An Architect entered the following commands in sequence: USER1 cannot find the table. Which of the following commands does the Architect need to run for USER1 to find the tables using the Principle of

The correct answer is B. GRANT USAGE ON DATABASE SANDBOX TO ROLE INTERN; C. GRANT USAGE ON SCHEMA SANDBOX.PUBLIC TO ROLE INTERN;. For USER1 (via role INTERN) to find tables in the SANDBOX database, the role must be granted access at every level of the Snowflake object hierarchy, following the Principle of Least Privilege. This means: (B) GRANT USAGE ON DATABASE SANDBOX-without this, the role cannot even acc

Accounts and Security

Question

An Architect entered the following commands in sequence:

USER1 cannot find the table. Which of the following commands does the Architect need to run for USER1 to find the tables using the Principle of Least Privilege? (Choose two.)

Exhibit

Options

AGRANT ROLE PUBLIC TO ROLE INTERN;
BGRANT USAGE ON DATABASE SANDBOX TO ROLE INTERN;
CGRANT USAGE ON SCHEMA SANDBOX.PUBLIC TO ROLE INTERN;
DGRANT OWNERSHIP ON DATABASE SANDBOX TO USER INTERN;
EGRANT ALL PRIVILEGES ON DATABASE SANDBOX TO ROLE INTERN;

How the community answered

(59 responses)

A
3% (2)
B
73% (43)
D
15% (9)
E
8% (5)

Explanation

For USER1 (via role INTERN) to find tables in the SANDBOX database, the role must be granted access at every level of the Snowflake object hierarchy, following the Principle of Least Privilege. This means: (B) GRANT USAGE ON DATABASE SANDBOX-without this, the role cannot even access the database; and (C) GRANT USAGE ON SCHEMA SANDBOX.PUBLIC-without this, the role cannot see the schema or its tables. Option A (granting PUBLIC role) is unnecessary and broader than required. Option D (OWNERSHIP) is excessive and grants full control, violating least privilege. Option E (ALL PRIVILEGES) is also excessive.

Topics

#Snowflake Privileges#Role-Based Access Control#Least Privilege#Data Access

Community Discussion

No community discussion yet for this question.

Full ARA-C01 Practice