Connect a Snowflake account

Overview

The installation process involves creating a SPYGLASS_USER and granting it a SPYGLASS_ROLE that inherits from SECURITYADMIN. For more information on these objects, see our Spyglass security page.

You (or a member of your team) will need the ability to create a user for Spyglass with its required permissions.

Prerequisites

1. Ensure you can create a Snowflake user, role, and have the ability to grant SECURITYADMIN to that role. Most common is to use the ACCOUNTADMIN role.

2. If your Snowflake instance has an account network security policy, add our static egress IP to your allowed list of IPs: 34.31.88.206

Steps

1. Navigate to Spyglass Settings and underneath the Snowflake section, click on "Connect".

Click the button to begin connecting Spyglass to your Snowflake account

2. Input your Snowflake account identifier, warehouse name, and copy and run the commands in a Snowflake Worksheet while assuming ACCOUNTADMIN to create the necessary objects.

Input your Snowflake account URL, warehouse name, then copy and run commands in Snowflake

You can find your Snowflake account URL by going to Admin → Accounts in your Snowflake account and clicking on the Account to copy the URL

3. Click on "Verify" in the Spyglass UI (seen above) to confirm the connection. If successful, you will see confirmation in Spyglass.

After verifying your connection, import your roles, users, and other metadata.

4. The final step is to click "Import", which will copy over your existing Snowflake access configurations, and also periodically sync from Snowflake -> Spyglass.

You’ve now successfully connected your Snowflake account to Spyglass!

Common issues

Error: JWT token is invalid

When it may happen: When configuring your Snowflake account

What to check with your setup configurations: Ensure that you highlight and run the SPYGLASS_USER creation commands in you Snowflake worksheet to make sure they all run together as opposed to independently