COF-C02 · Question #363
Which privilege must be granted by one role to another role, and cannot be revoked?
The correct answer is C. OWNERSHIP. OWNERSHIP is the unique privilege in Snowflake that cannot be revoked in the traditional sense - it can only be transferred (granted) to another role. Every securable object in Snowflake has exactly one owner. When OWNERSHIP is granted to a new role, the previous role loses…
Question
Which privilege must be granted by one role to another role, and cannot be revoked?
Options
- AMONITOR
- BOPERATE
- COWNERSHIP
- DALL
How the community answered
(61 responses)- A2% (1)
- B2% (1)
- C93% (57)
- D3% (2)
Explanation
OWNERSHIP is the unique privilege in Snowflake that cannot be revoked in the traditional sense - it can only be transferred (granted) to another role. Every securable object in Snowflake has exactly one owner. When OWNERSHIP is granted to a new role, the previous role loses ownership automatically. Because ownership always lives somewhere and cannot simply be removed without transferring it, it is said to be irrevocable. MONITOR (A) and OPERATE (B) are standard privileges that can be revoked normally. ALL (D) is a shorthand for granting multiple privileges at once, but individual privileges within it can still be revoked.
Topics
Community Discussion
No community discussion yet for this question.