# Manage SnowTower Administration

Snowflake infrastructure changes can be risky when users, roles, schemas, and deployments are managed manually. This skill gives SnowTower administrators structured workflows for SnowDDL planning, safe deployment, provisioning, troubleshooting, and security checks.

## Install

```bash
npx skillstore add database-tycoon/snowtower-admin
```

## Metadata

- Status: approved
- Slug: database-tycoon-snowtower-admin
- Skillstore revision: r1
- Version status: missing
- Tree hash: b8e0feaf40c7ddae21297a73c7b1cd1af6b92eb729acd063cacacffddbc8b1ef
- Author: Database-Tycoon
- GitHub username: Database-Tycoon
- License: MIT
- Repository: https://github.com/Database-Tycoon/SnowTower/tree/main/.claude/skills/snowtower-admin
- Ref: 7db9b9f06e0ab79c575b58bc48c4d8dc9849f424
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem, env\_access
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/database-tycoon-snowtower-admin
- Manifest: https://skillstore.pages.dev/api/skills/database-tycoon-snowtower-admin/manifest

## Capabilities

- Provides a SnowDDL deployment workflow that previews changes before applying them.
- Explains Snowflake user creation through an interactive wizard, YAML edits, or command-line flags.
- Documents role hierarchy, business roles, technical roles, and grants used by SnowTower.
- Guides database, schema, warehouse, and network policy configuration through YAML examples.
- Lists CI/CD, troubleshooting, rollback, service account reset, health check, and audit commands.
- Highlights security operations for MFA checks, network policies, and emergency access documentation.

## Use Cases

- Deploy SnowDDL changes safely: Preview SnowDDL changes, inspect grants and drops, then apply changes through the safer deployment wrapper.
- Provision Snowflake users and roles: Create users, assign business roles, configure authentication, and understand role inheritance in SnowTower.
- Troubleshoot production administration issues: Diagnose authentication failures, schema grant drift, locked users, warehouse status, and service account resets.

## Prompt Templates

### Preview a deployment

```
Help me preview my SnowTower SnowDDL changes and explain which plan output lines need careful review before deployment.
```

### Add a new Snowflake user

```
Guide me through adding a new Snowflake user in SnowTower with the right user type, default role, warehouse, and authentication fields.
```

### Investigate schema grant drift

```
The SnowDDL plan shows many schema grant revokes. Help me determine whether this is drift and how to deploy safely.
```

### Plan an emergency account reset

```
Create a cautious step-by-step plan to reset the SnowTower Snowflake service account keys and update dependent GitHub secrets.
```

## Limitations

- Requires an existing SnowTower repository with the referenced scripts and SnowDDL layout.
- Assumes the operator has authorized Snowflake, GitHub, and local shell access.
- Does not verify production safety unless the operator reviews plans and command output.
- Includes privileged administration workflows that should not be used by untrusted users.

## Best Practices

- Run a plan command and review destructive changes before every deployment.
- Limit use of administrator roles and document emergency access activity.
- Store private keys and encryption keys in approved secret management systems.

## Anti Patterns

- Do not apply SnowDDL changes without reviewing drops, revokes, and admin role changes.
- Do not paste private keys, Fernet keys, or Snowflake credentials into chat prompts.
- Do not use emergency accounts for routine operations or convenience access.

## Security Audit

- Audited at: 2026-07-09T01:39:13.208\+00:00
- Summary: Most static command findings are Markdown documentation or legitimate administrative command examples, not hidden code execution. Confirmed risks remain because the skill guides privileged Snowflake operations, references private keys and .env secrets, updates GitHub secrets, and documents an emergency account exception without network policy.

## Stats

- Views: 312
- Downloads: 10
- Favorites: 0
- Popularity score: 0