What happens to the privileges granted to Snowflake system-defined roles?

Question

Options

• AThe privileges cannot be revoked.
• BThe privileges can be revoked by an ACCOUNTADMIN.
• CThe privileges can be revoked by an orgadmin.
• DThe privileges can be revoked by any user-defined role with appropriate privileges.

• A
  91% (20)
• B
  5% (1)
• D
  5% (1)

Explanation

The privileges granted to Snowflake's system-defined roles cannot be revoked. System-defined roles, such as SYSADMIN, ACCOUNTADMIN, SECURITYADMIN, and others, come with a set of predefined privileges that are essential for the roles to function correctly within the Snowflake environment. These privileges are intrinsic to the roles and ensure that users assigned these roles can perform the necessary tasks and operations relevant to their responsibilities. The design of Snowflake's role-based access control (RBAC) model ensures that system-defined roles have a specific set of non-revocable privileges to maintain the security, integrity, and operational efficiency of the Snowflake environment. This approach prevents accidental or intentional modification of privileges that could disrupt the essential functions or compromise the security of the Snowflake account.

No community discussion yet for this question.