nerdexam
Snowflake

ARA-C01 · Question #63

A new user user_01 is created within Snowflake. The following two commands are executed: Command 1-> show grants to user user_01; Command 2 ~> show grants on user user 01; What inferences can be…

The correct answer is D. Command 1 defines all the grants which are given to user_01 Command 2 defines which role. Snowflake distinguishes between two directions of grant visibility. 'SHOW GRANTS TO USER user_01' lists all roles that have been granted to (assigned to) user_01 - i.e., what privileges/roles the user holds. 'SHOW GRANTS ON USER user_01' shows ownership and privilege…

Security and Compliance

Question

A new user user_01 is created within Snowflake. The following two commands are executed:

Command 1-> show grants to user user_01; Command 2 ~> show grants on user user 01; What inferences can be made about these commands?

Options

  • ACommand 1 defines which user owns user_01
  • BCommand 1 defines all the grants which are given to user_01 Command 2 defines which user
  • CCommand 1 defines which role owns user_01
  • DCommand 1 defines all the grants which are given to user_01 Command 2 defines which role

How the community answered

(37 responses)
  • B
    5% (2)
  • C
    3% (1)
  • D
    92% (34)

Explanation

Snowflake distinguishes between two directions of grant visibility. 'SHOW GRANTS TO USER user_01' lists all roles that have been granted to (assigned to) user_01 - i.e., what privileges/roles the user holds. 'SHOW GRANTS ON USER user_01' shows ownership and privilege information about the user object itself - specifically, which role owns the user object. Option D correctly captures both: Command 1 shows grants given to user_01, and Command 2 shows which role owns user_01. Options A and C confuse the direction - Command 1 does not show ownership, it shows granted roles. Option B incorrectly states Command 2 shows which user owns user_01; ownership in Snowflake is always held by a role, not a user.

Topics

#Snowflake security#User management#Role-based access control (RBAC)#SHOW GRANTS command

Community Discussion

No community discussion yet for this question.

Full ARA-C01 Practice