SnowPro Advanced Architect

By Snowflake · Question Mode

QuestionQ20

VerifiedSecure Data Sharing and Consumption

User1 and User2 are new users, each granted a different functional role. User1 received IT_ANALYST_ROLE, and User2 received FIN_ANALYST_ROLE.

Review the following security design:

Question Image

Which tables can each role read?

Explanation

Accessing a Snowflake table requires privileges on its containing database and schema, in addition to SELECT on the table. IT_ANALYST_ROLE inherits database USAGE and table SELECT privileges but has no schema USAGE, so it cannot read any table. FIN_ANALYST_ROLE inherits the database access through the role hierarchy and has USAGE on FINANCE_SCHEMA plus SELECT on FIN_TABLE, allowing it to read the Finance table only.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!