Snowflake CEO Promotes Restricted Session Scope for Agents

Sridhar Ramaswamy, CEO of Snowflake, posted about Restricted Session Scope. The feature gives Coco agents only the exact access needed. Linked Snowflake documentation states that agents acting on behalf of a user inherit the user's full privileges by default. This default can include write access to production databases or elevated roles such as ACCOUNTADMIN. RSS restricts that inheritance so agents operate with narrower permissions.