Snowflake Roles and Privileges
When you configure a Snowflake stage, the Snowflake user that you specify in the stage must have a Snowflake role that includes all of the privileges required to perform the necessary Snowflake tasks.
Before using a connection in a Snowflake stage, ensure that the Snowflake user has the appropriate privileges. All Snowflake stages require specific privileges, except for the Data Collector Snowflake File Uploader destination.
For details about privilege requirements, see the documentation for the stage:
- Data Collector Snowflake Bulk originData Collector Snowflake Bulk origin
- Data Collector Snowflake destinationData Collector Snowflake destination
- Data Collector Snowflake File Uploader destinationData Collector Snowflake File Uploader destination
- Data Collector Snowflake executorData Collector Snowflake executor
- Transformer Snowflake originTransformer Snowflake origin
- Transformer Snowflake Lookup processorTransformer Snowflake Lookup processor
- Transformer Snowflake destinationData Collector Snowflake destination
If you create a custom role with the required privileges, define the
role that the stage uses in one of the following ways:
- Assign the custom role as the default role
- In Snowflake, assign the custom role as the default role for the Snowflake user account specified in the stage. A Snowflake user account is associated with a single default role.
- Override the default role with the custom role
- In the stage, use the Role property to specify the name of the custom role. The custom role overrides the role assigned to the Snowflake user account specified in the stage.
- Use a Snowflake connection
- When working with Control Hub, you can configure a Snowflake connection to provide connection details for Snowflake stages.