What are best practice recommendations for using the ACCOUNTADMIN system-defined role in Snowflake? (Choose two.)

The correct answer is A. Ensure all ACCOUNTADMIN roles use Multi-factor Authentication (MFA). D. Assign the ACCOUNTADMIN role to at least two users, but as few as possible. Snowflake recommends two key practices for ACCOUNTADMIN: First, all users with ACCOUNTADMIN must use Multi-Factor Authentication (A) to protect the highest-privilege role from unauthorized access. Second, ACCOUNTADMIN should be assigned to at least two users for redundancy (so…

Account Access and Security

Question

Options

AEnsure all ACCOUNTADMIN roles use Multi-factor Authentication (MFA).
BAll users granted ACCOUNTADMIN role must be owned by the ACCOUNTADMIN role.
CThe ACCOUNTADMIN role must be granted to only one user.
DAssign the ACCOUNTADMIN role to at least two users, but as few as possible.
EAll users granted ACCOUNTADMIN role must also be granted SECURITYADMIN role.

How the community answered

(32 responses)

A
94% (30)
B
3% (1)
E
3% (1)

Explanation

Snowflake recommends two key practices for ACCOUNTADMIN: First, all users with ACCOUNTADMIN must use Multi-Factor Authentication (A) to protect the highest-privilege role from unauthorized access. Second, ACCOUNTADMIN should be assigned to at least two users for redundancy (so account access is not lost if one user is unavailable), but kept to as few as possible to minimize risk (D). Option B is incorrect - users are not required to be 'owned by' ACCOUNTADMIN. Option C is incorrect - at least two users should have it for redundancy. Option E is incorrect - SECURITYADMIN is a separate role and not required alongside ACCOUNTADMIN.

Topics

#ACCOUNTADMIN role#Security best practices#MFA#Role-based access control

Community Discussion

No community discussion yet for this question.

Full COF-C02 Practice