Snowflake Data Export Connector

Visier can send data through this connector if the following requirements are met.

Overview

This connector uses Snowflake Spark Connector to send data to Snowflake.

Prerequisites

To allow Visier to connect to your Snowflake instance, you must provide the connection endpoints for SNOWFLAKE_DEPLOYMENT, SNOWFLAKE_DEPLOYMENT_REGIONLESS, and STAGE. These endpoints allow Visier to bypass network restrictions and securely access your instance. For more information about these endpoints, see SYSTEM$ALLOWLIST.

Run the following query in Snowsight and provide the output to your Customer/Partner Success Manager.

Copy 
SELECT t.VALUE:type::VARCHAR as type,
       t.VALUE:host::VARCHAR as host,
       t.VALUE:port as port
FROM TABLE(FLATTEN(input => PARSE_JSON(SYSTEM$ALLOWLIST()))) AS t
WHERE type IN (
  'SNOWFLAKE_DEPLOYMENT',
  'SNOWFLAKE_DEPLOYMENT_REGIONLESS',
  'STAGE'
  );

Service account

Create a service account in your target system and assign it the appropriate security access so that Visier can send data through this user.

Note: We only support key-pair authentication because Snowflake blocks sign-ins using single-factor authentication with passwords as of November 2025. For instructions on how to configure key-pair authentication, see Key-pair authentication and key-pair rotation.

Copy
Example: Service user access
-- Grant permissions to the role
USE ROLE SECURITYADMIN;

-- Grant infrastructure access
GRANT USAGE ON WAREHOUSE <warehouse name> TO ROLE <role name>;
GRANT USAGE ON DATABASE <database name> TO ROLE <role name>;

-- Grant schema access
GRANT USAGE ON SCHEMA <database name>.<schema name>  TO ROLE <role name>;
GRANT CREATE TABLE ON SCHEMA <database name>.<schema name>  TO ROLE <role name>;

-- Grant tag access
  -- Export Connectors tag created tables to ensure that
    -- different export jobs do not write conflicting data to the same table in the target system
    -- verify that only tables with a Visier tag are modified
GRANT CREATE TAG ON SCHEMA <database name>.<schema name> TO ROLE <role name>;

Connector credentials

Provide the following credentials in Visier. For more information, see Add data export connector credentials in Visier.

Credential

Description

Example

Snowflake URL

The URL to send data to.

example.snowflakecomputing.com

Database

The database to send data to. Useful if you want to restrict access to a specific set of tables in a particular database.

SNOWFLAKE_DATA

Schema

The schema associated with the database. Useful if you want to restrict access to a specific set of tables in a particular schema.

TPCH_SF1

User

The service user's username.

IntegrationUser

Private Key

The generated private key.

-----BEGIN PRIVATE KEY-----

...

----END PRIVATE KEY----

Warehouse

The warehouse to use.

SAMPLEWAREHOUSE
Role (Optional)

The database role that provides access to securable objects.

 

Key Passphrase (Optional)

The passphrase for the encrypted private key.