Configure connection for failed rows

You can configure your BigQuery, Databricks, or Snowflake connection with BYOC (Bring Your Own Credentials) to let users query failed rows directly from the Data Quality tab. This uses the same BYOC setup as Data Exploration, so credential management stays consistent across Atlan.

Atlan supports Basic credentials, SSO, and Service Principal authentication, depending on your connector.

Prerequisites

Before you begin, make sure you have:

• The Query failed rows feature enabled in Labs. See Enable query failed rows.
• Data quality enabled on the connection. See setup guides for BigQuery, Databricks, or Snowflake.
• BYOC credentials ready for your chosen authentication method. See Query without shared credentials for an overview.
• Administrative or connection management access in Atlan.
• Credentials with at least SELECT permission on the tables where data quality rules are applied. Without these permissions, failed rows queries fail at execution time.

Configure authentication

You can access connection settings in three ways. Choose the entry point that fits where you are in Atlan.

Via nudge banner

Use the nudge banner if you're already viewing an asset's Data Quality tab. The banner appears when the connection isn't fully configured. For questions about when it appears, dismissal limits, and when it disappears, see Failed rows FAQ.

1. Navigate to any asset on the connection you want to configure

2. Click the Data Quality tab

3. If the connection isn't configured, a yellow banner appears with:

   • Message: "Allow your team to view failed rows"
   • Current configuration status
   • "Learn more" link to documentation
   • Configure connection button

4. Click Configure connection in the banner

5. The connection settings drawer opens with the Connection tab selected

6. In the Connection tab, locate the Query permissions section

7. For Authentication type, select your authentication method:

Basic credentials

1. Select Basic credentials as the authentication type

2. Follow the detailed setup instructions in Query without shared credentials to configure username and password

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

SSO authentication

1. Select SSO as the authentication type

2. Follow the detailed setup instructions in Authenticate SSO credentials to query data for connector-specific SSO setup

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

Service Principal (Databricks)

Service Principal authentication is available for Databricks connections.

1. Select Service Principal as the authentication type

2. Enter the service principal credentials (client ID, client secret, and tenant ID) for your Azure Databricks workspace

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

Via Labs connections popover

Use the Labs popover if you're already on the Labs page where you enabled the feature.

1. In your Atlan workspace, click Settings from the left menu.

   If you are using the Old UI (Classic), navigate to Admin from the profile menu.

2. Click Labs

3. On the Labs page, find the Query Failed Rows option in the Data Quality section

4. Click CONNECTIONS next to the toggle

5. In the popover that appears:

   • View all connections with data quality enabled
   • Check current status: Query Enabled or Query Disabled
   • Click on any connection showing Query Disabled

6. The connection settings drawer opens

7. In the Connection tab, locate the Query permissions section

8. For Authentication type, select your authentication method:

Basic credentials

1. Select Basic credentials as the authentication type

2. Follow the detailed setup instructions in Query without shared credentials to configure username and password

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

SSO authentication

1. Select SSO as the authentication type

2. Follow the detailed setup instructions in Authenticate SSO credentials to query data for connector-specific SSO setup

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

Service Principal (Databricks)

Service Principal authentication is available for Databricks connections.

1. Select Service Principal as the authentication type

2. Enter the service principal credentials for your Azure Databricks workspace

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

Via connection settings

Use connection settings if you're managing the connection directly from the Connections page.

1. In your Atlan workspace, click Governance from the left menu, then click Connections.

   If you are using the Old UI (Classic), from the left menu, navigate to Governance > Connections.

2. Find and select your BigQuery, Databricks, or Snowflake connection

3. Click the settings icon to open Connection settings

4. Select the Connection tab

5. Locate the Query permissions section

6. For Authentication type, select your authentication method:

Basic credentials

1. Select Basic credentials as the authentication type

2. Follow the detailed setup instructions in Query without shared credentials to configure username and password

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

SSO authentication

1. Select SSO as the authentication type

2. Follow the detailed setup instructions in Authenticate SSO credentials to query data for connector-specific SSO setup

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

Service Principal (Databricks)

Service Principal authentication is available for Databricks connections.

1. Select Service Principal as the authentication type

2. Enter the service principal credentials for your Azure Databricks workspace

3. Enable the Allow query toggle to permit failed rows queries

4. Click Update to save the configuration

Verify configuration

After configuring credentials, verify that the connection is ready for failed rows queries using one of these methods:

Via Labs

Check the connection status directly from Labs.

1. In your Atlan workspace, click Settings from the left menu.

   If you are using the Old UI (Classic), navigate to Admin > Labs.

2. Click Labs.

3. Find Query Failed Rows in the Data Quality section.

4. Click CONNECTIONS.

5. Verify your connection shows Query Enabled status.

If the status shows Query Disabled, review your configuration to confirm:

• BYOC credentials are saved.
• The Allow query toggle is enabled.
• Credentials have the required permissions.

Test a failed rule

Test the configuration end-to-end by running a query on a real failed rule.

1. Navigate to an asset on the configured connection

2. Click the Data Quality tab

3. Find a failed rule in the rules table

4. Hover over the rule row to reveal the Query failed rows button

5. Click the button to execute a query

If the query executes successfully, your configuration is complete.

Troubleshooting

If the connection shows Query Disabled or queries fail to execute, see Troubleshooting failed rows connection.

For questions about nudge banner behavior and which rules support failed rows queries, see Failed rows FAQ.

Need help?

If you have any issues configuring a connection for failed rows, contact Atlan Support for assistance.

See also

• Query failed rows
• Enable query failed rows
• Query without shared credentials