Who can grant object privileges in a regular schema?

The correct answer is A. Object owner. In a regular (non-managed) Snowflake schema, the role that owns an object - the object owner - has the OWNERSHIP privilege on that object and is therefore the one who can grant access privileges (SELECT, INSERT, UPDATE, etc.) on it to other roles. This is in contrast to a…

Account Access and Security

Question

Options

AObject owner
BSchema owner
CDatabase owner
DSYSADMIN

How the community answered

(24 responses)

A
88% (21)
B
8% (2)
D
4% (1)

Explanation

In a regular (non-managed) Snowflake schema, the role that owns an object - the object owner - has the OWNERSHIP privilege on that object and is therefore the one who can grant access privileges (SELECT, INSERT, UPDATE, etc.) on it to other roles. This is in contrast to a managed access schema, where the schema owner centralizes all privilege grants regardless of who created the object. The schema owner, database owner, and SYSADMIN do not automatically have the ability to grant privileges on objects they don't own in a regular schema, unless they have been explicitly granted MANAGE GRANTS or hold a higher administrative role.

Topics

#Access Control#Object Ownership#Privileges

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice