RBAC - 10

Complete the following sentence?

Privileges are granted to ________.

In the hierarchy shown below, User1

has been granted ROLE_A. What

other roles can they USE?

• Role B

• Role C

• Public and Role B

• Role C and PUBLIC

Answer explanation

When you are granted a role, you can

USE that role, and any others that are

connected below it in the hierarchy.

User1 can USE ROLE_A, ROLE_C, or

PUBLIC.

You log into Snowflake and run this

command:

SELECT * FROM tablea;

Snowflake tells you that the object

does not exist, or you are not

authorized – but you know it exists

because you created it.

What should you check?

Answer explanation

• Make sure you are using a role that

has access to the object. If you

created the object under one role, and

now you are using another, you may

not see it.

• Check your context to see if you are

using the correct database and

schema for that object.

• Check for typos!

• ROLE_A and ROLE_B are not

connected in the hierarchy

• ROLE_A can create tables in

PROD_DB.SCHEMA1

• ROLE_B can create tables in

DEV_DB.SCHEMA1

You have access to both roles. What

objects can you create after this:

USE ROLE ROLE_A;

USE SECONDARY ROLES ALL;

Answer explanation

You will be able to create tables in

PROD_DB.SCHEMA1.

When you enable secondary roles, you

only get the create privileges of your

primary role (the one you have chosen to

USE).

Fill out the following to identify the hierarchy of system roles:

c

b

d

e

a

SECURITYADMIN

SYSADMIN

ACCOUNTADMIN

PUBLIC

USERADMIN