What causes Data Sharing Insufficient Privileges?

Creating or modifying a share requires ACCOUNTADMIN or a role with CREATE SHARE privilege, but the current role lacks it. A consumer account is attempting to GRANT on objects within a shared database — this is not permitted (grants on shared objects must be done by the provider). The share was not granted USAGE on the source database or schema before being shared to the consumer account. A replication group refresh for a share failed because the replication role lacks sufficient privileges on the shared objects

How do I fix Data Sharing Insufficient Privileges?

Verify the executing role has CREATE SHARE: `SHOW GRANTS TO ROLE ` and look for `CREATE SHARE` on the ACCOUNT.. For provider setup: `GRANT USAGE ON DATABASE TO SHARE ; GRANT SELECT ON ALL TABLES IN SCHEMA TO SHARE ;`.. Consumer accounts cannot grant on shared objects — route permission requests to the provider account.. For replication: grant the replication role explicit access to all shared databases and schemas.. Use ACCOUNTADMIN role when creating or modifying shares for the first time.

High severitycredentials

Power BI Refresh Error:
Data Sharing Insufficient Privileges

What does this error mean?

A Snowflake Data Sharing operation failed because the executing role lacks the required privileges on the share, database, or consumer account. This occurs when creating, modifying, or consuming a share without the necessary grants.

Common causes

1Creating or modifying a share requires ACCOUNTADMIN or a role with CREATE SHARE privilege, but the current role lacks it
2A consumer account is attempting to GRANT on objects within a shared database — this is not permitted (grants on shared objects must be done by the provider)
3The share was not granted USAGE on the source database or schema before being shared to the consumer account
4A replication group refresh for a share failed because the replication role lacks sufficient privileges on the shared objects

How to fix it

1Verify the executing role has CREATE SHARE: `SHOW GRANTS TO ROLE <role>` and look for `CREATE SHARE` on the ACCOUNT.
2For provider setup: `GRANT USAGE ON DATABASE <db> TO SHARE <share_name>; GRANT SELECT ON ALL TABLES IN SCHEMA <schema> TO SHARE <share_name>;`.
3Consumer accounts cannot grant on shared objects — route permission requests to the provider account.
4For replication: grant the replication role explicit access to all shared databases and schemas.
5Use ACCOUNTADMIN role when creating or modifying shares for the first time.

Frequently asked questions

Can a consumer account modify objects in a shared database?

No — shared databases are read-only for consumers. Consumers can CREATE DATABASE FROM SHARE and query it, but cannot alter the objects or grant privileges on them.