Troubleshooting Snowflake connectivity
Resolve common Snowflake connectivity issues when integrating Snowflake with Atlan.
Missing warehouse grants
The user doesn’t have USAGE and OPERATE grants on a warehouse.
Solution
-
Grant warehouse access to the role:
GRANT OPERATE, USAGE ON WAREHOUSE "<warehouse>" TO ROLE atlan_user_role; -
Then, confirm that you grant the role to the new user:
GRANT ROLE atlan_user_role TO USER atlan_user;
Missing authorized access to SNOWFLAKE.ACCOUNT_USAGE schema
The user doesn’t have authorized access to the SNOWFLAKE.ACCOUNT_USAGE database
Solution
-
Reach out to your account admin to grant imported privileges on the
Snowflakedatabase to the role:USE ROLE ACCOUNTADMIN;
GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE atlan_user_role; -
If using a copied database, you'll need to grant the following permissions:
GRANT USAGE ON DATABASE "<copied-database>" TO ROLE atlan_user_role;
GRANT USAGE ON SCHEMA "<copied-schema>" IN DATABASE "<copied-database>" TO ROLE atlan_user_role;
GRANT REFERENCES ON ALL VIEWS IN DATABASE "<copied-database>" TO ROLE atlan_user_role;
Missing usage grants on databases or schemas
The user doesn't have usage grants to the databases $missingDatabases and schemas $missingSchemas.
Solution
- Grant missing permissions listed here for information schema extraction method.
Atlan IP not allowlisted
Atlan's current location or network isn't recognized by Snowflake's security settings. This can happen if Atlan's IP address isn't on the list of allowed addresses in Snowflake's network policies.
Solution
- If you are using the IP allowlist in your Snowflake instance, you must add the Atlan IP to the allowlist. Contact Atlan support to obtain Atlan's IP addresses.
Incorrect credentials
The username or the password provided to connect to the Snowflake account is incorrect.
Solution
- Sign into the Snowflake account for the specified host and verify that the username and password are correct.
- You can also create a new user, if required, by following the steps here.
Missing or unauthorized role
The role specified in your connection configuration doesn't exist in Snowflake or your user account doesn't have grant to use this role.
Solution
- If the role doesn't exist or is missing the required grants, create a role and then grant the role to the user.
User account locked
The user account you're using to connect to Snowflake has been locked temporarily because of multiple incorrect login attempts.
Solution
- Wait for the user account to unlock or create a different user account to continue.
Missing or unauthorized warehouse
The warehouse specified in your connection configuration doesn't exist in Snowflake or your user account doesn't have grant to use this warehouse.
Solution
- Confirm that the warehouse name is configured correctly.
- Update the warehouse name in the configuration if your account is using a different warehouse. Create a role and then grant the role to the user for the updated warehouse.
Missing access to non-system databases or schemas
The configured user doesn't have usage grants to any database or schema. or The configured user doesn't have usage grants to any non-system database or schema.
Solution
- This pertains to the information schema method of fetching metadata. Confirm that the user has authorized access to the databases and schemas to be crawled.
- Grant the requisite permissions as outlined here.