Custom roles can be created by the SECURITYADMIN role as well as by any role to which the CREATE ROLE privilege has been granted.

• A. SECURITYADMIN roles only
• B. SECURITYADMIN roles as well as by any role with CREATE ROLE privilege
• C. ACCOUNTADMIN only
• D. Any role can create

Answer: (B)

Creating custom roles in Snowflake hinges on privileges. To create a role, a user’s role must have the CREATE ROLE privilege. The SECURITYADMIN role has that capability as part of its broad security-management duties, so it can create custom roles. In addition, any role that has been granted the CREATE ROLE privilege can also create new roles. So, custom roles can be created either by the SECURITYADMIN role or by any role to which the CREATE ROLE privilege has been granted. This fits because not every role automatically has that privilege; it must be granted.