Answer: USERADMIN

The USERADMIN role in Snowflake is specifically designed to separate user and role management from object grant management. This role has privileges to create, manage, and drop users and roles, but does not have privileges to grant access to database objects (tables, views, schemas, etc.). This separation follows the principle of least privilege and security best practices. The other roles have different responsibilities: ACCOUNTADMIN has full system access, SYSADMIN manages warehouses and databases, and SECURITYADMIN can manage any object grant but doesn't specifically separate user/role management from grant management. The community discussion shows 100% consensus on answer D with supporting references to Snowflake documentation.

Author: LeetQuiz Editorial Team