Granted Patent B1

US 12,218,948 · App. 18/409,507 · Granted Feb 4, 2025

Inventors: Christine A. Avanessians (Walnut Creek, CA); Damien Carru (New York, NY); Ramachandran Natarajan Iyer (Fremont, CA); Dennis Edgar Lynch (San Carlos, CA); Subramanian Muralidhar (Mercer Island, WA)

Assignee: Snowflake Inc.

H04L63/105H04L63/102

Abstract

Claims (37)

1. A system comprising:

a set of hardware processors; and

memory storing instructions that cause the set of hardware processors to perform operations comprising:

receiving, from a user of an organization-level account for a specified organization, a request to perform an administrative-level operation with respect to at least one non-organization-level account of the specified organization; and

in response to the request:

determining a set of roles assigned to the user within the organization-level account;

determining whether at least one role in the set of roles permits the user to perform the administrative-level operation with respect to the at least one non-organization-level account; and

in response to determining that at least one role in the set of roles permits the user to perform the administrative-level operation with respect to the at least one non-organization-level account, performing the administrative-level operation with respect to the at least one non-organization-level account.

2. The system of claim 1 , wherein the administrative-level operation comprises managing a new user or an existing user with respect to the at least one non-organization-level account.

3. The system of claim 1 , wherein the administrative-level operation comprises managing a data object of the at least one non-organization-level account.

4. The system of claim 1 , wherein the administrative-level operation comprises monitoring metadata of the at least one non-organization-level account.

5. The system of claim 1 , wherein the administrative-level operation comprises at least one of viewing or managing an organization view of the at least one non-organization-level account.

6. The system of claim 1 , wherein the administrative-level operation comprises switching into a context of the at least one non-organization-level account.

7. The system of claim 1 , wherein the administrative-level operation comprises moving the at least one non-organization-level account from a first deployment of a data platform to a second deployment of the data platform.

8. A method comprising:

receiving, at a specified deployment of a data platform, a request from a user of an organization-level account for a specified organization to perform an administrative-level operation with respect to at least one non-organization-level account in the specified organization; and

in response to the request:

determining, by the specified deployment, a set of roles assigned to the user within the organization-level account;

determining, by the specified deployment, whether at least one role in the set of roles permits the user to perform the administrative-level operation with respect to the at least one non-organization-level account; and

in response to determining that at least one role in the set of roles permits the user to perform the administrative-level operation with respect to the at least one non-organization-level account, performing, by the specified deployment, the administrative-level operation with respect to the at least one non-organization-level account.

9. The method of claim 8 , wherein the administrative-level operation comprises managing a new user or an existing user with respect to the at least one non-organization-level account.

10. The method of claim 8 , wherein the administrative-level operation comprises managing a data object of the at least one non-organization-level account.

11. The method of claim 8 , wherein the administrative-level operation comprises monitoring metadata of the at least one non-organization-level account.

12. The method of claim 8 , wherein the administrative-level operation comprises at least one of viewing or managing an organization view of the at least one non-organization-level account.

13. The method of claim 8 , wherein the administrative-level operation comprises switching into a context of the at least one non-organization-level account.

14. The method of claim 8 , wherein the administrative-level operation comprises moving the at least one non-organization-level account from a first deployment of a data platform to a second deployment of the data platform.

15. A machine-storage medium comprising instructions that, when executed by one or more hardware processors of a machine, configure the machine to perform operations comprising:

receiving a request, from a user of an organization-level account for a specified organization, to perform an administrative-level operation with respect to at least one non-organization-level account of the specified organization; and

in response to the request:

determining a set of roles assigned to the user within the organization-level account;

determining whether at least one role in the set of roles permits the user to perform the administrative-level operation with respect to the at least one non-organization-level account; and

in response to determining that at least one role in the set of roles permits the user to perform the administrative-level operation with respect to the at least one non-organization-level account, performing the administrative-level operation with respect to the at least one non-organization-level account.

16. The machine-storage medium of claim 15 , wherein the administrative-level operation comprises managing a new user or an existing user with respect to the at least one non-organization-level account.

17. The machine-storage medium of claim 15 , wherein the administrative-level operation comprises managing a data object of the at least one non-organization-level account.

18. The machine-storage medium of claim 15 , wherein the administrative-level operation comprises at least one of viewing or managing an organization view of the at least one non-organization-level account.

19. The machine-storage medium of claim 15 , wherein the administrative-level operation comprises switching into a context of the at least one non-organization-level account.

20. The machine-storage medium of claim 15 , wherein the administrative-level operation comprises moving the at least one non-organization-level account from a first deployment of a data platform to a second deployment of the data platform.

Assignments (1)

Continuity (1)

References Cited (170)