By default, inbound shares can be accessible by which role?

• A. SYSADMIN
• B. ACCOUNTADMIN
• C. SECURITYADMIN
• D. PUBLIC

Answer: (B)

Inbound shares in Snowflake are accessed through privileges on the share itself and on the database created from that share. The ACCOUNTADMIN role has broad, account-wide privileges, including the ability to access and manage inbound shares by default. That means, without adding explicit grants, this role can view and use inbound-shared data, making it the safest default to rely on for access. Other roles would need specific USAGE privileges on the shared object and the resulting database to access the data; PUBLIC is not granted access by default, and SECURITYADMIN or SYSADMIN don’t automatically confer access to inbound shares unless you explicitly grant them the necessary privileges.