2025 Secure Data Sharing Flashcards
What is a share
They do not have any data but contain information to enable object sharing between accounts. Typically they contain
* Access Privileges for ojects that are shared
* Consumer details (Accounts that consume data from share)
How many databases can be created per share
1
What are the two types of consumer accounts for a share
Standard
Reader Account
Are DML operations allowed for users accessing a share via a Reader Account
No
What options are available to share data
Direct Share
Snowflake Marketplace
Data Exchange
What are the steps required to enable data sharing in Snowflake
- Create database roles
- Grant privileges on objects to database roles
- Create an empty share
- Add database to a share
- Add accounts to a share
What command can be used to list all inbound and outbound shares
SHOW SHARES
Does the SHOW SHARES require an active warehouse
No
What permissions do you need to drop a share
The ACCOUNTADMIN
Can dropped shares be recovered
No, they must be created and configured again
Is Cloning or Time-Travel supported on shared objects?
No
Can you re-share a share
No
What can be shared
Tables, external tables, secure views, secure materialized views, and secure UDFs
How can you share data that resides in different databases
Secure VIEWS
What does SHOW GRANTS OF SHARE do?
Lists all the accounts that created a database from the share
How can you share data across regions/clouds
Database Replication
What type of Snowflake objects can be shared
- Databases
- Tables
- Dynamic Tables
- External Tables
- Iceberg Tables
- Secure Views
- Secure Materialized Views
- UDFs
What is the recommended way to validate data accessibility by the consumers?
Set the session parameter SIMULATED_DATA_SHARING_CONSUMER to the customer you are confirming
Does Snowflake automatically grant privileges for new tables added to a shared schema
No, the provider must grant select on the table to the share
