Spyglass CLI

Spyglass CLI provides basic primitives to manage your Snowflake access controls as code.

🚣‍♂️ Before Spyglass

Permissions are managed manually across scripts, Snowsight worksheets, and one-off requests.

🚤 After Spyglass

Permissions are managed centrally in git and automatically synced to Snowflake.

Overview

For a detailed explanation, see our Introducing Snowflake Access-as-Code post.

Basic usage of this tool looks like:

1. Import your current Snowflake objects/roles to YAML.

┌───────────┐     spyglass import / sync      ┌──────────┐
│ Snowflake │ ──────────────────────────────► │   YAML   │
└───────────┘                                 └──────────┘

2. Manage them as code.

┌───────────┐          make changes           ┌──────────┐
│           │ ──────────────────────────────► │          │
│ Data User │        spyglass verify          │   YAML   │
│           │ ──────────────────────────────► │          │
└───────────┘                                 └──────────┘

3. Automatically sync objects/roles between your Git repo and Snowflake.

┌───────────┐        spyglass apply           ┌──────────┐
│ Snowflake │ ◄────────────────────────────── │   YAML   │
└───────────┘                                 └──────────┘

Getting started

To try out the CLI, check out our repo: spyglasshq/spyglass-cli.