Snowflake Integration

Automating data classification and privacy requests fulfillment by integrating MineOS with Snowflake

Before you start

• Make sure your MineOS plan supports integrations.
• Make sure you have sufficient permissions on Snowflake to a new role.

Setting up

To connect the Snowflake integration, follow the steps below:

1. On the left sidebar, click Data Inventory and then Data Sources
2. Click on Add data source
3. Select Snowflake from the catalog, then enter the Snowflake page from your data sources list
4. In the RequestHandling tab, check the Handle this data source in privacy requests  or check the Use source in Content Discovery checkbox and choose the Integration handling style
5. Create a custom user and role for the integration:

   1. From your Snowflake account admin, go to Worksheets

   2. Open a new worksheet and run each of the following commands (Separately. with the saymine user and password as you chose):

use role accountadmin;

CREATE ROLE MINEOS;

CREATE USER <saymineUser>

    PASSWORD = '<sayminePassword>'

    LOGIN_NAME = <saymineUser>

GRANT ROLE SAYMINE TO USER <saymineUser>;

grant usage on database <my_db> to role SAYMINE;

grant usage on schema <my_db>.<my_schema> to role SAYMINE;

grant monitor on warehouse <warehouse_name> to role SAYMINE;

grant usage on warehouse <warehouse_name> to role SAYMINE;

grant select on all tables in schema <my_db>.<my_schema> to role SAYMINE;

grant delete on all tables in schema <my_db>.<my_schema> to role SAYMINE;

6. Or do the following instead:

1. 1. Create a new role named “MINEOS” (Note: You can use any name for this role).
   2. Create a new user for the integration, and grant the role MINEOS
   3. Grant ‘usage’ for the required database to the role MINEOS
   4. Grant ‘usage’ for the required schema to the role MINEOS
   5. Grant 'monitor' for the required warehouse to role MINEOS;
   6. Grant 'usage' for the required warehouse to role MINEOS;

1. 1. Grant ‘select’ and ‘delete’ on the required tables to the role MINEOS

User and Account Details

1. Under User Details: Insert your new Snowflake username, password and role in the following format: 
   

   username;password;role

    

2. Under Account Details: Insert your Account Identifier, Region, and Warehouse in the following format:

   accountIdentifier;region;warehouse

   For more information on how to find your account identifier, please read here.
   
   

3. Under "Query used for search records & delete validation"/Copy/Delete Query: Add a SQL query in the format as shown below at "DSR Queries", The queries are mandatory!
   
   

Data Classification

When using Content Discovery for your tables data, you need to make sure you have given the snowflake user the required permissions to your relevant tables.

Upon content discovery we will scan your tables, and analyze each row's data in our PII Processing Engine. These scan results will be added to the data types of your integration general info.

DSR Queries

To manage your DSR handling actions, you need to define the queries that will run in Snowflake for each possible action:

Query used for search records & delete validation

The query will be used for showing how many records were found as well as showing a sample (preview) of the data. Also, it will be used as a validation for the delete action.

Example Query:

SELECT name, age, country FROM db.schema.table WHERE NAME =  {{endUserEmail}} 

* Preview will return the count of the number of records returned in the query response

* Preview will show the first 3 values from the query response, it supports strings and long types

* The variable is mandatory

Copy Query

The Copy query will be used for the Copy action. Copy action is running on the ticket processing page in ticket of type Copy when clicking on Generate Copy

Example Query:

SELECT * FROM db.schema.table WHERE NAME =  {{endUserEmail}} 

* Copy will show all records returned in the query response

* The variable is mandatory

Delete Query

The Delete query will be used for the Delete action. Delete action is running on the ticket processing page in ticket of type Deletion when clicking on Delete from X sources

Example Query:

DELETE FROM db.schema.table WHERE NAME =  {{endUserEmail}} 

* The variable is mandatory

Paste the details and queries in the Request handling tab in the correct inputs and click Save.

Troubleshooting

Error: "Must provide a Preview Query"

You must provide a preview query in order for the Snowflake integration to work. You can use `select 1` as a placeholder query.

Error: "Response status code does not indicate success: 403 (Forbidden)."

This usually means there is an authentication issue with the connection details. The problem can happen for a number of reasons:

1. The username/password is wrong.
2. Or, the required SAYMINE role was not created properly (described above).
3. Or, the account ID or warehouse are wrong.

Error: "The SSL connection could not be established, see inner exception."

When this happens you should use a dashed (-) version of the account ID & region instead of an underscore (_) version. For example instead of `my_account_id;my_region;my_warehouse` use: `my-account-id;my-region;my_warehouse` (replacing _ with - in the accountId and region)

What's next?

Read more about the deletion process using integrations here.

Read more about the get a copy process using integrations here.

Talk to us if you need any help with Integrations via our chat or at portal@saymine.com, and we'll be happy to assist!🙂