nerdexam
Snowflake

COF-C02 · Question #538

Authorization to execute CREATE <object> statements comes only from which role?

The correct answer is A. Primary role. In Snowflake, the authorization to execute CREATE <object> statements, such as creating tables, views, databases, etc., is determined by the role currently set as the user's primary role. The primary role of a user or session specifies the set of privileges (including creation…

Account Access and Security

Question

Authorization to execute CREATE <object> statements comes only from which role?

Options

  • APrimary role
  • BSecondary role
  • CApplication role
  • DDatabase role

How the community answered

(15 responses)
  • A
    93% (14)
  • D
    7% (1)

Explanation

In Snowflake, the authorization to execute CREATE <object> statements, such as creating tables, views, databases, etc., is determined by the role currently set as the user's primary role. The primary role of a user or session specifies the set of privileges (including creation privileges) that the user has. While users can have multiple roles, only the primary role is used to determine what objects the user can create unless explicitly specified in the session.

Topics

#Role-based access control (RBAC)#Primary role#Permissions#CREATE statements

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice