Which privilege must be granted to a share to allow secure views the ability to reference data in multiple databases?

The correct answer is D. REFERENCE_USAGE on databases. When a secure view in a share references tables or data from a database other than the one being directly shared, the share must be granted REFERENCE_USAGE on those additional databases. This privilege does not expose the underlying data directly to consumers-it simply allows…

Data Protection and Data Sharing

Question

Options

ACREATE_SHARE on the account
BSHARE on databases and schemas
CSELECT on tables used by the secure view
DREFERENCE_USAGE on databases

How the community answered

(28 responses)

A
4% (1)
B
14% (4)
C
7% (2)
D
75% (21)

Explanation

When a secure view in a share references tables or data from a database other than the one being directly shared, the share must be granted REFERENCE_USAGE on those additional databases. This privilege does not expose the underlying data directly to consumers-it simply allows the secure view's query to resolve cross-database references at query time. CREATE_SHARE (A) is an account-level privilege for creating shares, not relevant here. SHARE on databases/schemas (B) is not a real Snowflake privilege name. SELECT on tables (C) is needed separately for the share to read those tables, but it does not alone enable cross-database reference resolution.

Topics

#Secure Views#Data Sharing Privileges#Cross-Database Referencing#REFERENCE_USAGE Privilege

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice