Skip to main content

Configure a Snowflake Hybrid Data Connection

LiveRamp Clean Room’s application layer enables companies to securely connect distributed datasets with full control and flexibility while protecting the privacy of consumers and the rights of data owners.

To configure a Snowflake hybrid data connection (to be used in hybrid clean rooms), see the instructions below.

Overall Steps

Perform the following overall steps to configure a Snowflake Hybrid data connection:

  1. Create a role for LiveRamp in Snowflake

  2. Add the credentials

  3. Create the data connection

  4. Map the fields

For information on performing these steps, see the sections below.

Prerequisites

Before performing the steps in the sections below, you will need a Snowflake account with a table or external table using the dataset required for collaboration. The "hybrid pattern" is fully interoperable and you can stay in the Snowflake region you have already chosen.

Note

When setting up your Snowflake account with key-pair authentication (rather than a password), make sure to generate an unencrypted private key (LiveRamp does not support encrypted private keys).

Create a Role for LiveRamp in Snowflake

Create a new role on the required tables or views in Snowflake in order for LiveRamp to read from your data warehouse:

  1. In your Snowflake instance, create a new role on the required tables or views with the following role parameters:

    • For tables, use the following role parameters:

      CREATE OR REPLACE ROLE <ROLE_NAME>;
GRANT USAGE ON DATABASE <DB_NAME> TO ROLE <ROLE_NAME>;
GRANT USAGE ON SCHEMA <DB_NAME>.<SCHEMA_NAME> TO ROLE <ROLE_NAME>;
GRANT SELECT ON TABLE <DB_NAME>.<SCHEMA_NAME>.<TABLE_NAME> TO ROLE <ROLE_NAME>;

    • For views, use the following role parameters:

      GRANT SELECT ON VIEW <DB_NAME>.<SCHEMA_NAME>.<VIEW_NAME> TO ROLE <ROLE_NAME>;
GRANT OPERATE ON WAREHOUSE <WAREHOUSE_NAME> TO ROLE <ROLE_NAME>;
GRANT USAGE ON WAREHOUSE <WAREHOUSE_NAME> TO ROLE <ROLE_NAME>;

  2. Create a user and grant the above role to the user.

    Note

    Make sure that the user is given the same default role that the table or view has been given.

    CREATE USER <USER_NAME> PASSWORD='****' DEFAULT_ROLE = <ROLE_NAME> ... DEFAULT_WAREHOUSE = <WAREHOUSE>...;
GRANT ROLE <ROLE_NAME> TO USER <USER_NAME>;

  3. Grant usage and operating privileges on the warehouse.

    GRANT OPERATE ON WAREHOUSE warehouse name TO ROLE role name you chose;GRANT USAGE ON WAREHOUSE warehouse name TO ROLE role name you chose;

Note

As a general rule, when hashing data in Snowflake for LiveRamp collaborations, use the Snowflake SHA2 function with a digest size of 256 when encrypting data in Snowflake instead of the generic “hash” function. This recommended approach will result in a SHA256 encryption and may further improve the compatibility of your data across the ecosystem.

Add the Credentials

To add credentials:

  1. From the LiveRamp Clean Room navigation pane, select Data Management → Credentials.

  2. Click Add Credential.

    add_credential.png

    The Add Credential screen opens.

    image idm4993

  3. Enter a descriptive name for the credential.

  4. For the Credentials Type, select "Snowflake Account with Credentials".

  5. For the Account ID, enter your Snowflake account ID.

    Note

    • For information on finding your Snowflake account ID, see "Find Your Snowflake Account Information".

    • If your Snowflake Table is not in US-West (Oregon) you must add your region to your Snowflake Account ID. In general, the format is ACCOUNTID>.<REGION>.<CLOUD>.

      • Example 1: if your Snowflake table is in EU (Ireland) with no specific cloud noted, input the Account ID as follows: "ABC123.eu-west-1"

      • Example 2 : If your Snowflake table is in GCP US Central 1, input the Account ID as follows: "ABC123.us-central1.gcp"

    • To find your region click here and scroll to the section titled "Non-VPS Account Locator Formats by Cloud Platform and Region".

    • If your Snowflake table happens to be in the default region of US-West (Oregon), do not add the region to your Account ID. For example: "ABC123UAM"

  6. For the User, enter the username created in the previous procedure.

  7. For the Password/Key, enter the either the username password or the private key created during Snowflake account setup.

  8. Click Save Credential.

Create the Data Connection

To create the data connection:

  1. From the LiveRamp Clean Room navigation pane, select Data Management → Data Connections.

  2. From the Data Connections page, click New Data Connection.

    data_cxn_new.png

  3. From the New Data Connection screen, select "Snowflake Table".

  4. Select the credentials created in the previous procedure from the list.

  5. Configure the data connection:

    Note

    Database Name, Schema Name, Table/View Name, and Warehouse Name are case sensitive and should match to your Snowflake account.

    • Name: Enter a name of your choice.

    • Category: Enter a category of your choice.

    • Dataset Type: Select Generic.

    • Database Name: Ener the database name from your Snowflake account.

    • Schema Name: Enter the schema name from your Snowflake account.

    • Table/View Name: Enter the name of the table or view from your Snowflake account.

    • Warehouse Name: Enter the warehouse name from your Snowflake account.

  6. Review the data connection details and click Save Data Connection.

    Note

    All configured data connections can be seen on the Data Connections page.

When a connection is initially configured, it will show "Verifying Access" as the configuration status. Once the connection is confirmed and the status has changed to "Mapping Required", map the table's fields.

Note

It takeks up to 5 minutes to fetch the data connections and fields from your Snowflake instance.

Map the Fields

Once the connection is confirmed and the status has changed to "Mapping Required", map the table's fields and add metadata:

  1. From the row for the newly-created data connection, click the More Options menu (the three dots) and then click Edit Mapping.

    The Map Fields screen opens and the file column names auto-populate.

    data_cxn_mapping_mapfields.png

  2. Click Next.

    Note

    Ignore the "Order", "Include", and "Delete" columns. They are not applicable for a Snowflake data connection setup.

    The Add Metadata screen opens.

    data_cxn_mapping_mapmetadata.png

  3. Select the data type for each column.

  4. If a column contains PII, slide the User Identifiers toggle to the right and then select the user identifier that defines the PII data.

  5. Click Save.

Your data connection configuration is now complete and the status changes to "Completed".

In this section: