On a database created from a share, which privilege is used to grant or revoke access?

• A. GRANT USAGE PRIVILEGE
• B. GRANT IMPORTED PRIVILEGE
• C. GRANT REFERENCES PRIVILEGE
• D. GRANT SELECT PRIVILEGE

Answer: (B)

When you create a database from a share, access is controlled by imported privileges rather than the standard local privileges. Imported privileges are the mechanism that the consumer account uses to grant or revoke access to objects that come from a share. So to let a role access the shared data, you grant imported privileges on the database (and its objects) to that role, and to remove access you revoke those imported privileges. The other privileges listed are general capabilities for local objects (such as using a database, reading data, or enforcing references) but they don’t govern the cross-account access management for shared data in this scenario.