A requirement has been identified to allow members of a corporate Data Product team to bring in data sets from the Snowflake Marketplace. The members…

To enable a role to acquire and use data from the Snowflake Marketplace, two specific account-level privileges are required. First, the IMPORT SHARE privilege must be granted. This allows the role to view all inbound shares from providers, which is how Marketplace listings are made available to an account, and to create databases from those shares. Second, the CREATE DATABASE privilege is required for the role to execute the CREATE DATABASE command itself. The combination of these two grants allows the DPTEAM role to both see the shared data from the Marketplace and create a usable database from it.

A: marketplace in account and create database from share are not valid Snowflake privilege names or syntactically correct grant statements.

B: The Snowflake Marketplace is a feature, not a database object named snowflakemarketplace on which USAGE privileges can be granted.

C: The IMPORTED PRIVILEGES grant is used to give a role access to objects within a database that has already been created from a share, not to create the database itself.

1. Snowflake Documentation. (n.d.). Becoming a Consumer of Listings. Retrieved from https://docs.snowflake.com/en/user-guide/data-marketplace-consumer.

This document explicitly states: "To get data from a listing and create a database from it

a role must have the CREATE DATABASE and IMPORT SHARE privileges."

2. Snowflake Documentation. (n.d.). Access control privileges - Global Privileges. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-privileges#global-privileges.

This section lists and describes IMPORT SHARE as a global (account-level) privilege that "Enables viewing all inbound shares (from providers) and creating databases from them."

3. Snowflake Documentation. (n.d.). CREATE DATABASE. Retrieved from https://docs.snowflake.com/en/sql-reference/sql/create-database.

Under the "Required Privileges" section for creating a database from a share

it confirms that a role requires both the CREATE DATABASE and IMPORT SHARE privileges.