A user can change object parameters using which roles?

• A. ACCOUNTADMIN, SECURITYADMIN, USER with PRIVILEGE
• B. ACCOUNTADMIN, USER with PRIVILEGE
• C. SECURITYADMIN, USER with PRIVILEGE
• D. ACCOUNTADMIN, SECURITYADMIN

Answer: (B)

In Snowflake, changing an object's parameters is governed by privileges on that object. You either have broad, account-wide power, or you must be explicitly granted the right to modify that specific object.

The account administrator has full control across the account, so they can change any object's parameters. A user who has been granted the necessary privilege on the target object—an explicit grant to modify or own the object—can also change its parameters.

Security-focused roles like SECURITYADMIN don’t automatically imply the ability to alter object parameters unless the user is additionally granted the specific object-level privileges. That’s why the ability to change object parameters comes from either being the top-level account admin or from having the required privilege on the object.