QuestionQ28

Manage and administer Snowflake accounts, data security, and governance

Which commands can a user with the ORGADMIN role, but without the ACCOUNTADMIN role, perform?

Choose two
Explanation

The ORGADMIN role is scoped to organization-level administration in Snowflake and is the specific role required to run SHOW ORGANIZATION ACCOUNTS, which lists every account in the organization, and to call SYSTEM$GLOBAL_ACCOUNT_SET_PARAMETER to enable database replication and failover for an account; Snowflake documents both operations as requiring the organization administrator role rather than ACCOUNTADMIN. Granting the ORGADMIN role to a user, by contrast, requires the global MANAGE GRANTS privilege that ACCOUNTADMIN holds, and SHOW USERS operates at the individual-account level, requiring account-level administrative privileges that holding ORGADMIN alone does not confer.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!