ARA-C01 · Question #63
A new user user_01 is created within Snowflake. The following two commands are executed: Command 1-> show grants to user user_01; Command 2 ~> show grants on user user 01; What inferences can be…
The correct answer is D. Command 1 defines all the grants which are given to user_01 Command 2 defines which role. Snowflake distinguishes between two directions of grant visibility. 'SHOW GRANTS TO USER user_01' lists all roles that have been granted to (assigned to) user_01 - i.e., what privileges/roles the user holds. 'SHOW GRANTS ON USER user_01' shows ownership and privilege…
Question
A new user user_01 is created within Snowflake. The following two commands are executed:
Command 1-> show grants to user user_01; Command 2 ~> show grants on user user 01; What inferences can be made about these commands?
Options
- ACommand 1 defines which user owns user_01
- BCommand 1 defines all the grants which are given to user_01 Command 2 defines which user
- CCommand 1 defines which role owns user_01
- DCommand 1 defines all the grants which are given to user_01 Command 2 defines which role
How the community answered
(37 responses)- B5% (2)
- C3% (1)
- D92% (34)
Explanation
Snowflake distinguishes between two directions of grant visibility. 'SHOW GRANTS TO USER user_01' lists all roles that have been granted to (assigned to) user_01 - i.e., what privileges/roles the user holds. 'SHOW GRANTS ON USER user_01' shows ownership and privilege information about the user object itself - specifically, which role owns the user object. Option D correctly captures both: Command 1 shows grants given to user_01, and Command 2 shows which role owns user_01. Options A and C confuse the direction - Command 1 does not show ownership, it shows granted roles. Option B incorrectly states Command 2 shows which user owns user_01; ownership in Snowflake is always held by a role, not a user.
Topics
Community Discussion
No community discussion yet for this question.