PRODUCTION SCENARIO
A Generative AI Engineer has an agent that calls a GitHub MCP service registered in Unity Catalog. Calls from the original developer succeed, but the same agent run by a newly onboarded engineer fails with a permission error on every tool call.
What should the administrator grant that engineer?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: EXECUTE on the MCP service registered in Unity Catalog
For an external MCP service the caller must hold EXECUTE on the service, and AI Gateway enforces that permission on every call, which is why identical agent code succeeds for one identity and fails for another. USE SCHEMA only lets the engineer see the schema the service is registered in, CAN_MANAGE governs the serving endpoint rather than the tool behind it, and CAN_QUERY covers the model the agent talks to, not the MCP service it invokes.