ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 25 - ADA-C01 discussion

Report
Export

A team of developers created a new schema for a new project. The developers are assigned the role DEV_TEAM which was set up using the following statements:

USE ROLE SECURITYADMIN;

CREATE ROLE DEV TEAM;

GRANT USAGE, CREATE SCHEMA ON DATABASE DEV_DB01 TO ROLE DEV_TEAM;

GRANT USAGE ON WAREHOUSE DEV_WH TO ROLE DEV_TEAM;

Each team member's access is set up using the following statements:

USE ROLE SECURITYADMIN;

CREATE ROLE JDOE_PROFILE;

CREATE USER JDOE LOGIN NAME = 'JDOE' DEFAULT_ROLE='JDOE_PROFILE';

GRANT ROLE JDOE_PROFILE TO USER JDOE;

GRANT ROLE DEV_TEAM TO ROLE JDOE_PROFILE;

New tables created by any of the developers are not accessible by the team as a whole.

How can an Administrator address this problem?

A.
Assign ownership privilege to DEV_TEAM on the newly-created schema.
Answers
A.
Assign ownership privilege to DEV_TEAM on the newly-created schema.
B.
Assign usage privilege on the virtual warehouse DEV_WH to the role JDOE_PROFILE.
Answers
B.
Assign usage privilege on the virtual warehouse DEV_WH to the role JDOE_PROFILE.
C.
Set up future grants on the newly-created schemas.
Answers
C.
Set up future grants on the newly-created schemas.
D.
Set up the new schema as a managed-access schema.
Answers
D.
Set up the new schema as a managed-access schema.
Suggested answer: C

Explanation:

According to the Snowflake documentation1, future grants are a way to automatically grant privileges on future objects of a specific type that are created in a database or schema. By setting up future grants on the newly-created schemas, the administrator can ensure that any tables created by the developers in those schemas will be accessible by the DEV_TEAM role, without having to grant privileges on each table individually. Option A is incorrect because assigning ownership privilege to DEV_TEAM on the newly-created schema does not grant privileges on the tables in the schema, only on the schema itself. Option B is incorrect because assigning usage privilege on the virtual warehouse DEV_WH to the role JDOE_PROFILE does not affect the access to the tables in the schemas, only the ability to use the warehouse. Option D is incorrect because setting up the new schema as a managed-access schema does not grant privileges on the tables in the schema, but rather requires explicit grants for each table.

asked 23/09/2024
Kelvin Ogwu
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first