nerdexam
Snowflake

ARA-C01 · Question #18

There are two databases in an account, named fin_db and hr_db which contain payroll and employee data, respectively. Accountants and Analysts in the company require different permissions on the…

The correct answer is A. USAGE on database hr_db, USAGE on all schemas in database hr_db, SELECT on all tables in. In Snowflake, granting read-only access requires three levels of permission: (1) USAGE on the database so the role can see the database, (2) USAGE on all schemas within the database so the role can see the schema objects, and (3) SELECT on all tables so the role can query data…

Accounts and Security

Question

There are two databases in an account, named fin_db and hr_db which contain payroll and employee data, respectively. Accountants and Analysts in the company require different permissions on the objects in these databases to perform their jobs. Accountants need read-write access to fin_db but only require read-only access to hr_db because the database is maintained by human resources personnel. An Architect needs to create a read-only role for certain employees working in the human resources department. Which permission sets must be granted to this role?

Options

  • AUSAGE on database hr_db, USAGE on all schemas in database hr_db, SELECT on all tables in
  • BUSAGE on database hr_db, SELECT on all schemas in database hr_db, SELECT on all tables in
  • CMODIFY on database hr_db, USAGE on all schemas in database hr_db, USAGE on all tables in
  • DUSAGE on database hr_db, USAGE on all schemas in database hr_db, REFERENCES on all

How the community answered

(45 responses)
  • A
    71% (32)
  • B
    18% (8)
  • C
    4% (2)
  • D
    7% (3)

Explanation

In Snowflake, granting read-only access requires three levels of permission: (1) USAGE on the database so the role can see the database, (2) USAGE on all schemas within the database so the role can see the schema objects, and (3) SELECT on all tables so the role can query data. USAGE on schemas is required-not SELECT-because schemas are containers, not queryable objects. Option B is wrong because it specifies SELECT on schemas instead of USAGE. Option C is wrong because MODIFY grants write access and USAGE on tables is not meaningful for reads. Option D is wrong because REFERENCES allows referencing columns in foreign keys but does not enable reading data.

Topics

#RBAC#Permissions#Access Control#Snowflake Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ARA-C01 Practice