AI agents are pushing access controls and testing into the data layer

Snowflake is warning that dashboard-era access controls do not hold up once AI agents can query and act across datasets, pushing governance closer to the data layer, according to TechTarget’s Computer Weekly. In parallel, TechTarget reported that enterprise AI-agent testing needs to expand beyond pre-deployment checks into continuous monitoring so agents don’t drift beyond prescribed instructions. InformationWeek’s reporting on CISOs at Intuit, Smartsheet and ETS adds the operational risk: unmanaged “AI orphans” and identity sprawl as agent count grows, which shifts near-term workload onto IAM, data governance and platform engineering teams building the guardrails.

Snowflake’s message to enterprise data teams this week was blunt: the access controls built for a “dashboard era” won’t govern AI agents. Once an agent can move between data, tools and actions, permissions that were good enough for a human analyst inside a BI interface stop being a reliable boundary, according to TechTarget’s Computer Weekly.

That warning is arriving as security teams are also rethinking how they test AI agents before and after deployment. In a separate report, TechTarget said experts are pushing comprehensive testing practices designed to prevent agents from pursuing goals beyond prescribed instructions, and to keep validation going after go-live, not only in the lab.