ARA-C01 Accounts and Security — All Questions With Answers

GRANT ROLE analyst TO ROLE senior_analyst;
GRANT ROLE senior_analyst TO USER jsmith;

CREATE OR REPLACE MASKING POLICY email_mask AS (val string)
  RETURNS string ->
  CASE
    WHEN current_role() IN ('ANALYST') THEN val
    ELSE '*********'
  END;

CREATE OR REPLACE ROW ACCESS POLICY region_policy
  AS (sales_region string) RETURNS BOOLEAN ->
  EXISTS (
    SELECT 1 FROM sales_managers
    WHERE manager_role = CURRENT_ROLE()
    AND region = sales_region
  );

GRANT ROLE analyst TO ROLE data_scientist;
GRANT ROLE data_scientist TO USER jdoe;
-- Current role of jdoe is data_scientist.

{
  "status": "success",
  "data": {
    "name": "MY_NETWORK_POLICY",
    "allowed_ip_list": ["192.168.1.0/24"],
    "blocked_ip_list": ["10.0.0.0/8"]
  }
}

{
  "name": "MY_OAUTH_INT",
  "type": "EXTERNAL_OAUTH",
  "enabled": true,
  "issuer": "https://sts.windows.net/tenant-id/",
  "jks_url": "https://login.microsoftonline.com/common/discovery/keys",
  "audience_list": ["https://analysis.windows.net/powerbi/connector/snowflake"],
  "token_user_field": "upn",
  "scope_mapping_attribute": "scp"
}