Which access control entity in Snowflake can be created as part of a hierarchy within an account?

The correct answer is B. Role. In Snowflake's role-based access control (RBAC) model, roles can be granted to other roles, forming a hierarchy. When role B is granted to role A, role A inherits all privileges that role B holds. This hierarchy allows systematic privilege escalation (e.g., SYSADMIN inherits…

Account Access and Security

Question

Options

ASecurable object
BRole
CPrivilege
DUser

How the community answered

(44 responses)

A
2% (1)
B
91% (40)
C
2% (1)
D
5% (2)

Explanation

In Snowflake's role-based access control (RBAC) model, roles can be granted to other roles, forming a hierarchy. When role B is granted to role A, role A inherits all privileges that role B holds. This hierarchy allows systematic privilege escalation (e.g., SYSADMIN inherits from USERADMIN). Securable objects (A) are the things being protected (tables, schemas, warehouses), not entities that form hierarchies. Privileges (C) are permissions granted on objects. Users (D) are assigned roles but do not themselves form hierarchies.

Topics

#Access Control#Roles#Role Hierarchy#RBAC

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice