Full Access Snowflake SOL-C01 Tutorials

TheACCOUNTADMINrole is Snowflake’s highest-privileged system-defined role. It provides complete administrative authority across the entire Snowflake account. Its functions include:

Managing global account parameters, replication settings, business continuity, failover groups, and region configurations

Administering billing, resource monitoring, and governance

Granting and revoking privileges across all objects and roles

Overseeing role hierarchy, including SECURITYADMIN and SYSADMIN

It is typically reserved for platform owners and security/governance teams, following least-privilege principles.

“Create and manage databases” is primarily a SYSADMIN responsibility.

“Monitor query performance” can be accomplished by roles with MONITOR privileges; it is not exclusive to ACCOUNTADMIN.

====================================================

Role hierarchy in Snowflake allows one role to inherit the privileges of another. By granting roles to other roles, Snowflake enables scalable, maintainable access control. Higher-level roles grant privileges downward, allowing administrators to create layered access structures. This hierarchy simplifies permission management across teams and environments. It has no relation to SQL sequencing, network settings, or data storage.

=======================================

TheGRANTcommand is used in Snowflake to assign privileges to a role. GRANT allows administrators to authorize roles to perform actions on objects such as tables, warehouses, schemas, or databases. The REVOKE command removes privileges, CREATE creates objects, and ASSIGN is not a valid Snowflake command. Therefore, GRANT is the correct command for privilege assignment.

=======================================

VARIANT supports nested, flexible structures and enables querying via JSON path notation. It is optimized for semi-structured formats (JSON, Avro, ORC, Parquet).

STRING, VARCHAR, and TEXT store plain text and cannot represent nested structures without conversion.

====================================================