SnowPro Advanced: Data Engineer Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose AEF4

  https://docs.snowflake.com/en/user-guide/security-access-control-considerations#centralizing-grant-management-using-managed-access-schemas To further lock down object security, consider using managed access schemas. In a managed access schema, object owners lose the ability to make grant decisions. Only the schema owner (i.e. the role with the OWNERSHIP privilege on the schema) or a role with the MANAGE GRANTS privilege can grant privileges on objects in the schema, including future grants, centralizing privilege management. https://docs.snowflake.com/en/user-guide/security-access-control-considerations#using-the-accountadmin-role The security administrator (i.e users with the SECURITYADMIN system role) role includes the global MANAGE GRANTS privilege to grant or revoke privileges on objects in the account.

• Chose AEF4

  https://docs.snowflake.com/en/user-guide/security-access-control-configure -SECURITYADMIN or higher -Schema owner -Any role with the MANAGE GRANTS privilege

• 2

  Thank you! I was struggling with this solution because it doesn't match the Snowflake documentation. AEF should be correct.