What is the recommended method for using a newly created role?

• A. Grant it to his own user then switch to that role
• B. Create a separate user for that role
• C. Assign role to another user
• D. Use role directly without enabling it

Answer: (A)

In Snowflake, privileges are granted to roles, and users are granted those roles. To operate under a role, you must enable or switch to that role in your session.

The recommended approach is to grant the new role to your user and then switch to that role when you need to perform tasks. This keeps everything auditable under a single user identity while applying the specific privileges of the role only while you’re actively using it. It also avoids the overhead of creating separate users or managing multiple identities, and it preserves the ability to audit actions by the original user.

Practically, you’d grant the role to the user and then set the session to use that role (for example, USE ROLE ). The other options introduce extra users or complicate auditing, and attempting to use a role without enabling it isn’t how Snowflake permissions work.