What is a best practice after creating a custom role?

The correct answer is B. Assign the custom role to the SYSADMIN role. When creating roles that will serve as the owners of securable objects in the system, Snowflake recommends creating a hierarchy of custom roles, with the top-most custom role assigned to the system role SYSADMIN. This role structure allows system administrators to manage all…

Snowflake Account and Security

Question

Options

ACreate the custom role using the SYSADMIN role.
BAssign the custom role to the SYSADMIN role
CAssign the custom role to the PUBLIC role
DAdd__CUSTOM to all custom role names

How the community answered

(19 responses)

A
11% (2)
B
84% (16)
C
5% (1)

Explanation

When creating roles that will serve as the owners of securable objects in the system, Snowflake recommends creating a hierarchy of custom roles, with the top-most custom role assigned to the system role SYSADMIN. This role structure allows system administrators to manage all objects in the account, such as warehouses and database objects, while restricting management of users and roles to the USERADMIN role.

Topics

#RBAC#custom roles#role hierarchy#SYSADMIN

Community Discussion

No community discussion yet for this question.

Full COF-R02 Practice