Question

A data engineer creates a view named finance.reporting.summary_v that selects aggregated results from the base table finance.raw.transactions. Analysts in the 'reporting_team' group need to query summary_v but must NOT be able to query the underlying transactions table directly. The engineer owns both objects. What is the minimum set of grants that satisfies this requirement?

Accepted Answer

Grant USAGE on the finance catalog and reporting schema, and SELECT on summary_v, to reporting_team — but do not grant any privileges on the raw schema or transactions table.

Answer

Grant SELECT on both summary_v and transactions to reporting_team, since a view requires the reader to also have access to its source table.

Answer

Grant USAGE on the catalog and both schemas, plus SELECT on summary_v only, to reporting_team.

Answer

Grant MODIFY on summary_v to reporting_team so they can read the aggregated results without touching the base table.