Snowpro Core · Free Practice Question Medium
Question 97
Which of the following statements regarding built-in roles' privileges in Snowflake are true?
Select all that apply.
-
A
ACCOUNTADMIN can modify a ROLE created by the SECURITYADMIN
-
B
The PUBLIC role can delete objects created by SYSADMIN
-
C
ACCOUNTADMIN can delete objects created by a SYSADMIN
-
D
SECURITYADMIN can drop USERS created by a USERADMIN
Reveal correct answers
Correct answers: A, C, D
Explanation
Due to the role hierarchy and privileges inheritance, the ACCOUNTADMIN has all the privileges that lower roles have. Therefore, It can delete and modify objects created by lower roles.
Similarly, SECURITYADMIN is a higher role than USERADMIN and can drop a user created by the USERADMIN.
https://docs.snowflake.com/en/user-guide/security-access-control-overview#system-defined-roles.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
