ADA-C01 practice question 2 of 10
A requirement has been identified to allow members of a corporate Data Product team to bring in data sets from the Snowflake Marketplace. The members of this team use the role DP_TEAM. What grant statements must the ACCOUNTADMIN execute in order for the DP TEAM role to import and work with data from the Marketplace?
Full set: 75 questionsDomain Data Sharing and Data Marketplace
To enable a role to acquire and use data from the Snowflake Marketplace, two specific account-level privileges are required. First, the IMPORT SHARE privilege must be granted. This allows the role to view all inbound shares from providers, which is how Marketplace listings are made available to an account, and to create databases from those shares. Second, the CREATE DATABASE privilege is required for the role to execute the CREATE DATABASE command itself. The combination of these two grants allows the DPTEAM role to both see the shared data from the Marketplace and create a usable database from it.
A: marketplace in account and create database from share are not valid Snowflake privilege names or syntactically correct grant statements. B: The Snowflake Marketplace is a feature, not a database object named snowflakemarketplace on which USAGE privileges can be granted. C: The IMPORTED PRIVILEGES grant is used to give a role access to objects within a database that has already been created from a share, not to create the database itself.
1. Snowflake Documentation. (n.d.). Becoming a Consumer of Listings. Retrieved from https://docs.snowflake.com/en/user-guide/data-marketplace-consumer.
This document explicitly states: "To get data from a listing and create a database from it
a role must have the CREATE DATABASE and IMPORT SHARE privileges."
2. Snowflake Documentation. (n.d.). Access control privileges - Global Privileges. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-privileges#global-privileges.
This section lists and describes IMPORT SHARE as a global (account-level) privilege that "Enables viewing all inbound shares (from providers) and creating databases from them."
3. Snowflake Documentation. (n.d.). CREATE DATABASE. Retrieved from https://docs.snowflake.com/en/sql-reference/sql/create-database.
Under the "Required Privileges" section for creating a database from a share
it confirms that a role requires both the CREATE DATABASE and IMPORT SHARE privileges.
Keep practicing
Take the free ADA-C01 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ADA-C01 practice questions
- Question 1A Snowflake Administrator wants to create a virtual warehouse that supports several dashb…
- Question 3What is required for stages, without credentials, to limit data exfiltration after a stor…
- Question 4Which function is the role SECURITYADMIN responsible for that is not granted to role USER…
- Question 5For Snowflake network policies, what will occur when the account_level and user_level net…
- Question 6In which scenario will use of an external table simplify a data pipeline?
- Question 7A team is provisioning new lower environments from the production database using cloning.…
