组织管理员

组织管理员执行组织级任务，例如管理账户和查看组织级使用信息。目前，有两种执行组织级任务的方法：

• 使用组织账户中的 GLOBALORGADMIN 角色
• 使用 ORGADMIN 角色

使用 GLOBALORGADMIN 角色¶

Multi-account organizations should use the GLOBALORGADMIN in the organization account to perform organization-level tasks. A user with the GLOBALORGADMIN role is also known as the global organization administrator.

要以全局组织管理员身份执行任务，请执行以下操作：

1. 登录组织账户。
2. 执行下列操作之一：

   • 如果要在 SQL 工作表中执行任务，请执行以下命令：

     Copy codeExpand code block

     USE ROLE GLOBALORGADMIN;

     Show lessSee more

     Scroll to top

   • If you are performing other tasks in Snowsight, switch your active role to GLOBALORGADMIN.

使用 ORGADMIN 角色¶

要使用 ORGADMIN 角色执行任务，请执行以下操作：

1. 登录已启用 ORGADMIN 的账户。
2. 执行下列操作之一：

   • 如果要在 SQL 工作表中执行任务，请执行以下命令：

     Copy codeExpand code block

     USE ROLE ORGADMIN;

     Show lessSee more

     Scroll to top

   • If you are performing other tasks in Snowsight, switch your active role to ORGADMIN.

在账户中启用 ORGADMIN 角色¶

The first account in an organization has the ORGADMIN role enabled. You can use this account to enable the role in other accounts. For example, to enable the ORGADMIN role for an account my_account1, the organization administrator can execute the following command from an account that already has the ORGADMIN role enabled:

USE ROLE ORGADMIN;

ALTER ACCOUNT my_account1 SET IS_ORG_ADMIN = TRUE;

启用 ORGADMIN 角色时，请注意以下三点：

• The ALTER ACCOUNT syntax only accepts the account name format of the account identifier. You cannot use the account locator to specify the account.
• By default, the ORGADMIN role can be enabled in a maximum of eight accounts. If your organization requires more accounts with the ORGADMIN role, contact Snowflake Support.
• The ORGADMIN role cannot be enabled for a reader account.

禁用 ORGADMIN 角色¶

You can prevent regular, ORGADMIN-enabled accounts from being used to perform organization-level tasks. To accomplish this, execute the ALTER ACCOUNT command to remove the ORGADMIN role from the account. For example, if you want to stop using the account_123 account to perform organization-level tasks, do the following:

1. Sign in to a different ORGADMIN-enabled account.

2. Assume the ORGADMIN role:

   Copy codeExpand code block

   USE ROLE ORGADMIN;

   Show lessSee more

   Scroll to top

3. 执行以下命令：

   Copy codeExpand code block

   ALTER ACCOUNT account_123 SET IS_ORG_ADMIN = FALSE;

   Show lessSee more

   Scroll to top

The ALTER ACCOUNT syntax only accepts the account name format of the account identifier. You cannot use the account locator to specify the account.