Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

Snowflake Connector Bug - Role

The snowflake connector only works when I use my default role in the "Specify a text value to use as Role name" option. If I use a role that is not my default role (set in snowflake) it does not allow me to connect to the data. Power BI throws an error "We couldn't authenticate with the credentials provided." 
I am using the SSO/Microsoft Account option to authenticate to Snowflake. 

 

It works when I use my default role.

 

How can I get it to work when I use a different role that I have access to in Snowflake?

Need Help
  • Anonymous's avatar
    Anonymous
    3 years ago

    Hey I fixed this in my account - in Snowflake within the Security Integration you need to enable EXTERNAL_OAUTH_ANY_ROLE_MODE.

    ALTER SECURITY INTEGRATION {} SET EXTERNAL_OAUTH_ANY_ROLE_MODE = ENABLE;

6 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    4 years ago

    We have also seen this as a problem. After creating the security integration we are able to create the connection but we are only able to connect with the default role. Using another role gives an authentication error.

  • v-yingjl's avatar
    v-yingjl
    Community Support
    4 years ago

    Hi Anonymous ,

    See: Using SSO Between Power BI and Snowflake 

    If you connect using the Microsoft Account option, an in-app browser window will open redirecting you to authenticate using your AAD tenant. 

     

    To achieve the experience described above, you need to perform a one-time setup in Snowflake. Log in as an ACCOUNTADMIN in your Snowflake account, and create the security integration described in this doc. Ensure that the Power BI user exists in Snowflake and that it also matches the user in AAD. You can set up user-matching rules in multiple ways through security integration settings, but the most common way is to use the UPN value in AAD to match with the login_name of the Snowflake user. 

     

    You can also refer the error messages workarounds from Snowflake document: Power BI SSO to Snowflake 

     

    Best Regards,
    Community Support Team _ Yingjie Li
    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

    • Anonymous's avatar
      Anonymous
      Not applicable
      4 years ago

      Yeah, we have created the Security Integration and it works. The only thing that does not work is the "Role" in the Connection options when I put in a Role that is not my default role in Snowflake.

  • Anonymous's avatar
    Anonymous
    Not applicable
    3 years ago

    This bug is still present.

     

    If I set my default role to PUBLIC, I can log into Power BI using AAD either leaving the 'Specify a text value to use as Role name (optional)' empty, or entering the value PUBLIC. If I enter any other value, I get a connection error.

     

    If I set my default role to USR_ROLE_DATA_ENGINEER, I can log into Power BI using AAD either leaving the 'Specify a text value to use as Role name (optional)' empty, or entering the value USR_ROLE_DATA_ENGINEER. If I enter any other value (including PUBLIC), I get a connection error.

     

    • Anonymous's avatar
      Anonymous
      Not applicable
      3 years ago

      Hey I fixed this in my account - in Snowflake within the Security Integration you need to enable EXTERNAL_OAUTH_ANY_ROLE_MODE.

      ALTER SECURITY INTEGRATION {} SET EXTERNAL_OAUTH_ANY_ROLE_MODE = ENABLE;

      • Anonymous's avatar
        Anonymous
        Not applicable
        3 years ago

        Confirmed this morning. This works.

        Thank you!