snowtower-adminlisted

# SnowTower Administrator Guide A comprehensive skill for administrators managing Snowflake infrastructure through SnowTower. ## Who This Skill Is For - **Infrastructure administrators** managing SnowDDL deployments - **Security admins** handling user provisioning and roles - **DevOps engineers** managing CI/CD pipelines - **On-call engineers** troubleshooting production issues --- ## Quick Command Reference ```bash # Essential commands uv run snowddl-plan # Preview changes (ALWAYS run first) uv run deploy-safe # Apply changes safely uv run manage-users # User lifecycle management uv run manage-warehouses # Warehouse operations uv run manage-costs # Cost analysis ``` --- ## Core Operations ### SnowDDL Deployment Workflow **CRITICAL: Always use `deploy-safe`, never raw `snowddl-apply`** ```bash # 1. Make changes to YAML files in snowddl/ vim snowddl/user.yaml # 2. ALWAYS preview first uv run snowddl-plan # 3. Review the plan output carefully # Look for: CREATE, ALTER, DROP, GRANT, REVOKE statements # 4. Apply using safe deployment (preserves schema grants) uv run deploy-safe ``` **Why `deploy-safe`?** SnowDDL excludes SCHEMA objects from management, which can cause it to revoke schema-level grants. The `deploy-safe` wrapper automatically restores these grants after every deployment, preventing dbt and other tools from losing permissions. ### Understanding Plan Output ``` [APPLY] CREATE USER "NEW_USER" ← New objec