What is the purpose of assigning roles to users in Snowflake?

Snowflake uses Role-Based Access Control (RBAC) as its core security model. The purpose of roles is to act as containers for privileges (permissions) on securable objects like databases, tables, and warehouses. Privileges are granted to roles, and roles are then granted to users or other roles. This model simplifies security administration by allowing administrators to manage sets of permissions collectively rather than assigning them to each user individually. Assigning a role to a user grants them all the privileges associated with that role.

B. Roles grant permissions to perform tasks, but they do not define the tasks themselves. Snowflake Tasks are a separate object.

C. Access control roles do not influence the query optimizer's logic for creating execution plans.

D. Permissions are granted on objects (like tables or columns), not on specific data types.

1. Snowflake Documentation. (n.d.). Overview of Access Control. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-overview. "Access control privileges are granted to roles, which are in turn assigned to users... All access control in Snowflake is managed through roles."

2. Snowflake Documentation. (n.d.). Access Control in Snowflake. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control. "In the Snowflake model, access to securable objects is allowed via privileges assigned to roles, which are in turn assigned to other roles or users."

3. Snowflake Documentation. (n.d.). Configuring Access Control. Retrieved from https://docs.snowflake.com/en/user-guide/security-access-control-configure. "Step 3: Grant privileges on database objects to the role." This section explicitly details the process of assigning permissions to roles.