For Snowflake network policies, what will occur when the account_level and user_level network policies are both defined?

Snowflake applies network policies in a hierarchical manner. A policy applied to an individual user is more specific than a policy applied to the entire account. Therefore, if a network policy is set for both the account and a specific user, the user-level network policy will take precedence for that user. All other users in the account who do not have a user-specific policy will continue to be governed by the account-level policy. This allows administrators to set a general security posture for the account while making specific exceptions for individual users.

A. The accountlevel policy is less specific and is therefore overridden by the more specific userlevel policy for that particular user.

C. User-level network policies are a fully supported and documented feature in Snowflake, designed for granular access control.

D. Snowflake has a clearly defined precedence rule to resolve this scenario, so an error is not generated. The system applies the most specific policy.

1. Snowflake Documentation. (2024). Network Policy Precedence. In Managing Security > Network & Private Connectivity > Network Policies. Retrieved from https://docs.snowflake.com/en/user-guide/network-policies#network-policy-precedence.

Reference Details: The section "Network Policy Precedence" explicitly states: "You can apply a network policy to an account or an individual user. When a network policy is applied to both the account and a user

the user-level network policy takes precedence."