SnowPro Core free question 3 / 10 · Domain 2: Account Management and Data Governance
Which description matches the ACCOUNTADMIN role?
- It manages object grants and nothing else in the account
- It is dedicated to managing the users and roles of the account
- It is automatically granted to every user of the account
- It encapsulates the SYSADMIN and SECURITYADMIN roles
Show the answer and explanation
Answer: D
Why this is correct
ACCOUNTADMIN encapsulates the SYSADMIN and SECURITYADMIN system-defined roles. It is the top-level role in the system and should be granted to a limited number of users in your account.
Why the other options are wrong
"It is dedicated to managing the users and roles of the account" … Managing users and roles is the job of USERADMIN.
"It manages object grants and nothing else in the account" … Managing object grants is the focus of SECURITYADMIN, and ACCOUNTADMIN has a much wider scope.
"It is automatically granted to every user of the account" … The role that is automatically granted to every user is PUBLIC.
Key point
Because it is the highest role, limit who receives it. Organization-level operations are handled by roles such as ORGADMIN and GLOBALORGADMIN.
Go to the SnowPro Core practice app (10 free questions; purchase unlocks all questions)