Skip to main content

Snowflake

Updated

Overview

This guide explains how to integrate Snowflake on the App Catalog page in Josys.

Integration Specifications

Supported Plans Standard, Enterprise, Business Critical, Virtual Private Snowflake
Required Admin Role

ACCOUNTADMIN,

USERADMIN (Cannot delete privileged access such as ACCOUNTADMIN)
Integration Method OAuth
Integration Key Email
Supported Actions Delete AccountVisualize AccountProvision Account 
Excluded Statuses for Unmanaged IDs Deleted
Settings Available when Provisioning Role Settings
Settings Available when Deleting
Subscription Information How to check subscription information
Other Retrieved Items ・Creation Date
・Last Login
Visualized Items ・Last Active Date/Time
・Roles
・Status
・Creation Date
・Last Login
Retrieved Items for License Management
Inactive User Criteria No login for 30 days
Common Items Last Active Role Status User 
Retrievable Roles ・USERADMIN
・SYSADMIN
・SECURITYADMIN
・SANDBOX_ROLE
・ORGADMIN
・ACCOUNTADMIN
Role Editing

Generating Credentials

  1. Log in to Snowflake with an ACCOUNTADMIN account and click SQL Worksheet.

  2. Copy, paste, and run the following command: 
    CREATE SECURITY INTEGRATION MY_SNOWSQL_CLIENT_JOSYS
TYPE = OAUTH
ENABLED = TRUE
OAUTH_CLIENT = CUSTOM
OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
OAUTH_REDIRECT_URI = 'https://app.josys.it/admin/integrations/callback/snowflake'
OAUTH_ISSUE_REFRESH_TOKENS = TRUE
OAUTH_REFRESH_TOKEN_VALIDITY = 7776000
;
    If you are integrating with ACCOUNTADMIN privileges, run the following command.
    This is not required if you are integrating with USERADMIN privileges. 
    alter account set OAUTH_ADD_PRIVILEGED_ROLES_TO_BLOCKED_LIST = false;

  3. Run the following commands to retrieve and copy the required information.
    Two Client Secrets will be displayed. Make sure to use the value of OAUTH_CLIENT_SECRET (the first one, without "_2" at the end). Using the one with "_2" will  cause  an integration error.
    4. DESC SECURITY INTEGRATION MY_SNOWSQL_CLIENT_JOSYS;
select SYSTEM$SHOW_OAUTH_CLIENT_SECRETS( 'MY_SNOWSQL_CLIENT_JOSYS' );

⚠️ Important Note on Copying Authorization and Token Endpoints

When copying the URLs, make sure to copy the complete URL, including the trailing /authorize or /token-request, even if parts of the URL are truncated (e.g., shown as ...) on the screen. Double-click the cell to ensure the entire text is selected before copying.
Simply dragging and copying the visible text may result in an incomplete URL, causing errors (such as 404 Not Found) during integration.

 

Integrating with Snowflake

  1. From the Josys left sidebar, click Integrations > App Catalog.
  2. Search for Snowflake and click it.
  3. The setup page will appear on the right side.
  4. Enter the Client ID, Client Secret, Authorization Endpoint (OAUTH_AUTHORIZATION_ENDPOINT), Token Endpoint (OAUTH_TOKEN_ENDPOINT), and Account ID.
  5. After entering the details, click Next to complete the integration.
    The Account ID is the Organization ID and Account ID combined in lowercase, separated by a hyphen.
    In the example below, it is iocljwh-vm76765.

Related articles