Latest Access Summary Export Schema Reference Guide

Version: prpr2

When creating external tables from this schema, create a view on top of them for data consumers so that you can more easily manage data model version changes. For more details, see the Access summary export page.

policy-metadata

This table contains one row per unique access policy (subscription policy).

Field name

Abstract data type

Nullable

Description

who	String (UTF-8)	No	The attribute(s) or group(s) the policy targets.
object	String (UTF-8)	No	Tag(s) the policy targets.
access_type	String (UTF-8)	No	The type of subscription policy: GRANT or GUARDRAIL
policy	String (UTF-8)	No	Immuta policy expression.
scope	String (UTF-8)	No	The type of access policy: READ or WRITE
policy_id	Integer (BigInt)	No	Unique numerical identifier for the specific policy.
policy_name	String (UTF-8)	No	The human-readable name of the policy.
creation_date	Timestamp	No	The point-in-time when the access policy or record was originally created.
owner	String (UTF-8)	No	The username or display name of the policy owner.
owner_global_user_id	String (UTF-8)	No	The universally unique identifier (UUID) for the policy owner.
link	String (UTF-8)	No	A URL or URI providing a direct reference to the policy or resource.
source	String (UTF-8)	No	The source of the policy.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the policy-metadata file:

CREATE OR REPLACE EXTERNAL TABLE EXT_POLICY_METADATA_<version> (
    "who"                  VARCHAR AS (VALUE:"who"::VARCHAR),
    "object"               VARCHAR AS (VALUE:"object"::VARCHAR),
    "access_type"          VARCHAR AS (VALUE:"access_type"::VARCHAR),
    "policy"               VARCHAR AS (VALUE:"policy"::VARCHAR),
    "scope"                VARCHAR AS (VALUE:"scope"::VARCHAR),
    "policy_id"            NUMBER  AS (VALUE:"policy_id"::NUMBER),
    "policy_name"          VARCHAR AS (VALUE:"policy_name"::VARCHAR),
    "creation_date"        TIMESTAMP_NTZ AS (VALUE:"creation_date"::TIMESTAMP_NTZ),
    "owner"                VARCHAR AS (VALUE:"owner"::VARCHAR),
    "owner_global_user_id" VARCHAR AS (VALUE:"owner_global_user_id"::VARCHAR),
    "link"                 VARCHAR AS (VALUE:"link"::VARCHAR),
    "source"               VARCHAR AS (VALUE:"source"::VARCHAR),
    "export_date"          TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/policy-metadata/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

datasource-metadata

New table

This table contains one row per unique data source.

Field name

Abstract data type

Nullable

Description

data_source_id	Integer (BigInt)	No	Unique numerical ID for the data source system.
data_source_name	String (UTF-8)	No	The name of the data source (e.g., table or object name).
data_source_description	String (UTF-8)	Yes	Detailed description of the data source.
is_enabled	Boolean	No	A boolean flag indicating if the data source is currently enabled.
technology	String (UTF-8)	No	The platform type backing the data source (e.g., Snowflake, S3, Azure SQL).
connection	String (UTF-8)	Yes	Connection identifier in Immuta.
data_source_type	String (UTF-8)	No	The native data type of the data source in the source system (e.g., TABLE, VIEW, etc.).
data_source_created_at	Timestamp	No	Date the data source was registered in Immuta.
data_source_health	String (UTF-8)	No	The health status of the data source.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the datasource-metadata file:

CREATE OR REPLACE EXTERNAL TABLE EXT_DATASOURCE_METADATA_<version> (
    "data_source_id"          NUMBER  AS (VALUE:"data_source_id"::NUMBER),
    "data_source_name"        VARCHAR AS (VALUE:"data_source_name"::VARCHAR),
    "data_source_description" VARCHAR AS (VALUE:"data_source_description"::VARCHAR),
    "is_enabled"              BOOLEAN AS (VALUE:"is_enabled"::BOOLEAN),
    "technology"              VARCHAR AS (VALUE:"technology"::VARCHAR),
    "connection"              VARCHAR AS (VALUE:"connection"::VARCHAR),
    "data_source_type"        VARCHAR AS (VALUE:"data_source_type"::VARCHAR),
    "data_source_created_at"  TIMESTAMP_NTZ AS (VALUE:"data_source_created_at"::TIMESTAMP_NTZ),
    "data_source_health"      VARCHAR AS (VALUE:"data_source_health"::VARCHAR),
    "export_date"             TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/datasource-metadata/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

column-metadata

New table

This table contains one row per unique column in any data source.

Field name

Abstract data type

Nullable

Description

column_id	​String (UTF-8)	No	​Unique ID for the column.
data_source_id	Integer (BigInt)	No	Unique numerical ID for the data source system.
column_name	​String (UTF-8)	No	​Name of the column.
column_description	String (UTF-8)	Yes	Detailed description of the specific column.
column_data_type	​String (UTF-8)	No	​The data type of the column in the source system (e.g., string, BigInt, etc.).
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the column-metadata file:

CREATE OR REPLACE EXTERNAL TABLE EXT_COLUMN_METADATA_<version> (
    "column_id"               VARCHAR AS (VALUE:"column_id"::VARCHAR),
    "data_source_id"          NUMBER  AS (VALUE:"data_source_id"::NUMBER),
    "column_name"             VARCHAR AS (VALUE:"column_name"::VARCHAR),
    "column_description"      VARCHAR AS (VALUE:"column_description"::VARCHAR),
    "column_data_type"        VARCHAR AS (VALUE:"column_data_type"::VARCHAR),
    "export_date"             TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/column-metadata/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

user-metadata

This table contains one row per unique user.

Field name

Abstract data type

Nullable

Description

user_id	String (UTF-8)	No	Unique identifier for the user within the source system.
global_user_id	String (UTF-8)	No	Universally unique identifier (UUID) for the user across all systems.
email	String (UTF-8)	Yes	Primary email address associated with the user profile.
identity_source	String (UTF-8)	No	The originating source of the user identity (e.g., Okta, LDAP, System).
global_permissions	List<String>	Yes	Collection of global permissions assigned to the user.
group_name	String (UTF-8)	Yes	Name of the organizational group or team the user belongs to.
attribute_key	String (UTF-8)	Yes	The key/name for a specific user metadata attribute.
attribute_value	String (UTF-8)	Yes	The specific value assigned to the attribute key.
source	String (UTF-8)	No	Describes if the attribute comes from a group or direct assignment.
association	String (UTF-8)	No	Describes how the user is linked to the group or attribute (e.g., Direct, Inherited).
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the user-metadata file:

CREATE OR REPLACE EXTERNAL TABLE EXT_USER_METADATA_<version> (
    "user_id"            VARCHAR AS (VALUE:"user_id"::VARCHAR),
    "global_user_id"     VARCHAR AS (VALUE:"global_user_id"::VARCHAR),
    "email"              VARCHAR AS (VALUE:"email"::VARCHAR),
    "identity_source"    VARCHAR AS (VALUE:"identity_source"::VARCHAR),
    "global_permissions" ARRAY   AS (VALUE:"global_permissions"::ARRAY), -- List<String>
    "group_name"         VARCHAR AS (VALUE:"group_name"::VARCHAR),
    "attribute_key"      VARCHAR AS (VALUE:"attribute_key"::VARCHAR),
    "attribute_value"    VARCHAR AS (VALUE:"attribute_value"::VARCHAR),
    "source"             VARCHAR AS (VALUE:"source"::VARCHAR),
    "association"        VARCHAR AS (VALUE:"association"::VARCHAR),
    "export_date"        TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/user-metadata/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

tag-metadata

Updated table

This table contains one row per unique tag applied to a data object.

Field name

Abstract data type

Nullable

Description

tag_name	String (UTF-8)	No	The name of the tag applied to the data object.
tag_description	String (UTF-8)	Yes	Detailed description of the tag's purpose or meaning.
target_id New	String (UTF-8)	No	The ID of the data source or column depending on the target type
target_type Updated	String (UTF-8)	No	Distinguishes between DATA_SOURCE level and COLUMN level tags.
source	String (UTF-8)	No	The system or component that generated the tag metadata (e.g., marketplace, collibra, databricksUnityCatalog).
context	String (UTF-8)	No	The approach used to create the tag (e.g., catalog, sdd, schemaEvolution, marketplace).
as_of	Timestamp	No	When the tag was added.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the tag-metadata file:

CREATE OR REPLACE EXTERNAL TABLE EXT_TAG_METADATA_<version> (
    "tag_name"                VARCHAR AS (VALUE:"tag_name"::VARCHAR),
    "tag_description"         VARCHAR AS (VALUE:"tag_description"::VARCHAR),
    "target_id"               VARCHAR AS (VALUE:"target_id"::VARCHAR),
    "target_type"             VARCHAR AS (VALUE:"target_type"::VARCHAR),
    "source"                  VARCHAR AS (VALUE:"source"::VARCHAR),
    "context"                 VARCHAR AS (VALUE:"context"::VARCHAR),
    "as_of"                   TIMESTAMP_NTZ AS (VALUE:"as_of"::TIMESTAMP_NTZ),
    "export_date"             TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/tag-metadata/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

policy-outcomes

Updated table

This table contains one row per unique instance where a user gained access to a data object through an Immuta policy.

Field name

Abstract data type

Nullable

Description

global_user_id	String (UTF-8)	No	Universally unique identifier (UUID) for the user whose access is determined by these policies.
data_source_id	Integer (BigInt)	No	Unique numerical identifier for the data source on which the policies were applied.
column_id New	String (UTF-8)	Yes	Unique numerical identifier for the data source on which the reveal policies were applied. Note this is not supported yet and will always be null.
policy_ids	List<Integer (BigInt)>	Yes	A collection of unique identifiers for all policies that contributed to the final access outcome.
merged_policy	String (UTF-8)	Yes	The combined boolean logic resulting from merging multiple policies.
scope New	String (UTF-8)	No	The type of access policy: READ or WRITE
is_owner	Boolean	No	Flag indicating if the user is an owner of the resource, which carries additional power.
source	String (UTF-8)	No	If the user was added manually or via the policy.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the policy-outcomes file:

CREATE OR REPLACE EXTERNAL TABLE EXT_POLICY_OUTCOMES_<version> (
    "global_user_id"          VARCHAR  AS (VALUE:"global_user_id"::VARCHAR),
    "data_source_id"          NUMBER  AS (VALUE:"data_source_id"::NUMBER),
    "column_id"               VARCHAR AS (VALUE:"column_id"::VARCHAR), 
    "policy_ids"              ARRAY   AS (VALUE:"policy_ids"::ARRAY),
    "merged_policy"           VARCHAR AS (VALUE:"merged_policy"::VARCHAR),
    "scope"                   VARCHAR AS (VALUE:"scope"::VARCHAR),
    "is_owner"                BOOLEAN AS (VALUE:"is_owner"::BOOLEAN),
    "source"                  VARCHAR AS (VALUE:"source"::VARCHAR),
    "export_date"             TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/policy-outcomes/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

domain-metadata

This table contains one row per unique domain.

Field name

Abstract data type

Nullable

Description

id	String (UTF-8)	No	Unique identifier for the domain.
name	String (UTF-8)	No	The display name of the domain.
description	String (UTF-8)	Yes	Detailed description of the domain.
creator_global_user_id	String (UTF-8)	No	The universally unique identifier (UUID) of the user who created the domain.
data_source_id	Integer (BigInt)	No	The unique numerical ID of the data source associated with this domain.
privileged_user	String (UTF-8)	No	The identity of the user with elevated administrative rights over the domain.
permissions	List<String>	No	A collection of access rights or roles specifically granted within this domain.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the domain-metadata file:

CREATE OR REPLACE EXTERNAL TABLE EXT_DOMAIN_METADATA_<version> (
    "id"                     VARCHAR AS (VALUE:"id"::VARCHAR),
    "name"                   VARCHAR AS (VALUE:"name"::VARCHAR),
    "description"            VARCHAR AS (VALUE:"description"::VARCHAR),
    "creator_global_user_id" VARCHAR AS (VALUE:"creator_global_user_id"::VARCHAR),
    "data_source_id"         NUMBER  AS (VALUE:"data_source_id"::NUMBER),
    "privileged_user"        VARCHAR AS (VALUE:"privileged_user"::VARCHAR),
    "permissions"            ARRAY   AS (VALUE:"permissions"::ARRAY), -- List<String>
    "export_date"            TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/domain-metadata/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

access-requests

New table

This table contains one row per unique access request made in the Request app.

Field name

Abstract data type

Nullable

Description

request_id	String (UTF-8)	No	Universally unique identifier (UUID) for the access request.
global_user_id	String (UTF-8)	No	Universally unique identifier (UUID) for the user who will gain access from the request.
global_requestor_id	String (UTF-8)	No	Universally unique identifier (UUID) for the user who made the access request.
target_id	String (UTF-8)	No	The ID of the data product, data source, or column that is being requested.
target_type	String (UTF-8)	No	The type of target being requested. Options are DATA_SOURCE, COLUMN, or DATA_PRODUCT.
request_date	Timestamp	No	The timestamp when the request was made.
request_responses	String (UTF-8)	No	The responses the user submitted when making the access request.
request_form_id	String (UTF-8)	No	The globally unique identifier of the request form.
final_determination_date	Timestamp	No	The timestamp when the final determination was made.
determination	String (UTF-8)	No	The determination of the request. Options are PENDING, APPROVED, DENIED, REVOKED, CANCELED, or EXPIRED.
expiration_date	Timestamp	Yes	The timestamp when the request expires if it is a temporary request.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the access-requests file:

CREATE OR REPLACE EXTERNAL TABLE EXT_ACCESS_REQUESTS_<version> (
    "request_id"               VARCHAR AS (VALUE:"request_id"::VARCHAR),
    "global_user_id"           VARCHAR AS (VALUE:"global_user_id"::VARCHAR),
    "global_requestor_id"      VARCHAR AS (VALUE:"global_requestor_id"::VARCHAR),
    "target_id"                VARCHAR AS (VALUE:"target_id"::VARCHAR),
    "target_type"              VARCHAR AS (VALUE:"target_type"::VARCHAR),
    "request_responses"        VARCHAR AS (VALUE:"request_responses"::VARCHAR),
    "request_form_id"          VARCHAR AS (VALUE: "request_form_id"::VARCHAR),
    "determination"            VARCHAR AS (VALUE: "determination"::VARCHAR),
    "request_date"             TIMESTAMP_NTZ AS (VALUE:"request_date"::TIMESTAMP_NTZ),
    "expiration_date"          TIMESTAMP_NTZ AS (VALUE: "expiration_date"::TIMESTAMP_NTZ),
    "final_determination_date" TIMESTAMP_NTZ AS (VALUE: "final_determination_date"::TIMESTAMP_NTZ),
    "export_date"              TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/access-requests/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

request-determinations

New table

This table contains one row per unique user or group that had to review an access request made in the Request app.

Field name

Abstract data type

Nullable

Description

approval_id	String (UTF-8)	No	The globally unique identifier of the approval record.
request_id	String (UTF-8)	No	Universally unique identifier (UUID) for the access request.
global_reviewer_id	String (UTF-8)	Yes	Universally unique identifier (UUID) for the user who reviewed the request.
reviewer_source	String (UTF-8)	Yes	The condition the reviewer met to be a reviewer for the request.
reviewer_determination	String (UTF-8)	No	The determination of the reviewer. Options include PENDING, APPROVED, DENIED, and CANCELED.
determination_date	Timestamp	Yes	The timestamp when the determination was made.
justification	String (UTF-8)	Yes	The justification for the determination.
status	String (UTF-8)	No	Whether the determination is still pending or completed. Options include WAITING and COMPLETED.
pending_reviewers	String (UTF-8)	No	If the determination is still pending, a JSON array of the reviewers.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the request-determinations file:

CREATE OR REPLACE EXTERNAL TABLE EXT_REQUEST_DETERMINATIONS_<version> (
    "approval_id"              VARCHAR AS (VALUE:"approval_id"::VARCHAR),
    "request_id"               VARCHAR AS (VALUE:"request_id"::VARCHAR),
    "global_reviewer_id"       VARCHAR AS (VALUE:"global_reviewer_id"::VARCHAR),
    "reviewer_source"          VARCHAR AS (VALUE:"reviewer_source"::VARCHAR),
    "reviewer_determination"   VARCHAR AS (VALUE:"reviewer_determination"::VARCHAR),
    "justification"            VARCHAR AS (VALUE:"justification"::VARCHAR),
    "status"                   VARCHAR AS (VALUE: "status"::VARCHAR),
    "pending_reviewers"        VARCHAR AS (VALUE: "pending_reviewers"::VARCHAR),
    "determination_date"       TIMESTAMP_NTZ AS (VALUE:"determination_date"::TIMESTAMP_NTZ),
    "export_date"              TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/request-determinations/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

request-duas

New table

This table contains one row per unique access request that is linked to a data use agreement (DUA).

Field name

Abstract data type

Nullable

Description

request_id	String (UTF-8)	No	Universally unique identifier (UUID) for the access request.
dua_id	String (UTF-8)	No	The globally unique identifier of the DUA.
name	String (UTF-8)	No	The name of the DUA.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the request-duas file:

CREATE OR REPLACE EXTERNAL TABLE EXT_REQUEST_DUAS_<version> (
    "request_id"      VARCHAR AS (VALUE:"request_id"::VARCHAR),
    "dua_id"          VARCHAR AS (VALUE:"dua_id"::VARCHAR),
    "name"            VARCHAR AS (VALUE:"name"::VARCHAR),
    "export_date"     TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/request-duas/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

data-products

New table

This table contains one row per unique data product.

Field name

Abstract data type

Nullable

Description

data_product_id	String (UTF-8)	No	The globally unique identifier of the data product.
data_product_name	String (UTF-8)	No	The name of the data product.
data_product_domain	String (UTF-8)	No	The ID of the domain associated with the data product.
data_product_description	String (UTF-8)	Yes	The description of the data product.
data_product_creator	String (UTF-8)	No	The universally unique identifier (UUID) for the user who registered the data product.
data_product_smes	List [String (UTF-8)]	Yes	A list of the universally unique identifiers (UUID) for the subject matter experts for the data product.
data_product_suspended	Boolean	No	Whether the data product is currently suspended.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the data-products file:

CREATE OR REPLACE EXTERNAL TABLE EXT_DATA_PRODUCTS_<version> (
    "data_product_id"          VARCHAR AS (VALUE:"data_product_id"::VARCHAR),
    "data_product_name"        VARCHAR AS (VALUE:"data_product_name"::VARCHAR),
    "data_product_domain"      VARCHAR AS (VALUE:"data_product_domain"::VARCHAR),
    "data_product_description" VARCHAR AS (VALUE:"data_product_description"::VARCHAR),
    "data_product_creator"     VARCHAR AS (VALUE:"data_product_creator"::VARCHAR),
    "data_product_smes"        VARCHAR AS (VALUE:"data_product_smes"::VARCHAR),
    "data_product_suspended"   BOOLEAN AS (VALUE: "data_product_suspended"::BOOLEAN),
    "export_date"              TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/data-products/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

data-product-assets

New table

This table contains one row per data source within a data product.

Field name

Abstract data type

Nullable

Description

data_product_id	String (UTF-8)	No	The globally unique identifier of the data product.
data_source_id	String (UTF-8)	No	The unique numerical ID of the data source associated with this data product.
export_date	Timestamp	No	The timestamp when this metadata record was exported.

Example: To create a Snowflake external table for the data-product-assets file:

CREATE OR REPLACE EXTERNAL TABLE EXT_DATA_PRODUCT_ASSETS_<version> (
    "data_product_id"          VARCHAR AS (VALUE:"data_product_id"::VARCHAR),
    "data_source_id"        VARCHAR AS (VALUE:"data_source_id"::VARCHAR),
    "export_date"              TIMESTAMP_NTZ AS (VALUE:"export_date"::TIMESTAMP_NTZ)
)
LOCATION = @<your-stage>/data-product-assets/<version>/
FILE_FORMAT = <your-format>
AUTO_REFRESH = TRUE;

Possible joins

Relationship	Join key(s)
Users to policy outcomes	global_user_id
Policy outcomes to policy details	policy_ids ←→ policy_id
Data sources to tags	data_source_id
Domains to data sources	data_source_id
Users to policy authorship	global_user_id ←→ owner_global_user_id
Data sources in a data product	data_product_id