ADA-C01 · Question #29
A Snowflake account is configured with SCIM provisioning for user accounts and has bi- directional synchronization for user identities. An Administrator with access to SECURITYADMIN uses the…
The correct answer is C. USERADMIN needs to explicitly grant the DEVELOPER_ROLE to the new USER. Creating a user with a default role does not automatically grant that role to the user. The user must be explicitly granted the role by the role owner or a higher-level role. Therefore, the USERADMIN role, which created the DEVELOPER_ROLE, needs to explicitly grant the…
Question
A Snowflake account is configured with SCIM provisioning for user accounts and has bi- directional synchronization for user identities. An Administrator with access to SECURITYADMIN uses the Snowflake UI to create a user by issuing the following commands:
use role USERADMIN; create or replace role DEVELOPER_ROLE; create user PTORRES PASSWORD = 'hello world!' MUST_CHANGE_PASSWORD = FALSE default_role = DEVELOPER_ROLE; The new user named PTORRES successfully logs in, but sees a default role of PUBLIC in the web UI. When attempted, the following command fails:
use DEVELOPER_ROLE; Why does this command fail?
Options
- AThe DEVELOPER_ROLE needs to be granted to SYSADMIN before user PTORRES will be able
- BThe new role can only take effect after USERADMIN has logged out.
- CUSERADMIN needs to explicitly grant the DEVELOPER_ROLE to the new USER.
- DThe new role will only take effect once the identity provider has synchronized by way of SCIM
How the community answered
(45 responses)- A7% (3)
- B2% (1)
- C80% (36)
- D11% (5)
Explanation
Creating a user with a default role does not automatically grant that role to the user. The user must be explicitly granted the role by the role owner or a higher-level role. Therefore, the USERADMIN role, which created the DEVELOPER_ROLE, needs to explicitly grant the DEVELOPER_ROLE to the new user PTORRES using the GRANT ROLE command. Otherwise, the user PTORRES will not be able to use the DEVELOPER_ROLE and will see the default role of PUBLIC in the web UI.
Topics
Community Discussion
No community discussion yet for this question.