By NHI Mgmt Group Editorial TeamPublished 2025-06-26Domain: Governance & RiskSource: Collibra

TL;DR: Pairing Usage Analytics with Data Usage for Snowflake helps leaders identify which datasets matter most, where adoption is happening, and where stewardship efforts should concentrate by using real-time usage signals from Snowflake and platform activity, according to Collibra. The practical shift is from broad governance coverage to evidence-led prioritisation that ties controls to actual business use.


At a glance

What this is: This is a product-focused analysis of how usage telemetry can help data governance teams prioritise stewardship around the datasets and users that matter most.

Why it matters: It matters because IAM, data governance, and access teams increasingly need evidence of use to decide where controls, reviews, and stewardship effort should be concentrated.

👉 Read Collibra's blog on Usage Analytics and Data Usage for Snowflake


Context

Data governance programmes often struggle with a simple problem: they cannot reliably tell which datasets are most important in practice. Usage signals from data platforms can reduce that uncertainty by showing where activity, attention, and business dependence actually exist, rather than relying only on catalog metadata or policy intent.

That matters for identity and access work because entitlement reviews, stewardship, and control prioritisation all become sharper when teams can see which assets are truly being used. In environments with broad Snowflake adoption, usage telemetry can help governance teams avoid spreading effort evenly across low-value data and instead focus on the access paths that carry real operational weight.


Key questions

Q: How should data governance teams prioritise datasets when everything looks important?

A: Start with actual usage, not catalogue size or business titles. The most defensible governance programmes place stewardship, quality work, and access review effort on the datasets that show repeat operational use and measurable business dependence. That approach reduces wasted effort and makes governance decisions easier to justify.

Q: Why does platform usage matter for governance adoption?

A: Usage reveals whether governance is being used in day-to-day work or only documented in policy. If teams can see who is interacting with the platform and which assets are drawing attention, they can distinguish genuine adoption from shelfware and adjust training, workflows, or stewardship coverage accordingly.

Q: What do teams get wrong when they treat all data assets equally?

A: They spread limited governance capacity across assets with very different operational value. That usually produces generic coverage, weaker stewardship where it matters most, and slower decisions on the datasets that actually support business activity. Usage-based prioritisation corrects that imbalance.

Q: How can organisations tell if governance controls are focused on the right data?

A: Look for overlap between control effort and usage concentration. If the datasets receiving the most stewardship, quality work, and review attention are also the ones most used by the business, governance is likely aligned with real demand. If not, the programme is probably optimising for completeness rather than impact.


Technical breakdown

How usage analytics changes governance prioritisation

Usage analytics turns platform interaction data into governance input. Instead of treating all datasets as equally important, teams can observe which assets are queried, which users are active, and which areas of the platform drive repeat engagement. That creates a more accurate picture of governance demand, especially when catalog popularity and operational value do not match. In practice, usage data becomes a prioritisation layer above static metadata, helping data leaders direct stewardship, quality rules, and review cycles to the places where business dependence is highest.

Practical implication: use usage telemetry to rank governance work by actual consumption, not by catalog assumptions.

Data usage signals and Snowflake access patterns

Data usage signals are most useful when they connect asset popularity with access behaviour inside a specific platform such as Snowflake. Real-time usage can show which datasets are repeatedly accessed, which teams rely on them, and where governance workflows may have the highest business impact. This is different from simple inventory tracking because the question is not whether a dataset exists, but whether it is actively supporting work. The technical value is in linking usage observation to governance decision-making without waiting for retrospective reporting.

Practical implication: align access reviews and metadata enrichment with the datasets that show sustained platform demand.

Adoption telemetry as a governance control signal

Usage telemetry is also a control signal for governance adoption. If a governance platform cannot show who is using it, what they are using, and where they are engaging, it becomes harder to judge whether stewardship processes are landing with the right audiences. Adoption data does not replace policy enforcement, but it does reveal whether governance is embedded in day-to-day practice or sitting alongside it. For identity and governance teams, that distinction matters because unused controls often look complete on paper while failing to influence behaviour.

Practical implication: treat platform engagement metrics as evidence of governance reach, not just product activity.


NHI Mgmt Group analysis

Usage-aware governance is a prioritisation discipline, not a reporting feature. Once teams can see which datasets are actually used, the governance problem changes from coverage to concentration. Stewardship, quality, and access effort should follow business dependence, because equal treatment of all data usually wastes capacity on low-value assets. The practical implication is that data governance programmes should rank work by observed use, not by catalogue completeness.

Platform engagement and asset popularity are two halves of the same governance question. One shows whether people are interacting with the governance layer, the other shows whether the governed data is commercially relevant. When those signals are linked, leaders can tell whether the programme is operating in the parts of the estate that matter. The practical implication is to connect adoption metrics with asset criticality before declaring a governance initiative successful.

Control placement should follow usage concentration, not organisational habit. Teams often distribute stewardship evenly because it is administratively simple, but that rarely reflects actual data dependency. Real-time usage can expose where governance effort will reduce risk or improve decision quality most efficiently. The practical implication is to use usage analytics as a reallocation tool for reviews, enrichment, and workflow design.

Data governance proves its value when it can show where attention changes behaviour. If a team can identify the most-used assets and the most-engaged users, it can target interventions that are more likely to influence data handling and access patterns. That is more defensible than relying on broad programme narratives. The practical implication is to measure governance ROI through observed changes in how critical data is consumed and managed.

From our research:

  • 1 in 4 organisations are already investing in dedicated NHI security capabilities, with an additional 60% planning to do so within the next twelve months, according to The State of Non-Human Identity Security.
  • Only 1.5 out of 10 organisations are highly confident in their ability to secure NHIs, compared to nearly 1 in 4 for securing human identities.
  • For a broader governance lens, see Ultimate Guide to NHIs - Lifecycle Processes for Managing NHIs for the access, rotation, and offboarding patterns that shape control design.

What this signals

Usage-led prioritisation will become a standard expectation in governance programmes. As data estates expand, leaders will be judged less on catalogue completeness and more on whether stewardship effort maps to real business consumption. The shift is toward evidence-based allocation of review capacity, access governance, and quality work.

With 1 in 4 organisations already investing in dedicated NHI security capabilities, the broader pattern is clear: governance teams are being asked to prove control value with better telemetry, not broader policy language. That puts usage analytics and identity-informed stewardship on the same strategic track.

Programmes that can identify high-use data, active users, and control coverage gaps will be better positioned to justify resourcing and avoid low-value governance work. The next differentiator is not whether a platform records usage, but whether teams can translate it into decision quality.


For practitioners

  • Prioritise stewardship by observed usage Rank datasets by real usage, then assign stewardship, quality rules, and review effort to the assets that support active business work rather than broad catalog coverage.
  • Connect adoption metrics to critical assets Map platform engagement to the datasets that matter most so governance leaders can see whether the programme is influencing the right parts of the environment.
  • Use usage telemetry in access review planning Feed high-use datasets into review schedules first, because those are the places where entitlement decisions have the greatest operational impact.
  • Rebalance governance effort away from low-value data Stop expending review and enrichment time on data that shows little or no business use, unless it is retained for regulatory or archival reasons.

Key takeaways

  • Usage telemetry changes governance from broad coverage to focused prioritisation, which is where most teams need to improve.
  • Linking platform engagement to data asset popularity gives leaders a clearer way to target stewardship, reviews, and quality controls.
  • Governance programmes prove value when they can show that controls concentrate on the datasets the business actually uses.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0, NIST Zero Trust (SP 800-207) and NIST CSF 2.0 set the governance and control requirements practitioners need to meet.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0ID.AM-1Asset management aligns with identifying which datasets are actually used.
NIST Zero Trust (SP 800-207)PR.AC-4Access decisions should reflect observed business use and data criticality.
NIST CSF 2.0GV.OV-03Governance oversight depends on showing that controls are focused on material risk and value.

Tie entitlement reviews to high-value data access paths and confirm they match business need.


Key terms

  • Usage Analytics: Usage Analytics is the practice of measuring how people interact with a data platform, dataset, or governance system. It helps teams see which assets are used, which users are engaged, and whether governance activity is affecting real operational behaviour rather than just policy documentation.
  • Data Usage: Data Usage refers to the observable consumption of datasets in business workflows, queries, and platform activity. In governance programmes, it is a practical signal for deciding which data deserves the most stewardship, quality work, and access review attention because it reflects actual dependence.
  • Governance Adoption: Governance Adoption is the extent to which users and teams actually use governance processes, tools, and workflows in daily work. It is measured by engagement and behaviour, not by policy existence alone, and it tells leaders whether the programme is influencing decisions where data is used.

Deepen your knowledge

NHI governance, agentic AI identity, and machine identity lifecycle are core topics in our NHI Foundation Level course, the industry's only accredited NHI security programme. If you are responsible for identity security strategy or NHI governance in your organisation, it is worth exploring.

This post draws on content published by Collibra: From insight to impact: The powerhouse duo of Usage Analytics and Data Usage in Collibra. Read the original.

NHIMG Editorial Note
Published by the NHIMG editorial team on 2025-06-26.
NHI Mgmt Group — the independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org