Exam SnowPro Core topic 1 question 1338 discussion

https://docs.snowflake.com/en/user-guide/security-access-control-configure#creating-managed-access-schemas With managed access schemas, object owners lose the ability to make grant decisions. Only the schema owner (that is, the role with the OWNERSHIP privilege on the schema) or a role with the MANAGE GRANTS privilege can grant privileges on objects in the schema, including future grants, centralizing privilege management.

Snowflake object owners lose their ability to grant privileges on their own objects when those objects reside in a managed access schema. In standard (non‑managed) schemas, object owners (roles holding the OWNERSHIP privilege on the object) can grant or revoke privileges. However, in a managed access schema—created via CREATE SCHEMA … WITH MANAGED ACCESS—only the schema owner (the role with OWNERSHIP on the schema) or any role with the global MANAGE GRANTS privilege can grant privileges on objects within that schema; individual object owners are no longer authorized to make grant decisions.