Answer: SECURITYADMIN

The SECURITYADMIN role (D) is the correct answer because it has the MANAGE GRANTS security privilege, which allows it to manage any object grant globally, including modifying and revoking grants. According to Snowflake documentation and the community discussion with 100% consensus and upvoted comments, SECURITYADMIN inherits privileges from USERADMIN and can manage all grants system-wide. USERADMIN (A) can create users and roles but lacks global grant management. ORGADMIN (B) manages organization-level settings, not object grants. SYSADMIN (C) focuses on system administration tasks but does not have the MANAGE GRANTS privilege for global grant management.

Author: LeetQuiz Editorial Team