/user.yamlpassword is currently stored as plain text.password will NOT be applied automatically due to lack of ability to compare current password with old password stored in Snowflake metadata. Please use --refresh-user-passwords argument to refresh passwords for all existing users if necessary.default_warehouse is omitted, it will be derived automatically from first available warehouse mentioned in business_roles -> warehouse_usage.default_role cannot be changed. SnowDDL automatically creates USER ROLE for each user and grants BUSINESS ROLES to USER ROLE instead.default_secondary_roles are not supported on purpose. You should never need secondary roles with role hierarchy provided by SnowDDL.middle_name is not supported due to lack of this column in SHOW USERS output, and also due to ambiguity of this column for users outside of US.network_policy can be specified in session_params.