Who can grant object privileges in a regular schema?
Who can grant object privileges in a regular schema?
In a regular schema, the object owner, who possesses the OWNERSHIP privilege on the specific object, has the authority to grant object privileges. This means that the individual who owns the object (such as a table, view, or procedure) within the schema can manage access to that particular object.
In regular (i.e. non-managed) schemas, object owners (i.e. a role with the OWNERSHIP privilege on an object) can grant access on their objects to other roles https://docs.snowflake.com/en/user-guide/security-access-control-configure#label-managed-access-schemas
A beacause it's not managed schema
A and B are correct A. Object owner: The owner of a specific object (such as a table, view, or procedure) within the schema has the authority to grant privileges on that object to other roles or users. Ownership of an object gives the user full control over it, including the ability to manage access. B. Schema owner: The owner of the schema has broader control and can grant privileges on any object within that schema. Schema owners typically have the ability to manage all aspects of the schema, including granting and revoking privileges for objects contained within it.
https://docs.snowflake.com/en/user-guide/security-access-control-configure#label-managed-access-schemas Managed access schemas improve security by locking down privilege management on objects. In regular (i.e. non-managed) schemas, object owners (i.e. a role with the OWNERSHIP privilege on an object) can grant access on their objects to other roles, with the option to further grant those roles the ability to manage object grants. With managed access schemas, object owners lose the ability to make grant decisions. Only the schema owner (i.e. the role with the OWNERSHIP privilege on the schema) or a role with the MANAGE GRANTS privilege can grant privileges on objects in the schema, including future grants, centralizing privilege management.
B. Only the schema owner (i.e. the role with the OWNERSHIP privilege on the schema) or a role with the global MANAGE GRANTS privilege can grant privileges on objects in the schema.
Answer B