Getting started with Snowflake Data Clean Rooms¶
This topic describes the tasks for the administrator of a Snowflake Data Clean Room, including meeting Snowflake account prerequisites, signing up, configuring the clean room, and adding users.
Prerequisites¶
In order to use a Snowflake Data Clean Room, your account must:
If you do not meet certain requirements and need to upgrade, contact Snowflake Support.
Capacity account¶
You need a Snowflake account that has an upfront capacity commitment to use Snowflake Data Clean Rooms.
Snowflake On Demand accounts cannot create or use a clean room.
Snowflake Edition¶
Use the following table to determine which Snowflake Edition is required for the Snowflake account of a clean room collaborator:
Collaborator |
Task |
Required Snowflake Edition |
|---|---|---|
Provider |
Create a clean room |
Enterprise Edition or higher |
Consumer |
Join and use a clean room |
Standard Edition or higher |
Provider & Consumer Terms¶
Before using a Snowflake Data Clean Room as a provider or consumer, you need to agree to additional Snowflake terms and abide by Snowflake policies. For details, see Legal requirements for providers and consumers of listings.
Sign up for a Snowflake Data Clean Room environment¶
Important
The user who initially signs up as a clean room participant must have the ACCOUNTADMIN role in the Snowflake account associated with the clean room environment. This clean room administrator needs to use the ACCOUNTADMIN role to configure the Snowflake account in subsequent steps in the getting started process.
To sign up and log in to the clean room environment:
Access the URL that corresponds to the region where your Snowflake account is located:
Region
Sign up page
AWS US West (Oregon)
AWS US East (Ohio)
AWS US East (N. Virginia)
Azure West US 2 (Washington)
Azure Central US (Iowa)
Azure South Central US (Texas)
Azure East US 2 (Virginia)
https://cleanroom.c1.us-east-1.aws.app.snowflake.com/?action=signup
AWS Canada (Central)
Azure Canada Central (Toronto)
https://cleanroom.c1.ca-central-1.aws.app.snowflake.com/?action=signup
AWS Asia Pacific (Mumbai)
Azure Central India (Pune)
https://cleanroom.c1.ap-south-1.aws.app.snowflake.com/?action=signup
AWS Asia Pacific (Singapore)
Azure Southeast Asia (Singapore)
https://cleanroom.c1.ap-southeast-1.aws.app.snowflake.com/?action=signup
AWS Asia Pacific (Sydney)
Azure Australia East (New South Wales)
https://cleanroom.c1.ap-southeast-2.aws.app.snowflake.com/?action=signup
Enter your email address.
Specify a company name, which is used to identify the clean room environment when users sign in.
Enter the account identifier of your Snowflake account using the hyphenated form of the account name format.
Agree to the Offering Terms and Privacy Policy.
Select Sign Up. You are sent an email.
After receiving the email, do the following:
Select Verify Email. The sign up page re-opens.
Specify a Name and Password.
Select Sign up.
Configure the Snowflake account¶
A Snowflake user with the ACCOUNTADMIN role must configure the Snowflake account associated with the clean room environment before users can create and use clean rooms. This configuration consists of the following:
Creating a service account user that represents the clean room environment so clean rooms can access the Snowflake account.
Installing a Snowflake Native App that allows clean rooms to interact with data in a Snowflake account.
Registering the databases that contain the data that collaborators can access in clean rooms.
To configure the Snowflake account for a clean room environment:
Access the Snowflake Admin console in the clean room environment. Do the following:
Access the URL that corresponds to the region where your Snowflake account is located:
Region
Sign up page
AWS US West (Oregon)
AWS US East (Ohio)
AWS US East (N. Virginia)
Azure West US 2 (Washington)
Azure Central US (Iowa)
Azure South Central US (Texas)
Azure East US 2 (Virginia)
AWS Canada (Central)
Azure Canada Central (Toronto)
AWS Asia Pacific (Mumbai)
Azure Central India (Pune)
AWS Asia Pacific (Singapore)
Azure Southeast Asia (Singapore)
AWS Asia Pacific (Sydney)
Azure Australia East (New South Wales)
Enter your email address, and select Continue.
Enter your password.
If you are associated with multiple clean room environments, select the Snowflake account that you are configuring.
In the left navigation, select Snowflake Admin.
Select Login to Snowflake, and authenticate as a Snowflake user with the ACCOUNTADMIN role.
Specify the details for the service account user that clean rooms use to interact with Snowflake. Be sure to remember these details as you will need them in a subsequent step. Do the following:
Enter the email address associated with the service account user.
In the New Snowflake Username field, specify a name that is unique to the Snowflake account.
Specify a password.
Select Create to create the service account user.
Verify the email of the new service account user. Do the following:
Select Log into your Snowflake account.
Sign in to Snowsight using the credentials of the service account user. You specified these in the previous step.
Select the username of the service account user to open the Account menu, then select My profile.
Select Resend verification email. A verification email is sent to the email address of the service account user.
Access the email inbox of the service account user, open the verification email, and select Validate Your Email.
Return to the Snowflake Admin console of the clean room environment, and select Verify Status.
Install the Snowflake Native App associated with Snowflake Data Clean Rooms. Do the following:
If desired, use the Setup Scripts section to review the code that is executed in your account to install the Snowflake Native App.
Select Install to install the Snowflake Native App.
The process of installing the Snowflake Native App can take some time. Periodically select Refresh to check whether it is complete before proceeding to the next step.
In the Database Registration section, select the databases that contain the data that you want collaborators to be able to access in clean rooms.
Note
Once you complete these steps, new tables added to registered databases are not available to clean room collaborators immediately. If a table is added, you need to use the web app’s Snowflake Admin option to return to the Database Registration section, and then select Resync.
Collaborate with consumers in different regions¶
In order to collaborate with a Snowflake customer whose account is in a different region than your account, you must enable Cross-Cloud Auto-Fulfillment for your clean room environment. A Snowflake user with the ACCOUNTADMIN role must enable Cross-Cloud Auto-Fulfillment before clean room administrators can add accounts in other regions as collaborators.
There are additional costs associated with collaborators who are in a different region. For more information about how these costs are incurred, see Understand Cross-Cloud Auto-Fulfillment costs.
To configure your clean room environment to allow collaborators to be in a different region:
Access the URL that corresponds to the region where your Snowflake account is located:
Region
Sign up page
AWS US West (Oregon)
AWS US East (Ohio)
AWS US East (N. Virginia)
Azure West US 2 (Washington)
Azure Central US (Iowa)
Azure South Central US (Texas)
Azure East US 2 (Virginia)
AWS Canada (Central)
Azure Canada Central (Toronto)
AWS Asia Pacific (Mumbai)
Azure Central India (Pune)
AWS Asia Pacific (Singapore)
Azure Southeast Asia (Singapore)
AWS Asia Pacific (Sydney)
Azure Australia East (New South Wales)
Enter your email address, and select Continue.
Enter your password.
If you are associated with multiple clean room environments, select the Snowflake account that you are configuring.
In the left navigation, select Snowflake Admin.
Select Login to Snowflake, and authenticate as a Snowflake user with the ACCOUNTADMIN role.
Toggle on Cross-Cloud Auto-Fulfillment.
Add collaborators¶
A clean room user who has the Admin role must define someone as a collaborator before other users can share a clean room with that collaborator.
Note
If a Snowflake customer has an account in a different region than your Snowflake account, your account administrator must enable Cross-Cloud Auto-Fulfillment before you can add them as a collaborator. For more information, see Collaborate with consumers in different regions.
To add someone as collaborator within a clean room environment:
Access the URL that corresponds to the region where your Snowflake account is located:
Region
Sign up page
AWS US West (Oregon)
AWS US East (Ohio)
AWS US East (N. Virginia)
Azure West US 2 (Washington)
Azure Central US (Iowa)
Azure South Central US (Texas)
Azure East US 2 (Virginia)
AWS Canada (Central)
Azure Canada Central (Toronto)
AWS Asia Pacific (Mumbai)
Azure Central India (Pune)
AWS Asia Pacific (Singapore)
Azure Southeast Asia (Singapore)
AWS Asia Pacific (Sydney)
Azure Australia East (New South Wales)
Sign in as a clean room administrator. This user does not need to have the ACCOUNTADMIN role in Snowflake.
In the left navigation, select Collaborators.
Do one of the following:
If the collaborator has a Snowflake account, select Snowflake Partners » + Snowflake Partner. You are prompted to enter the details of the collaborator’s Snowflake account.
If the collaborator is not a Snowflake customer, select the Managed Accounts tab to create a clean room managed account for them. Because the provider pays for the consumer’s use of a managed account, you can set a limit on how many credits the collaborator can consume within a month while using the clean room.
Add users¶
The process of adding clean room users depends on whether they are using the web app or developer APIs to work with the Snowflake Data Clean Room.
- Web app:
To allow users to access the web app, do the following:
Access the URL that corresponds to the region where your Snowflake account is located:
Region
Sign up page
AWS US West (Oregon)
AWS US East (Ohio)
AWS US East (N. Virginia)
Azure West US 2 (Washington)
Azure Central US (Iowa)
Azure South Central US (Texas)
Azure East US 2 (Virginia)
AWS Canada (Central)
Azure Canada Central (Toronto)
AWS Asia Pacific (Mumbai)
Azure Central India (Pune)
AWS Asia Pacific (Singapore)
Azure Southeast Asia (Singapore)
AWS Asia Pacific (Sydney)
Azure Australia East (New South Wales)
Sign in as a clean room administrator. This user does not need to have the ACCOUNTADMIN role in Snowflake.
Select User Management » User Management.
Select + Users.
Enter the email address of the new clean room user.
Select the role of the new user.
The new user is sent an email with a link to join the clean room.
- Developer APIs:
To allow users to use the developer APIs to programmatically work with clean rooms, do the following:
Sign in to the Snowflake account associated with the clean room environment, which is where you installed the Snowflake Native App.
Open a worksheet, and use the ACCOUNTADMIN ROLE to assign the SAMOOHA_APP_ROLE role to the user. For example, to allow a user
joeto use the developer APIs, you can execute:USE ROLE accountadmin; GRANT ROLE samooha_app_role TO USER joe;
Next steps¶
You are now ready to start using a Snowflake Data Clean Room! You can use either of the following options to work with a Snowflake Data Clean Room:
If you are using the web app to work with a clean room in a user interface, see Snowflake Data Clean Rooms: Web app overview.
If you are executing APIs to work with a clean room programmatically, see Snowflake Data Clean Rooms: Developer APIs overview.