Skip to main content

Service Accounts

It is also possible to request a Service-account that can be used to sync data from DWH to your environment. See https://docs.snowflake.com/en/user-guide/admin-user-management for an explanation of the different types of users.

A Service-account can not log in to Snowsight. It is only to be used for programmatic exchange of data. For example: if you want to collect data at regular intervals you would typically set this up using a service-account, since you do not want a person to log in at regular intervals. You don't want this because every time a person logs in, that person is forced to use MFA.

A Service-account can not use MFA. You will, however, need to establish a public/private key setup as described on https://docs.snowflake.com/en/user-guide/key-pair-auth. Please follow the steps on that page. It explains in detail the steps required.

Once you completed those steps, you will need to share with Active Ants:

  1. Your public key
  2. The finger print of your public key

Your public key will look something like:

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8G+5zXay4nbBkg2pMGcn
f1yuhe921b3WqZ5QLfvWJWmp/UPStRbyd/q+84oqo108xHgHo+7y0xhRSGKXAF3Z
X6Za3zXh0Vg8wXTTO1ElE4TQcvWoxkFU5F2hygm4RSytF0MPRj8grMV33TMm+T1V
8Fp1rOj0jr6rmCYLAjc1Mgj8AdIwFZS24hnx5CT9Cr0oPvep5dBjf/F82aeKuVLF
3z7TXdlmvrHw7hTmHW7Fg6t39ywim7R8yVmR14y8/aI2raXxX4lBm6IA1Ur6/Ibc
2bhWh8SjsmniLuzSWWE9pv9TeuLQ8MEHXA1kZseX+JzreX/wD/oQbOJXDelEOq2T
3QIDAQAB
-----END PUBLIC KEY-----

You will also need to share the public key finger print, so that Active Ants can verify if key-pair authentication was set up correctly.

Such a finger print looks like:

SHA256:23kPpUIYqqhFYrWRwtf/ppiESri06nfnr8C/hniooww=

You'll need to send both to Active Ants.

Accounts Needed​

A typical setup for clients would be like:

  • one or more regular (person-type) user accounts to access DWH via SnowSight.
  • one (service-type) user account to access DWH via ODBC / some other connector, for non-interactive purposes (basically: sync data).

Please ask your Account Manager at Active Ants to have a service-account created for you.