Answer-first summary for fast verification
Answer: A user with a role that has been granted the OWNERSHIP privilege on both the user and the network policy
The correct answer is D because applying a network policy to a specific user requires the ALTER USER ... SET NETWORK_POLICY command, which demands high privileges. According to Snowflake documentation and the community consensus (100% agreement with upvoted comments), only a role with OWNERSHIP privilege on both the target user and the network policy can perform this action. This ensures that the user modifying the policy has full control over both entities, preventing unauthorized changes. Options A, B, and C are incorrect: ATTACH POLICY is for account-level policies, CREATE SESSION POLICY allows policy creation but not application to users, and CREATE NETWORK POLICY permits policy creation but not user-specific activation.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
What privileges are required to apply a network policy to a specific user in a Snowflake account?
A
A user with a role that has been granted the global ATTACH POLICY privilege
B
A user with a role that has been granted the CREATE SESSION POLICY privilege
C
A user with a role that has been granted the CREATE NETWORK POLICY privilege
D
A user with a role that has been granted the OWNERSHIP privilege on both the user and the network policy