COF-C03 Data Collaboration Practice Question
A consumer has created a database from a share provided by a partner. The consumer wants to query the shared data but receives an error indicating insufficient privileges. Which role must the consumer's user be granted to access the shared database?
⚠ Common exam trap
The trap here is assuming that system-defined roles like ACCOUNTADMIN or SYSADMIN automatically have access to shared databases, when in fact the IMPORTED PRIVILEGES privilege must be explicitly granted.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A role with the IMPORTED PRIVILEGES privilege on the shared database
To access a shared database, the consumer must grant the IMPORTED PRIVILEGES privilege on that database to a role and then grant that role to the user. This privilege is specific to shared databases and is required for any role that needs to query the shared objects. Other roles like ACCOUNTADMIN or SYSADMIN do not have this privilege by default.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The PUBLIC role
Why it's wrong here
PUBLIC is a default role that every user has, but it does not have any privileges on shared databases unless explicitly granted. The consumer must grant IMPORTED PRIVILEGES on the shared database to a role. PUBLIC is not automatically granted this privilege, so it cannot be used to access shared data without explicit grants.
- ✓
A role with the IMPORTED PRIVILEGES privilege on the shared database
Why this is correct
In the consumer account, access to a shared database is controlled by the IMPORTED PRIVILEGES privilege. The consumer must grant this privilege on the shared database to a role, and then grant that role to the user. This allows the user to query the shared objects. Without this privilege, the user cannot access the shared data even if the database exists.
- ✗
The ACCOUNTADMIN role
Why it's wrong here
ACCOUNTADMIN is a powerful role but it is not automatically granted access to shared databases. The consumer must explicitly grant the IMPORTED PRIVILEGES privilege on the shared database to a role, and then grant that role to the user. Using ACCOUNTADMIN is not required and violates the principle of least privilege.
- ✗
The SYSADMIN role
Why it's wrong here
SYSADMIN is a system-defined role for managing objects within the account, but it does not automatically have access to shared databases. The consumer must explicitly grant IMPORTED PRIVILEGES on the shared database to a role. SYSADMIN does not have this privilege by default, so it cannot be used to access shared data without additional grants.
About these practice questions
This COF-C03 question is part of Courseiva's 280-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This COF-C03 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the COF-C03 exam.