# Permissions, Privileges, and Uninstallation

This section combines all post-setup administration details, including privilege rationale, cleanup, and uninstallation.

#### Privilege Rationale (Security & Cost Control)

**Minimal required app privileges**

* `BIND SERVICE ENDPOINT` – Allows the app to bind its internal web/API service endpoint
* `EXECUTE TASK` – Enables scheduled automation

**Client-managed resources**

* Compute Pools, Warehouses, External Access Integrations, and Network Rules are owned, paid for, and controlled by the client.

**Benefits**

* Cost control (all billable compute is client-managed)
* Security control (client defines allowed external hosts)
* Full app functionality with minimal privileges

<figure><img src="/files/LWaWatVUTp6aocW28T2a" alt="" width="563"><figcaption></figcaption></figure>

#### Role & Permissions Cleanup (Updates / Re-installs)

* There is **no automated revoke** of previously granted privileges during updates.
* Manually remove older grants **except**: keep `BIND SERVICE ENDPOINT` and `EXECUTE TASK` in place.
* If services were altered, **recreate connections** to avoid confusion from legacy configurations.

#### Uninstallation

1. In **Installed Apps**, open the app row menu (⋮) → **Uninstall**.

<figure><img src="/files/eKJcgrslJUbUIrKYPG5I" alt=""><figcaption></figcaption></figure>

2. Confirm to complete removal.

<figure><img src="/files/co2HDz5W8hX8UE3TTclx" alt=""><figcaption></figcaption></figure>

**After uninstall**

* Re-install follows the same process and produces a **new Application URL**.
* **Secrets** for connectors are destroyed → reconfigure connectors.
* **Schedules** are deleted → re-enable scheduling after re-install.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.madconnect.ai/deployment-options/snowflake-native-application/permissions-privileges-and-uninstallation.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.