A and B are correct
A. Object owner: The owner of a specific object (such as a table, view, or procedure) within the schema has the authority to grant privileges on that object to other roles or users. Ownership of an object gives the user full control over it, including the ability to manage access.
B. Schema owner: The owner of the schema has broader control and can grant privileges on any object within that schema. Schema owners typically have the ability to manage all aspects of the schema, including granting and revoking privileges for objects contained within it.
https://docs.snowflake.com/en/user-guide/security-access-control-configure#label-managed-access-schemas
Managed access schemas improve security by locking down privilege management on objects.
In regular (i.e. non-managed) schemas, object owners (i.e. a role with the OWNERSHIP privilege on an object) can grant access on their objects to other roles, with the option to further grant those roles the ability to manage object grants.
With managed access schemas, object owners lose the ability to make grant decisions. Only the schema owner (i.e. the role with the OWNERSHIP privilege on the schema) or a role with the MANAGE GRANTS privilege can grant privileges on objects in the schema, including future grants, centralizing privilege management.
In regular (i.e. non-managed) schemas, object owners (i.e. a role with the OWNERSHIP privilege on an object) can grant access on their objects to other roles
https://docs.snowflake.com/en/user-guide/security-access-control-configure#label-managed-access-schemas
B.
Only the schema owner (i.e. the role with the OWNERSHIP privilege on the schema) or a role with the global MANAGE GRANTS privilege can grant privileges on objects in the schema.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
cybe001
6 months agoCCC1234
8 months, 3 weeks ago0e504b5
9 months agosaffa
9 months agotidz
10 months, 1 week agoDR369
10 months, 2 weeks ago