USER_ID

NUMBER

Internal/system-generated identifier for the user.

NAME

VARCHAR

A unique identifier for the user.

CREATED_ON

TIMESTAMP_LTZ

Date and time (in the UTC time zone) when the user’s account was created.

DELETED_ON

TIMESTAMP_LTZ

Date and time (in the UTC time zone) when the user’s account was deleted.

LOGIN_NAME

VARCHAR

Name that the user enters to log into the system.

DISPLAY_NAME

VARCHAR

Name displayed for the user in the Snowflake web interface.

FIRST_NAME

VARCHAR

First name of the user.

LAST_NAME

VARCHAR

Last name of the user.

EMAIL

VARCHAR

Email address for the user.

MUST_CHANGE_PASSWORD

BOOLEAN

Specifies whether the user is forced to change their password on their next login.

HAS_PASSWORD

BOOLEAN

Specifies whether a password was created for the user.

COMMENT

VARCHAR

Comment for the user.

DISABLED

VARIANT

Specified whether the user account is disabled preventing the user from logging in to the Snowflake and running queries.

SNOWFLAKE_LOCK

VARIANT

Specifies whether a temporary lock has been placed on the user’s account.

DEFAULT_WAREHOUSE

VARCHAR

The virtual warehouse that is active by default for the user’s session upon login.

DEFAULT_NAMESPACE

VARCHAR

The namespace (database only or database and schema) that is active by default for the user’s session upon login.

DEFAULT_ROLE

VARCHAR

The role that is active by default for the user’s session upon login.

EXT_AUTHN_DUO

BOOLEAN

Specifies whether Duo Security is enabled for the user, which requires the user to use MFA (multi-factor authorization) for login.

EXT_AUTHN_UID

VARCHAR

The authorization ID used for Duo Security.

HAS_MFA

BOOLEAN

Specifies whether the user is enrolled for multi-factor authentication.

BYPASS_MFA_UNTIL

TIMESTAMP_LTZ

The number of minutes to temporarily bypass MFA for the user.

LAST_SUCCESS_LOGIN

TIMESTAMP_LTZ

Date and time (in the UTC time zone) when the user last logged in to the Snowflake.

EXPIRES_AT

TIMESTAMP_LTZ

The date and time when the user’s status is set to EXPIRED and the user can no longer log in. This is useful for defining temporary users (e.g. users who should only have access to Snowflake for a limited time period).

LOCKED_UNTIL_TIME

TIMESTAMP_LTZ

Specifies the number of minutes until the temporary lock on the user login is cleared.

HAS_RSA_PUBLIC_KEY

BOOLEAN

Specifies whether RSA public key used for key pair authentication has been set up for the user.

PASSWORD_LAST_SET_TIME

TIMESTAMP_LTZ

The timestamp on which the last non-null password was set for the user. Default to null if no password has been set yet or if Snowflake is unable to determine the timestamp for the user before the inclusion of this column.

OWNER

VARCHAR

Specifies the role with the OWNERSHIP privilege on the object.

DEFAULT_SECONDARY_ROLE

VARCHAR

Specifies the default secondary role for the user (that is, ALL) or NULL if not set.

HAS_PAT

BOOLEAN

If TRUE, a programmatic access token (PAT) has been generated for the user.

HAS_WORKLOAD_IDENTITY

BOOLEAN

If TRUE, the user is configured to use workload identity federation to authenticate with Snowflake.

TYPE

VARCHAR

Specifies the type of user.

DATABASE_NAME

VARCHAR

When the user TYPE is SNOWFLAKE_SERVICE, it specifies the service’s database name; otherwise, it’s NULL.

DATABASE_ID

NUMBER

When the user TYPE is SNOWFLAKE_SERVICE, it specifies the internal, Snowflake-generated identifier for the service’s database; otherwise, it’s NULL.

SCHEMA_NAME

VARCHAR

When the user TYPE is SNOWFLAKE_SERVICE, it specifies the service’s schema name; otherwise, it’s NULL.

SCHEMA_ID

NUMBER

When the user TYPE is SNOWFLAKE_SERVICE, it specifies the internal, Snowflake-generated identifier for the service’s schema; otherwise, it’s NULL.

IS_FROM_ORGANIZATION_USER

BOOLEAN

If TRUE, the user was imported from an organization user.