Skip to content

Privileges¶

Account-level privileges¶

  • IMPORTED PRIVILEGES ON SNOWFLAKE DB: Read access to SNOWFLAKE.ACCOUNT_USAGE for cost analytics, query history, warehouse metering, and Cortex AI usage.
  • CREATE COMPUTE POOL: Runs auto tune and the in-app web UI, both in a single compute pool the app provisions itself.
  • BIND SERVICE ENDPOINT: Exposes the web UI's HTTPS endpoint so users in your account can reach the app from Apps → Altimate AI.
  • CREATE WAREHOUSE: Auto-creates a dedicated NATIVE_APP_WH, used exclusively by the web service for its own ACCOUNT_USAGE queries.
  • MANAGE WAREHOUSES: Reads each warehouse's settings and applies the AUTO_SUSPEND adjustment, only on warehouses you opt in to.

Database role¶

  • SNOWFLAKE.CORTEX_USER: Lets the app call Snowflake Cortex LLM functions for its AI-driven capabilities. All calls stay in-account, billed against your existing Cortex credits.

Approving the install dialog is the grant. No manual GRANT DATABASE ROLE step needed.