5X - Bring your own Snowflake

Introduction

5X is an enterprise-ready, full-stack data readiness platform designed to streamline your data engineering processes. This guide outlines the process of securely connecting your Snowflake instance to 5X, providing options that balance functionality with your specific security requirements.

Integration Options

We offer two methods for integrating Snowflake with 5X:
Standard Integration: Recommended for most users, providing full access to all 5X features.
Restricted Access Integration: Requires only the minimum permissions necessary for essential 5X functions, ideal for organizations with strict security policies or compliance requirements.

Platform Capabilities

Understanding how 5X interacts with Snowflake is crucial for choosing the right integration method. Here's an overview:
Platform Capability
Snowflake Credentials Used
Notes
1
Ingestion
Dedicated ingestion user
Separate user for data ingestion tasks.
2
IDE
Individual user’s snowflake credentials
Each user connects with their own Snowflake account. Permissions based on user's Snowflake role
3
Jobs
Dedicated jobs user
Separate user for executing data jobs. Needs appropriate read/write permissions
4
Business Intelligence (BI)
Dedicated BI user
Separate user for BI operations. Typically requires read-only access
5
Snowflake User Management
Imported FIVEX_USER
Requires privileges to manage users, roles and grants on snowflake account. Only available in Standard Integration. Manages Snowflake users/roles via 5X.
6
Snowflake Utilization Tracking
Imported FIVEX_USER
Depends on the snowflake permissions tied to imported user.
There are no rows in this table

Setup Process

1. Prepare Your Snowflake Environment

Run the following script in Snowflake to create a dedicated user (FIVEX_USER) with the necessary privileges:

2. Configure for Restricted Access Integration (If Required)

5X is designed to work seamlessly with your Snowflake account while respecting your organization's unique data governance policies. We offer flexible configuration options that allow you to tailor the integration to your specific needs. Here's how you can customize the access levels:

User and Role Management

By default, 5X can assist with Snowflake user and role management through our platform. If your organization prefers to manage these aspects directly in Snowflake, you can adjust the configuration as follows:
Comment out these lines in the setup script:
GRANT CREATE USER ON ACCOUNT TO ROLE identifier($role_name);
GRANT CREATE ROLE ON ACCOUNT TO ROLE identifier($role_name);
GRANT MANAGE GRANTS ON ACCOUNT TO ROLE identifier($role_name);
Implication: User and role management for Snowflake will need to be performed directly through Snowflake's interface or API. Snowflake user management via the 5X Platform will be disabled.

Snowflake Utilization Insights

5X can provide valuable insights into your Snowflake usage to help optimize your data operations. However, if your data policies require restricting access to utilization data, you can adjust the configuration as follows:
Comment out this line in the setup script:
GRANT IMPORTED PRIVILEGES ON DATABASE SNOWFLAKE TO ROLE identifier($role_name);
Implication: 5X will not display Snowflake-specific utilization data. You'll need to monitor Snowflake usage directly through Snowflake's tools.

Applying Your Customizations

Review the setup script and decide which aspects of the integration you want to customize based on your organization's policies.
Comment out the relevant lines as described above.
Run the modified script to set up the integration according to your specifications.
Remember, these configurations can be adjusted in the future if your requirements change. Our support team is always available to help you optimize the 5X-Snowflake integration to best serve your data strategy.

3. Import to 5X

Use the created FIVEX_USER credentials to import your Snowflake instance into 5X.

Impact of Integration Choice

Feature
Standard Integration
Restricted Access Integration
1
Snowflake User Management
Available through 5X platform
Manage directly in Snowflake
2
Utilization Tracking
Full access in 5X
Limited or no access in 5X
There are no rows in this table

Security Considerations

All actions performed by 5X are logged and auditable.
You retain full control over the Snowflake user and can modify or revoke access at any time.
5X employs industry-standard security measures to protect your data and access credentials.
5X uses static IPs to connect to your warehouse. Ensure your firewall allows connections from:
3.217.202.216
3.211.173.46
174.129.146.62

Troubleshooting

If you encounter issues:
Verify that FIVEX_USER has the necessary permissions for your chosen integration method.
Check Snowflake audit logs for any access issues.
Ensure your firewall allows connections from the 5X static IP addresses.
Contact 5X support if problems persist.

Conclusion

Our flexible integration options ensure you can leverage 5X's powerful data management capabilities while maintaining your organization's security standards. Whether you choose Standard Integration for full functionality or Restricted Access Integration for enhanced security control, 5X is committed to supporting your data readiness journey securely and efficiently.
Want to print your doc?
This is not the way.
Try clicking the ⋯ next to your doc name or using a keyboard shortcut (
CtrlP
) instead.