Explanation:
According to Snowflake documentation and the community discussion with 100% consensus and upvoted confirmation, privileges granted to Snowflake system-defined roles (such as ACCOUNTADMIN, SECURITYADMIN, SYSADMIN, etc.) cannot be revoked. These roles come with predefined, immutable privileges that are essential for Snowflake's security and administrative framework. Option A is correct because system-defined role privileges are fixed and cannot be modified. Options B, C, and D are incorrect because no user or role, including ACCOUNTADMIN, ORGADMIN, or any user-defined role, has the authority to revoke privileges from system-defined roles.
Ultimate access to all questions.
What happens to the privileges granted to Snowflake system-defined roles?
A
The privileges cannot be revoked.
B
The privileges can be revoked by an ACCOUNTADMIN.
C
The privileges can be revoked by an ORGADMIN.
D
The privileges can be revoked by any user-defined role with appropriate privileges.
No comments yet.