Connect to Snowflake

​

Create a user for Elementary cloud

• Please create a Snowflake key-pair (private and public key) using this guide.
• Using the public key generated in the previous step, please run the following in your dbt project folder:

## Store the public key in an environment variable
export SNOWFLAKE_PUBLIC_KEY="<public key>"

## Print the query you should run to generate a user
dbt run-operation create_elementary_user --args "{'public_key': '$SNOWFLAKE_PUBLIC_KEY'}"

​

Permissions and security

• Read-only access to the Elementary schema.
• Access to read metadata in INFORMATION_SCHEMA (table metadata and query history), related to the tables in your dbt project.

​

Grant permissions to monitor dynamic tables

DECLARE
  databases ARRAY DEFAULT ARRAY_CONSTRUCT('DB1', 'DB2', 'DB3');
  elementary_role STRING DEFAULT 'ELEMENTARY_ROLE';
BEGIN
  FOR i IN 0 TO ARRAY_SIZE(databases) - 1 DO
    LET db_name STRING := databases[i]::STRING;
    GRANT MONITOR ON ALL DYNAMIC TABLES IN DATABASE IDENTIFIER(:db_name)
      TO ROLE IDENTIFIER(:elementary_role);
    GRANT MONITOR ON FUTURE DYNAMIC TABLES IN DATABASE IDENTIFIER(:db_name)
      TO ROLE IDENTIFIER(:elementary_role);
  END FOR;
  RETURN 'Granted MONITOR on dynamic tables for ' || ARRAY_SIZE(databases) || ' database(s).';
END;

​

Fill the connection form

• Account: Find your account by using the Snowflake account URL and removing snowflakecomputing.com. e.g. example.us-east-1. For more information, see Account Identifiers in the Snowflake docs.
• Database name: The name of the database where your Elementary schema exist. e.g. analytics.
• Warehouse: e.g. ELEMENTARY_WAREHOUSE.
• Elementary schema: The name of your Elementary schema. Usually [schema name]_elementary.
• Role (optional): e.g. ELEMENTARY_ROLE.

• Key pair (Recommended):
  • User: The user created for Elementary.
  • Private key: The private key you generated for Elementary. For more information, see Generate Private Key in the Snowflake docs.
  • Private key passphrase (optional)
• User password (Deprecated, not recommended):
  • User: The user created for Elementary.
  • Password: The password you set when creating your Snowflake account.

​

Add the Elementary IP to allowlist

CREATE NETWORK POLICY ELEMENTARY_CLOUD
	ALLOWED_IP_LIST=('3.126.156.226')
	BLOCKED_IP_LIST=()
COMMENT='IP used by Elementary Cloud to sync the Elementary schema';

ALTER USER <user_name> SET NETWORK_POLICY = ELEMENTARY_CLOUD;

​

Need help with onboarding?