Exam SnowPro Core topic 1 question 109 discussion

Owner is always the role, not the user.

Each object has an owner, who can in turn grant access to that object. To own an object means that a role has the OWNERSHIP privilege on the object. Each securable object is owned by a single role, which by default is the role used to create the object. When this role is assigned to users, they effectively have shared control over the object. In a regular schema, the owner role has all privileges on the object by default, including the ability to grant or revoke privileges on the object to other roles. https://docs.snowflake.com/en/user-guide/security-access-control-overview

True. In Snowflake, when a new object (like a table, view, schema, etc.) is created, it is automatically owned by the user (or more precisely, the role) that created it. Ownership includes full control over the object, including the ability to: Grant privileges to other roles, Modify or drop the object, Transfer ownership.

https://docs.snowflake.com/en/user-guide/security-access-control-overview#securable-objects

Yes it is True

owned by role, and not by user

A is correct

Any objects created after the command is issued are owned by the role in use when the object is created. https://docs.snowflake.com/en/sql-reference/sql/grant-ownership#

Not own by the users

owned by the role of user who created it

To own an object means that a role has the OWNERSHIP privilege on the object. Each securable object is owned by a single role, which by default is the role used to create the object. When this role is assigned to users, they effectively have shared control over the object. In a regular schema, the owner role has all privileges on the object by default, including the ability to grant or revoke privileges on the object to other roles. In addition, ownership can be transferred from one role to another https://docs.snowflake.com/en/user-guide/security-access-control-overview#securable-objects

This is true its called DAC - Discretional Access Control.

When an object is created, its ownership is set to the currently active primary role.

It's an ambiguous question, if was ... automatically and "exclusively" owned by the user who created it. Then is sure B but in this way, as long as that user has that role, he has the ownersiph of the objet can alter it and even drop it.

Can we assume a user as a credential you log in with & role is what you privilege to do Also can we assume an object created by a role can be accessible to all users under the same role?

Discretionary Access Control (DAC): Each object has an owner, who can in turn grant access to that object. Role-based Access Control (RBAC): Access privileges are assigned to roles, which are in turn assigned to users. https://docs.snowflake.com/en/user-guide/security-access-control-overview.html

Answer is A, it is DAC ownership assigned to role under which object is created.