COF-C02 · Question #633
Which privilege grants the ability to set a column-level security masking policy on a table or view column?
The correct answer is A. APPLY. In Snowflake's column-level security model, the APPLY MASKING POLICY privilege is the specific privilege that allows a role to attach (set) a masking policy to a column on a table or view. This privilege is separate from the ability to CREATE a masking policy (which requires…
Question
Which privilege grants the ability to set a column-level security masking policy on a table or view column?
Options
- AAPPLY
- BCREATE
- CSET
- DMODIFY
How the community answered
(26 responses)- A88% (23)
- B4% (1)
- C8% (2)
Explanation
In Snowflake's column-level security model, the APPLY MASKING POLICY privilege is the specific privilege that allows a role to attach (set) a masking policy to a column on a table or view. This privilege is separate from the ability to CREATE a masking policy (which requires CREATE MASKING POLICY on the schema). A role must be explicitly granted APPLY MASKING POLICY to associate an existing policy with a column. CREATE, SET, and MODIFY are not valid privilege names for this specific operation in Snowflake.
Topics
Community Discussion
No community discussion yet for this question.