You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -82,7 +80,7 @@ GRANT CREATE SCHEMA ON DATABASE identifier($segment_connection_db) TO ROLE iden
82
80
83
81
## Step 2: Grant read-only access to additional databases for the Data Graph
84
82
85
-
Next, give the Segment role **read-only** access to additional databases you want to use for Data Graph including the Profiles Sync database. Repeat the SQL query below for **each** database you want to use for the Data Graph.
83
+
Next, give the Segment role **read-only** access to additional databases you want to use for Data Graph including the Profiles Sync database. Repeat the following SQL query for **each** database you want to use for the Data Graph.
86
84
87
85
```SQL
88
86
@@ -107,7 +105,7 @@ GRANT SELECT ON FUTURE MATERIALIZED VIEWS IN DATABASE identifier($linked_read_on
107
105
108
106
## (Optional) Step 3: Restrict read-only access to schemas
109
107
110
-
If you want to restrict access to specific [Snowflake schemas and tables](https://docs.snowflake.com/en/user-guide/security-access-control-privileges#table-privileges), then run the following commands:
108
+
If you want to restrict access to specific [Snowflake schemas and tables](https://docs.snowflake.com/en/user-guide/security-access-control-privileges#table-privileges){:target="_blank"}, then run the following commands:
111
109
112
110
```SQL
113
111
-- [Optional] Further restrict access to only specific schemas and tables
@@ -145,19 +143,20 @@ SELECT * FROM identifier($table_name) LIMIT 10;
145
143
146
144
```
147
145
## Step 5: Connect your warehouse to the Data Graph
146
+
148
147
To connect your warehouse to the Data Graph:
149
148
150
149
1. Navigate to **Unify > Data Graph**. This should be a Unify space with Profiles Sync already set up.
151
-
2. Click Connect warehouse.
150
+
2. Click **Connect warehouse**.
152
151
3. Select Snowflake as your warehouse type.
153
152
4. Enter your warehouse credentials. Segment requires the following settings to connect to your Snowflake warehouse:
154
153
-**Account ID**: The Snowflake account ID that uniquely identifies your organization account
155
154
-**Database**: The only database that Segment requires write access to in order to create tables for internal bookkeeping. This database is referred to as `segment_connection_db` in the script below
156
155
-**Warehouse**: The [warehouse](https://docs.snowflake.com/en/user-guide/warehouses){:target="_blank”} in your Snowflake account that you want to use for Segment to run the SQL queries. This warehouse is referred to as `segment_connection_warehouse` in the script below
157
156
-**Username**: The Snowflake user that Segment uses to run SQL in your warehouse. This user is referred to as `segment_connection_username` in the script below
158
157
-**Authentication**: There are 2 supported authentication methods:
159
-
-**Key Pair**: This is the recommended method of authentication. You would need to first create the user and assign it a key pair following the instructions in the [Snowflake docs](https://docs.snowflake.com/en/user-guide/key-pair-auth). Then, follow the Segment docs above to set up Snowflake permissions and set the `segment_connections_username` variable in the SQL script to the user you just created
160
-
-**Password**: The password of the user above. This password is referred to as `segment_connection_password` in the script below
158
+
-**Key Pair**: This is the recommended method of authentication. You would need to first create the user and assign it a key pair following the instructions in the [Snowflake docs](https://docs.snowflake.com/en/user-guide/key-pair-auth){:target="_blank"}. Then, follow the Segment docs above to set up Snowflake permissions and set the `segment_connections_username` variable in the SQL script to the user you just created
159
+
-**Password**: The password of the user above. This password is referred to as `segment_connection_password` in the script below.
161
160
162
161
5. Test your connection, then click Save.
163
162
@@ -172,4 +171,4 @@ GRANT USAGE ON SCHEMA identifier($retl_schema) TO ROLE identifier($segment_conne
172
171
GRANT CREATE TABLE ON SCHEMA identifier($retl_schema) TO ROLE identifier($segment_connection_role);
173
172
GRANTSELECT,INSERT,UPDATE,DELETEON ALL TABLES IN SCHEMA identifier($retl_schema) TO ROLE identifier($segment_connection_role);
0 commit comments