COF-C03 Account Management and Data Governance Practice Question
Exhibit
GRANT ROLE analyst TO ROLE manager; GRANT ROLE manager TO USER jdoe;
Refer to the exhibit. User 'jdoe' holds the 'manager' role. Which privileges does 'jdoe' possess regarding roles and data access?
⚠ Common exam trap
Candidates assume users only hold the privileges of their directly assigned role, ignoring multi-level hierarchical grants where roles are nested.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
jdoe has the privileges of the manager and analyst roles.
Snowflake's role-based access control (RBAC) supports hierarchy. When 'analyst' is granted to 'manager', and 'manager' is granted to 'jdoe', 'jdoe' inherits all privileges assigned to both the 'manager' and 'analyst' roles. This inheritance model allows for complex organizational structures while keeping grant management simple. It is crucial for governance, as it prevents over-privileging by allowing admins to nest permissions logically rather than assigning every individual role directly to users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
jdoe has the privileges of the manager role only.
Why it's wrong here
Role inheritance allows jdoe to automatically inherit the privileges of any role assigned to the manager role. Since the analyst role was granted to the manager, jdoe effectively gains all permissions associated with the analyst role in addition to the manager role's direct permissions.
- ✓
jdoe has the privileges of the manager and analyst roles.
Why this is correct
The GRANT command establishes a hierarchy where the parent role inherits all privileges of the child role. Since jdoe holds the manager role, and manager holds the analyst role, jdoe inherently possesses the combined set of privileges from both roles, enabling access to all underlying objects.
- ✗
jdoe must explicitly switch to the analyst role to see its data.
Why it's wrong here
Snowflake role inheritance is transitive and automatic. Once the roles are granted, the user does not need to manually switch roles to exercise the privileges granted to the child role. The effective set of permissions is calculated automatically at runtime whenever the user performs an action.
- ✗
jdoe only has access to objects created by the analyst role.
Why it's wrong here
Role inheritance provides access to all privileges granted to the roles, not just those related to object ownership. If the analyst role has SELECT privileges on a table, the manager role (and jdoe) will inherit that SELECT privilege immediately upon the execution of the GRANT statement.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
One of 280 original COF-C03 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This COF-C03 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the COF-C03 exam.