Authentication (Identity) : Proven through username & password
Authorization (Access) : Access through RBAC role assignments
Account Admin (See & Do Everything)
Security Admin (Security administrator can manage security aspects of the account.)
User Admin (User administrator can create and manage users and roles)
Sys Admin (Create DB, Warehouses, Schemas, Views)
Public
Note:
- Other than this, ORG ADMIN is the most powerful
- Discretionary Access Control (DAC)
- If you change your system role to another role, when you log out and log back in, your role will revert to the default
No comments:
Post a Comment