Snowflake Horizon

Set up access request links in Snowflake Horizon

Use Snowflake's contacts to configure the access request links with data in Snowflake and provide data consumers with a button to request access from Snowsight in Universal Search results. You may also opt to add the access request links to the data object descriptions.

Requirements

• Snowflake connection registered in Immuta
• A Snowflake user with the following privileges:

  • Privileges to create a Snowflake contact at the schema level:

    • CREATE CONTACT on the schema that will contain the contact
    • USAGE on the schema and the parent database
  • Privileges to add a contact to an object. You must have at least one of the following:

    • APPLY CONTACT on the account: this allows for an admin to manage associations across your Snowflake account.
    • APPLY on the specific contact and OWNERSHIP of the object: this allows for object owners to control the contact associations for their own objects.
• OBJECT_VISIBILITY (private preview feature) enabled in Snowflake

Set up object visibility

Alter the object visibility of your Snowflake objects so that they can be found for access requests. Run the following in Snowflake:

ALTER DATABASE {database name}
SET OBJECT_VISIBILITY =
$$
organization_targets:
  - all_accounts_including_external
$$;

It can take up to three hours for object visibility to take effect.

Set up access request links

1. Follow the Snowflake documentation to Create a contact for each individual data object you want data consumers to be able to request access for. Configure the contact with the following:

   • Communication method: Choose URL.
   • URL: Insert the access request link for the asset.
2. Follow the Snowflake documentation to Associate each contact you created with its corresponding data object.

After completing the initial setup, add configuring the access request links to your data engineering pipelines.