Configure Snowflake for dbt Cloud

In this video, you'll learn how to set up Snowflake permissions and databases in order to use dbt Cloud successfully. Please note this video is meant for dbt Cloud, and Snowflake administrators.

[charlessaunders]

I figure someone might find these useful to be able to copy and paste:
```
grant IMPORTED PRIVILEGES on database snowflake_sample_data to role transformer;
grant usage on schema to role transformer;
grant select on all tables in schema to role transformer;
```

```
grant usage on database analytics to role transformer;
grant reference_usage on database analytics to role transformer;
grant modify on database analytics to role transformer;
grant monitor on database analytics to role transformer;
grant create schema on database analytics to role transformer;
```
```
grant operate on warehouse transforming to role transformer;
grant usage on warehouse transforming to role transformer;
```

[PavanReddy-oyhm]

For anyone seeing a 'Run As' button at the top right instead of Run button when switching role to Transformer from AccountAdmin despite providing all grants correctly, do a logout and re-login to your Snowflake account

[edwinuzoefuna]

got an error when trying to run this:
grant reference_usage on database analytics to role transformer;


error: 003600 (0A000): REFERENCE_USAGE ON DATABASE ANALYTICS can only be granted to share(s).

[bytebugs]

I am using the following script to setup the analytics database, transformer role and transforming warehouse. Creating objects using the account admin role is not a good practice. The following script follows the best practice by using useradmin role for creating user and role, securityadmin role for granting permissions and sysadmin role for creating database and warehouse.

-- create database to deploy dbt models
use role sysadmin;
create database analytics;

-- create a warehouse to run dbt workloads
use role sysadmin;
create warehouse transforming with warehouse_size = 'MEDIUM';

use role useradmin;
create role transformer;

use role securityadmin;
-- grant custom role transformer to sysadmin (best practice)
grant role transformer to role sysadmin;

-- grant the role transformer permissions to read the data from the sample database
---- grant IMPORTED PRIVILEGES on database snowflake_sample_data to role transformer;
grant usage on schema to role transformer;
grant select on all tables in schema to role transformer;

-- grant the role transformer persmissions to
grant usage on database analytics to role transformer;
---- grant reference_usage on database analytics to role transformer;
grant modify on database analytics to role transformer;
grant monitor on database analytics to role transformer;
grant create schema on database analytics to role transformer;

-- grant the role transformer permissions to use the warehouse
grant usage on warehouse transforming to role transformer;
grant operate on warehouse transforming to role transformer;

-- create dbt service account
use role useradmin;
create user dbt_svc_acc
password = 'dbt_svc_acc_pwd'
default_warehouse = 'transforming';

use role securityadmin;
grant role transformer to user dbt_svc_acc;

-- create dbt developer
use role useradmin;
create user dbt_developer
password = 'dbt_developer_pwd'
default_warehouse = 'transforming';

use role securityadmin;
grant role transformer to user dbt_developer;

-- test permissions for the transformer role
use role transformer;
select * from limit 10;

[rusttaf]

I have an error in when granting usage:
grant usage on schema to role transformer; -- says: Grant not executed: Insufficient privileges.
and
grant reference_usage on database analytics to role transformer; -- says: 003600 (0A000): REFERENCE_USAGE ON DATABASE ANALYTICS can only be granted to share(s).

[NeerajGarg]

Is there any github page or another place to find reference to all the commands used in this video.

[roro]

ISs the admin-worksheet created was sql or python sheet ?

[duchow]

Either I am missign something or Snowflake has changed the way permissions are granted to roles. It seems it has to be granted to users!! please correct me if I am wrong!

[rahulmopkar]

I am trying to run the following grant
grant usage on schema to role transformer;
and snowflake says grant not executed insufficient privileges
need help

[AutumnRainWish]

incomplete information and annoying valley girl accent.. :(