COF-C03 Data Collaboration Practice Question
A consumer has mounted a share from a provider and wants to grant a role in their account the ability to query the shared data. What must the consumer do?
⚠ Common exam trap
The trap here is assuming the provider controls access on the consumer side, when in fact the consumer grants privileges on the mounted database to their own roles.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Grant USAGE on the shared database and schemas, and SELECT on the shared tables or views, to the role.
Consumers manage access to shared databases using standard GRANT statements within their own account. They grant USAGE on the database and schemas, and SELECT on the shared tables or views, to the roles that need access. Providers cannot grant privileges to consumer roles, and access is not automatic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ask the provider to grant SELECT directly to the consumer's role.
Why it's wrong here
Providers cannot grant privileges to roles in a consumer account. Roles are account-local objects, and the provider has no visibility or control over them. The consumer must manage access to the shared database within their own account, making this request impossible to fulfill.
- ✓
Grant USAGE on the shared database and schemas, and SELECT on the shared tables or views, to the role.
Why this is correct
After creating a database from a share, the consumer must grant privileges on that database to roles that need access. This includes USAGE on the database and schema, and SELECT on the specific tables or views. The consumer controls these grants independently of the provider, so this is the correct action.
- ✗
Create a new share in the consumer account that references the provider's share.
Why it's wrong here
Shares are outbound objects created by providers; consumers do not create shares to reference inbound shares. Access to a mounted share is controlled through standard GRANT statements on the imported database. Creating another share would not grant query access and is not part of the consumption workflow.
- ✗
Nothing, because all roles in the consumer account automatically have access to shared databases.
Why it's wrong here
Access is not automatic. When a database is created from a share, only the role that created it (or roles with appropriate privileges) can access it initially. The consumer must explicitly grant privileges to other roles. Assuming automatic access would leave most users unable to query the shared data.
About these practice questions
One of 280 original COF-C03 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This COF-C03 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the COF-C03 exam.