SnowPro Core · Account Management and Data Governance

A Snowflake Practitioner creates a custom role named DATA_ENGINEER using CREATE ROLE and grants it privileges on several tables. The role is granted directly to individual users but is never linked into the role hierarchy above PUBLIC. The Security team finds that SYSADMIN cannot manage or view objects owned by DATA_ENGINEER through standard administrative queries. All custom roles must remain manageable by the system administrator role. Which change should the Practitioner make?

• AGrant the SYSADMIN role to each user who holds DATA_ENGINEER so they inherit administrative visibility.
• BTransfer ownership of the objects from DATA_ENGINEER to ACCOUNTADMIN to guarantee visibility.
• CGrant the DATA_ENGINEER role to the SYSADMIN role so it becomes part of the standard role hierarchy.
• DGrant the DATA_ENGINEER role to PUBLIC so every user session inherits the required privileges.