Given a privilege setup where USER1 can SELECT on T1 via ROLE1 and has ROLE3 granted to USER1, which privileges does USER1 have on T1?

• A. SELECT
• B. SELECT and INSERT
• C. SELECT and INSERT and DELETE
• D. SELECT and INSERT and DELETE and TRUNCATE

Answer: (A)

In Snowflake, privileges on an object are granted to roles, and users gain those privileges by being assigned those roles. The operations you can perform depend on the privileges held by the role you have active (and any direct grants).

Here, USER1 has SELECT on T1 through ROLE1. The fact that USER1 also has ROLE3 granted does not automatically add new privileges on T1 unless ROLE3 itself has been granted specific privileges on T1. Since the setup only mentions SELECT via ROLE1 and does not indicate any INSERT, DELETE, or TRUNCATE privileges granted to ROLE3 (or to USER1 directly on T1), the only privilege USER1 effectively has on T1 is SELECT.