Which object type is granted permissions for reading a table?

In Snowflake, permissions for accessing database objects, including tables, are not granted directly

to users but rather to roles. A role encapsulates a collection of privileges on various Snowflake

objects. Users are then granted roles, and through those roles, they inherit the permissions

necessary to read a table or perform other actions. This approach adheres to the principle of least

privilege, allowing for granular control over database access and simplifying the management of user

permissions.

Reference: Snowflake's official documentation on access control introduces the concept of roles and

how they are used to manage permissions: https://docs.snowflake.com/en/user-guide/securityaccess-control-overview.html#roles