---
title: Snowflake
description: "Configure Statsig data warehouse ingestion from Snowflake, including authentication, scheduled queries, and mapping to events and user properties."
product: general
last_updated: 2025-09-18
token_estimate: 1433
---
# Snowflake

> For AI agents: a documentation index is available at [/llms.txt](/llms.txt). Append `.md` to any page URL for markdown, or send `Accept: text/markdown`.

## Connect Snowflake to Statsig

Statsig ingests your event and metric data from Snowflake so it flows into your Statsig metrics and experiments. To set up a connection with Snowflake, Statsig needs the following

- Account Name
- Database Name
- Schema Name
- Admin User Name
- If authenticating through login credentials:

  - Admin User Password
- If authenticating through key-pair authentication:

  - Private Key
  - Private Key Passphrase (Optional)

Statsig uses the admin user name and password to create a user with restricted access to query from your data warehouse. To use a custom user instead, refer to [Custom user privileges](https://docs.statsig.com/data-warehouse-ingestion/snowflake#custom-user-privileges).

### Account name

For the Account Name field, enter the value in the format `<id>.<region>.<provider>`. For example:

`xy12345.us-central1.gcp`

To get this information, navigate to the bottom left of your Snowflake console and copy the link URL, as shown below:

![Snowflake console footer showing account identifier link](https://docs.statsig.com/images/statsig-warehouse-native/connecting-your-warehouse/snowflake/187517221-4bb3dce3-8b8f-4f30-b4d4-fd12e5249722.png)

The copied URL looks something like this:

`https://xy12345.us-central1.gcp.snowflakecomputing.com`

Extract the required fields for Account Name from this URL. In this example, the Account Name is `xy12345.us-central1.gcp`.

> **Info:**
>
> Using `<orgname>-<account_name>` for Account Name
>
> For the Account Name field, you can also enter your Snowflake [account identifier](https://docs.snowflake.com/en/user-guide/admin-account-identifier.html#format-1-preferred-account-name-in-your-organization), which typically takes the form `<orgname>-<account_name>`. To find the `<orgname>` in the Snowflake console, click on your account profile (usually at the bottom left) to view account details as shown below.
>
> ![Snowflake account profile interface](https://docs.statsig.com/images/statsig-warehouse-native/connecting-your-warehouse/snowflake/195217037-ad630f37-a8fe-4b61-823f-ce0e8c984ed0.png)

### Database and schema name

For each data type, provide the database/schema of the table(s) you're ingesting from.

![Snowflake database explorer highlighting schema selection](https://docs.statsig.com/images/statsig-warehouse-native/connecting-your-warehouse/snowflake/187517225-017b4626-eaea-443b-a042-59fd474ae657.png)

### Key-pair authentication

To set up key-pair authentication, follow the [Snowflake documentation](https://docs.snowflake.com/en/user-guide/key-pair-auth) to generate the private and public keys, then set the public key on the service user.

Enter the private key in the field below:

![Private key authentication configuration interface](https://docs.statsig.com/images/data-warehouse-ingestion/snowflake/8bb56be6-1aca-4d8a-98de-6b82d251d59b.png)

### Custom user privileges

To create a custom user with specific privileges instead of using an admin user, run the following code in your Snowflake worksheet that has sysadmin and securityadmin roles. Replace `<USER>` and `<PASSWORD>` with your values, which you enter in the Statsig console.

```sql
BEGIN;

  -- set up variable values to be used in statements later
  -- make sure to configure user_name and user_password with your own values
  SET user_name = '<USER>'; -- REPLACE WITH YOUR OWN VALUE
  SET user_password = '<PASSWORD>'; -- REPLACE WITH YOUR OWN VALUE
  SET role_name = 'STATSIG_ROLE'; -- CAN BE ANYTHING, BUT THE USER NEEDS TO 
    -- HAVE THIS ROLE AND THE ROLE NEEDS ACCESS TO THE TABLES PER THE GRANTS BELOW

  -- change role to sysadmin for warehouse / database steps
  USE ROLE sysadmin;

  -- create a warehouse, database, schema and tables for Statsig
  CREATE OR REPLACE WAREHOUSE STATSIG_INGESTION WITH warehouse_size='XSMALL';
  CREATE DATABASE IF NOT EXISTS STATSIG_STAGING;

  -- change current role to securityadmin to create role and user for Statsig's access
  USE ROLE securityadmin;

  -- create role for Statsig
  CREATE ROLE IF NOT EXISTS identifier($role_name);
  GRANT ROLE identifier($role_name) TO ROLE SYSADMIN;

  -- create a user for Statsig
  CREATE USER IF NOT EXISTS identifier($user_name)
  password = $user_password
  default_role = $role_name
  default_warehouse = STATSIG_INGESTION;
  GRANT ROLE identifier($role_name) TO USER identifier($user_name);

  -- grant Statsig role access to create warehouse and schema
  GRANT USAGE ON WAREHOUSE STATSIG_INGESTION TO ROLE identifier($role_name);
  GRANT CREATE SCHEMA, MONITOR, USAGE ON DATABASE STATSIG_STAGING TO ROLE identifier($role_name);

  -- grant Statsig role read access to database and schema passed in
  GRANT USAGE ON DATABASE <DATABASE> TO ROLE identifier($role_name);
  GRANT USAGE ON SCHEMA <DATABASE>.<SCHEMA> TO ROLE identifier($role_name);
  GRANT SELECT ON ALL TABLES IN DATABASE <DATABASE> TO ROLE identifier($role_name);
  GRANT SELECT ON FUTURE TABLES IN DATABASE <DATABASE> TO ROLE identifier($role_name);
  GRANT SELECT ON ALL VIEWS IN DATABASE <DATABASE> TO ROLE identifier($role_name);
  GRANT SELECT ON FUTURE VIEWS IN DATABASE ACTUAL_DATA TO ROLE identifier($role_name);

COMMIT;
```

After running the script, enter the `<USER>` and `<PASSWORD>` you created in the Statsig console during the Connection Set Up stage, under the Advanced settings options.

![Advanced connection settings for warehouse ingestion showing credential inputs](https://docs.statsig.com/images/data-warehouse-ingestion/redshift/188943178-6b541962-62da-4529-b5af-ff59b20b7a8d.png)