Question

A data provider maintains a share that currently exposes several secure views to a consumer account. The provider wants to reorganize how access is granted so that groups of shared objects can be managed together and easily added to or removed from the share as a unit, without recreating the share. Which approach lets the provider group and manage the shared objects most efficiently within the share?

Accepted Answer

Create one or more database roles in the shared database, grant object privileges to those database roles, and grant the database roles to the share

Answer

Create an account-level role, grant it the shared objects, and add that account role to the share

Answer

Create a separate share for each group of objects and add all shares to the consumer account

Answer

Clone the shared database into groups and add each clone to the share individually