
Answer-first summary for fast verification
Answer: Grant the OWNERSHIP privilege on the schema.
The question asks for the privilege required to modify permissions on future objects in a managed access schema. In Snowflake, managed access schemas centralize privilege management, restricting the ability to grant permissions to either the schema owner (role with OWNERSHIP privilege on the schema) or a role with the MANAGE GRANTS global privilege. The community discussion highlights that both A (OWNERSHIP on the schema) and C (MANAGE GRANTS) are correct, as either allows modifying permissions for future objects. However, the question specifies 'must be granted,' implying the minimal or direct privilege. OWNERSHIP on the schema (A) is the most targeted and least impactful option, as it specifically controls the schema without broader global privileges. Granting OWNERSHIP on the database (B) is overkill and unnecessary, as it applies to the entire database, not just the schema. Granting ALL privileges on the schema (D) is redundant, as OWNERSHIP already encompasses necessary permissions. While C is valid, A is the optimal choice for minimal scope and direct relevance to the schema.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Which privilege must be granted to a user to allow them to modify the permissions on future objects within a managed access schema?
A
Grant the OWNERSHIP privilege on the schema.
B
Grant the OWNERSHIP privilege on the database.
C
Grant the MANAGE GRANTS global privilege.
D
Grant ALL privileges on the schema.
No comments yet.