nerdexam
Snowflake

COF-C02 · Question #455

A user wants to add additional privileges to the system-defined roles for their virtual warehouse. How does Snowflake recommend they accomplish this?

The correct answer is A. Grant the additional privileges to a custom role. Snowflake recommends enhancing the granularity and management of privileges by creating and utilizing custom roles. When additional privileges are needed beyond those provided by the system- defined roles for a virtual warehouse or any other resource, these privileges should be…

Account Access and Security

Question

A user wants to add additional privileges to the system-defined roles for their virtual warehouse. How does Snowflake recommend they accomplish this?

Options

  • AGrant the additional privileges to a custom role.
  • BGrant the additional privileges to the ACCOUNTADMIN role.
  • CGrant the additional privileges to the SYSADMIN role.
  • DGrant the additional privileges to the ORGADMIN role.

How the community answered

(22 responses)
  • A
    91% (20)
  • B
    5% (1)
  • D
    5% (1)

Explanation

Snowflake recommends enhancing the granularity and management of privileges by creating and utilizing custom roles. When additional privileges are needed beyond those provided by the system- defined roles for a virtual warehouse or any other resource, these privileges should be granted to a custom role. This approach allows for more precise control over access rights and the ability to tailor permissions to the specific needs of different user groups or applications within the organization, while also maintaining the integrity and security model of system-defined roles.

Topics

#Role-based access control#Custom roles#Privilege management#Snowflake best practices

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice