According to Snowflake documentation and the community discussion consensus (100% agreement on CD), network policies can be created by: (C) SECURITYADMIN or higher roles, as SECURITYADMIN is specifically designed to manage security objects including network policies; and (D) A role with the CREATE NETWORK POLICY privilege, as this explicit privilege grants the ability to create network policies regardless of the role hierarchy. Option A (SYSADMIN only) is incorrect because SYSADMIN focuses on system administration, not security policies. Option B (ORGADMIN only) is incorrect as ORGADMIN manages organization-level settings, not network policies. Option E (CREATE SECURITY INTEGRATION privilege) is irrelevant as it pertains to security integrations, not network policies.