Author firewall-style access policies that decide which Snowflake tables/rows and MCP tools each user may reach. Policies compile to a BigQuery table that Apigee reads by the caller's email at request time.