Exam COF-C02 Topic 5 Question 645 Discussion

The correct answer is C. Role_A can grant or revoke access to the role .
In Snowflake, the OWNERSHIP privilege on an object gives full control over that object. A role can own another role. If Role_A owns Role_B, then Role_A has control over Role_B, including the ability to manage grants involving that role.
Why C is correct:
Ownership of a role allows the owning role to manage the role. This includes granting the role to users or other roles and revoking those grants.
Why the other options are incorrect:
A). Ownership of a role does not automatically mean the owner inherits all privileges assigned to that role.
Privilege inheritance happens through role grants in the role hierarchy, not merely through ownership.
B). Role_A can use Role_B privileges only if Role_B is granted to Role_A in the role hierarchy. Ownership alone is not the same as inheritance.
D). A task requires appropriate task privileges, such as OPERATE or ownership, and account-level task execution privileges where applicable. Ownership of a role does not automatically allow executing tasks assigned to that role.
Official Snowflake documentation reference:
Snowflake documentation explains that roles are securable objects and that the OWNERSHIP privilege grants full control over an object. Role inheritance is separate and occurs when one role is granted to another role.
Reference: Snowflake Documentation - Access control overview; Snowflake Documentation - Role hierarchy and privilege inheritance; Snowflake Documentation - GRANT ROLE; Snowflake Documentation
- OWNERSHIP privilege; SnowPro Core Study Guide - Security and Access Control.