問題文
A security team must stop the whole account from calling AI functions by default and then grant access to two named roles. Which pair of actions achieves that?
選択肢
- Revoke the account-level privilege and the CORTEX_USER database role from PUBLIC, then grant both to the two roles.
- Drop the PUBLIC role, with every grant it carried to ordinary users and to services disappearing with it.
- Revoke only the account-level privilege from PUBLIC, since the database role has no effect once it is gone.
- Grant the database role directly to the users who need it, one grant statement per person on the team.