SnowPro Advanced Data Engineer

By Snowflake · Question Mode

QuestionQ32

Implement Data Protection and Recovery

A Data Engineer wants to centralize grant management to maximize security. A user requires OWNERSHIP on a table in a new schema, but must not be able to make grant decisions.

What is the correct way to accomplish this?

Explanation

In a Snowflake managed access schema, table owners cannot make grant decisions. Grant and revoke authority is centralized with the schema owner or a role holding the global MANAGE GRANTS privilege, while the user can still hold OWNERSHIP on the table.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!