CLAIM-2026-08-25-03
A CoCo automation run does not use the role that was active in the session when it was created; each run starts a task session whose primary role is the user's default role with the user's default secondary roles activated, and the agent task is owned by the user rather than by a role.
Why it matters
The correction. Least-privilege practice that depends on switching to a narrow role per session does not carry into the scheduled run.
Sources
- snowflakedo2026coco