Agent access · Reliability and controls
Which BI tools log what outside agents did?
7 of 15 tools do, according to their public docs, and 4 partly.
Yes: Databricks, Snowflake, Sigma, BigQuery, Looker, Power BI, Alteryx. Partly: Omni, Hex, Metabase, MotherDuck.
The question we asked: Are an outside agent’s actions logged with its identity and the analytical objects affected?
Grading standard
The product records actions taken by an outside agent, tied to its delegated identity and affected analytical objects. A general user activity log is insufficient.
Databricks
Yespreview
Quoted from Databricks’s docsSecurity and compliance: Every span records the requester identity, endpoint name, and full request payload, so you can feed it into your security tooling for threat detection and investigation.
Source: docs.databricks.com/aws/en/ai-gateway/unified-trace-table · checked Oct 26, 2026 · quoted by GPT
Snowflake
Yes
Quoted from Snowflake’s docsTogether, these columns help you reconstruct the causal chain that compliance teams often need: a user invoked an agent, specific queries followed, and specific objects were accessed.
Source: docs.snowflake.com/en/user-guide/agent-identity · checked Oct 26, 2026 · quoted by Claude
Omni
Partly
Quoted from Omni’s docsRetrieve the full result of a completed AI job, including all actions taken by the AI (queries generated, data retrieved) and the final summarized answer.
Source: docs.omni.co/api/ai/stream-ai-job-results · checked Oct 26, 2026 · quoted by Claude
Hex
Partly
Quoted from Hex’s docsThis view lets you review individual turns in the conversation, inspect tool calls made by the agent, and see the primary data assets referenced at each stage.
Source: learn.hex.tech/docs/agent-management/observability · checked Oct 26, 2026 · quoted by GPT
Sigma
Yes
Quoted from Sigma’s docsAlso fires for Sigma MCP Server requests.
Source: help.sigmacomputing.com/docs/audit-log-events-and-metadata · checked Oct 26, 2026 · quoted by Claude
BigQuery
Yes
Quoted from BigQuery’s docsQueries executed using the execute_sql tool will always have the default job label goog-mcp-server: true automatically set in addition to any custom labels provided in the request.
Source: docs.cloud.google.com/bigquery/docs/reference/mcp · checked Oct 26, 2026 · quoted by Claude
Looker
Yespreview
Quoted from Looker’s docsEvery action taken by an AI agent is logged in Looker System Activity and Cloud Audit Logs.
Source: cloud.google.com/looker/docs/mcp · checked Oct 26, 2026 · quoted by Claude
Power BI
Yes
Quoted from Power BI’s docsWhen you authenticate with a service principal (described next), the user ID captured by the activity log is the Application ID.
Source: learn.microsoft.com/en-us/power-bi/guidance/powerbi-implementation-planning-auditing-mo... · checked Oct 26, 2026 · quoted by GPT
Metabase
Partly
Quoted from Metabase’s docsThe Tool calls tab lists each call with its tool, client, user, status, duration, and error type.
Source: www.metabase.com/docs/latest/ai/mcp · checked Oct 26, 2026 · quoted by Claude
Alteryx
Yespreview
Quoted from Alteryx’s docsActions performed by service principals appear in the Audit Log with: agent_type = SERVICE_PRINCIPAL
Source: help.alteryx.com/aac/en/platform/admin/admin-reference/admin-console/service-principals... · checked Oct 26, 2026 · quoted by GPT
MotherDuck
Partly
Quoted from MotherDuck’s docsQueries run by any end user are attributed to the service account that owns the token, not to the individual Microsoft 365 user.
Source: motherduck.com/docs/key-tasks/ai-and-motherduck/mcp-setup · checked Oct 26, 2026 · quoted by Claude
Tableau
Mode
Redshift
Streamlit