Enable Snowflake Tag Ingestion

Enable Snowflake tag ingestion to pull Snowflake tags and apply them to data sources

To allow Immuta to automatically import table and column tags from Snowflake, enable Snowflake tag ingestion in the external catalog section of the Immuta app settings page.

Requirements

• A configured Snowflake connection
• The Snowflake user configuring the Snowflake tag ingestion must have the following privileges and should be able to access all securables registered as data sources:

  • IMPORTED PRIVILEGES ON DATABASE snowflake
  • APPLY TAG ON ACCOUNT

Credentials

Use the same credentials as your connection.

For tag ingestion to work smoothly, ensure the credentials provided for tag ingestion can access all the data objects in Immuta. Any data objects the credentials do not have access to will not be tagged.

1. Navigate to the App Settings page.
2. Scroll to 2 External Catalogs, and click Add Catalog.
3. Enter a Display Name and select Snowflake from the dropdown menu.
4. Enter the Account.
5. Enter the Authentication information based on your authentication method:

   1. Username and password: Fill out Username and Password.
   2. Key pair:

      1. Fill out Username.
      2. Click Upload Certificates to enter in the Certificate Authority, Certificate File, and Key File.
      3. Close the modal and opt to enter the Encrypted Key File Passphrase.
6. Enter the additional Snowflake details: Port, Default Warehouse, and Role.
7. Opt to enter the Proxy Host and Proxy Port.
8. Click the Test Connection button.
9. Click the Test Data Source Link.
10. Once both tests are successful, click Save.