ADA-C01 Question 480
Single answerInstall the clean room native appA Snowflake account administrator has been asked to deploy the Snowflake Data Clean Rooms native application for a marketing team. The company wants to minimize risk during installation and ensure the app can create the required objects only in an approved location. Which action should the administrator take during installation to meet this requirement?
- A
Install the application from Snowflake Marketplace and approve the setup so the app creates its objects in a dedicated application package chosen by the administrator
- B
Install the application from Snowflake Marketplace and approve the requested privileges, allowing the app to create required objects in a dedicated application-owned schema within the consumer account
- C
Clone the clean room application package into the target database first, then grant the APPLICATION ROLE to the marketing team so the setup script can complete
- D
Create a database from a clean room share, then convert that database into a native app so the vendor can manage installation privileges centrally
Show answer and explanation
Correct answer: B
Explanation
The key administrative task when installing the Snowflake Data Clean Rooms native app is to use the Native App Framework installation flow correctly: acquire the app from its listing, review the privileges and references it requests, and approve installation so the app can create the required app-owned objects in the consumer account. This approach supports least privilege and controlled deployment. A common misconception is that the consumer directly manages the provider's application package or can install the app by cloning package objects; that is not how Native Apps are deployed. Another misconception is treating a shared database as equivalent to a native app. Snowflake documentation for Native Apps and Marketplace emphasizes that consumers install an application instance from a listing, while providers own the application package and versioning. For Clean Rooms specifically, installation is done as a native app, so administrators should focus on privilege approval, application setup, and post-installation role assignment rather than share-based deployment patterns.
- A. Incorrect.
Incorrect. Consumers do not choose an application package for installed apps. The provider owns the application package, and the consumer installs an application instance from the listing. During installation, the consumer approves requested privileges and references; the app then creates and manages objects within its application context in the consumer account, not in a consumer-created application package.
- B. Correct.
Correct. Installing a native app such as Snowflake Data Clean Rooms involves acquiring it from Snowflake Marketplace (or another supported distribution path), reviewing and approving the privileges the app requests, and then allowing the app to create the required objects in its application-owned areas within the consumer account. This aligns with the native app security model, where setup is controlled through requested privileges and app-owned objects rather than unrestricted object creation across the account.
- C. Incorrect.
Incorrect. A consumer cannot clone a provider's application package as part of standard app installation. Application packages are provider-side objects used to publish native apps. Also, granting an application role to end users is something done after installation for access control; it is not the mechanism that enables the initial setup script to create required resources.
- D. Incorrect.
Incorrect. A shared database and a native app are different distribution models in Snowflake. A data share cannot simply be converted into a native app by the consumer. Native apps are installed from an application package/listing and use the native app framework for privilege requests, setup, and lifecycle management.