Use warehouse agents with Sigma (Beta)

If you create a Cortex Agent in Snowflake or an Genie Space in Databricks, you can interact with that agent in a Sigma agent.

By default, warehouse agents such as a Snowflake Cortex Agent or a Databricks Genie Space use the data in your data platform directly, so any data transformations and restrictions applied to your data in Sigma, such as row-level security, are not applied when you interact with the agent from Sigma.

Snowflake Cortex Agent requirements

To set up a Snowflake Cortex Agent in Sigma, the following requirements must be met:

• You must have a Snowflake connection. See Connect to Snowflake.

• You must connect to Snowflake using OAuth or key-pair authentication. Basic authentication is not supported for using Cortex Agents.

• You must have a Cortex Agent set up in the connected Snowflake account.

• Grant the following privileges and roles to the relevant roles associated with your connection:

  • For key pair authentication, grant roles and privileges to the default role of the service account user.
  • For key pair authentication and dynamically assigned roles, grant roles and privileges to all roles.
  • For OAuth authentication, grant roles and privileges to the current role of all users with access to the connection. If you configure a service account, grant roles and privileges to the role of the service account user.

  The following roles and privileges are required:

  • The SNOWFLAKE.CORTEX_USER database role or the SNOWFLAKE.CORTEX_AGENT_USER database role.
  • USAGE privileges on the agent.

  For more details and other requirements, see the Access control requirements for the Cortex Agent in the Snowflake documentation.

Databricks Genie Space requirements

To use a Databricks Genie Space in Sigma, the following requirements must be met:

• You must have a Databricks connection. See Connect to Databricks. If you use a personal access token (PAT) to connect to Databricks and restrict the scope of your token, add the genie scope to the PAT.

• You must have a Genie Space in Databricks.

• The following permissions must be set for each user accessing Databricks (if you use OAuth to authenticate) or the service principal associated with the connection (if you use basic authentication):

  • CAN VIEW or CAN RUN on the Databricks Genie Space.
  • Permission to access the data queried by the Genie Space.

  For more details, see Share a Genie Space in the Databricks documentation.

Set up warehouse agents with Sigma

If you create a Cortex Agent in Snowflake or a Genie Space in Databricks, after Sigma indexes your connection you can see the agent in the data catalog and use it with Sigma agents.

🚩

If the agent does not appear in Sigma, sync the connection. When you sync the connection, sync both the database and schema or catalog and schema that contain the agent. For more details, see Manually sync your data.

Grant access to a warehouse agent in Sigma

If you connect to your data platform using key-pair authentication (Snowflake) or a personal access token (Databricks), grant access to the warehouse agent to users and teams in Sigma. You must be assigned the Admin account type.

📘

If you use OAuth to connect to your data platform, you must manage access to the agent in your data platform.

To allow others to use the warehouse agent in Sigma, grant access by doing the following:

1. From Sigma Home, select Connections to open the list of connected data sources.
2. Select the data connection with the warehouse agent.
3. Search for or browse to the agent, then select it.
4. On the Access tab, select + Grant access.
5. Search for users or teams to grant Can use access to the agent.
6. (Optional) Select the Send an email notification checkbox to notify users that they now have access to the agent.
7. Click Save.