To extract metadata and to configure other capabilities that a catalog source might include, you need account access and permissions on the source system. The permissions required might vary depending on the capability.
Permissions to extract metadata
To extract Snowflake metadata, you need access to the Snowflake source system.
Grant read permission to the user account on all tables in the database from which you extract metadata.
Grant permissions that allow you to perform the following operations:
•select on information_schema.EXTERNAL_TABLES
•select on information_schema.FUNCTIONS
•select on information_schema.PIPES
•select on information_schema.PROCEDURES
•select on information_schema.SCHEMATA
•select on information_schema.SEQUENCES
•select on information_schema.STAGES
•select on information_schema.TABLES
•select on information_schema.VIEWS
•select on information_schema.DATABASES
•select on information_schema.COLUMNS
•show objects
•show columns
•show streams
•show primary keys
•show imported keys
•show columns
•show objects
•show materialized views
•show views
•show tasks
•show databases
Optionally, to obtain more detailed results, grant permissions that allow you to perform the following operations:
•select on SNOWFLAKE.ACCOUNT_USAGE.TAGS
•select on SNOWFLAKE.ACCOUNT_USAGE.TAG_REFERENCES
Permissions to run data profiles
Ensure that you have the required permissions to run profiles.
Grant SELECT permissions for tables and views that you want to profile.
Permissions to perform data classification
You don't need any additional permissions to run data classification.
Permissions to perform relationship discovery
You don't need any additional permissions to run relationship discovery.
Permissions to perform glossary association
You don't need any additional permissions to run glossary association.
Permissions to perform writeback
Ensure that you have the required permissions to perform writeback.
You need the following privileges to perform writeback:
•CREATE TAG privilege to create tags in a database or schema.
•APPLY TAG privilege to assign or modify tag values for objects.