SnowPro Advanced: Architect · Free practice question 2 of 10
RBAC design
An Architect is designing role hierarchy for a multi-team analytics account. Which pair of built-in roles is the recommended starting point for (a) creating databases, warehouses, and schemas versus (b) creating and managing users and roles?
- A.(a) SYSADMIN, (b) SECURITYADMIN
- B.(a) ACCOUNTADMIN, (b) SYSADMIN
- C.(a) USERADMIN, (b) SYSADMIN
- D.(a) PUBLIC, (b) ACCOUNTADMIN
Show answer and explanation
Correct answer: A. (a) SYSADMIN, (b) SECURITYADMIN
Why: SYSADMIN owns the object hierarchy (databases, warehouses, schemas) and is intended for day-to-day resource creation. SECURITYADMIN is purpose-built for user and role management, delegating from USERADMIN. ACCOUNTADMIN has broader powers and should be used sparingly; PUBLIC is granted to every role and is only for default grants.