Snowflake requires separate access permissions for each object type in a database. You can’t just GRANT SELECT ON ALL TABLES, you need to also grant on iceberg tables, views, external tables, dynamic tables, and all their future versions… 🙈 Oddly enough, secure views are the exception and don’t need separate grants. 🤷