ADA-C01 practice question 2 of 10

A requirement has been identified to allow members of a corporate Data Product team to bring in data sets from the Snowflake Marketplace. The members of this team use the role DP_TEAM. What grant statements must the ACCOUNTADMIN execute in order for the DP TEAM role to import and work with data from the Marketplace?

Full set: 75 questions

Domain Data Sharing and Data Marketplace

Answer options
A: grant marketplace in account to role dp_team; grant create database from share to role dp_team;
B: grant usage on snowflake_marketplace to role dp_team; grant create database on account to role dp_team;
C: grant imported privileges on account to role dp_team; grant create database on account to role dp_team;
D: grant import share on account to role dp_team; grant create database on account to role dp_team; Correct answer
Correct Answer:
D. grant import share on account to role dp_team; grant create database on account to role dp_team;
Explanation

To enable a role to acquire and use data from the Snowflake Marketplace, two specific account-level privileges are required. First, the IMPORT SHARE privilege must be granted. This allows the role to view all inbound shares from providers, which is how Marketplace listings are made available to an account, and to create databases from those shares. Second, the CREATE DATABASE privilege is required for the role to execute the CREATE DATABASE command itself. The combination of these two grants allows the DPTEAM role to both see the shared data from the Marketplace and create a usable database from it.

Why Incorrect

A: marketplace in account and create database from share are not valid Snowflake privilege names or syntactically correct grant statements. B: The Snowflake Marketplace is a feature, not a database object named snowflakemarketplace on which USAGE privileges can be granted. C: The IMPORTED PRIVILEGES grant is used to give a role access to objects within a database that has already been created from a share, not to create the database itself.

References

1. Snowflake Documentation. (n.d.). Becoming a Consumer of Listings. Retrieved from https://docs.snowflake.com/en/user-guide/data-marketplace-consumer.

This document explicitly states: "To get data from a listing and create a database from it

a role must have the CREATE DATABASE and IMPORT SHARE privileges."

2. Snowflake Documentation. (n.d.). Access control privileges - Global Privileges. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-privileges#global-privileges.

This section lists and describes IMPORT SHARE as a global (account-level) privilege that "Enables viewing all inbound shares (from providers) and creating databases from them."

3. Snowflake Documentation. (n.d.). CREATE DATABASE. Retrieved from https://docs.snowflake.com/en/sql-reference/sql/create-database.

Under the "Required Privileges" section for creating a database from a share

it confirms that a role requires both the CREATE DATABASE and IMPORT SHARE privileges.

Scroll to Top