alterRowAccessPolicyBody

Last updated: January 27, 2026

Modifies the boolean expression (body) of an existing row access policy in Snowflake. This changes the access control logic without affecting the policy signature.

Note: This change type does not support automatic rollback or database inspection features (snapshot, diff, diff-changelog, and generate-changelog commands).

Available attributes

Attribute	Type	Description	Required
`catalogName`	String	Name of the catalog (database) containing the policy	No
`schemaName`	String	Name of the schema containing the policy	No
`policyName`	String	Name of the row access policy to alter	Yes
`ifExists`	Boolean	Only alter if the policy exists using `IF EXISTS`	No
`newBody`	String	New boolean expression for the policy	Yes

<?xml version="1.0" encoding="UTF-8"?>
<databaseChangeLog
        xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
        xmlns:pro-snowflake="http://www.liquibase.org/xml/ns/pro-snowflake"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-latest.xsd
        http://www.liquibase.org/xml/ns/pro-snowflake
        http://www.liquibase.org/xml/ns/pro-snowflake/liquibase-pro-snowflake-latest.xsd">

    <!-- Basic body update -->
    <changeSet id="alter-row-access-policy-body-basic" author="examples">
        <pro-snowflake:alterRowAccessPolicyBody policyName="DEPARTMENT_ACCESS_POLICY">
            <pro-snowflake:newBody>CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER')</pro-snowflake:newBody>
        </pro-snowflake:alterRowAccessPolicyBody>
    </changeSet>

    <!-- Body update with IF EXISTS -->
    <changeSet id="alter-row-access-policy-body-if-exists" author="examples">
        <pro-snowflake:alterRowAccessPolicyBody
                policyName="TENANT_ISOLATION_POLICY"
                ifExists="true">
            <pro-snowflake:newBody>tenant_id = CURRENT_USER() AND access_level >= 5</pro-snowflake:newBody>
        </pro-snowflake:alterRowAccessPolicyBody>
    </changeSet>

</databaseChangeLog>

{
  "databaseChangeLog": [
    {
      "changeSet": {
        "id": "alter-row-access-policy-body-basic",
        "author": "examples",
        "changes": [
          {
            "alterRowAccessPolicyBody": {
              "policyName": "DEPARTMENT_ACCESS_POLICY",
              "newBody": "CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER')"
            }
          }
        ]
      }
    },
    {
      "changeSet": {
        "id": "alter-row-access-policy-body-if-exists",
        "author": "examples",
        "changes": [
          {
            "alterRowAccessPolicyBody": {
              "policyName": "TENANT_ISOLATION_POLICY",
              "ifExists": true,
              "newBody": "tenant_id = CURRENT_USER() AND access_level >= 5"
            }
          }
        ]
      }
    }
  ]
}

databaseChangeLog:
  # Basic body update
  - changeSet:
      id: alter-row-access-policy-body-basic
      author: examples
      changes:
        - alterRowAccessPolicyBody:
            policyName: DEPARTMENT_ACCESS_POLICY
            newBody: CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER')

  # Body update with IF EXISTS
  - changeSet:
      id: alter-row-access-policy-body-if-exists
      author: examples
      changes:
        - alterRowAccessPolicyBody:
            policyName: TENANT_ISOLATION_POLICY
            ifExists: true
            newBody: tenant_id = CURRENT_USER() AND access_level >= 5

--liquibase formatted sql

--changeset examples:basic-body-update
-- Basic body update
ALTER ROW ACCESS POLICY PUBLIC.DEPARTMENT_ACCESS_POLICY SET BODY -> CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER');

--changeset examples:body-update-with-if-exists
-- Body update with IF EXISTS
ALTER ROW ACCESS POLICY IF EXISTS PUBLIC.TENANT_ISOLATION_POLICY SET BODY -> tenant_id = CURRENT_USER() AND access_level >= 5;

<?xml version="1.0" encoding="UTF-8"?>
<databaseChangeLog
        xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
        xmlns:pro-snowflake="http://www.liquibase.org/xml/ns/pro-snowflake"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-latest.xsd
        http://www.liquibase.org/xml/ns/pro-snowflake
        http://www.liquibase.org/xml/ns/pro-snowflake/liquibase-pro-snowflake-latest.xsd">

    <!-- Basic body update -->
    <changeSet id="alter-row-access-policy-body-basic" author="examples">
        <pro-snowflake:alterRowAccessPolicyBody policyName="DEPARTMENT_ACCESS_POLICY">
            <pro-snowflake:newBody>CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER')</pro-snowflake:newBody>
        </pro-snowflake:alterRowAccessPolicyBody>
    </changeSet>

    <!-- Body update with IF EXISTS -->
    <changeSet id="alter-row-access-policy-body-if-exists" author="examples">
        <pro-snowflake:alterRowAccessPolicyBody
                policyName="TENANT_ISOLATION_POLICY"
                ifExists="true">
            <pro-snowflake:newBody>tenant_id = CURRENT_USER() AND access_level >= 5</pro-snowflake:newBody>
        </pro-snowflake:alterRowAccessPolicyBody>
    </changeSet>

</databaseChangeLog>

{
  "databaseChangeLog": [
    {
      "changeSet": {
        "id": "alter-row-access-policy-body-basic",
        "author": "examples",
        "changes": [
          {
            "alterRowAccessPolicyBody": {
              "policyName": "DEPARTMENT_ACCESS_POLICY",
              "newBody": "CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER')"
            }
          }
        ]
      }
    },
    {
      "changeSet": {
        "id": "alter-row-access-policy-body-if-exists",
        "author": "examples",
        "changes": [
          {
            "alterRowAccessPolicyBody": {
              "policyName": "TENANT_ISOLATION_POLICY",
              "ifExists": true,
              "newBody": "tenant_id = CURRENT_USER() AND access_level >= 5"
            }
          }
        ]
      }
    }
  ]
}

databaseChangeLog:
  # Basic body update
  - changeSet:
      id: alter-row-access-policy-body-basic
      author: examples
      changes:
        - alterRowAccessPolicyBody:
            policyName: DEPARTMENT_ACCESS_POLICY
            newBody: CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER')

  # Body update with IF EXISTS
  - changeSet:
      id: alter-row-access-policy-body-if-exists
      author: examples
      changes:
        - alterRowAccessPolicyBody:
            policyName: TENANT_ISOLATION_POLICY
            ifExists: true
            newBody: tenant_id = CURRENT_USER() AND access_level >= 5

--liquibase formatted sql

--changeset examples:basic-body-update
-- Basic body update
ALTER ROW ACCESS POLICY PUBLIC.DEPARTMENT_ACCESS_POLICY SET BODY -> CURRENT_ROLE() IN ('ADMIN', 'HR', 'MANAGER');

--changeset examples:body-update-with-if-exists
-- Body update with IF EXISTS
ALTER ROW ACCESS POLICY IF EXISTS PUBLIC.TENANT_ISOLATION_POLICY SET BODY -> tenant_id = CURRENT_USER() AND access_level >= 5;

alterRowAccessPolicyBody

Available attributes

XML

JSON

YAML

SQL

More like this