ARA-C01 Question #110: Real Exam Question with Answer & Explanation

The correct answer is B: Create. In Snowflake, when a user activates a secondary role during a session, certain privileges associated with DDL (Data Definition Language) operations are restricted. The CREATE statement, which falls under DDL operations, cannot be executed using a secondary role. This limitation i

Accounts and Security

Question

A user has activated primary and secondary roles for a session. What operation is the user prohibited from using as part of SQL actions in Snowflake using the secondary role?

Options

AInsert
BCreate
CDelete
DTruncate

Explanation

In Snowflake, when a user activates a secondary role during a session, certain privileges associated with DDL (Data Definition Language) operations are restricted. The CREATE statement, which falls under DDL operations, cannot be executed using a secondary role. This limitation is designed to enforce role-based access control and ensure that schema modifications are managed carefully, typically reserved for primary roles that have explicit permissions to modify database structures. Reference: Snowflake's security and access control documentation specifying the limitations and capabilities of primary versus secondary roles in session

Topics

#Secondary Roles#DDL Operations#Role Management#Access Control

Community Discussion

No community discussion yet for this question.

Full ARA-C01 Practice Browse All ARA-C01 Questions