Roles and permissions

Why does the dq_admin role need table owner privileges?

Snowflake's security model restricts data metric function management to table owners only. According to Snowflake's documentation, only the role that owns a table can schedule and manage data metric functions on that table.

To support data quality operations across your tables, the dq_admin role must be granted access to the table owner roles. This permission lets it manage data metric functions on your behalf.

How does Atlan access these elevated privileges?

Atlan maintains security through a controlled access pattern:

• Atlan never receives the dq_admin role or table ownership directly
• All operations execute through the MANAGE_DMF stored procedure
• This procedure runs with dq_admin privileges but only exposes specific, predefined data quality operations
• Every operation remains within Snowflake's secure execution context