Snowflake

When you connect Snowflake to Unblocked, Unblocked can reference data from the Snowflake databases you select when answering questions. Unblocked provides links back to the original Snowflake resources for easy reference. See Snowflake with Unblocked in action:

Prerequisites

You need an Unblocked admin account and a Snowflake administrator who can create roles and users and grant access to your warehouse and data. Unblocked connects using workload identity federation. Each Snowflake account can connect to only one Unblocked installation.

Set up Snowflake

Open the Snowflake connection page

In the Unblocked sidebar, click Settings, then Data Sources, then Connect Another, then search for and select Snowflake.Keep this page open while you configure Snowflake. It contains a user creation script generated for this connection.

Connect a Data Source dialog filtered to Snowflake

Create a read-only role

In Snowflake, run the following SQL as an administrator. Replace <your_warehouse> with the warehouse Unblocked should use:

CREATE ROLE UNBLOCKED_READONLY_ROLE;

GRANT USAGE ON WAREHOUSE <your_warehouse>
  TO ROLE UNBLOCKED_READONLY_ROLE;

If you already have a dedicated read-only role, use it in place of UNBLOCKED_READONLY_ROLE throughout these instructions.

Create the service user

Snowflake setup page with generated user creation SQL and an account identifier field

Copy the user creation script from the Unblocked connection page. Replace <READONLY_ROLE> with UNBLOCKED_READONLY_ROLE and <WAREHOUSE> with your warehouse name, then run the script in Snowflake.Keep the generated UNBLOCKED_... user name and AWS role ARN unchanged. The user name ties the connection to your Unblocked organization. Use the script from your own connection page, not the example shown in the screenshot.Grant the read-only role to the new user. Replace <generated_user_name> with the exact user name from the script:

GRANT ROLE UNBLOCKED_READONLY_ROLE
  TO USER <generated_user_name>;

Setting DEFAULT_ROLE in the creation script does not grant the role to the user; you must run this grant too.

Grant access to your data

Grant the role USAGE on the database and schema you want Unblocked to index, plus SELECT on current and future tables. Replace <your_database> and <your_schema> with your own values:

SET UNBLOCKED_DATABASE = '<your_database>';
SET UNBLOCKED_SCHEMA = '<your_database>.<your_schema>';

GRANT USAGE ON DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT USAGE ON SCHEMA IDENTIFIER($UNBLOCKED_SCHEMA)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON ALL TABLES IN SCHEMA IDENTIFIER($UNBLOCKED_SCHEMA)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON FUTURE TABLES IN SCHEMA IDENTIFIER($UNBLOCKED_SCHEMA)
  TO ROLE UNBLOCKED_READONLY_ROLE;

Repeat this step for each additional database or schema you want Unblocked to access. For individual tables or views, or an entire database, use the optional grants below.

Grant access to a single table or view (optional)

If you only want Unblocked to access specific tables or views instead of an entire schema, grant SELECT on those objects individually instead of the schema-wide grants above. Replace <your_database>, <your_schema>, <your_table>, and <your_view> with your own values:

SET UNBLOCKED_DATABASE = '<your_database>';
SET UNBLOCKED_SCHEMA = '<your_database>.<your_schema>';
SET UNBLOCKED_TABLE = '<your_database>.<your_schema>.<your_table>';
SET UNBLOCKED_VIEW = '<your_database>.<your_schema>.<your_view>';

GRANT USAGE ON DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT USAGE ON SCHEMA IDENTIFIER($UNBLOCKED_SCHEMA)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON TABLE IDENTIFIER($UNBLOCKED_TABLE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON VIEW IDENTIFIER($UNBLOCKED_VIEW)
  TO ROLE UNBLOCKED_READONLY_ROLE;

Repeat the last two grants for each additional table or view you want Unblocked to access.

Grant access to an entire database (optional)

If you want Unblocked to access every schema, table, and view in a database, including ones created later, grant access at the database level instead of the schema level. Replace <your_database> with your own value:

SET UNBLOCKED_DATABASE = '<your_database>';

GRANT USAGE ON DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT USAGE ON ALL SCHEMAS IN DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT USAGE ON FUTURE SCHEMAS IN DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON ALL TABLES IN DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON ALL VIEWS IN DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON FUTURE TABLES IN DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

GRANT SELECT ON FUTURE VIEWS IN DATABASE IDENTIFIER($UNBLOCKED_DATABASE)
  TO ROLE UNBLOCKED_READONLY_ROLE;

Revoke Unblocked's access (optional)

To remove this connection’s access, delete the generated service user. Replace <generated_user_name> with the exact user name from your connection’s creation script:

DROP USER IF EXISTS <generated_user_name>;

Connect in Unblocked

Enter your account identifier

Run this query in Snowflake to get your account identifier:

SELECT CURRENT_ORGANIZATION_NAME() || '-' || CURRENT_ACCOUNT_NAME() AS snowflake_account;

Return to the Snowflake connection page in Unblocked. Paste the SNOWFLAKE_ACCOUNT value into Account identifier and click Connect.You can also paste your Snowflake web URL. It contains your organization name followed by your account name: https://app.snowflake.com/<organization>/<account>/.

Select your databases

After connecting, Unblocked opens the Snowflake settings page. Select the databases you want Unblocked to access, then click Save Settings. Unblocked starts indexing your selected databases.

Wait for indexing to complete

Unblocked shows Processing for Snowflake on the Data Sources page while indexing is in progress. Unblocked will not use Snowflake to answer questions until indexing completes.

Connected Data Sources page showing Snowflake with Processing status

You can change which databases are indexed at any time from Settings › Data Sources › Snowflake.

Getting Started with Unblocked

Product Guides

Using Unblocked

Personal Settings

Team Settings

Billing

Data Sources

Prerequisites

Set up Snowflake

Connect in Unblocked

​Prerequisites

​Set up Snowflake

​Connect in Unblocked

Prerequisites

Set up Snowflake

Connect in Unblocked