Connecting to Snowflake

Sign into your Snowflake account.

As the USERADMIN role, create a new user role and grant the required role permissions by running the following commands in the Worksheets window:

# Create a new role for celonis
create role celonis_role;

# Grant permissions for that role 
grant select on all tables in schema MY_DB.PUBLIC to role celonis_role;

As the USERADMIN role, create a new user and assign it the role by running the following commands in the Worksheets window:

# Create a new user for celonis
create user celonis password='celonis123';

# Grant celonis permissions to celonis user
grant role celonis_role to user celonis;

As the ACCOUNTADMIN role, create a security integration group by running the following commands in the Worksheets window:

# Create security integration for the oauth
create security integration oauth_kp_int
 type = oauth
 enabled = true
 oauth_client = CUSTOM
 oauth_client_type = 'CONFIDENTIAL'
 oauth_redirect_uri = 'https://auth.redirect.celonis.cloud/snowflake_redirect'

 oauth_issue_refresh_tokens = true
 oauth_refresh_token_validity = 7776000;

# Allow celonis user to use the integration as ACCOUNTADMIN
ALTER USER celonis ADD DELEGATED AUTHORIZATION OF ROLE celonis_role TO SECURITY INTEGRATION oauth_kp_int;

As the ACCOUNTADMIN role, retrieve the Client ID and Client secret for the OAuth integration by running the following commands in the Worksheets window:

# Get the client-id & client-secret for the integration; Note that the integration name is case-sensitive and must be uppercase and enclosed in single quotes.

select SYSTEM$SHOW_OAUTH_CLIENT_SECRETS('OAUTH_KP_INT');

Click Data Connections.

Click Add Data Connection and select Connect to Data Source.

For direct connections, select Cloud - Snowflake.

For uplinked connections, select: On-Premise - Snowflake and then select your uplink (configured as part of step 1).

Configure the following connection details, with the options here depending on your choice of uplinked or direct connection:

Click Test Connection and correct any highlighted issues.

Click Save.

If using OAuth: The OAuth workflow starts, asking you to sign into your Snowflake account and authorize the connection.