SnowPro Core Certification — Question 929

Which Snowflake role can manage any object grant globally, including modifying and revoking grants?

Answer options

• A. USERADMIN
• B. ORGADMIN
• C. SYSADMIN
• D. SECURITYADMIN

Correct answer: D

Explanation

The SECURITYADMIN role in Snowflake is specifically designed to manage access control, including modifying and revoking grants on any object. The other roles, while having specific administrative privileges, do not possess the same comprehensive capabilities for managing security grants as SECURITYADMIN does.