Explanation:
The correct answer is B because Snowflake's best practice recommends creating a role hierarchy where custom roles are assigned to the SYSADMIN role. This allows SYSADMIN to manage and grant privileges on objects created by custom roles, maintaining proper access control and administrative oversight. The community discussion shows 100% consensus on answer B, with multiple comments citing Snowflake documentation that explicitly recommends this approach. Option A is incorrect because custom roles are created by USERADMIN, not SYSADMIN. Option C is not recommended as assigning to PUBLIC role would grant access to all users, creating security risks. Option D is not a Snowflake best practice for role naming conventions.
Ultimate access to all questions.
After creating a custom role in Snowflake, what is the recommended next step?
A
Create the custom role using the SYSADMIN role.
B
Assign the custom role to the SYSADMIN role.
C
Assign the custom role to the PUBLIC role.
D
Add _CUSTOM to all custom role names.
No comments yet.