QuestionQ28

Secure Data Sharing and Consumption

An Architect created a database with the DB_OWNER role and, within that database, created a managed-access schema with the SCHEMA_OWNER role. The team created a table in this schema using the OBJECT_OWNER role.

Which role is required to grant privileges on the table to other roles?

Explanation

In a Snowflake managed access schema, only the role with the OWNERSHIP privilege on the schema, or a role with the global MANAGE GRANTS privilege, can grant or revoke privileges on objects in that schema. SCHEMA_OWNER owns the managed-access schema, whereas OBJECT_OWNER cannot grant table privileges merely by owning the table.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!