An Administrator receives data from a Snowflake partner. The partner is sharing a dataset that contains multiple secure views. The Administrator would like to configure the data so that only certain…

Question

Options

• AApply RBAC directly onto the partner's shared secure views.
• BIndividually grant imported privileges onto the schema in the share.
• CClone the data and insert it into a company-owned share and apply the desired RBAC on the new
• DCreate views over the incoming shared database and apply the desired RBAC onto these views.

• A
  11% (3)
• B
  4% (1)
• C
  4% (1)
• D
  81% (22)

Explanation

Secure views are only exposed to authorized users who have been granted the role that owns the view. Therefore, applying RBAC directly onto the partner's shared secure views (option A) is not possible, as the administrator does not own those views. Individually granting imported privileges onto the schema in the share (option B) is also not feasible, as the privileges granted on the schema do not apply to existing secure views, only to future ones. Cloning the data and inserting it into a company-owned share (option C) is not recommended, as it would create unnecessary duplication of data and increase storage costs. The best option is to create views over the incoming shared database and apply the desired RBAC onto these views (option D). This way, the administrator can control the access to the data based on the roles in their account, without modifying the original data or views from the partner.

No community discussion yet for this question.