The correct answer is D. The USAGE privilege on the database and the schema .
To query a table in Snowflake, a role needs the SELECT privilege on the table. In addition, the role must have USAGE on the containing database and schema so it can resolve and access the object path.
Why D is correct:
For a table named:
database1.schema1.table1
A role generally needs:
USAGE ON DATABASE database1
USAGE ON SCHEMA database1.schema1
SELECT ON TABLE database1.schema1.table1
Without USAGE on the database and schema, the role cannot access the namespace that contains the table, even if SELECT exists on the table.
Why the other options are incorrect:
A. There is no USAGE privilege on a table for this purpose. SELECT is the table-level privilege needed to read data.
B. OWNERSHIP on the schema is not required to query a table.
C. REFERENCES is used for foreign key/reference-related behavior and is not required for simple SELECT queries.
Official Snowflake documentation reference:
Snowflake documentation explains that access to objects requires privileges on the object and appropriate USAGE privileges on parent containers, such as the database and schema.
[Reference: Snowflake Documentation — Access control privileges; Snowflake Documentation — Overview of access control; SnowPro Core Study Guide — Security and Access Control., ==]
