Creating custom roles in Snowflake - Quick Revision & Summary

Recall & Review

beginner

What is a custom role in Snowflake?

A custom role is a user-defined set of permissions that controls access to Snowflake resources, allowing tailored access beyond default roles.

beginner

Which SQL command is used to create a custom role in Snowflake?

The command CREATE ROLE <role_name>; is used to create a custom role.

intermediate

How do you grant privileges to a custom role?

Use the GRANT <privilege> ON <object> TO ROLE <role_name>; command to assign permissions to the role.

beginner

Why assign a custom role to a user?

Assigning a custom role to a user controls what actions they can perform, ensuring they have only the permissions needed for their tasks.

intermediate

What is the best practice when creating custom roles?

Create roles with the least privileges needed, assign roles to users carefully, and regularly review role permissions to maintain security.

Which command creates a new custom role in Snowflake?

A NEW ROLE my_custom_role;

B CREATE ROLE my_custom_role;

C ADD ROLE my_custom_role;

D MAKE ROLE my_custom_role;

The correct syntax to create a role is CREATE ROLE followed by the role name.

How do you assign a custom role to a user?

A GRANT ROLE my_role TO USER my_user;

B ASSIGN ROLE my_role TO USER my_user;

C SET ROLE my_role FOR USER my_user;

D CREATE ROLE my_role FOR USER my_user;

The correct command to assign a role to a user is GRANT ROLE <role> TO USER <user>.

What is the main purpose of creating custom roles?

A To control user access and permissions

B To create backups of databases

C To store data in Snowflake

D To customize user interface themes

Custom roles are created to control what users can access and do in Snowflake.

Which privilege can be granted to a role?

A Create new Snowflake accounts

B Change user passwords

C Modify Snowflake UI layout

D SELECT on a table

Privileges like SELECT on tables can be granted to roles to control data access.

What is a recommended security practice for custom roles?

A Grant all privileges to every role

B Assign roles randomly

C Use least privilege principle

D Avoid using roles

Using the least privilege principle means giving only the permissions necessary, improving security.

Explain the steps to create and assign a custom role in Snowflake.

Think about creating, granting permissions, then assigning.

Why is it important to follow the least privilege principle when creating custom roles?

Consider security and control benefits.