Which MINIMUM set of privileges is required to temporarily bypass an active network policy by configuring the user object property MINS_TO_BYPASS_NETWORK_POLICY?

The correct answer is A. Only while in the ACCOUNTADMIH role. The MINS_TO_BYPASS_NETWORK_POLICY user object property allows a temporary bypass of a network policy for a specific user for a defined number of minutes. Only the ACCOUNTADMIN role has the privilege to set this property. This is by design - network policies are a security…

Account Access and Security

Question

Options

AOnly while in the ACCOUNTADMIH role
BOnly while in the securityadmin role
COnly the role with the ownership privilege on the network policy
DOnly Snowflake Support can set the value for this object property

How the community answered

(54 responses)

A
85% (46)
B
9% (5)
C
2% (1)
D
4% (2)

Explanation

The MINS_TO_BYPASS_NETWORK_POLICY user object property allows a temporary bypass of a network policy for a specific user for a defined number of minutes. Only the ACCOUNTADMIN role has the privilege to set this property. This is by design - network policies are a security control, and bypassing them is a highly privileged operation restricted to the highest-level administrative role in Snowflake. Even SECURITYADMIN, which manages security objects like network policies themselves, cannot set this bypass property. Snowflake Support is not involved in this operation.

Topics

#Network Policies#User Parameters#Roles and Privileges#Account Security

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice