Snowflake connector

Snowflake is a cloud-based data management and analysis platform. It enables companies to store, process and share data on a massive scale. Unlike traditional databases, Snowflake is based on an architecture that separates data storage, computing power and management services, offering greater flexibility and optimization of resources.

The platform runs on leading cloud providers (AWS, Azure and Google Cloud) and is designed to handle a variety of workloads such as data warehousing, business intelligence, real-time data processing and integration with analytics and machine learning tools.

Snowflake is used in many sectors to centralize and exploit large volumes of data, while facilitating collaboration and the secure sharing of information between different organizations.

The Snowflake Connector enables you to automatically manage user accounts accessing your Snowflake data warehouse from the Youzer platform. Thanks to this connector, you can create, deactivate or update users centrally, aligning rights and configurations according to your organization's internal roles. In addition to classic information such as surname, first name and e-mail, this connector lets you manage advanced Snowflake-specific parameters such as default_warehouse, type (e.g. USER or ROLE), network_policyand grants (privileges and assigned roles). It facilitates compliance and security by ensuring that each employee has the right level of access, in the right technical context.

The connector works via the Snowflake API, with authentication based on public/private keys. To configure it in Youzer, you need to supply the following items:

• account: your Snowflake account ID (in organization-account or dedicated URL),
• username: username with sufficient rights to manage accounts,
• public key: used for authentication,
• private key: associated with the public key, signed locally by Youzer to secure exchanges.

Once authentication has been configured, the connector can execute SQL commands via the Snowflake API to create or disable accounts, update roles or network policies (network_policy), assign a default warehouse (default_warehouse) or automatically assign grants required. All this can be triggered on the fly from Youzer or integrated into an automatic provisioning process.