nerdexam
Snowflake

ADA-C01 · Question #26

A team of developers created a new schema for a new project. The developers are assigned the role DEV_TEAM which was set up using the following statements: USE ROLE SECURITYADMIN; CREATE ROLE DEV…

The correct answer is C. Set up future grants on the newly-created schemas. Future grants are a way to automatically grant privileges on future objects of a specific type that are created in a database or schema. By setting up future grants on the newly-created schemas, the administrator can ensure that any tables created by the developers in those…

Data and Access Management

Question

A team of developers created a new schema for a new project. The developers are assigned the role DEV_TEAM which was set up using the following statements:

USE ROLE SECURITYADMIN; CREATE ROLE DEV TEAM; GRANT USAGE, CREATE SCHEMA ON DATABASE DEV_DB01 TO ROLE DEV_TEAM; GRANT USAGE ON WAREHOUSE DEV_WH TO ROLE DEV_TEAM; Each team member's access is set up using the following statements:

USE ROLE SECURITYADMIN; CREATE ROLE JDOE_PROFILE; CREATE USER JDOE LOGIN NAME = 'JDOE' DEFAULT_ROLE='JDOE_PROFILE'; GRANT ROLE JDOE_PROFILE TO USER JDOE; GRANT ROLE DEV_TEAM TO ROLE JDOE_PROFILE; New tables created by any of the developers are not accessible by the team as a whole. How can an Administrator address this problem?

Options

  • AAssign ownership privilege to DEV_TEAM on the newly-created schema.
  • BAssign usage privilege on the virtual warehouse DEV_WH to the role JDOE_PROFILE.
  • CSet up future grants on the newly-created schemas.
  • DSet up the new schema as a managed-access schema.

How the community answered

(45 responses)
  • A
    9% (4)
  • B
    13% (6)
  • C
    76% (34)
  • D
    2% (1)

Explanation

Future grants are a way to automatically grant privileges on future objects of a specific type that are created in a database or schema. By setting up future grants on the newly-created schemas, the administrator can ensure that any tables created by the developers in those schemas will be accessible by the DEV_TEAM role, without having to grant privileges on each table individually.

Topics

#future grants#schema privileges#role hierarchy#access control

Community Discussion

No community discussion yet for this question.

Full ADA-C01 Practice