By skyforbes 
In today’s data-driven world — where security, privacy, and compliance are mission-critical — Snowflake has introduced a simple yet powerful control: the DISABLE_UI_DOWNLOAD_BUTTON parameter.
This feature empowers administrators to hide the data download button in the Snowsight and Classic Console UIs, helping organizations reduce the risk of unintentional data exposure or unauthorized exports.
Whether you’re looking to comply with GDPR, HIPAA, or internal governance policies, this feature offers a low-effort, high-impact enhancement to your Snowflake security toolkit.
Why This Feature Matters
Snowflake already provides robust mechanisms like Role-Based Access Control (RBAC), data masking, and secure views. But the presence of UI-based download buttons has historically offered an easy path for users — especially external collaborators or temporary users — to export sensitive data.
Disabling the download button offers several advantages:
- Prevent Accidental Data Leaks
Reduce casual data exports from query results. - Enhance Regulatory Compliance
Align with data handling requirements in financial, healthcare, and government sectors. - Strengthen Access Control
Limit data export capabilities for external vendors, contractors, or interns.
Note: This parameter disables only the UI download buttons. Users can still export data using APIs, SnowSQL, or third-party tools — additional controls may be necessary for full lockdown.
How to Use DISABLE_UI_DOWNLOAD_BUTTON
This parameter can be configured at either the account or user level, offering flexibility in how access is managed.
Disable for the Entire Account
To hide the download button for all users in your Snowflake account:
USE ROLE ACCOUNTADMIN;
ALTER ACCOUNT SET DISABLE_UI_DOWNLOAD_BUTTON = TRUE;
Disable for Specific Users
Target individual users for tighter control — for example, contractors or temporary analysts:
USE ROLE ACCOUNTADMIN;
ALTER USER contractor_jane SET DISABLE_UI_DOWNLOAD_BUTTON = TRUE;
Revert to Default (Show Download Button)
To re-enable the download button:
- For the account:
ALTER ACCOUNT SET DISABLE_UI_DOWNLOAD_BUTTON = FALSE;
For a user:
ALTER USER contractor_jane SET DISABLE_UI_DOWNLOAD_BUTTON = FALSE;
Default Value:
FALSE(the download button is visible by default)
Parameter Summary
Before: Downlaod Results option available
After: Downlaod Results option unavailable
📍 Real-World Use Cases
Financial Institutions
A bank disables downloads for analysts handling transaction-level data to ensure exports happen only through approved reporting pipelines.
Contractor Governance
A startup disables downloads for external QA contractors while giving internal engineers full access to export capabilities.
Best Practices for a Secure Snowflake Environment
DISABLE_UI_DOWNLOAD_BUTTON is a great start—but for comprehensive data security, combine it with:
- Dynamic Data Masking: Automatically obscure sensitive fields like SSNs or credit card numbers.
- Network Policies: Restrict access to trusted IP addresses or corporate VPNs.
- Access Reviews: Regularly audit user permissions and roles.
- User Education: Communicate the “why” behind restrictions to reduce pushback.
Final Thought
In the evolving landscape of data security, sometimes it’s the smallest switches — like disabling a download button — that make the biggest difference. The DISABLE_UI_DOWNLOAD_BUTTON parameter is a subtle yet powerful tool in the Snowflake security arsenal. Leverage it wisely to foster a culture of secure access and responsible data handling.
#SnowflakeSecurity #DataGovernance #SnowflakeTips #CloudSecurity #Snowsight #SQLTips #TechWriting #DataPrivacy #SecureByDesign