Why access control protects sensitive data in Snowflake - Test Your Understanding

Practice - 5 Tasks

1fill in blank

easy

Complete the code to grant read access to a user on a table.

Snowflake

GRANT SELECT ON TABLE sensitive_data TO [1];

Drag options to blanks, or click blank then click option'

AUSER_ANALYST

BDATABASE_ADMIN

CROLE_ANALYST

DWAREHOUSE_OPERATOR

Attempts:

3 left

💡 Hint

Common Mistakes

Using a role name when a user name is required

Granting privileges to the wrong entity

You grant privileges to a user or role. Here, USER_ANALYST is the user receiving SELECT rights.

2fill in blank

medium

Complete the code to revoke write access from a role.

Snowflake

REVOKE INSERT ON TABLE customer_info FROM [1];

Drag options to blanks, or click blank then click option'

AUSER_SALES

BUSER_ADMIN

CROLE_DATA_ENGINEER

DROLE_SALES_TEAM

Attempts:

3 left

💡 Hint

Common Mistakes

Revoking from a user instead of a role

Using a role unrelated to the data

Write permissions are usually granted to roles. Here, ROLE_SALES_TEAM is having INSERT rights revoked.

3fill in blank

hard

Fix the error in the code to correctly grant access to a schema.

Snowflake

GRANT USAGE ON SCHEMA [1] TO ROLE data_analyst;

Drag options to blanks, or click blank then click option'

Asales-data

Bsales_data

Csales.data

DsalesData

Attempts:

3 left

💡 Hint

Common Mistakes

Using invalid characters in schema names

Using camelCase which is allowed but less common

Schema names must be valid identifiers without special characters like dashes or dots. sales_data is valid.

4fill in blank

hard

Fill both blanks to create a role and grant it access to a database.

Snowflake

CREATE ROLE [1];
GRANT USAGE ON DATABASE [2] TO ROLE [1];

Drag options to blanks, or click blank then click option'

Adata_scientist

Banalytics_db

Csales_db

Ddata_engineer

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing role and database names

Using invalid names

The role data_scientist is created and granted usage on the analytics_db database.

5fill in blank

hard

Fill all three blanks to grant a role access to a table with select permission.

Snowflake

GRANT SELECT ON TABLE [1] TO ROLE [2];
GRANT [3] ON SCHEMA public TO ROLE [2];

Drag options to blanks, or click blank then click option'

Acustomer_data

Bdata_analyst

CUSAGE

Dsales_data

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing table and schema names

Using wrong privilege keywords

The data_analyst role is granted SELECT on customer_data table and USAGE on the public schema.