For Snowflake network policies, what will occur when the account_level and user_level network policies are both defined?

For Snowflake network policies, what will occur when the account_level and user_level network policies are both defined?
A . The account_level policy will override the user_level policy.
B . The user_level policy will override the account_level policy.
C . The user_level network policies will not be supported.
D . A network policy error will be generated with no definitions provided.

View Answer

Answer: B

Explanation:

According to the Network Policies documentation, a network policy can be applied to an account, a security integration, or a user. If there are network policies applied to more than one of these, the most specific network policy overrides more general network policies.

The following summarizes the order of precedence:

• Account: Network policies applied to an account are the most general network policies. They are overridden by network policies applied to a security integration or user.

• Security Integration: Network policies applied to a security integration override network policies applied to the account, but are overridden by a network policy applied to a user.

• User: Network policies applied to a user are the most specific network policies. They override both accounts and security integrations.

Therefore, if both the account_level and user_level network policies are defined, the user_level policy will take effect and the account_level policy will be ignored. The other options are incorrect because:

• The account_level policy will not override the user_level policy, as explained above.

• The user_level network policies will be supported, as they are part of the network policy feature.

• A network policy error will not be generated, as there is no conflict between the account_level and user_level network policies.