True or False: When you create a custom role, it is a best practice to immediately grant that role to ACCOUNTADMIN.

The ACCOUNTADMIN role is the most powerful role in the system and should be used sparingly. The best practice for managing custom roles is to grant them to the SYSADMIN role. This creates a hierarchical role structure where SYSADMIN can manage all custom roles and the objects they own, aligning with the principle of least privilege and separating account management (ACCOUNTADMIN) from object and user management (SYSADMIN and other roles).

This is a True/False question.

1. Snowflake Documentation: "Access Control in Snowflake - Role Hierarchy and Privilege Inheritance". It states, "It is not a best practice to have the ACCOUNTADMIN role own objects in the account. Instead, Snowflake recommends that you use the SYSADMIN role to create objects in your account."

2. Snowflake Documentation: "Considerations for the ACCOUNTADMIN Role". This section emphasizes that the ACCOUNTADMIN role should be reserved for initial system setup and managing account-level objects and parameters, not for creating custom objects or managing day-to-day roles.