To which entity are privileges directly granted in Snowflake?

• A. Account
• B. Roles
• C. Users
• D. Groups

Answer: (B)

In Snowflake, privileges are granted to roles rather than directly to users. This RBAC setup means you assign specific rights (like USAGE, SELECT, etc.) to a role, and then grant that role to users. The user gains those privileges by assuming the role, possibly along with any role hierarchy where one role grants to another. You can’t grant privileges straight to a user; you grant them to a role, and users obtain them by having that role assigned. For example, create a read-only role with the needed privileges on schemas and tables, then grant that role to users who should have read access.