In Snowflake, can a role be granted to another role?

Master the SnowPro Advanced Architect Test with flashcards, multiple-choice questions, and detailed explanations. Prepare thoroughly for your certification!

Multiple Choice

In Snowflake, can a role be granted to another role?

Explanation:
Snowflake supports role hierarchies by allowing a role to be granted to another role. This means the recipient role inherits all privileges assigned to the granted role, enabling you to compose access through multiple layers. For example, if a role called analyst has certain privileges (like SELECT on specific objects), you can grant that role to another role called manager with a statement like GRANT ROLE analyst TO ROLE manager. Now any user who has the manager role also gains the analyst privileges. You can extend this further by granting the manager role to a higher role, creating a chain of inheritance. This approach helps you model organizational structures and enforce least privilege through clear, reusable roles.

Snowflake supports role hierarchies by allowing a role to be granted to another role. This means the recipient role inherits all privileges assigned to the granted role, enabling you to compose access through multiple layers.

For example, if a role called analyst has certain privileges (like SELECT on specific objects), you can grant that role to another role called manager with a statement like GRANT ROLE analyst TO ROLE manager. Now any user who has the manager role also gains the analyst privileges. You can extend this further by granting the manager role to a higher role, creating a chain of inheritance.

This approach helps you model organizational structures and enforce least privilege through clear, reusable roles.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy