Will the developer be able to modify the table to read the masked data?

A developer is granted ownership of a table that has a masking policy. The developer’s role is not able to see the masked data.

Will the developer be able to modify the table to read the masked data?
A . Yes, because a table owner has full control and can unset masking policies.
B . Yes, because masking policies only apply to cloned tables.
C . No, because masking policies must always reference specific access roles.
D . No, because ownership of a table does not include the ability to change masking policies

View Answer

Answer: D

Explanation:

Even if a developer is granted ownership of a table with a masking policy, they will not be able to modify the table to read the masked data if their role does not have the necessary permissions. Ownership of a table does not automatically confer the ability to alter masking policies, which are designed to protect sensitive data. Masking policies are applied at the schema level and require specific privileges to modify12.

Reference: [COF-C02] SnowPro Core Certification Exam Study Guide

Snowflake Documentation on Masking Policies