From 4653d99887d0511b7ba6d0b28eccd8c8b4e63d2c Mon Sep 17 00:00:00 2001 From: rchinn-segment Date: Thu, 15 Feb 2024 08:21:20 -0800 Subject: [PATCH] setup updates --- .../linked-profiles/setup-guides/snowflake-setup.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/src/unify/linked-profiles/setup-guides/snowflake-setup.md b/src/unify/linked-profiles/setup-guides/snowflake-setup.md index 810e72f77c..c38c8e7672 100644 --- a/src/unify/linked-profiles/setup-guides/snowflake-setup.md +++ b/src/unify/linked-profiles/setup-guides/snowflake-setup.md @@ -91,7 +91,7 @@ GRANT CREATE SCHEMA ON DATABASE identifier($segment_connection_db) TO ROLE iden ### Grant access to other databases -Next, give the Segment user **read-only** access to all the other databases you want to use for Linked Profiles. +Next, give the Segment user **read-only** access to all the other databases you want to use for Linked Profiles. You must grant access to the Profiles Sync database. Run the SQL query below for **each** database you want to use for Linked Profiles: @@ -128,12 +128,15 @@ SET segment_connection_role='SEGMENT_LINKED_ROLE'; -- View specific schemas in database GRANT USAGE ON DATABASE identifier($db) TO ROLE identifier($segment_connection_role); - GRANT USAGE ON SCHEMA identifier($schema) TO ROLE identifier($segment_connection_role); - GRANT SELECT ON ALL TABLES IN SCHEMA identifier($schema) TO ROLE identifier($segment_connection_role); - GRANT SELECT ON FUTURE TABLES IN SCHEMA identifier($schema) TO ROLE identifier($segment_connection_role); +GRANT SELECT ON ALL VIEWS IN SCHEMA identifier($linked_read_only_database) TO ROLE identifier($segment_connection_role); +GRANT SELECT ON FUTURE VIEWS IN SCHEMA identifier($linked_read_only_database) TO ROLE identifier($segment_connection_role); +GRANT SELECT ON ALL EXTERNAL TABLES IN SCHEMA identifier($linked_read_only_database) TO ROLE identifier($segment_connection_role); +GRANT SELECT ON FUTURE EXTERNAL TABLES IN SCHEMA identifier($linked_read_only_database) TO ROLE identifier($segment_connection_role); +GRANT SELECT ON ALL MATERIALIZED VIEWS IN SCHEMA identifier($linked_read_only_database) TO ROLE identifier($segment_connection_role); +GRANT SELECT ON FUTURE MATERIALIZED VIEWS IN SCHEMA identifier($linked_read_only_database) TO ROLE identifier($segment_connection_role); ```