Snowflake
Snowflake is a cloud-based data warehousing and analytics platform that provides comprehensive access control, security management, and operational monitoring capabilities. This integration enables users to query and analyze Snowflake's configuration, security settings, user access patterns, resource utilization, and organizational structure.
| Category | Data warehouse |
| Direction | Query source |
| Sign-in | Username & Password, Key Pair Authentication, OAuth Token |
| Query languages | SQLite |
| Tables | 18 |
| Query templates | 51 |
| Website | snowflake.com |
Before you start
Huntbase can sign in to Snowflake with any of these methods: Username & Password, Key Pair Authentication, OAuth Token. Pick one, create the credential in Snowflake, then keep it to hand for the Connect step.
Key Pair Authentication
Authenticate using an RSA private key (key pair auth) for the Snowflake user.
- Generate an encrypted private key with
openssl genrsa 2048 | openssl pkcs8 -topk8 -v2 des3 -inform PEM -out rsa_key.p8, and set a passphrase when prompted. - Generate the public key with
openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub. - Assign the public key to the Snowflake user Huntbase connects as with
ALTER USER <user> SET RSA_PUBLIC_KEY='<key>'. Leave out the-----BEGINand-----ENDlines. - Run this as a role with OWNERSHIP or MODIFY PROGRAMMATIC AUTHENTICATION METHODS on that user.
- Snowflake is removing password sign-in for non-human users, and all service users are blocked from password authentication in Phase 3 (August to October 2026). Use key pair authentication for this connection.
- Snowflake no longer prefers the account locator format. It recommends
orgname-accountnameidentifiers.
For the vendor's own instructions, see Snowflake key pair authentication documentation.
Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.
Connect Snowflake
- Go to Connections and click New connection, or click New connection on the Snowflake product page.
- On Product, pick Snowflake and choose the Owner.
- On Details, give the connection a Name and, optionally, a Description.
- On Connect, fill in the settings and credentials described below.
- On Verify, review the summary and click Create & check.
For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.
Settings
Where your Snowflake lives:
| Field | Required | Notes |
|---|---|---|
| Account ID | Yes | Your account identifier, such as the account locator xy12345. In Snowsight, open the account selector and choose View account details to find it. |
| Username | No | |
| Region ID | No | The region segment of your account locator, such as us-west-2.aws, which is the default. |
| Role | No | |
| Warehouse | No | |
| Private Key Path | No | |
| OAuth Client ID | No | |
| OAuth Endpoint | No | |
| OAuth Redirect URL | No |
Credentials
Choose a Method, enter a Credential label (for example Production), then fill in the fields for that method.
Username & Password
| Field | Required | Notes |
|---|---|---|
| Password | Yes | Secret — not shown again after you save it. |
Key Pair Authentication
| Field | Required | Notes |
|---|---|---|
| Private Key | Yes | Paste the full contents of rsa_key.p8, including the -----BEGIN and -----END lines. Secret — not shown again after you save it. |
| Private Key Passphrase | No | The passphrase you set when you generated the encrypted key. Secret — not shown again after you save it. |
OAuth Token
| Field | Required | Notes |
|---|---|---|
| OAuth Access Token | Yes | Secret — not shown again after you save it. |
| OAuth Client Secret | No | Secret — not shown again after you save it. |
| OAuth Refresh Token | No | Secret — not shown again after you save it. |
Query it
Once connected, Snowflake can serve these languages in a query tab, and Scout can use it when you ask in Auto:
| Language | Use it for |
|---|---|
| SQLite | SQL over the 18 tables listed below, alongside every other connected source. |
Example: SQLite
List Snowflake warehouse basic info — Analyze the settings to understand the status and characteristics of your Snowflake warehouses.
select
name,
size,
type,
state
from
snowflake_warehouse;
Snowflake ships with 51 query templates. Find them in Library › Queries — see Query templates.
Tables
Snowflake adds 18 tables. Browse their columns from Schema in the query bar's ⋯ menu.
All 18 tables
| Table | Contains |
|---|---|
snowflake_account_grant | Lists all the account-level (i.e. global) privileges that have been granted to roles. |
snowflake_account_parameter | Lists all the account-level parameters. |
snowflake_database | Snowflake database is a logical grouping of schemas. |
snowflake_database_grant | Lists all privileges that have been granted on the database. |
snowflake_login_history | This Account Usage view table can be used to query login attempts by Snowflake users within the last 365 days (1 year). |
snowflake_network_policy | Network policies enable restricting access to your account based on user IP address. |
snowflake_resource_monitor | Lists all the resource monitors in your account(s) for which you have access privileges. |
snowflake_role | An entity to which privileges can be granted. Roles are in turn assigned to users. |
snowflake_role_grant | Lists all privileges and roles granted to the role. |
snowflake_schemata | This Information Schema view displays a row for each schema in the specified (or current) database, including the INFORMATION_SCHEMA schema itself. |
snowflake_session | This Account Usage view provides information on the session, including information on the authentication method to Snowflake and the Snowflake login event. Snowflake returns one row for each session created over the last year. |
snowflake_session_policy | A session policy defines the idle session timeout period in minutes and provides the option to override the default idle timeout value of 4 hours. |
snowflake_user | A user identity recognized by Snowflake, whether associated with a person or program. |
snowflake_user_grant | List all roles granted to a user. |
snowflake_view | Snowflake view is basically a named definition of a query. |
snowflake_view_grant | Lists view-level privileges that have been granted to roles. |
snowflake_warehouse | A warehouse, is a cluster of compute resources in Snowflake. Warehouse provides the required resources, such as CPU, memory, and temporary storage, to perform queries. |
snowflake_warehouse_metering_history | This Account Usage view can be used to return the hourly credit usage for a single warehouse (or all the warehouses in your account) within the last 365 days (1 year). |
Next steps
- Connections — health, credentials and settings after you connect
- Query languages — syntax, parameters and time ranges
- Chatting with Scout — ask questions without writing a query
- All integrations — the rest of the catalog