A role is automatically getting DML privileges for tables under a schema even though the current and future privileges are revoked

There is a role (XYZ)  whose select/insert/delete/update/truncate privileges were revoked for both current and future. But as soon as a new table is created in that schema this role xyz is getting the privileges on them and it shows the access is granted by the schema_owner_role. And the interesting part is the grant privileges is not run by the owner role. Not able to figure out what other privileges in snowflake can automatically grant access as soon as the object is created. Please advise if anyone has inputs.

nekkanti009

posted on 06 Mar 20