SnowPro Core Certification — Question 178

What are best practice recommendations for using the ACCOUNTADMIN system-defined role in Snowflake? (Choose two.)

Answer options

• A. Ensure all ACCOUNTADMIN roles use Multi-factor Authentication (MFA).
• B. All users granted ACCOUNTADMIN role must be owned by the ACCOUNTADMIN role.
• C. The ACCOUNTADMIN role must be granted to only one user.
• D. Assign the ACCOUNTADMIN role to at least two users, but as few as possible.
• E. All users granted ACCOUNTADMIN role must also be granted SECURITYADMIN role.

Correct answer: A, D

Explanation

Option A is correct because using Multi-factor Authentication (MFA) enhances security for the ACCOUNTADMIN role. Option D is also correct as assigning the role to multiple users ensures redundancy while limiting the number helps minimize risk. Options B, C, and E are incorrect as they do not align with best practices that prioritize security and operational flexibility.