> Software > Protect > AI & Analytics > Snowflake > Backup

Configure Snowflake user and permissions

To connect your Snowflake account to Commvault, you must configure a Snowflake user with the required permissions and provide authentication details such as the account identifier and private key.

You can use either an existing user or create a new dedicated service user.

Create or identify a Snowflake user

You can use an existing Snowflake user if it has sufficient privileges, or create a new user specifically for Commvault.

To create a new user, run a command similar to the following: 

CREATE USER username
RSA_PUBLIC_KEY=public_key
DEFAULT_ROLE='ACCOUNTADMIN';

Modify the username and authentication method based on your environment and security requirements.

Assign the required role

The Snowflake user must have permissions to discover, back up, and restore data.

In most environments, assign the ACCOUNTADMIN role to simplify configuration:

ALTER USER username SET DEFAULT_ROLE = 'ACCOUNTADMIN';

If you use a more restrictive security model, make sure that the user has equivalent privileges to:

  • Access databases, schemas, and tables

  • Create and manage streams

  • Read data required for backups

  • Perform restore operations

Insufficient permissions can cause discovery, backup, or restore operations to fail.

Provide connection details

When configuring the connection, you must provide the Snowflake account identifier and authentication details.

Snowflake account identifier

The account identifier uniquely identifies your Snowflake account and can include multiple segments depending on your deployment.

Common formats

Account identifiers have one of the following formats:

  • [account_locator]

  • [account_locator].[cloud_region_id]

  • [account_locator].[cloud_region_id].[cloud]

For example:

  • swa53414

  • swa53414.east-us-2

  • swa53414.east-us-2.azure

Where:

  • [account_locator] identifies your Snowflake account

  • [cloud_region_id] specifies the region

  • [cloud] specifies the cloud provider (such as AWS or Azure)

Find your account identifier

To retrieve your account identifier, run the following SQL command:

SELECT CURRENT_ORGANIZATION_NAME() || '-' || CURRENT_ACCOUNT_NAME();

Use the returned value when configuring the Snowflake connection in Commvault.

Authentication details

When configuring the connection, you must provide:

  • Snowflake username

  • Account identifier

  • Private key

  • Passphrase for the private key (if applicable)

Make sure the private key matches the public key associated with the Snowflake user.

Notes and considerations

  • You can use a human user or a service user, but a dedicated service user is recommended for consistency and auditability.

  • The Snowflake user must remain active and accessible for ongoing backup and restore operations.

  • Changes to roles or permissions can affect future backups and restores.

×

Loading...