Answer: Grant the additional privileges to a custom role.

The question asks how Snowflake recommends adding additional privileges to system-defined roles for a virtual warehouse. Based on Snowflake's best practices and the community discussion consensus (with multiple comments citing official documentation and receiving upvotes), the recommended approach is to create a custom role, grant the additional privileges to that custom role, and then assign the custom role to the relevant system-defined role (typically SYSADMIN). This maintains security separation between account-management privileges (in system roles) and entity-specific privileges (in custom roles). Option A directly follows this practice. Options B, C, and D involve directly modifying system-defined roles (ACCOUNTADMIN, SYSADMIN, ORGADMIN), which is discouraged as it can compromise security and system integrity. Although some comments initially selected C, the prevailing reasoning and documentation references support A as the correct answer.

Author: LeetQuiz Editorial Team