SnowPro Advanced Data Engineer

By Snowflake · Question Mode

QuestionQ73

Design and Manage Snowflake Resources and Performance

A Data Engineer must be able to create new databases and objects as needed for a Proof of Concept (POC).

The sandbox Snowflake account in which the POC is being tested does not have Role-Based Access Control (RBAC) implemented, but it is part of an organization in which some other accounts use RBAC.

What is the least-privileged system role that must be granted to this Engineer so they can work on this POC?

Explanation

The SYSADMIN system role has the default privileges to create warehouses, databases, and database objects in a Snowflake account. Creating a new database requires the account-level CREATE DATABASE privilege, which is granted by default to SYSADMIN or a higher role. SECURITYADMIN can manage grants but does not inherently have the privileges to create objects.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!