What happens to the privileges granted to Snowflake system-defined roles?

The privileges granted to Snowflake's system-defined roles cannot be revoked. System-defined roles,

such as SYSADMIN, ACCOUNTADMIN, SECURITYADMIN, and others, come with a set of predefined

privileges that are essential for the roles to function correctly within the Snowflake environment.

These privileges are intrinsic to the roles and ensure that users assigned these roles can perform the

necessary tasks and operations relevant to their responsibilities.

The design of Snowflake's role-based access control (RBAC) model ensures that system-defined roles

have a specific set of non-revocable privileges to maintain the security, integrity, and operational

efficiency of the Snowflake environment. This approach prevents accidental or intentional

modification of privileges that could disrupt the essential functions or compromise the security of

the Snowflake account.

Snowflake Documentation on Access Control: Understanding Role-Based Access Control (RBAC)