Snowflake Data Export Connector
Visier can send data through this connector if the following requirements are met.
Overview
This connector uses Snowflake Spark Connector to send data to Snowflake.
Caution: Visier manages the destination table. When the linked data export changes, Visier updates the table schema. The data export connector job may fail if you apply security policies, such as row-level security and column masking, directly to the destination table. To secure the exported data, create a view on the destination table that filters and masks the data. Give users access to the view instead of the table.
Service account
Create a service account in your target system and assign it the appropriate security access so that Visier can send data through this user.
Note: We only support key-pair authentication because Snowflake blocks sign-ins using single-factor authentication with passwords as of November 2025. For instructions on how to configure key-pair authentication, see Key-pair authentication and key-pair rotation.
-- Grant permissions to the role
USE ROLE SECURITYADMIN;
-- Grant infrastructure access
GRANT USAGE ON WAREHOUSE <warehouse name> TO ROLE <role name>;
GRANT USAGE ON DATABASE <database name> TO ROLE <role name>;
-- Grant schema access
GRANT USAGE ON SCHEMA <database name>.<schema name> TO ROLE <role name>;
GRANT CREATE TABLE ON SCHEMA <database name>.<schema name> TO ROLE <role name>;
-- Grant tag access
-- Export Connectors tag created tables to ensure that
-- different export jobs do not write conflicting data to the same table in the target system
-- verify that only tables with a Visier tag are modified
GRANT CREATE TAG ON SCHEMA <database name>.<schema name> TO ROLE <role name>;Connector credentials
Provide the following credentials in Visier. For more information, see Add data export connector credentials in Visier.
|
Credential |
Description |
Example |
|---|---|---|
|
Snowflake URL |
The URL to send data to. |
example.snowflakecomputing.com |
|
Database |
The database to send data to. Useful if you want to restrict access to a specific set of tables in a particular database. |
SNOWFLAKE_DATA |
|
Schema |
The schema associated with the database. Useful if you want to restrict access to a specific set of tables in a particular schema. |
TPCH_SF1 |
|
User |
The service user's username. |
IntegrationUser |
|
Private Key |
The generated private key. |
-----BEGIN PRIVATE KEY----- ... ----END PRIVATE KEY---- |
|
Warehouse |
The warehouse to use. |
SAMPLEWAREHOUSE |
| Role (Optional) |
The database role that provides access to securable objects. |
|
|
Key Passphrase (Optional) |
The passphrase for the encrypted private key. |
|