July 2026
This release delivers full lifecycle support for Unified Lakehouse Policy across Snowflake and Dremio, extends TrustAI with Databricks Genie and introduces MCP Gateway Passthrough Option — along with a redesigned policy creation experience and dozens of reliability improvements.
Feature List
Unified Lakehouse Policy (ULP): Full RBAC + ABAC Row-Level Security Lifecycle
New Access Policy Creation Wizard
MCP Gateway Passthrough Option
Intent-Based Access Control (IBAC) for AI Agents
TrustAI: Databricks Genie Support and Faster Prompt Response Times
Microsoft SharePoint & Work IQ MCP Integration
Compliance Framework Tagging in Guardian Agent Risk Findings
Relationship-Based Access Control Enhancements
New Features & Enhancements
Unified Lakehouse Policy (ULP)
Full Policy Lifecycle Across Snowflake and Dremio: Unified Lakehouse Policy now supports the complete policy lifecycle — create, review, publish, deploy, enable, disable, and re-deploy — from a single UI and API, with policies enforced simultaneously across both Snowflake and Dremio for Iceberg-based data lakehouses.
Attribute-Based Row-Level Security: Building on ULP's RBAC foundation, you can now also create and enforce attribute-based (ABAC) row-level security policies, using a dynamic condition builder in place of manual role assignment. A dedicated User Attributes tab makes managing attribute mappings straightforward, and user attributes are now resolved dynamically at policy evaluation time for more accurate enforcement.
Unified Catalogs Across Platforms: New Unified Catalog and Unified Policy views let you browse data objects and policies across lakehouse platforms in one place, with objects and roles automatically mapped across Snowflake and Dremio so you can manage them under one consistent name. Schema-level privilege assignment is now supported for multi-object RBAC policies.
Automatic Sync and Drift Detection: Access policies now sync automatically to Dremio and Snowflake data sources, and policy drift detection flags newly registered data sources that match an existing unified policy so they can be brought into sync.
Access Policy Creation
Redesigned Policy Creation Wizard: A completely redesigned, multi-step wizard now guides you through creating and managing access policies — with guided configuration, role management, a review step, and clear deployment status visibility throughout.
TrustAI
Databricks Genie Support (Now Generally Available): Guardian Agent fully understands Databricks entities — users, groups, catalogs, tables, and clusters — for rich, contextual security analysis. Genie (Databricks' AI assistant) activity is now ingested for security analysis, with natural-language understanding tuned specifically for Databricks terminology. Databricks support is now available to all customers.
Faster Guardian Agent Responses: Guardian Agent now responds significantly faster on Snowflake environments, by integrating directly with Snowflake official MCP servers, giving more accurate answers.
Deeper Investigation: You can now ask follow-up questions directly from Guardian Agent risk findings to investigate further without starting a new query.
Compliance Framework Tagging: Guardian Agent responses now include inline compliance framework tags — including NIST AI RMF, ISO 42001, and the EU AI Act — directly within risk summaries and findings.
Intent-Based Access Control (IBAC)
IBAC Enforcement: Agents can now be assigned a declared purpose at registration, and that intent is evaluated before any tool call is allowed — with configurable off/monitor/enforce modes and Kill Switch behavior by default. IBAC now also extends to Microsoft Work IQ MCPs, including SharePoint.
MCP Gateway Passthrough Option
Passthrough Option: Register MCP servers — using passthrough authentication, where the agent's own credentials are validated and used directly against the downstream service. Each server receives its own unique gateway URL and authentication handshake, matching the downstream identity provider.
Microsoft Ecosystem Integration
SharePoint/OneDrive/Teams & Foundry Support: TrustAI's policy fabric now supports Microsoft 365 MCP servers, with server- and tool-level policy enforcement on SharePoint access by Foundry agents.
Relational Based Access Controls
Filter by Employee/Manager: ABAC now supports filtering by employee name and manager for easier navigation.
Required Attributes: Administrators can mark attributes as required and manage them through an improved slide-panel dialog. Expanded Governance Capabilities: Extended entitlements transparency, Guardian Agent-driven auditability.
Last updated
Was this helpful?