QuestionQ47

VerifiedOfficial exam objectives/topics

A Data Engineer must share sensitive data from the CHARGES_DWH database with a partner, A_Company. The database includes the CUSTOMERS and CONFIGURATION schemas.

Requirements include:

  1. Schema-level access control
  2. The ability to share data through tables or secure views
  3. Protection of both the source data and the data definitions

Which Snowflake-recommended approach should be used to configure data sharing for objects in the CUSTOMERS and CONFIGURATION schemas?

Explanation

Snowflake recommends granting object privileges to database roles and then granting those database roles to a share when access must be segmented by schema or object set. Database roles provide USAGE on the relevant schemas and SELECT on the shared tables or secure views, while the share exposes only the granted, read-only objects. The database roles must belong to the shared database, CHARGES_DWH; the solution using CHARGES_DWH.DR1 and CHARGES_DWH.DR2 correctly applies that model.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!