COF-C03 Account Management and Data Governance Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  GRANT CREATE DATABASE ON DATABASE mydb TO ROLE DB_CREATOR;

  Why it's wrong here

  The CREATE DATABASE privilege is not granted on a specific database; it is an account-level privilege. Granting it on a database object is invalid syntax and would not confer the ability to create new databases. Therefore, this command would fail or not achieve the goal.

• ✗

  GRANT CREATE DATABASE TO ROLE DB_CREATOR;

  Why it's wrong here

  This syntax is missing the ON ACCOUNT clause. In Snowflake, account-level privileges must specify ON ACCOUNT. Without it, the command is invalid and will result in an error. Therefore, it does not grant the intended privilege.

• ✗

  GRANT USAGE ON DATABASE mydb TO ROLE DB_CREATOR;

  Why it's wrong here

  USAGE on a database allows access to the database but does not permit creating new databases. This command would only allow the role to use an existing database, not create one. Thus, it does not meet the requirement.

• ✓

  GRANT CREATE DATABASE ON ACCOUNT TO ROLE DB_CREATOR;

  Why this is correct

  The CREATE DATABASE privilege is granted at the account level. SYSADMIN has the authority to grant this privilege to other roles. The correct syntax is GRANT CREATE DATABASE ON ACCOUNT TO ROLE DB_CREATOR; This allows the role to create databases within the account.