DEA-C02: SnowPro Advanced — Data Engineer

By Snowflake · Question Mode

QuestionQ28

VerifiedOfficial exam objectives/topics

A Data Engineer must create a stored procedure that aggregates sales data across multiple schemas in the company’s Snowflake environment. The stored procedure must run on demand. To keep Personally Identified Information (PII) secure, only ROLE_ADMIN can access the data.

Which tasks will enable ROLE_USER to execute the stored procedure and refresh the sales data?

Explanation

An owner’s-rights stored procedure runs with the privileges of its owner. When ROLE_ADMIN owns the procedure and has access to the protected source data, granting ROLE_USER permission to use the procedure lets ROLE_USER trigger the aggregation without granting direct access to the PII tables. A caller’s-rights procedure would require ROLE_USER to have the underlying table privileges.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!