To connect Snowflake to Kaldea, you will need Admin access to your Snowflake instance.

Complete all of the following steps to see Snowflake metadata in Kaldea:

  1. Create a Kaldea role and user in Snowflake
  2. Create Kaldea system credential in Snowflake
  3. Add users with proper roles in Snowflake
  4. Connect to Kaldea with the created user credentials

​
1. Create Kaldea user in Snowflake

Using the ACCOUNT_ADMIN role, execute the following SQL:

SQL
CREATE OR REPLACE ROLE kaldea_user_role;
/* Permission to operate a warehouse for querying and crawling */
GRANT OPERATE, USAGE ON WAREHOUSE "<warehouse-name>" TO ROLE kaldea_user_role;

/* Permission on database, schema, tables, external tables and view. This should be repeated for every database you wish to integrate into Kaldea */
GRANT USAGE ON DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT USAGE, CREATE TABLE, CREATE EXTERNAL TABLE, CREATE VIEW, CREATE MATERIALIZED VIEW, CREATE FUNCTION, CREATE PROCEDURE ON ALL SCHEMAS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;

GRANT SELECT, INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES ON ALL TABLES IN DATABASE "<database-name>" TO ROLE kaldea_user_role; 
GRANT SELECT, REFERENCES ON ALL EXTERNAL TABLES IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT SELECT, REFERENCES ON ALL VIEWS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT SELECT, REFERENCES ON ALL MATERIALIZED VIEWS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT USAGE ON ALL FUNCTIONS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT USAGE ON ALL PROCEDURES IN DATABASE "<database-name>" TO ROLE kaldea_user_role;

GRANT USAGE, CREATE TABLE, CREATE EXTERNAL TABLE, CREATE VIEW, CREATE MATERIALIZED VIEW, CREATE FUNCTION, CREATE PROCEDURE ON FUTURE SCHEMAS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT SELECT, INSERT, UPDATE, DELETE, TRUNCATE, REFERENCES ON FUTURE TABLES IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT SELECT, REFERENCES ON FUTURE EXTERNAL TABLES IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT SELECT, REFERENCES ON FUTURE VIEWS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT SELECT, REFERENCES ON FUTURE MATERIALIZED VIEWS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT USAGE ON FUTURE FUNCTIONS IN DATABASE "<database-name>" TO ROLE kaldea_user_role;
GRANT USAGE ON FUTURE PROCEDURES IN DATABASE "<database-name>" TO ROLE kaldea_user_role;

/* Permission to enable Snowflake Query History based lineage must use `ACCOUNTADMIN` role */
GRANT IMPORTED PRIVILEGES ON DATABASE snowflake TO ROLE kaldea_system_role

​
2. Create Kaldea system credential in Snowflake

Using the ACCOUNT_ADMIN role, execute the following SQL:

SQL
CREATE OR REPLACE ROLE kaldea_system_role;
GRANT ROLE kaldea_user_role to ROLE kaldea_system_role;

/* Permission to manage tags to sync Kaldea tags with Snowflake objects */ 
GRANT CREATE TAG ON ALL SCHEMAS IN DATABASE "<database-name>" TO ROLE kaldea_system_role;
GRANT CREATE TAG ON FUTURE SCHEMAS IN DATABASE "<database-name>" TO ROLE kaldea_system_role;
GRANT APPLY TAG ON ACCOUNT TO ROLE kaldea_system_role;

/* Permission to manage PII tags */
GRANT APPLY MASKING POLICY ON ACCOUNT TO ROLE kaldea_system_role;

​
3. Add users with proper roles in Snowflake

Using the ACCOUNT_ADMIN role, execute the following SQL:

  • Create the kaldea default user
SQL
CREATE USER kaldea_user password='<password>' default_role = kaldea_user_role default_warehouse = '<warehouse-name>'  display_name = 'Kaldea User';
GRANT ROLE kaldea_user_role TO USER kaldea_user;
  • Create the kaldea system user
SQL
CREATE USER kaldea_system password='<password>' default_role = kaldea_system_role default_warehouse = '<warehouse-name>'  display_name = 'Kaldea System';
GRANT ROLE kaldea_system_role TO USER kaldea_system;

​
4.Connect Snowflake to Kaldea

Go to Kaldea Settings. Click + Add Datasource in the sidebar to create a new Data Source. Use user credentials you have already created in Snowflake to fill in the necessary input fields.

​
FAQs

BigQueryAthena