True or False: When you create a custom role, it is a best practice to immediately grant that role to ACCOUNTADMIN.

True or False: When you create a custom role, it is a best practice to immediately grant that role to ACCOUNTADMIN.
A . True
B . False

View Answer

Answer: B

Explanation:

The ACCOUNTADMIN role is the most powerful role in Snowflake and should be limited to a select number of users within an organization. It is responsible for account-level configurations and should not be used for day-to-day object creation or management. Granting a custom role to ACCOUNTADMIN could inadvertently give broad access to users with this role, which is not a recommended security practice.

Reference: https://docs.snowflake.com/en/user-guide/security-access-control-considerations.html