In Snowflake, who receives privileges directly?

• A. Accounts
• B. Users
• C. Roles
• D. Groups

Answer: (C)

In Snowflake, privileges on objects are granted to roles, and users gain those privileges through the roles they are assigned. A role is the unit that carries the rights, while accounts and groups aren’t the recipients of object privileges in the same way. This means privileges are given directly to a role, and a user inherits them by being granted that role. For example, you can grant select on a table to a role, then assign that role to a user, who then has select through the role.