Choose your Snowflake role for an OAuth connection

If you retrieve data from a Snowflake connection that uses OAuth to authenticate and authorize users, you can change the Snowflake role used in Sigma to retrieve data from the connection.

When you change your Snowflake role, all actions on the connection use the selected role:

• Queries performed on the Snowflake connection, including scheduled exports.
• Creating input tables and other write-back creation tasks, including running materialization jobs.

💡

If your Snowflake user has the DEFAULT_SECONDARY_ROLES object property set to ALL, Sigma evaluates all the roles and privileges granted to your user when querying data. If the DEFAULT_SECONDARY_ROLES object property is set to () for your user, switch your Snowflake role in Sigma to access different database objects based on the different privileges granted to each role.

Some tasks that you perform in Sigma, such as creating input tables, require privileges granted to the primary role. If you see an error when creating an input table, such as No available connections, confirm that your selected role has privileges to create objects.

Requirements

• You have multiple roles granted to your Snowflake user.

• The Snowflake connection uses OAuth to authenticate and authorize users, and the OAuth configuration does not use a Snowflake authorization server.

  🚩

  If your connection uses the Snowflake OAuth authorization server, you cannot change roles in Sigma. To change roles in Sigma, your Snowflake connection must use an external OAuth authorization server.

About changing your Snowflake role in Sigma

The selected role applies to all actions performed by you in Sigma, including scheduled exports and materializations that run using your credentials.

After you select a role, your role stays the same until you change it, even if you sign out of Sigma.

Change your Snowflake role for a connection from your profile page

To change which role you use to perform specific tasks in Sigma from your user profile page, do the following:

1. In the top right corner of Sigma, click your user avatar.
2. Select Profile.
3. In the Details tab, locate the Connection authentication section.
4. For the Snowflake connection you want to change your role for, select Current: Role name (), then search or scroll the list to select a role.

💡

If a recently granted role doesn't appear in your list, follow the steps to Sync Snowflake roles for a connection.

Change your Snowflake role for a connection from the data catalog

To change which role you use to perform specific tasks in Sigma from the data catalog, do the following:

📘

To access the data catalog, your account type must have the View connections permission enabled.

1. From Sigma Home, select Connections to open the list of connected data sources.
2. Select the Snowflake connection for the Snowflake role that you want to change.
3. When viewing the data catalog and browsing the connection, select Current: Role name (), then search or scroll the list to select a role.

💡

If a recently granted role doesn't appear in your list, follow the steps to Sync Snowflake roles for a connection.

Sync Snowflake roles for a connection

The roles available in the list of roles reflect the grants from the last time the roles for the connection were synced.

To sync the roles available for a connection in Sigma, do the following:

1. From Sigma Home, select Connections to open the list of connected data sources.
2. Select the Snowflake connection you want to sync roles for.
3. Select More (), then select Sync roles to refresh your available roles.