Which command is used to create the read_only_rl role in Snowflake?

• A. create role read_only_rl
• B. grant role read_only_rl to role sysadmin
• C. alter role read_only_rl to grant role sysadmin
• D. comment = 'This role is limited to querying tables in schema_1'; grant role read_only_rl to role sysadmin;

Answer: (A)

Creating a new role in Snowflake uses the CREATE ROLE statement with the role name. To establish a role named read_only_rl, you simply run: CREATE ROLE read_only_rl. This defines a new securable in Snowflake that you can later grant privileges to or assign to users or other roles.

The other options try to grant or modify a role in ways that assume the role already exists or use invalid syntax. Granting a role to another role or user requires the role to be present first; altering a role to grant it to SYSADMIN isn’t valid syntax for creating a role, and mixing a comment with a grant in the same statement isn’t how Snowflake handles role descriptions (you would use COMMENT ON ROLE read_only_rl IS '...') after the role exists.