Who can create network policies within Snowflake? (Select TWO).

The correct answer is C. SECURITYADMIN or higher roles D. A role with the CREATE NETWORK POLICY privilege. In Snowflake, network policies (which restrict account or user access by IP allowlist/blocklist) can be created in two ways: (1) by roles at the SECURITYADMIN level or above (SECURITYADMIN and ACCOUNTADMIN have this ability by default as part of their built-in privileges), or…

Account Access and Security

Question

Options

ASYSADMIN only
BORCADMIN only
CSECURITYADMIN or higher roles
DA role with the CREATE NETWORK POLICY privilege
EA role with the CREATE SECURITY INTEGRATION privilege

How the community answered

(24 responses)

A
4% (1)
C
92% (22)
E
4% (1)

Explanation

In Snowflake, network policies (which restrict account or user access by IP allowlist/blocklist) can be created in two ways: (1) by roles at the SECURITYADMIN level or above (SECURITYADMIN and ACCOUNTADMIN have this ability by default as part of their built-in privileges), or (2) by any custom role that has been explicitly granted the CREATE NETWORK POLICY privilege. SYSADMIN does not have this privilege by default, and ORGADMIN operates at the organization level rather than individual account security objects.

Topics

#Network Policies#Roles and Privileges#Security#Access Control

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice