## Configure connection for failed rows

URL: https://docs.atlan.com/product/capabilities/governance/data-quality/how-tos/configure-connection-for-failed-rows

> Configure BYOC credentials and query settings on your BigQuery, Databricks, or Snowflake connection to enable failed rows queries.

You can configure your BigQuery, Databricks, or Snowflake connection with BYOC (Bring Your Own Credentials) to let users query failed rows directly from the Data Quality tab. This uses the same BYOC setup as Data Exploration, so credential management stays consistent across Atlan.

Atlan supports Basic credentials, SSO, and Service Principal authentication, depending on your connector.

## Prerequisites

Before you begin, make sure you have:

- The Query failed rows feature enabled in Labs. See [Enable query failed rows](https://docs.atlan.com/llms/governance/data-quality/enable-query-failed-rows/llms.txt).
- Data quality enabled on the connection. See setup guides for [BigQuery](https://docs.atlan.com/llms/governance/data-quality/enable-data-quality/llms.txt), [Databricks](https://docs.atlan.com/llms/governance/data-quality/enable-data-quality/llms.txt), or [Snowflake](https://docs.atlan.com/llms/governance/data-quality/enable-data-quality/llms.txt).
- BYOC credentials ready for your chosen authentication method. See [Query without shared credentials](https://docs.atlan.com/llms/governance/access-control/query-without-shared-credentials/llms.txt) for an overview.
- Administrative or connection management access in Atlan.
- Credentials with at least `SELECT` permission on the tables where data quality rules are applied. Without these permissions, failed rows queries fail at execution time.

## Configure authentication

You can access connection settings in three ways. Choose the entry point that fits where you are in Atlan.

### Via nudge banner

Use the nudge banner if you're already viewing an asset's **Data Quality** tab. The banner appears when the connection isn't fully configured. For questions about when it appears, dismissal limits, and when it disappears, see [Failed rows FAQ](https://docs.atlan.com/llms/governance/data-quality/failed-rows-faq/llms.txt).

1. Navigate to any asset on the connection you want to configure

2. Click the **Data Quality** tab

3. If the connection isn't configured, a yellow banner appears with:
 * Message: "Allow your team to view failed rows"
 * Current configuration status
 * "Learn more" link to documentation
 * **Configure connection** button

4. Click **Configure connection** in the banner

5. The connection settings drawer opens with the **Connection** tab selected

6. In the **Connection** tab, locate the **Query permissions** section

7. For **Authentication type**, select your authentication method:

1. Select **Basic credentials** as the authentication type

2. Follow the detailed setup instructions in [Query without shared credentials](https://docs.atlan.com/llms/governance/access-control/query-without-shared-credentials/llms.txt) to configure username and password

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### SSO authentication

1. Select **SSO** as the authentication type

2. Follow the detailed setup instructions in [Authenticate SSO credentials to query data](https://docs.atlan.com/llms/governance/access-control/authenticate-sso-credentials-to-query-data/llms.txt) for connector-specific SSO setup

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### Service Principal (Databricks)

Service Principal authentication is available for Databricks connections.

1. Select **Service Principal** as the authentication type

2. Enter the service principal credentials (client ID, client secret, and tenant ID) for your Azure Databricks workspace

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### Via Labs connections popover

Use the Labs popover if you're already on the **Labs** page where you enabled the feature.

1. In your Atlan workspace, click **Settings** from the left menu.

 If you are using the **Old UI (Classic)**, navigate to **Admin** from the profile menu.

2. Click **Labs**

3. On the **Labs** page, find the **Query Failed Rows** option in the **Data Quality** section

4. Click **CONNECTIONS** next to the toggle

5. In the popover that appears:
 * View all connections with data quality enabled
 * Check current status: **Query Enabled** or **Query Disabled**
 * Click on any connection showing **Query Disabled**

6. The connection settings drawer opens

7. In the **Connection** tab, locate the **Query permissions** section

8. For **Authentication type**, select your authentication method:

1. Select **Basic credentials** as the authentication type

2. Follow the detailed setup instructions in [Query without shared credentials](https://docs.atlan.com/llms/governance/access-control/query-without-shared-credentials/llms.txt) to configure username and password

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### SSO authentication

1. Select **SSO** as the authentication type

2. Follow the detailed setup instructions in [Authenticate SSO credentials to query data](https://docs.atlan.com/llms/governance/access-control/authenticate-sso-credentials-to-query-data/llms.txt) for connector-specific SSO setup

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### Service Principal (Databricks)

Service Principal authentication is available for Databricks connections.

1. Select **Service Principal** as the authentication type

2. Enter the service principal credentials for your Azure Databricks workspace

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### Via connection settings

Use connection settings if you're managing the connection directly from the Connections page.

1. In your Atlan workspace, click **Governance** from the left menu, then click **Connections**.

 If you are using the **Old UI (Classic)**, from the left menu, navigate to **Governance** > **Connections**.

2. Find and select your BigQuery, Databricks, or Snowflake connection

3. Click the settings icon to open **Connection settings**

4. Select the **Connection** tab

5. Locate the **Query permissions** section

6. For **Authentication type**, select your authentication method:

1. Select **Basic credentials** as the authentication type

2. Follow the detailed setup instructions in [Query without shared credentials](https://docs.atlan.com/llms/governance/access-control/query-without-shared-credentials/llms.txt) to configure username and password

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### SSO authentication

1. Select **SSO** as the authentication type

2. Follow the detailed setup instructions in [Authenticate SSO credentials to query data](https://docs.atlan.com/llms/governance/access-control/authenticate-sso-credentials-to-query-data/llms.txt) for connector-specific SSO setup

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

### Service Principal (Databricks)

Service Principal authentication is available for Databricks connections.

1. Select **Service Principal** as the authentication type

2. Enter the service principal credentials for your Azure Databricks workspace

3. Enable the **Allow query** toggle to permit failed rows queries

4. Click **Update** to save the configuration

## Verify configuration

After configuring credentials, verify that the connection is ready for failed rows queries using one of these methods:

### Via Labs

Check the connection status directly from Labs.

1. In your Atlan workspace, click **Settings** from the left menu.

 If you are using the **Old UI (Classic)**, navigate to **Admin** > **Labs**.

2. Click **Labs**.

3. Find **Query Failed Rows** in the **Data Quality** section.

4. Click **CONNECTIONS**.

5. Verify your connection shows **Query Enabled** status.

If the status shows **Query Disabled**, review your configuration to confirm:

- BYOC credentials are saved.
- The **Allow query** toggle is enabled.
- Credentials have the required permissions.

### Test a failed rule

Test the configuration end-to-end by running a query on a real failed rule.

1. Navigate to an asset on the configured connection

2. Click the **Data Quality** tab

3. Find a failed rule in the rules table

4. Hover over the rule row to reveal the **Query failed rows** button

5. Click the button to execute a query

If the query executes successfully, your configuration is complete.

## Troubleshooting

If the connection shows **Query Disabled** or queries fail to execute, see [Troubleshooting failed rows connection](https://docs.atlan.com/llms/governance/data-quality/troubleshooting-failed-rows-connection/llms.txt).

For questions about nudge banner behavior and which rules support failed rows queries, see [Failed rows FAQ](https://docs.atlan.com/llms/governance/data-quality/failed-rows-faq/llms.txt).

## Need help?

If you have any issues configuring a connection for failed rows, contact [**Atlan Support**](https://docs.atlan.com/support/submit-request) for assistance.

## See also

- [Query failed rows](https://docs.atlan.com/llms/governance/data-quality/query-failed-rows/llms.txt)
- [Enable query failed rows](https://docs.atlan.com/llms/governance/data-quality/enable-query-failed-rows/llms.txt)
- [Query without shared credentials](https://docs.atlan.com/llms/governance/access-control/query-without-shared-credentials/llms.txt)

---