DEA-C02 Data Governance Practice Question
A data engineer needs to audit all grants of the 'SYSADMIN' role to users across the Snowflake account. The engineer has access to the ACCOUNTADMIN role and wants to retrieve this information efficiently. Which Snowflake view should be queried?
⚠ Common exam trap
Candidates often confuse grants to users with grants to roles, which track different relationships and are stored in separate views.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SNOWFLAKE.ACCOUNT_USAGE.GRANTS_TO_USERS
To audit which users have been granted the SYSADMIN role, the GRANTS_TO_USERS view in the ACCOUNT_USAGE schema is the correct source. It records all role-to-user grants, including the role name and grantee. Filtering on the ROLE column for 'SYSADMIN' yields the required list. Other views either lack grant information or focus on different objects.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
SNOWFLAKE.ACCOUNT_USAGE.GRANTS_TO_USERS
Why this is correct
The GRANTS_TO_USERS view in the ACCOUNT_USAGE schema contains a record of all role grants to users, including the role name, grantee name, and grant date. Querying this view with a filter on the ROLE column for 'SYSADMIN' will return the required audit information. It is the correct and efficient source for this data.
- ✗
SNOWFLAKE.ACCOUNT_USAGE.USERS
Why it's wrong here
The USERS view provides details about user accounts, such as name, creation time, and default role, but it does not list the roles granted to each user. It cannot be used to find which users have the SYSADMIN role. Thus, it does not meet the audit requirement.
- ✗
SNOWFLAKE.ACCOUNT_USAGE.ROLES
Why it's wrong here
The ROLES view lists all roles in the account along with their attributes such as owner and comment, but it does not include information about which users have been granted those roles. Therefore, it cannot provide the grant details needed for the audit. This view is not suitable for the scenario.
- ✗
SNOWFLAKE.ACCOUNT_USAGE.GRANTS_TO_ROLES
Why it's wrong here
GRANTS_TO_ROLES shows privileges granted to roles on objects, not role grants to users. It answers questions like which roles have access to a table, but not which users have a specific role. Using this view would not return the needed information about SYSADMIN assignments.
About these practice questions
This DEA-C02 question is part of Courseiva's 229-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This DEA-C02 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DEA-C02 exam.