perform some action on an object. Multiple distinct privileges may be used to control the granularity of access granted.Users: A user identity recognized by Snowflake, whether associated with a person or application.In the Snowflake role-based access model, access to securable objects is allowed via privileges assigned to roles, which are in turn assigned to other roles or users. In addition, each securable object has an owner that can grant access to other roles. This model differs from user-based access control models, where rights and privileges are assigned to each user or group of users. The Snowflake model is designed to provide a significant amount of both control and flexibility.After completing this course you will have a complete understanding of these concepts and more.
