Which combination of credentials is required to edit access controls?

• A. Security Admin
• B. Elevated privileges only
• C. security_admin and elevated privileges
• D. System Administrator

Answer: (C)

Editing access controls is a high-risk task that governs who can see or modify data. Because of this, only very privileged users should be able to make these changes, and the system enforces this through specific roles and elevated permissions.

Having the security_admin role is what gives you the authority to manage ACL definitions themselves—creating, updating, or removing access rules. But some actions require going beyond standard permissions, so elevated privileges are necessary to bypass certain checks during the editing process. The combination of security_admin with elevated privileges ensures you can perform the task while keeping changes auditable and tightly controlled.

In short, you need the ability to manage security rules (security_admin) and the temporary elevated rights (elevated privileges) to carry out those changes successfully.