Skip to content

After installing

Grant the app access to Cortex AI

Run as ACCOUNTADMIN:

USE ROLE accountadmin;

-- Required: agents call Cortex AI
GRANT DATABASE ROLE snowflake.cortex_user TO APPLICATION wire_native_app;

-- Optional: credit and dollar figures on the sample Metrics pages
GRANT DATABASE ROLE snowflake.usage_viewer TO APPLICATION wire_native_app;

CORTEX_USER is required. Without it, WIRE can't create its agent functions, so no agent can be validated, activated, or run.

USAGE_VIEWER is optional. It lets the app read Cortex consumption from SNOWFLAKE.ACCOUNT_USAGE for the sample Metrics pages. Without it, those pages still work, but credits, cost, and dollar savings show —.

Prefer the Snowsight UI?

Both roles also appear as toggles on the app's Snowsight page, under Role grants for SNOWFLAKE database.

IMPORTED PRIVILEGES doesn't work

GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO APPLICATION isn't a substitute for the grants above, and it fails. An app can only be granted the privileges it requests.

Grant the app a warehouse

The sample viewers are Streamlit apps owned by the application, so the application needs USAGE on the warehouse they run on:

USE ROLE accountadmin;
GRANT USAGE ON WAREHOUSE wire_xs_wh TO APPLICATION wire_native_app;

Binding the warehouse reference isn't enough

The app's permissions page asks for a Warehouse for running agents reference. You can bind it, and it then shows as Granted, but Snowflake doesn't let a native app's Streamlit use a warehouse through a reference. Run the GRANT above as well.

Give your users access

As the app owner, grant the admin application role to the role your administrators use:

USE ROLE wire_sysadmin;
GRANT APPLICATION ROLE wire_native_app.wire_admin TO ROLE <your_role>;

WIRE has two application roles:

Role Can
wire_admin Everything wire_user can, plus configure use cases, agents, and categories, and deploy samples.
wire_user Run agents, read results and execution history, and use the sample viewers.

To give people read-and-run access without configuration rights, grant wire_native_app.wire_user to their role instead.

Check that setup is complete

Open the app from Data Products > Apps in Snowsight to launch the Configuration app. If Cortex access is missing, every page shows a Setup incomplete banner.

If you granted CORTEX_USER after the install finished, open the Setup page and select Enable AI Features. WIRE creates the missing functions in place, so you don't need to reinstall or upgrade.

You can also check from SQL:

CALL wire_native_app.main.cortex_status();

Next steps