Snowflake Intelligence Automations: EXECUTE AGENT TASK privilege granted to PUBLIC by default¶

Snowflake Intelligence Automations access behaves as follows:

Before the change:

The EXECUTE AGENT TASK privilege on the account wasn’t granted to any role by default. Administrators had to grant the privilege before users could create or run scheduled agent tasks.

After the change:

The EXECUTE AGENT TASK privilege on the account is granted to the PUBLIC role by default. Administrators can still revoke the privilege from PUBLIC and grant it only to selected roles.

This additive change reduces onboarding friction for Snowflake Intelligence Automations while preserving administrator control to restrict access when needed.

Ref: 2349