Snowpro Advanced Architect · Free Practice Question Medium

Question 19

A provider has granted a direct secure share to a consumer. The consumer's account administrator needs to enable their internal users to query the data from this share. Which steps must the consumer's account administrator perform to make the shared data accessible to their users? (Select Two)
  • A Request OWNERSHIP privilege on the shared database from the provider.
  • B Create a new SHARE object in their account.
  • C Connect to the provider's account to query the data.
  • D Grant privileges on the newly created database (from the share) to appropriate roles in their account.
  • E Create a database from the shared object.
Reveal correct answers

Correct answers: D, E

Explanation

✅ Create a database from the shared object.

Explanation:

The consumer’s account administrator must create a database from the shared object to make the data accessible within their account. This step imports the shared data into their environment, allowing users to query it.

  • Required to access shared data → Without this step, users cannot reference the shared objects.

  • Creates a read-only database → Consumers cannot modify or delete shared data, ensuring security.

✅ Grant privileges on the newly created database (from the share) to appropriate roles in their account.

Explanation:

Once the shared database is created, the administrator must grant privileges to internal roles (e.g., ANALYST_ROLE) so users can query the shared data.

  • USAGE privilege on the database → Allows users to access the shared database.

  • USAGE privilege on the schema → Enables users to query tables and views within the schema.

  • SELECT privilege on shared tables/views → Grants read access to the data.

❌ Why the other options are incorrect?

Create a new SHARE object in their account.
→ Incorrect, because SHARE objects are created by the provider, not the consumer. Consumers import the shared data into their account but do not create new SHARE objects.

Connect to the provider's account to query the data.
→ Incorrect, because consumers do not directly connect to the provider’s account; they query the shared data from their own Snowflake account.

Request OWNERSHIP privilege on the shared database from the provider.
→ Incorrect, because shared databases are read-only, and OWNERSHIP cannot be transferred to the consumer.

For more details, check the official Snowflake documentation on consuming shared data.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need