ADA-C01 Question 282
Single answerShare worksheets and dashboardsA Snowflake administrator needs to let a group of finance analysts view and collaborate on a Snowsight dashboard and the worksheets used to build it. The analysts already have Snowflake user accounts in the same account, but they should not be granted broad administrative privileges. The administrator also wants access to remain manageable as team membership changes. Which action should the administrator take?
- A
Create or use a role for the finance analysts, grant that role to the users, and share the dashboard and worksheets with that role in Snowsight.
- B
Grant the ACCOUNTADMIN role to the finance analysts so they can open any dashboard and worksheet shared in the account.
- C
Export the worksheets as SQL files and the dashboard as screenshots, then place them in an internal stage for the analysts to review.
- D
Create a secure data share for the finance analysts and add the worksheets and dashboard objects to the share.
Show answer and explanation
Correct answer: A
Explanation
The best answer is to share the Snowsight dashboard and worksheets with a role used by the finance analysts. Snowflake access control best practice is role-based administration, which makes ongoing management simpler and more secure. In Snowsight, worksheets and dashboards are collaboration artifacts that can be shared within the account, and role-based sharing is preferable when multiple users need the same access. Granting ACCOUNTADMIN would violate least-privilege principles, exporting files would not support true collaboration, and secure data sharing is designed for database data sharing rather than Snowsight content sharing. This question tests the distinction between Snowflake RBAC for collaborative content access and other Snowflake sharing mechanisms.
- A. Correct.
Correct. In Snowsight, worksheets and dashboards can be shared with users or roles within the same Snowflake account. Using a role is the preferred administrative approach because it centralizes access management: when analysts join or leave the team, the administrator can update role membership instead of modifying each shared object individually. This aligns with Snowflake best practices of managing access through roles rather than assigning access one user at a time.
- B. Incorrect.
Incorrect. ACCOUNTADMIN is a highly privileged administrative role and should not be granted simply to allow access to shared worksheets or dashboards. Sharing in Snowsight does not require elevating users to broad account-level administrative privileges. This option reflects the common misconception that UI access to shared content requires top-level account roles.
- C. Incorrect.
Incorrect. Exporting SQL and screenshots is a manual workaround, not a proper method for collaborative sharing of Snowsight worksheets and dashboards. It also removes interactive capabilities and creates version-control and governance problems. The requirement is to let analysts view and collaborate on the actual Snowsight content, which is better handled through native sharing.
- D. Incorrect.
Incorrect. Secure data sharing is for sharing database objects such as tables, secure views, and related data across accounts or with consumers; it is not used to share Snowsight worksheets or dashboards. This distractor targets a common misunderstanding between sharing data and sharing user interface artifacts.