(Glue-2211) Snowflake Prerequisites
High-level summary of necessary steps (more details in Snowflake documentation):
SAP Basis/Infrastructure tasks:
SAP Basis team:
Java Connector: https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/2229602754
Creation of SNP_JAVA_CONN RFC:
Connection type: TCP/IP Connection.
Activation type: Registered Server Program.
Fill in Program ID (e.g.): SNP_JAVA_CONNECTOR.
Creation of Technical SAP user for ABAP->JCO RFC Communication:
In transport, you are provided with a template role with name /DVD/JCORFC (if you will use this role, do not forget to generate the profile in transaction PFCG).
Create System user, with role /DVD/JCORFC.
Granting access for external program SNP_JAVA_CONN to SAP gateway
Check SMGW > GoTo > Expert Functions > External Security > Maintenance of ACL files whether external programs are allowed (=* or ProgramID).
Uploading Snowflake JDBC driver to the operating system of application serverCentral Repository: net/snowflake/snowflake-jdbc (recommendation is to use the newest version of the driver, for more information follow the documentation above)
Networking team:
Enabling outbound communication from the SAP system to Snowflake
Port | Address |
---|---|
443 | <account name>.<region>.<platform>.snowflakecomputing.com |
443 |
Snowflake team:
Snowflake storage: https://datavard.atlassian.net/wiki/spaces/DATAVARD/pages/2861236255
Creation of Snowflake database, warehouse, and schema (refer to Snowflake Documentation)
Creation of Snowflake technical role and user with necessary authorizations
Recommended privilege for the Snowflake technical user is OWNERSHIP of the Snowflake database.
Minimal requirements are:
GRANT ALL ON DATABASE <DATABASE> TO ROLE <ROLE>
GRANT USAGE ON WAREHOUSE <WAREHOUSE> TO ROLE <ROLE>
GRANT ALL ON SCHEMA <SCHEMA> TO ROLE <ROLE>