Which roles can make grant decisions to objects within a managed access schema?

Managed Access Schemas: These are a special type of schema designed for fine-grained access control in Snowflake.

Roles with Grant Authority:

ACCOUNTADMIN: The top-level administrative role can grant object privileges on all objects within the account, including managed access schemas.

SECURITYADMIN: Can grant and revoke privileges on objects within the account, including managed access schemas.

Important Note: The ORGADMIN role focuses on organization-level management, not object access control.