SnowPro Advanced Architect

Question

An Architect created a database with the DB_OWNER role and, within that database, created a managed-access schema with the SCHEMA_OWNER role. The team created a table in this schema using the OBJECT_OWNER role.

Which role is required to grant privileges on the table to other roles?

Explanation

In a Snowflake managed access schema, only the role with the OWNERSHIP privilege on the schema, or a role with the global MANAGE GRANTS privilege, can grant or revoke privileges on objects in that schema. SCHEMA_OWNER owns the managed-access schema, whereas OBJECT_OWNER cannot grant table privileges merely by owning the table.

Learn more

Snowflake access control privileges

SnowPro Advanced Architect

AstroTutor

Notes

Readiness

QuestionQ28

Community Discussion