An Architect needs to grant a group of ORDER_ADMIN users the ability to clean old data in an ORDERS table (deleting all records older than 5 years)…

This is the correct answer because it allows the ORDER_ADMIN role to perform the data cleanup

without needing the DELETE privilege on the ORDERS table. A stored procedure is a feature that

allows scheduling and executing SQL statements or stored procedures in Snowflake. A stored

procedure can run with either the caller’s rights or the owner’s rights. A caller’s rights stored

procedure runs with the privileges of the role that called the stored procedure, while an owner’s

rights stored procedure runs with the privileges of the role that created the stored procedure. By

creating a stored procedure that runs with owner’s rights, the ORDER_MANAGER role can delegate

the specific task of deleting old data to the ORDER_ADMIN role, without granting the ORDER_ADMIN

role more general privileges on the ORDERS table. The stored procedure must include the

appropriate business logic to delete only the records older than 5 years, and the ORDER_MANAGER

role must grant the USAGE privilege on the stored procedure to the ORDER_ADMIN role. The

ORDER_ADMIN role can then execute the stored procedure to perform the data cleanup12.

Reference:

Snowflake Documentation: Stored Procedures

Snowflake Documentation: Understanding Caller’s Rights and Owner’s Rights Stored Procedures