An Architect needs to allow a user to create a database from an inbound share. To meet this requirement, the user’s role must have which privileges?…

To create a database from an inbound share, a user's role requires two distinct, account-level privileges. First, the IMPORT SHARE privilege is necessary to view and access shares that have been made available to the account by a data provider. Second, the CREATE DATABASE privilege is fundamentally required to execute the CREATE DATABASE ... FROM SHARE command. Without both of these privileges, the role will be unable to complete the operation of instantiating a database from the shared data.

B. IMPORT PRIVILEGES; is not a valid privilege. The pseudo-privilege IMPORTED PRIVILEGES is granted on a database created from a share; it is not a prerequisite for its creation.

D. CREATE SHARE; is a privilege for data providers to create new outbound shares from their own databases, which is the opposite of the consumer action described.

E. IMPORT DATABASE; is not a valid Snowflake privilege. The correct privilege to create any database, including one from a share, is CREATE DATABASE.

1. Snowflake Documentation. (2023). CREATE DATABASE. Retrieved from https://docs.snowflake.com/en/sql-reference/sql/create-database.

Reference Details: In the "Required Privileges" section, it explicitly states: "To create a database from a share, a role must have the CREATE DATABASE privilege for the account and the IMPORT SHARE privilege for the account."

2. Snowflake Documentation. (2023). Granting Privileges to Other Roles. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-privileges#granting-privileges-to-other-roles.

Reference Details: The table of "Global Privileges" lists IMPORT SHARE and describes its purpose as: "Enables viewing all shares shared with an account and creating databases from the shares."

3. Snowflake Documentation. (2023). Working with Shared Data. Retrieved from https://docs.snowflake.com/en/user-guide/data-sharing-consumer.

Reference Details: Under the section "Step 2: Create a Database from the Share," the documentation notes: "Creating a database from a share requires the global CREATE DATABASE privilege in addition to the IMPORT SHARE privilege."