Which of the following roles are recommended to create and manage users and roles? (Choose two.)
Which of the following roles are recommended to create and manage users and roles? (Choose two.)
The SECURITYADMIN role is responsible for managing users and roles, and it has the MANAGE GRANTS security privilege, which allows it to modify any grant, including revoking it. It also inherits the privileges of the USERADMIN role. The USERADMIN role is specifically dedicated to user and role management within the account, granting the CREATE USER and CREATE ROLE security privileges. Thus, the appropriate roles for creating and managing users and roles are SECURITYADMIN and USERADMIN.
Correct Answer : SECURITYADMIN and USERADMIN https://docs.snowflake.com/en/user-guide/security-access-control-overview.html#roles
B&E are correct answer.
What about USERADMIN?
SECURITYADMIN (aka Security Administrator) Role that can manage any object grant globally, as well as create, monitor, and manage users and roles. More specifically, this role: Is granted the MANAGE GRANTS security privilege to be able to modify any grant, including revoking it. Inherits the privileges of the USERADMIN role via the system role hierarchy (i.e. USERADMIN role is granted to SECURITYADMIN). USERADMIN (aka User and Role Administrator) Role that is dedicated to user and role management only. More specifically, this role: Is granted the CREATE USER and CREATE ROLE security privileges. Can create users and roles in the account. This role can also manage users and roles that it owns. Only the role with the OWNERSHIP privilege on an object (i.e. user or role), or a higher role, can modify the object properties.
SECURITYADMIN and USERADMIN
First - USERADMIN, then SECURITYADMIN
BE are correct
B and E are correct.
B and E
SYSTEMADMIN AND SECURITYADMIN
Correct
SECURITYADMIN inherits from USERADMIN
sysadmin and securityadmin
E - USERADMIN (as SECURITYADMIN inherits from USERADMIN) or EB - USERADMIN & SECURITYADMIN
USER ADmin and security admin