query_orders       human: ALLOW  agent: ALLOW
create_temp_table  human: ALLOW  agent: ALLOW
drop_table         human: ALLOW  agent: DENY (write on PROD is above the agent ceiling)
unmask_pii         human: ALLOW  agent: DENY (role DATA_GOVERNOR blocked for agents)
grant_role         human: ALLOW  agent: DENY (role ACCOUNTADMIN blocked for agents)