Set up a Snowflake connector

Integrate your Snowflake instance with C1 to run user access reviews, enable just-in-time access requests, and easily provision and deprovision access.

A newer version of this connector is available. This version of the connector is no longer available for installation. If you’re setting up a Snowflake connector with C1 for the first time, use the v2 version.

Capabilities

• Sync user identities from Snowflake to C1

• Resources supported:

  • Roles

Add a new Snowflake connector

This task requires either the Connector Administrator or Super Administrator role in C1.

1. In C1, navigate to Apps > Connectors and click Add connector.

2. Search for Snowflake and click Add.

3. Choose where to add the connector: Create a new app, or Add to an existing app (then select the app).

   If you’re creating a new app, choose whether to link it to an application discovered from your identity provider: select Yes and pick the IdP application, or No to continue with just the connector.

   Do you SSO into Snowflake using your identity, SSO, or federation provider? If so, link the connector to the Snowflake application already discovered from your provider, rather than continuing without a link.

4. Set the connector’s Name and, optionally, a Description.

5. Click the pencil icon next to Owners to choose who can configure and manage this connector.

   A Snowflake connector owner must have the following permissions:

   • Connector Administrator or Super Administrator role in C1
   • Manage Grants global privilege in Snowflake
6. Click Add. The connector is created and its configuration page opens.

Next steps

Proceed to Configure your Snowflake connector for instructions on integrating Snowflake with C1.

Configure your Snowflake connector

A user with the Connector Administrator or Super Administrator role in C1 and Manage Grants global privilege in Snowflake must perform this task.

You will be required to choose a Snowflake role with Manage Grants global privilege after the initial connector setup is complete.

Step 1: Locate the Snowflake Locator for your account

1. In Snowflake, click Organization.

2. Locate the account you wish to connect to C1 in the accounts list.

3. Hover over the value in the LOCATOR column, and click the copy function. We’ll use this in Step 2.

Step 2: Add your Snowflake credentials to C1

1. In C1, navigate to the Snowflake connector by either:

   • Clicking the Set up connector link in the email you received about configuring the connector.
   • Navigate to Connectors > Snowflake (if there is more than one Snowflake listed, click the one with your name listed as owner and the status Not connected).
2. Find the Settings area of the page and click Edit.

3. In the Account ID / Locator field, enter the locator you looked up in Step 1.

4. In the Username field, enter your Snowflake account username.

5. In the Password field, enter your Snowflake account password.

6. Click Save.

7. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Step 3: Choose a role in Snowflake

1. In Snowflake, go to User roles and click Edit.

2. Select a user role. A role that’s equivalent to SECURITYADMIN is required.

3. Click Add User role.

4. Click Save.

5. Return to C1. After you see the Connector updated message, click on View logs to verify that the connector syncs successfully.

Done. Your Snowflake connector is now pulling access data into C1.