What roles can be used to create network policies within Snowflake accounts? (Choose three.)

The correct answer is B. SECURITYADMIN C. ACCOUNTADMIN E. Any role with the global permission of CREATE NETWORK POLICY. Network policies are used to restrict access to the Snowflake service and internal stages based on user IP address. To create network policies, a role must have the global permission of CREATE NETWORK POLICY. By default, the system-defined roles of SECURITYADMIN and…

Account Management and Security

Question

Options

ASYSADMIN
BSECURITYADMIN
CACCOUNTADMIN
DORGADMIN
EAny role with the global permission of CREATE NETWORK POLICY
FAny role that owns the database where the network policy is created

How the community answered

(59 responses)

A
5% (3)
B
83% (49)
D
8% (5)
F
3% (2)

Explanation

Network policies are used to restrict access to the Snowflake service and internal stages based on user IP address. To create network policies, a role must have the global permission of CREATE NETWORK POLICY. By default, the system-defined roles of SECURITYADMIN and ACCOUNTADMIN have this permission. However, any other role can be granted this permission by an administrator.

Topics

#network policies#RBAC#role privileges#CREATE NETWORK POLICY

Community Discussion

No community discussion yet for this question.

Full ADA-C01 Practice