A group of order_admin users must delete records older than 5 years from an orders...

Snowflake stored procedures can execute using either caller’s rights or owner’s rights. When a procedure runs with owner’s rights, it executes using the privileges of the role that owns the procedure—not the role invoking it.

By creating a stored procedure owned by the order_manager role (which has DELETE privileges) and defining it to run with owner’s rights, the Architect can encapsulate the business logic (delete records older than 5 years) securely (Answer C). Granting only USAGE on the procedure to order_admin allows them to execute the cleanup without directly holding DELETE privileges on the table.

Caller’s rights would fail because order_admin lacks DELETE privileges. Snowflake does not support runtime selection of execution rights. This is a classic SnowPro Architect security pattern: least privilege access combined with controlled procedural execution.