SOL-C01 Question #250: Real Exam Question with Answer & Explanation

Question

A Snowflake administrator needs to grant a data analyst the ability to create dashboards and worksheets in Snowsight, but restrict them from modifying existing roles or granting privileges to other users. Which set of privileges is BEST suited for this purpose?

Options

• AGRANT CREATE DASHBOARD ON ACCOUNT TO ROLE data_analyst; GRANT CREATE
• BGRANT CREATE DASHBOARD ON DATABASE TO ROLE data_analyst; GRANT CREATE
• CGRANT CREATE DASHBOARD ON SCHEMA TO ROLE data_analyst; GRANT CREATE
• DGRANT ALL ON ACCOUNT TO ROLE data_analyst;
• EThere are no specific privileges required as dashboard and worksheet creation are implicitly

Explanation

Dashboards and worksheets are account-level objects in Snowsight. Therefore, the CREATE DASHBOARD and CREATE WORKSHEET privileges must be granted on the ACCOUNT. Option B and C are incorrect because dashboards and worksheets are not scoped to databases or schemas. Option D grants excessive privileges, violating the principle of least privilege. Option E is incorrect, specific privileges are required.

No community discussion yet for this question.