SHOW USERS command: Output filtered based on privileges granted to active role¶

The SHOW USERS command behaves as follows:

Previously:

To see the output of the SHOW USERS command, the active role must have the global MANAGE GRANTS privilege.

When you try to use a role that does not have the global MANAGE GRANTS privilege and run the SHOW USERS command, Snowflake returns the following error message:

Insufficient privileges to operate on account '<account_name>'

Currently:

Any user can execute the SHOW USERS command. Snowflake returns all users and filters the output based upon the privileges granted to the active role that runs the command. The user that runs the command will always be able to see the username in the results. To see the output, the active role must have either:

• The OWNERSHIP privilege on the user object.

• The CREATE USER privilege on the account.

Ref: 975