QuestionQ15

Manage and administer Snowflake accounts, data security, and governance

The following SQL commands were run:

Question Image

Which role or roles can alter or drop table XYZ?

Explanation

The future OWNERSHIP grant on tables in PROD.WORKING makes PROD_WORKING_OWNER the owner of newly created table XYZ, and ownership provides control to alter or drop it. Privileges granted to a role are inherited by roles higher in its hierarchy; therefore SYSADMIN, which receives PROD_WORKING_OWNER, and ACCOUNTADMIN, which is higher in the system role hierarchy, can also alter or drop the table. SECURITYADMIN does not receive this ownership privilege.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!