COF-C02 · Question #627
Which security models are used in Snowflake to manage access control? (Select TWO).
The correct answer is A. Discretionary Access Control (DAC) D. Role-Based Access Control (RBAC). Snowflake's access control framework is built on two complementary models: Discretionary Access Control (DAC), where every securable object has an owner (the role that created it) who can grant or revoke access to other roles, and Role-Based Access Control (RBAC), where…
Question
Which security models are used in Snowflake to manage access control? (Select TWO).
Options
- ADiscretionary Access Control (DAC)
- BIdentity Access Management (1AM)
- CMandatory Access Control (MAC)
- DRole-Based Access Control (RBAC)
- ESecurity Assertion Markup Language (SAML)
How the community answered
(44 responses)- B7% (3)
- C5% (2)
- D86% (38)
- E2% (1)
Explanation
Snowflake's access control framework is built on two complementary models: Discretionary Access Control (DAC), where every securable object has an owner (the role that created it) who can grant or revoke access to other roles, and Role-Based Access Control (RBAC), where privileges are assigned to roles rather than individual users, and users inherit privileges through role assignments. IAM (Identity Access Management) is a broad cloud-provider concept (e.g., AWS IAM), not a Snowflake-specific security model. MAC (Mandatory Access Control) is used in government/military systems and is not implemented in Snowflake. SAML is an authentication/federation protocol, not an access control model.
Topics
Community Discussion
No community discussion yet for this question.