An administrator is documenting how privilege inheritance works in the Snowflake role hierarchy, where a senior role has been granted a more junior role beneath it. Which TWO statements correctly describe how privileges and grants behave across that hierarchy? Select TWO.
- AA role granted to a parent role passes all of its privileges upward, so the parent can exercise everything the child role can. Correct
- BA privilege granted directly to a child role flows downward to every role that the child role itself contains beneath it.
- CPrivileges are granted to roles and roles are granted to users, so a user gains access only through the roles assigned to them. Correct
- DGranting a privilege to a user directly is the normal way to give that one person access without involving any role.
Why A is correct: Granting a role to another role makes the parent inherit every privilege the child holds, which is the defining behaviour of the Snowflake role hierarchy.
Why B is wrong: Inheritance flows upward toward parent roles, not downward to contained roles, so this reverses the direction of privilege flow and is incorrect.
Why C is correct: Snowflake grants privileges to roles rather than directly to users, and users obtain those privileges by being granted the roles, which is a core principle of the model.
Why D is wrong: Snowflake does not support granting most object privileges straight to a user, so this contradicts the role-based model even though direct grants feel intuitive.