#064: Secure Your Data Warehouse w/ 4 Simple Roles

May 08, 2024

This week's edition is presented by:

The Modern Engineer Playbook. Accelerate your career by learning to design & build data pipelines from scratch with modern tools. Click here to join 50+ students.

 


  

Let's be real, security isn't a topic that gets us fired up.

Many of us, including myself, first got into this data world because we like to build cool things.

Not because we want to dive into cyber security.

 

But the truth is, although security isn't the most glamorous part of the job, it's arguably one of the most important.

As data professionals, we're trusted with a lot of private & valuable information. 

And this trust comes with a level of responsibility that we can't overlook.

 

At some point, it becomes too reckless to allow anybody to push straight to Production data models.

Or allow rogue analysts to have secret admin permissions and the ability to create custom tables.

When it comes to our world in the data warehouse, it's on us to be organized and securely lock things down.

 

This Week's Video

While each team will have their own unique strategy & naming conventions, this week I want to share what's worked well for me.

It's a simple approach based around 4 high level roles.

it covers each key layer a warehouse pipeline from source data ingestion to end-user reporting.

What You'll Learn:

  • How to outline security roles around user groups
  • 4 sample roles and permissions to grant them
  • Example usage of these roles on Snowflake

 

The good news is many of these concepts will translate across pretty much any database you use.

I hope this video helps demystify the crucial topic of database security.

Or at the very least serves as a good refresher. 

 

Enjoy.

The Starter Guide for Modern Data

Build Modern Data Architectures With More Structure, Faster.

Show more impact with modern tools like dbt, Snowflake & GitHub by following a simple foundational design.

You'll also get other helpful content from me. Unsubscribe anytime.