Troubleshooting

If you attempted the upgrade and receive the message that your upgrade is Partially Complete, find the un-upgraded data sources by navigating to the Upgrade Manager and clicking the number in the Available column for the relevant connection.

Use the options below to resolve those un-upgraded data sources in order to finish your upgrade. See the linked how-to's for more details on the actions to take.

Note that these un-upgraded data sources still exist and are still protected by policy.

1. Delete the remaining data sources: The easiest solution is to delete the data sources that did not upgrade. Note that disabled data sources that no longer exist in your data platform will never be upgraded. Only do this if you no longer need these data sources in Immuta.

2. Adjust the privileges of the system user used to connect Immuta and your data platform: Ensure that the Immuta system user can also access all remaining un-upgraded data sources in your data platform.

   1. Expand permissions in Snowflake or Databricks (recommended): Extend the Immuta system user's permissions in your data platform by granting it access to all remaining un-upgraded data sources.

   2. Change the system user credentials used by Immuta: You can also provide Immuta with a different set of credentials that already have the required permissions on the un-upgraded data sources.

Required Snowflake permissions

Ensure that has at least the following permissions:

• USAGE on parent databases and schemas of objects registered as Immuta data sources

• REFERENCES on all objects registered as Immuta data sources

And has been granted to the .

Required Databricks Unity Catalog permissions

Ensure the Databricks service principal you created and connected with Immuta has at least the following permissions:

• USE CATALOG and USE SCHEMA on parent catalogs and schemas of objects registered as Immuta data sources

• SELECT and MODIFY on all objects registered as Immuta data sources

Delete the data sources

Schema monitoring must be turned off in the schema project to disable and delete data sources that did not upgrade.

1

View the data sources that were not upgraded

Find the un-upgraded data sources by navigating to the Upgrade Manager and clicking the number in the Available column.

2

Disable the data sources

From this data source list page, disable all the data sources to delete.

1. Check the top checkbox in the data source list table. Deselect the checkbox for any data sources you do not want to delete.

2. Click More Actions.

3. Click Disable and then Confirm.

3

Delete the data sources

From this data source list page, delete the data sources.

1. Check the top checkbox in the data source list table. Deselect the checkbox for any data sources you do not want to delete.

2. Click More Actions.

3. Click Disable and then Confirm.

4

Finalize the upgrade

Once the un-upgraded data sources are deleted, you should be able to complete the upgrade.

1. Navigate to the Upgrade Manager.

2. Click Finalize.

Expand permissions in Snowflake

1

Check your role permissions

To find the role you specified, do the following in the Immuta UI:

1. Navigate to the Infrastructure tab.

2. Select the connection you are trying to upgrade.

3. Navigate to the Connections tab.

4. See the Role.

Now, ensure that role has the required permissions for each data source that was not successfully upgraded. Add the permissions where needed.

2

Grant your role to the system account

To find the system account you specified, do the following in the Immuta UI:

1. Navigate to the Infrastructure tab.

2. Select the connection you are trying to upgrade.

3. Navigate to the Connections tab.

4. See the Setup: Username.

Now, in Snowflake, grant the role to the system account:

GRANT ROLE <name> TO USER <user_name>;

3

Run object sync

1. Navigate to the Infrastructure tab.

2. Click on the more actions menu for the connection you are trying to upgrade.

3. Select Run Object Sync.

4. Click the checkbox to Also scan inactive objects.

5. Click Run Object Sync.

Now, navigate back to the Upgrade Manager tab, and if all your data sources are successfully upgraded, finalize the upgrade.

4

Finalize the upgrade

Once the un-upgraded data sources are resolved, you can complete the upgrade.

1. Navigate to the Upgrade Manager.

2. Click Finalize.

Expand permissions in Databricks Unity Catalog

1

Check your service principal privileges

To find the service principal you specified, do the following in the Immuta UI:

1. Navigate to the Infrastructure tab.

2. Select the connection you are trying to upgrade.

3. Navigate to the Connections tab.

Now, ensure that service principal has the required privileges for each data source that was not successfully upgraded. Add the privileges where needed.

2

Run object sync

1. Navigate to the Infrastructure tab.

2. Click on the more actions menu for the connection you are trying to upgrade.

3. Select Run Object Sync.

4. Click the checkbox to Also scan inactive objects.

5. Click Run Object Sync.

Now, navigate back to the Upgrade Manager tab, and if all your data sources are successfully upgraded, finalize the upgrade.

3

Finalize the upgrade

Once the un-upgraded data sources are resolved, you can complete the upgrade.

1. Navigate to the Upgrade Manager.

2. Click Finalize.

Change the system user credentials used by Immuta

If you have another set of credentials on hand with wider permissions, you can edit the connection to use these credentials instead to resolve the un-upgraded data sources.

1

Edit the connection

1. Navigate to the Infrastructure tab.

2. Select the connection you are trying to upgrade.

3. Navigate to the Connections tab.

4. Click Edit and then Next

5. Enter the new credentials in the textbox and continue to the end to save.

2

Run object sync

1. Navigate to the Infrastructure tab.

2. Click on the more actions menu for the connection you are trying to upgrade.

3. Select Run Object Sync.

4. Click the checkbox to Also scan inactive objects.

5. Click Run Object Sync.

Now, navigate back to the Upgrade Manager tab, and if all your data sources are successfully upgraded, finalize the upgrade.

3

Finalize the upgrade

Once the un-upgraded data sources are resolved, you can complete the upgrade.

1. Navigate to the Upgrade Manager.

2. Click Finalize.