nerdexam
Snowflake

ARA-C01 · Question #121

At which object type level can the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY SESSION POLICY privileges be granted?

The correct answer is A. Global. The object type level at which the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY SESSION POLICY privileges can be granted is global. These are account-level privileges that control who can apply or unset these policies on objects such as columns, tables, views…

Security and Compliance

Question

At which object type level can the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY SESSION POLICY privileges be granted?

Options

  • AGlobal
  • BDatabase
  • CSchema
  • DTable

How the community answered

(17 responses)
  • A
    88% (15)
  • C
    6% (1)
  • D
    6% (1)

Explanation

The object type level at which the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY SESSION POLICY privileges can be granted is global. These are account-level privileges that control who can apply or unset these policies on objects such as columns, tables, views, accounts, or users. These privileges are granted to the ACCOUNTADMIN role by default, and can be granted to other roles as needed.

Topics

#Snowflake Policies#Privilege Management#Account-level Security

Community Discussion

No community discussion yet for this question.

Full ARA-C01 Practice