Manage Snowflake reader account

This is for:

Business Analyst System Administrator

The Snowflake reader account is created for an individual Coveo organization, and therefore only contains UA data related to that organization. Access to the Snowflake reader account for user or service accounts is managed through the Coveo Administration Console. By default, this access is IP-restricted, therefore an administrator with the required privileges can manage access by creating user accounts and adding allowed IP addresses.

Note

The reader account feature is intended for clients who don’t have a Snowflake account. By creating a reader account through the Coveo Administration Console, you can access your data through the Snowflake portal.

Manage your reader account

To manage the reader account, go to the Raw Data page, under Snowflake Access > Reader Account (platform-ca | platform-eu | platform-au).

If you don’t yet have a reader account, click Create Snowflake Reader Account. Your organization data is automatically provisioned to create the account.

Add or edit users

To add or edit users who can access the reader account:

  1. In the Snowflake Users section, click Add User.

  2. In the Add User panel that appears:

    Add User

    1. Enter the desired user name and email.

    2. (Optional) If you’re granting temporary access to the user, select the Provide temporary access checkbox.

      1. In the list that appears, select the applicable time frame.

      2. If you select Ends on specific date, select the desired date from the dropdown calendar that appears.

    3. Click Add.

Snowflake users aren’t the same as members of your Coveo organization; they can be either user accounts or service accounts. Once a user is added, a temporary link is sent to the corresponding email address. The user must copy and paste the link onto a browser, and then set their password. The link is valid for four hours. After the password is set, they must use an allowed IP address in order to access the reader account.

Important

  • Following the user setup, we strongly recommend that users enroll in Snowflake’s Multi-Factor Authentication (MFA) for an additional level of security. This feature provides an additional form of authentication during login. For information on how to enable MFA, see Enrolling in MFA (Multi-Factor Authentication).

  • Users should take the expiry date of their account into consideration. When a user account expires, all Snowflake worksheets and all Snowsight dashboards from that account are lost. Therefore, we recommend that they create backups by copy-pasting them to a text editor and saving them in their local drive.

Add or block IP addresses

All IP addresses are blocked by default. Therefore, to ensure that the newly added user can access the reader account, you must add their IP address as well.

  1. In the Snowflake Network Policy section, click Edit policy.

  2. Under Allowed IP Addresses, enter the IP addresses that you want to allow.

  3. Under Blocked IP Addresses, enter the IP addresses you want to block.

  4. Click Save.

Notes

  • Only public IP addresses can be allowed in the Snowflake Network Policy.

  • All IP addresses are blocked by default, therefore adding addresses to Blocked IP Addresses lets you block specific addresses within an allowed range.

    For example, you add 127.0. 0.1/24 to Allowed IP Addresses . This allows every IP address that starts with "127.0. 0". However, you want to block 127.0. 0.100 and 127.0. 0.200 which fall within that range, therefore you must add them to Blocked IP Addresses.

Snowflake credits

In the Snowflake Reader Account tab of the Raw Data (platform-ca | platform-eu | platform-au) page, the Snowflake Credits resource monitor displays the monthly credit consumption for the reader account. As an authenticated administrator, you can view the amount of credits remaining based on your account’s consumption for the current month. The credit consumption is determined by the usage of the reader account’s warehouse.

Snowflake Credits

The default size for a warehouse assigned to a reader account is x-small. For more information regarding warehouse sizes and their respective credit limits, see Virtual Warehouse Credit Usage.

A reader account that’s linked to a Coveo organization is automatically assigned a customer_wh warehouse. The warehouse is required to execute SQL queries. The credits consumed by the warehouse count toward your monthly limit.

Actions Credit consumption

Viewing dashboards and reports, and generating CSV exports in the Administration Console.

x

Performing API calls to the UA Read API.

x

Connecting an external BI tool to the reader account.

check

Performing queries in the Snowflake console.

check

Performing queries against Snowflake with a user created in the Raw Data page.

check

Access the reader account

On the Raw Data page, under Snowflake Access > Reader Account (platform-ca | platform-eu | platform-au), click Access Snowflake.

The Sign in to Snowflake page will open on a separate tab. You’ll then be able to log in with the credentials specific to the Snowflake interface.

Required privileges

Privileges required to view or manage the Snowflake reader account.

Action Service - Domain Required access level

View and export data

Analytics - Snowflake Management
Organization - Organization

View

Add or edit users

Organization - Organization

View

Analytics - Snowflake Management

Edit

Analytics - Administrate

Allowed

Add or block IP addresses

Organization - Organization

View

Analytics - Snowflake Management

Edit

Analytics - Administrate

Allowed