Question

A data engineer creates a new table called SALES.RAW.ORDERS while operating under a custom role named LOAD_ROLE. Later, an analyst using the REPORTING_ROLE reports they cannot query the table, even though an ACCOUNTADMIN confirms the table exists. Aside from using a higher system-defined role, which action correctly reflects Snowflake's discretionary access control model to grant the analyst access?

Accepted Answer

LOAD_ROLE, as the owning role of the table, grants SELECT on SALES.RAW.ORDERS to REPORTING_ROLE.

Answer

The analyst must be granted the LOAD_ROLE, because only the creating role can ever query objects it owns.

Answer

SECURITYADMIN must transfer ownership of the table to REPORTING_ROLE before any SELECT can succeed.

Answer

PUBLIC role must be granted SELECT on the table so all roles automatically inherit query access.