Production RBAC, Cost Optimization, and Deployment Patterns for Cortex Agents

Last Updated on October 6, 2026 by Editorial Team Author(s): Satish Kumar Originally published on Towards AI. The developer-to-production pipeline for Snowflake’s Cortex Agent GA enhancements — Personal Database sandboxes, temporary agents, COPY GRANTS, and the cost math on Cortex Search suspension. Part 2 of 2 — Part 1: Your Cortex Agent Specification Is Visible to Every Role That Can Invoke It From Personal Database to Production: Building Secure, Governed & Cost-Efficient Cortex Agents Part 1 covered why secure agents exist and how spec redaction actually works — including the ownership gotcha that silently breaks redaction when ACCOUNTADMIN owns the agent. This article covers the production deployment pipeline: how to develop, validate, deploy, and operate a secure Cortex Agent with proper RBAC, zero-downtime updates, and cost controls. The running example is the same release notes intelligence agent from Part 1. The Developer Workflow: Personal Database to Production Develop in Personal Database Each developer creates agents in their own Personal Database. No CREATE AGENT privilege on shared schemas required. CREATE OR REPLACE AGENT "USER$JSMITH".PUBLIC.release_notes_dev COMM…

≈