Snowflake includes severalsystem-defined RBAC rolesto provide structured access control across the platform.
ACCOUNTADMINis the highest-privileged role, governing the entire account, including billing, replication, failover groups, and object ownership inheritance.
SECURITYADMINis responsible for user, role, and privilege management, including granting and revoking roles, password policies, and MFA enforcement. It is essential for identity lifecycle governance.
USERADMINmanages user creation, role creation, and user authentication administration. It is commonly assigned to identity administrators.
CUSTOM_ROLEis not a Snowflake system role; it is a user-created role, allowing organizations to design fine-grained, domain-specific access policies.
These predefined roles form the foundation of Snowflake’s security model and support least-privilege implementations.
====================================================