1. Connect to your Snowflake database.
2. Ensure you are logged in as a SECURITYADMIN user role (or higher).
   
3. Create read-only role:
   

   create role totango_ro_role;
   grant role totango_ro_role to role sysadmin;

4. Ensure the default role of the Totango user is set to this read-only role.

   To avoid connection issues, set totango_ro_role as the user's default role.

5. Grant read-only role by privileges:
   

   grant usage on database <your database name> to role totango_ro_role;

   grant usage on schema <your database name>.<your schema name> to role totango_ro_role;

   grant select on all tables in schema <your database name>.<your schema name> to role totango_ro_role;

   grant usage on warehouse <your warehouse name> to role totango_ro_role;

1. In Totango, click Settings from the left nav.
2. Expand Data Management > Customer Data Hub.
3. From the list of active connectors (left), choose Data Warehouses.
4. From the list of available connectors, hover over Snowflake, and click Connect (or View Integrations).
   
5. Choose the preferred authentication method (Password or Key File). Depending on the option chosen, the authentication fields will vary (see below).
6. Enter a name and description for the connection. Because you can have multiple connections with a connector (using different authentication profiles), a name and description helps you identify the connection later.
7. Add the remaining details for the connection:
   
   • Host name: Host name of your Snowflake instance. You can get the hostname from the browser URL when you are logged in to Snowflake web app. It must be a full domain name, including the “snowflakecomputing.com.” For example, “dfr432245.us-west.snowflakecomputing.com”.
     You can find more details in your worksheet of your Snowflake data warehouse:
   • Username: Username of the user you plan to give access to your database for Totango
   • Password authentication
     • Password: Password of the user
   • Key File
     • Passphrase: Pass phrase if key file was encrypted
     • Key file: Browse to find the key file you want to use (see below)
   • Warehouse: The warehouse where this connector data should be fetched from
   • Schema: The schema where this connector data should be fetched from
   • Database: The database where this connector data should be fetched from
8. Click Connect.

You can now set up an integration using the connection.

All data warehouse connectors support SSL encryption. By default, Totango uses SSL encryption during connecting. If the data warehouse server does not support SSL encryption, the connection will use an unencrypted connection to stream data from the data warehouse.

1. Open a terminal window and generate a private key (encrypted or unencrypted):
   Encrypted option
   

   $ openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8

   Non-encrypted option:
   

   $ openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out rsa_key.p8 -nocrypt

   Generated file example:

   -----BEGIN ENCRYPTED PRIVATE KEY-----
   MIIE6TAbBgkqhkiG9w0BBQMwDgQILYPyCppzOwECAggABIIEyLiGSpeeGSe3xHP1
   wHLjfCYycUPennlX2bd8yX8xOxGSGfvB+99+PmSlex0FmY9ov1J8H1H9Y3lMWXbL
   ...
   -----END ENCRYPTED PRIVATE KEY-----

2. Generate the public key by referencing the private key:
   

   $ openssl rsa -in rsa_key.p8 -pubout -out rsa_key.pub

   Generated file example:
   

   -----BEGIN PUBLIC KEY-----
   MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Fw2qv4Roud3l6tjPH4
   zxybHjmZ5rhtCz9jppCV8UTWvEXxa88IGRIHbJ/PwKW/mR8LXdfI7l/9vCMXX4mk
   ...
   -----END PUBLIC KEY-----

3. Assign the public key to a Snowflake user:
   

   alter user jsmith set rsa_public_key='MIIBIjANBgkqh...';

   

You can now set up an integration using the connection.