At which object type level can the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY SESSION POLICY privileges be granted?

The object type level at which the APPLY MASKING POLICY, APPLY ROW ACCESS POLICY and APPLY

SESSION POLICY privileges can be granted is global. These are account-level privileges that control

who can apply or unset these policies on objects such as columns, tables, views, accounts, or users.

These privileges are granted to the ACCOUNTADMIN role by default, and can be granted to other

roles as needed. The other options are incorrect because they are not the object type level at which

these privileges can be granted. Database, schema, and table are lower-level object types that do not

support these privileges. Reference: Access Control Privileges | Snowflake Documentation, Using

Dynamic Data Masking | Snowflake Documentation, Using Row Access Policies | Snowflake

Documentation, Using Session Policies | Snowflake Documentation