Snowflake data classification integration

Automate data classification by integrating MineOS with Snowflake

How It Works

MineOS connects to your Snowflake account with a dedicated user and role, scans the tables the role can read, and classifies the personal data in each row. The results are added to the data types of the Snowflake data source.

Note: This article covers data classification. Setting up Snowflake for privacy requests is covered in the Snowflake DSR integration article.

Before You Start

• Make sure you have sufficient permissions in Snowflake to create a role and a user.
• [Optional] Enable Preview mode to view sample PII values alongside classification results. You must enable Preview mode before running the scan.

Setting Up

Step 1: Create a user and role for MineOS in Snowflake

We recommend a dedicated user and role for MineOS. As a Snowflake account admin, open a new worksheet and run each of these commands separately, replacing the placeholders with your own values:

use role accountadmin;
CREATE ROLE MINEOS;
CREATE USER your-mineos-user PASSWORD = 'your-mineos-password' LOGIN_NAME = your-mineos-user;
GRANT ROLE MINEOS TO USER your-mineos-user;
grant usage on database your_db to role MINEOS;
grant usage on schema your_db.your_schema to role MINEOS;
grant monitor on warehouse your_warehouse to role MINEOS;
grant usage on warehouse your_warehouse to role MINEOS;
grant select on all tables in schema your_db.your_schema to role MINEOS;

You can give the role any name. Repeat the database, schema and select grants for every schema you want to scan.

Step 2: Connect in MineOS

1. Log in to MineOS. On the left sidebar, click Inventory, then click Add data source. Search for Snowflake and add it.
2. Open the Snowflake system and go to the DSR & integrations tab. If the system already has an integration, click Add instance.
3. Under Action for fulfilling requests, select Integration, then choose Snowflake in the Integration Type dropdown.
4. In the Set up integration wizard, under User Details, enter your Snowflake username, password and role in the format username;password;role.
5. Under Account Details, enter your account identifier, region and warehouse in the format accountIdentifier;region;warehouse. To find your account identifier, see Snowflake's documentation on account identifiers.

Step 3: Turn on scanning and finish

1. In the same Set up integration wizard, mark the Scan this source using Data Classifier checkbox.
2. Click Finish. MineOS checks your Snowflake configuration and validates that it works.

You're done! MineOS has been connected to your Snowflake account.

To connect another account or warehouse, click Add instance on the DSR & integrations tab.

Need Help?

If you need any help with this integration, please contact your Customer Success Manager. They will be happy to assist you!