We are working with one of our report authors who has a report that connects to Snowflake
Couple notations about this report:
- It connects and shows data just fine from his laptop in PBI Desktop using a credential he has with basic authentication.
- This report uses Direct Query
- In the PBI Service the data source errors with Message: The credentials provided for the Snowflake source are invalid.
- My research of the above error REF indicates that the common cause is a network policy blocking the connection. The policy would be configured in Snowflake. The report author did mention he believes they have that he has set up in Snowflake some network blocking policies and we plan to ask our MS rep what the IP ranges are for our PBI service tenant.
Questions
- We currently have only one report connecting to Snowflake. The report author’s intention is that the report connect to Snowflake using the one set of credentials he has set up in Snowflake, not using the report viewers credentials. Since that is his intention, does that mean we would not need to have the Tenant Setting Snowflake SSO enabled?
- Does the Microsoft PBI Service snowflake embedded connector require a report using Direct Query to connect to Snowflake to use Snowflake SSO?
- Would another option for us be to create a Snowflake data source in our On-Prem Data Gateway, since that data gateway server may already be in the IP range configured in Snowflake? I would think a con to using this option is performance hit possibly on the on-prem data gateway server, do you agree this would be a con of this option? I would think a pro would be a tighter security, at the most we would need to possibly add the IP address for the Data Gateway server, do you agree this is a pro of this option?
