CloudGuild · Blog · Cheat sheets · Lessons · Certifications
SnowPro Core Certification (COF-C02): Mastering Data Access Control
Learn how to tackle data access control questions on the SnowPro Core exam. We break down a key question for your success.
Candidates often trip on questions about data access control in Snowflake. Understanding the specific features is crucial for the SnowPro Core Certification.
The question
As a Snowflake administrator, you want to ensure that users can only access specific subsets of data based on their roles. Which Snowflake feature should you implement to enforce this data access control?
- A. Row Access Policies.
- B. Object Tagging.
- C. Secure Views.
- D. Network Policies.
Think before you scroll
Consider the goal of restricting access to data based on user roles. Each option serves a different purpose. Weigh the options against the requirement for row-level security to find the best fit.
The answer
The correct option is A. Row Access Policies. This feature allows administrators to control access to specific rows in a table based on user roles. It directly aligns with the requirement of ensuring that users see only the data they are authorized to access.
Why the other options lose
- B. Object Tagging. This feature helps in organizing and categorizing objects within Snowflake. While useful for metadata management, it does not enforce access controls based on user roles, making it unsuitable for this scenario.
- C. Secure Views. Secure Views protect the data returned by a query but do not provide row-level security based on user roles. They can restrict access to certain columns or rows but lack the specific functionality of Row Access Policies when it comes to tailoring access based on roles.
- D. Network Policies. Network Policies control access based on the IP addresses from which users connect to Snowflake. While important for security, they do not address the need for data access control based on user roles, failing to meet the question's requirements.
The concept behind it
Row Access Policies are essential for implementing role-based access control (RBAC) in Snowflake. This allows administrators to define who sees what data at a granular level. Knowing how and when to apply these policies can help in various scenarios involving data protection and sharing.
Exam trap to remember
Remember the principle of row-level security: when asked about user-based data access, think Row Access Policies first.