Who can activate a network policy for users in a Snowflake account? (Select TWO)

The correct answer is A. ACCOUNTADMIN E. Any role that has the global ATTACH POLICY privilege. In Snowflake, a network policy can be applied to individual users or at the account level by the ACCOUNTADMIN role, which has the highest level of administrative privileges. Additionally, any role explicitly granted the global ATTACH POLICY privilege can also activate (attach)…

Account Access and Security

Question

Options

AACCOUNTADMIN
BUSERADMIN
CPUBLIC
DSYSADMIN
EAny role that has the global ATTACH POLICY privilege

How the community answered

(39 responses)

A
87% (34)
B
3% (1)
C
3% (1)
D
8% (3)

Explanation

In Snowflake, a network policy can be applied to individual users or at the account level by the ACCOUNTADMIN role, which has the highest level of administrative privileges. Additionally, any role explicitly granted the global ATTACH POLICY privilege can also activate (attach) a network policy to users. USERADMIN (B) can create and manage users but cannot attach network policies unless granted ATTACH POLICY. PUBLIC (C) is a default role with minimal privileges. SYSADMIN (D) manages objects like databases and warehouses but does not have ATTACH POLICY privilege by default.

Topics

#Network Policy#Roles#Privileges#Security

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice