Clone a table and prove privileges did not clone. Grant a privilege on the source, clone it, then inspect the clone’s grants.
USE ROLE ACCOUNTADMIN;
CREATE OR REPLACE ROLE w7_reader_role;
GRANT SELECT ON TABLE w7_recap_tbl TO ROLE w7_reader_role;
CREATE TABLE w7_clone CLONE w7_recap_tbl; -- zero-copy, instant
SHOW GRANTS ON TABLE w7_recap_tbl; -- shows the SELECT grant
SHOW GRANTS ON TABLE w7_clone; -- EMPTY: no grant carried over
👀 Self-check: The clone starts with no grants. Cloning a single object copies structure and data, never the privileges on that object. You must re-grant. On database or schema clones, child-object grants do carry, but the container’s own grants do not. Re-read Day 44 if the empty output surprised you.