Snowflake Agents Run as All Your Roles. Revoke From PUBLIC.
Snowflake's CoCo automations reached preview on August 21, letting any user schedule an unattended AI agent. Each run executes as that user's default role plus every default secondary role — and EXECUTE AGENT TASK is granted to PUBLIC by default.
August 22, 2026 · 13 min read