問題文
An external auditor needs to review who accessed a regulated data set over the past quarter. What is the appropriate way to give the auditor what they need?
選択肢
- Grant a purpose-built role read access to the relevant history, and give the auditor a prepared interface such as a view or report scoped to the period and data set in question.
- Tell the auditor that Snowflake's certifications cover the requirement, so no account-level evidence is needed.
- Grant the auditor the account administrator role for the duration of the engagement, since that is the only role guaranteed to reach every history view.
- Export the raw history views to a file and send them, so that nothing has to be granted inside the account.