Celonis Product Documentation

Create a new user role, grant permission, and then create a user. Run the below commands as Useradmin in the Worksheets window.

# Create a new role for celonis
create role celonis_role;

# Grant permissions for that role 
grant select on all tables in schema MY_DB.PUBLIC to role celonis_role;

# Create a new user for celonis (needed in Step 5).
create user celonis password='celonis123';

# Grant celonis permissions to celonis user
grant role celonis_role to user celonis;

Create a security integration group. Run the below commands as Accountadmin in the Worksheets window.

# Create security integration for the oauth
create security integration oauth_kp_int
 type = oauth
 enabled = true
 oauth_client = CUSTOM
 oauth_client_type = 'CONFIDENTIAL'
 oauth_redirect_uri = 'https://auth.redirect.celonis.cloud/snowflake_redirect'

 oauth_issue_refresh_tokens = true
 oauth_refresh_token_validity = 7776000;

# Allow celonis user to use the integration as Accountadmin
ALTER USER celonis ADD DELEGATED AUTHORIZATION OF ROLE celonis_role TO SECURITY INTEGRATION oauth_kp_int;

Retrieve the Client ID and Client secret for the OAuth integration as Accountadmin.

# Get the client-id & client-secret for the integration; Note that the integration name is case-sensitive and must be uppercase and enclosed in single quotes.

select SYSTEM$SHOW_OAUTH_CLIENT_SECRETS('OAUTH_KP_INT');

Click Data Connections.

Click Add Data Connection and select Connect to Data Source.

For direct connections, select Cloud - Snowflake.

For uplinked connections, select: On-Premise - Snowflake and then select your uplink (configured as part of step 1).

Configure the following connection details, with the options here depending on your choice of uplinked or direct connection:

Click Test Connection and correct any highlighted issues.

Click Save.

If using OAuth: The OAuth workflow starts, asking you to sign into your Snowflake account and authorize the connection.