Application roles
The following application roles are created and can be assigned to your own roles to manage access and usage of various Winning Variant features:Account-level Assets
A few assets are created on the account automatically and used internally by the app.
The
admin role is granted MODIFY on all assets to adjust sizing, if necessary.
Warehouse utilization
The<APP>_primary warehouse has two primary uses:
- Resource management, the Configuration UI, and other internal tasks. These are infrequent and generally only consume resources when an asset is created/modified.
- Loading of assignments. By default, this task runs every 30 minutes.
- Other internal maintenance tasks, such as a daily assignment counter and daily block storage snapshots.
Snowpark Container Services
Winning Variant creates various services inside of the app, including:Configuration UI
Your experimentation interface! See your application details or contact your Winning Variant team for your specific URL.Variant API
The API used to get and make assignments (for experiments outside of Snowflake). Read more here. See your application details or contact your Winning Variant team for your specific URL.Block Storage
The Variant API creates a block storage volume of 100GB with the lowest IOPS option by default. A snapshot is generated nightly, replacing the one from the previous day. If you need to preserve each nightly snapshot, a task will need to be confirmed to make a copy of the snapshot.Caveat for Tri-Secret Secure accounts (read on Snowflake):Block storage volumes do not support Tri-Secret Secure and Periodic rekeying. This means that if your account has enabled Tri-Secret Secure or periodic rekeying, while all other Snowflake data will continue to have added security, any images stored in your Snowpark Container Services block storage volumes will not benefit from this added security.To create a block storage volume in an account with Tri-Secret Secure or periodic rekeying, you must first confirm that you understand and agree to continue without the benefit from this additional security for your block storage volumes. To confirm agreement, an account administrator (user with the ACCOUNTADMIN role) will need to set the account-level parameter ENABLE_TRI_SECRET_AND_REKEY_OPT_OUT_FOR_SPCS_BLOCK_STORAGE to
TRUE.