Choose your Snowflake role for an OAuth connection (Beta)

🚩
This documentation describes one or more public beta features that are in development. Beta features are subject to quick, iterative changes; therefore the current user experience in the Sigma service can differ from the information provided in this page.
This page should not be considered official published documentation until Sigma removes this notice and the beta flag on the corresponding feature(s) in the Sigma service. For the full beta feature disclaimer, see Beta features.

If you retrieve data from a Snowflake connection that uses OAuth to authenticate and authorize users, you can change the Snowflake role used in Sigma to retrieve data from the connection.

When you change your Snowflake role, all actions on the connection use the selected role:

Queries performed on the Snowflake connection, including scheduled exports.
Creating input tables and other write-back creation tasks, including running materialization jobs.

💡
If your Snowflake user has the DEFAULT_SECONDARY_ROLES object property set to ALL, Sigma evaluates all the roles and privileges granted to your user when querying data. If the DEFAULT_SECONDARY_ROLES object property is set to () for your user, switch your Snowflake role in Sigma to access different database objects based on the different privileges granted to each role.
Some tasks that you perform in Sigma, such as creating input tables, require privileges granted to the primary role. If you see an error when creating an input table, such as No available connections, confirm that your selected role has privileges to create objects.

📘
This feature isn't supported by all data platform connections. To check if your connection supports it, see Supported data platforms and feature compatibility.

Requirements

You have multiple roles granted to your Snowflake user.
The Snowflake connection uses OAuth to authenticate and authorize users, and the OAuth configuration does not use a Snowflake authorization server.
The account type assigned to your Sigma user has the View connections permission enabled.

Change your Snowflake role used by the connection

To change which role you use to perform specific tasks in Sigma, do the following:

From Sigma Home, select Connections to open the list of connected data sources.
Select the Snowflake connection for the Snowflake role that you want to change.
When viewing the data catalog and browsing the connection, select Current: Role name (), then select a role.

The selected role applies to all actions performed by you in Sigma, including scheduled exports and materializations that run using your credentials.

After you select a role, your role stays the same until you change it, even if you log out of Sigma.