
How do we deploy Sema4.ai Team Edition in our Snowflake account with zero data movement — step-by-step setup
Most Snowflake teams want enterprise AI agents without creating a new data silo, copying tables into yet another SaaS, or opening fresh security exceptions. That’s exactly what Sema4.ai Team Edition is built to avoid: agents run inside your Snowflake account, on your governed data, powered by Cortex AI—with zero data movement.
This guide walks through, step by step, how to deploy Sema4.ai Team Edition in your Snowflake environment so you can build production-ready agents in minutes while keeping data, governance, and AI all inside one boundary.
What “zero data movement” means in practice
Before we touch setup, it’s important to be precise about the model:
-
Agents run natively in Snowflake.
Sema4.ai Team Edition executes inside your Snowflake account, leveraging Snowflake Cortex AI for LLM-powered reasoning and tool calling. -
Your data never leaves Snowflake.
Agents access Snowflake tables and views directly—no ETL, no exports, no new warehouse to sync. -
Cortex AI keeps intelligence adjacent to your data.
LLMs run on Snowflake’s serverless infrastructure, so prompts and results remain governed by the same controls you already trust for production data. -
Unified governance applies everywhere.
Role-based access control, masking policies, row-level security, and audit logs you’ve already configured in Snowflake automatically extend to agent activity.
If your requirement is “AI inside my Snowflake boundary, under my existing governance, with zero-copy access to data,” this is the deployment path.
Prerequisites: What you need in your Snowflake account
Before you start deployment, confirm the following are in place:
1. Snowflake platform readiness
-
A Snowflake account with:
- Access to Snowflake Cortex AI (for LLM/tool-calling capability)
- Permissions to install and configure Snowflake Marketplace listings
- Ability to create and manage WAREHOUSE, DATABASE, and SCHEMA objects
-
A compute warehouse sized appropriately for:
- Initial agent experimentation (S/M works for most teams)
- Future production usage once you operationalize agents
2. Roles and permissions
Identify (or create) a role with:
CREATE DATABASE,CREATE SCHEMA, andCREATE WAREHOUSE(if you’ll provision dedicated compute)USAGEandSELECTon the databases/schemas you want agents to see- Marketplace installation permissions (often an admin-level or data platform role)
Recommended pattern:
- Use an admin/platform role to perform the initial installation.
- Create a dedicated sema4_ai_team_edition role for ongoing agent operation.
- Grant that role least-privilege access to only the data agents should be allowed to touch.
3. Governance and security posture
Because Sema4.ai runs inside Snowflake, your existing guardrails apply:
- RBAC: Roles and grants control which tables and views agents can query.
- Data masking and RLS: Still enforced on every agent query.
- Auditability: Snowflake query history + Cortex AI instrumentation let you see who did what, when.
If you’re in a regulated environment, involve your data governance and security teams up front; they’ll appreciate that there’s zero data movement and no new external datastore introduced.
Step 1: Locate Sema4.ai Team Edition in Snowflake Marketplace
Deployment begins in the Snowflake Marketplace.
- Sign in to your Snowflake web interface with a role that can install Marketplace listings.
- Navigate to Marketplace in the left-hand navigation.
- In the search bar, type:
Sema4.ai Team Edition - Open the Sema4.ai Team Edition listing and review:
- Description of the enterprise AI agent platform running natively on Snowflake
- Confirmation that data never leaves your Snowflake account
- Integration details with Claude via Snowflake Cortex AI
From here, you’ll initiate installation into your account.
Step 2: Install Team Edition into your Snowflake account
Within the Sema4.ai Team Edition Marketplace listing:
- Click Get (or Get Data / Get App, depending on interface version).
- Choose the Snowflake account and region where you want Team Edition deployed.
- Select or confirm:
- The role performing the installation.
- (Optionally) the warehouse to be associated by default.
Behind the scenes, Snowflake provisions the Sema4.ai Team Edition components into your environment. The key architectural point: no data is copied out. Instead, Team Edition will reference your existing Snowflake objects through your account’s governance model.
Step 3: Configure compute and role structure for agents
Once installed, structure compute and roles to keep operations clean and auditable.
3.1 Create a dedicated warehouse for agents (recommended)
Use a warehouse dedicated to agent workloads:
CREATE WAREHOUSE IF NOT EXISTS SEMA4_AI_WH
WITH WAREHOUSE_SIZE = 'MEDIUM'
AUTO_SUSPEND = 60
AUTO_RESUME = TRUE
INITIALLY_SUSPENDED = TRUE;
This gives you:
- Clear cost visibility for agent execution
- Isolation from other analytical workloads
- The ability to scale up/down as agent usage grows
3.2 Create an agent execution role
Define a dedicated role for Team Edition agents:
CREATE ROLE IF NOT EXISTS SEMA4_AI_AGENT_ROLE;
Grant it:
GRANT USAGE ON WAREHOUSE SEMA4_AI_WH TO ROLE SEMA4_AI_AGENT_ROLE;
GRANT USAGE ON DATABASE YOUR_ANALYTICS_DB TO ROLE SEMA4_AI_AGENT_ROLE;
GRANT USAGE ON SCHEMA YOUR_ANALYTICS_DB.YOUR_SCHEMA TO ROLE SEMA4_AI_AGENT_ROLE;
GRANT SELECT ON ALL TABLES IN SCHEMA YOUR_ANALYTICS_DB.YOUR_SCHEMA TO ROLE SEMA4_AI_AGENT_ROLE;
(Replace YOUR_ANALYTICS_DB and YOUR_SCHEMA with the domains you want agents to act on.)
This least-privilege approach ensures Team Edition agents only see the data you explicitly allow.
Step 4: Connect Sema4.ai Team Edition to Cortex AI and Actions
Next, verify that the Team Edition deployment is wired into Snowflake Cortex AI so agents can reason and take action.
4.1 Ensure Cortex AI is enabled
Work with your Snowflake admin to confirm:
- Cortex AI is enabled in your account/region.
- You have access to Claude models through Cortex AI.
- LLM usage is permitted under your organization’s governance and cost controls.
4.2 Confirm tool-calling capability
Sema4.ai Team Edition leverages Cortex AI’s tool-calling to:
- Run Runbooks defined in plain English as structured workflows.
- Invoke Actions that translate reasoning into database operations, transformations, and integrations.
In practice, this means:
- An agent “decides” what to do using Claude in Cortex AI.
- The agent issues SQL and Action calls inside your Snowflake account.
- All of this stays within your Snowflake boundary, fully governed and auditable.
No external LLM endpoint is required; you use the tools Snowflake already provides.
Step 5: Grant data access for zero-copy agent workflows
Now that the base deployment is in place, give Team Edition agents controlled visibility into your data.
5.1 Decide which domains to expose
Start with a focused slice of your estate—for example:
- Finance: AP / AR tables, invoice line items, payment records
- Operations: ticketing exports, order data, shipment status
- Revenue: subscription events, billing records
The goal: give agents enough context to complete a real workflow, not your entire warehouse.
5.2 Grant access via existing governance patterns
Use the same policies you trust for human users:
- Roles and grants for table/view access
- Row-level security to limit agent scope when necessary
- Masking policies to protect sensitive columns (PII, PHI, card data)
Because Team Edition runs inside Snowflake, there’s no need to:
- Push extracts to a separate AI tool
- Maintain parallel access control in another system
- Worry about “shadow copies” of regulated data
Zero data movement means: your Snowflake governance is the governance.
Step 6: Build your first agent using natural-language Runbooks
With deployment and access wired up, you’re ready to build agents.
6.1 Define the workflow in plain English
In Sema4.ai Team Edition, you describe workflows using Runbooks—stepwise instructions in natural language.
Example for a finance team:
“Every morning, reconcile yesterday’s invoices against payments.
- Pull all invoices from
AP_INVOICESwhere status is ‘OPEN’ and invoice_date is yesterday.- Match each invoice to payments in
PAYMENTSby vendor, invoice number, and amount.- Flag any invoices with mismatched amounts, missing payments, or duplicate payments.
- Write reconciliation results to
AP_RECONCILIATION_RESULTSwith status and explanation.- Generate a summary report of exceptions by vendor and total exposure.”
You don’t need to write SQL; the agent uses Semantic Data Models and DataFrames behind the scenes to:
- Understand your data in plain English
- Execute mathematically accurate analysis against your Snowflake tables
- Produce outputs with complete auditability
6.2 Attach Actions to access Snowflake data
Within the Runbook, you connect to Snowflake through Actions:
- Actions encapsulate SQL operations, document parsing, or external calls.
- They are implemented using an automation-as-code framework and run in your environment.
- In the Snowflake-native Team Edition, these Actions execute queries directly against your account.
Because all of this runs on top of your existing Snowflake infrastructure, you still have zero data movement—the agent is simply another governed user with specialized capabilities.
Step 7: Test, observe, and promote to production
Enterprise AI agents only matter if they are governable. Team Edition gives you a full lifecycle:
7.1 Test safely
- Start with non-production schemas or views.
- Use smaller data slices while you validate logic.
- Inspect results using Transparent Reasoning to see:
- Which steps the agent took
- What queries were executed
- How decisions were made
7.2 Monitor behavior
Because execution happens in Snowflake, you can:
- Track queries in Snowflake query history
- Analyze performance and cost patterns by warehouse and role
- Integrate observability with tools like Datadog, Splunk, Grafana, or LangSmith (via Sema4.ai’s broader platform patterns)
7.3 Promote to production
Once validated:
- Point the agent to production schemas.
- Increase warehouse size or concurrency settings as needed.
- Operationalize through Sema4.ai’s Control Room and Work Room patterns:
- Control Room for lifecycle, schedules, and guardrails
- Work Room for human-in-the-loop supervision where required
You keep all the benefits of automation—often 90%+ automation rates and days-to-minutes processing time—without compromising your Snowflake governance or copying data anywhere.
How this setup delivers zero data movement in your Snowflake account
To summarize the architectural surface area for “How do we deploy Sema4.ai Team Edition in our Snowflake account with zero data movement — step-by-step setup”:
- Deployment: Team Edition is installed via Snowflake Marketplace directly into your account.
- Execution: Agents run using your Snowflake warehouses and Cortex AI, not an external AI service.
- Data access: Agents query data where it lives—your Snowflake databases and schemas—without ETL or replication.
- Security: All access is governed by existing RBAC, masking, RLS, and audit controls you already trust.
- Governance: There’s a single source of truth—Snowflake—for both data and AI, with zero-copy semantics end to end.
You get a complete enterprise AI agent platform—Runbooks, Actions, Document Intelligence, Semantic Data Models, and DataFrames—running inside your Snowflake environment, with the accuracy, control, and observability required for real finance and operations work.