Which BI tools give agents least-privilege access?

Quoted from Databricks’s docsTo make it read-only, set disallow_writes to true in the built-in system.ai.dbsql_policy policy.

Quoted from Snowflake’s docsToken-bound RSS: An application attaches an RSS to a delegated access token that it obtains through OAuth token exchange. The ceiling applies to every session created from that token.

Quoted from Omni’s docsA PAT is scoped to the user who creates it and will inherit their in-app permissions.

Quoted from Hex’s docs- Read projects: The token will work with any API endpoint that only gets information (e.g. ListProjects).

Quoted from Sigma’s docsImpersonating users allows admins to act as a user and view, edit, and access Sigma resources based on the user's account type.

Quoted from BigQuery’s docsWe recommend that you create a separate identity for agents that are using MCP tools so that access to resources can be controlled and monitored.

Quoted from Looker’s docsOnce connected, the AI agent will inherit the Looker roles and access of the user who authenticated.

Quoted from Tableau’s docsTo ensure minimum access to administrative tasks and content, the JWT should contain access scopes that determine which methods are accessible to the connected app or UAT.

Quoted from Power BI’s docsYour service principal doesn't have access to any of your Power BI content and APIs.

Quoted from Metabase’s docsThe token gets all the permission scopes, unless you ask for fewer with a space-separated scope parameter.

Quoted from Alteryx’s docsreadOnly: Exposes only toolsets that do not update data. Supported options are true and false.

Quoted from MotherDuck’s docsFor server-side enforcement, authenticate with a read scaling token instead of a regular access token.

Quoted from Mode’s docsThese tokens mimic the individual user's access to the resources in the Workspace.

Quoted from Redshift’s docsUse IAM roles or temporary credentials; avoid long-lived access keys.