Compute | Snowflake

Snowflake Compute in ADOC gives you visibility into cost, administration, usage, and query performance across your Snowflake account, so you can control spend and troubleshoot issues without leaving ADOC.

What's in Snowflake Compute

Downloading visualization data

Any visualization in Snowflake Compute can be downloaded as a CSV file. The file name includes "Snowflake," the visualization name, and the date and time of download. If you applied global calendar filters before downloading, the exported data reflects those filters.

Connecting with OAuth

Snowflake supports OAuth 2.0 through a Security Integration — a Snowflake object that lets ADOC redirect users to an authorization page and generate access tokens for accessing Snowflake, instead of using static credentials.

1. Create the security integration. Using the ACCOUNTADMIN role in Snowflake, run:

   CREATE OR REPLACE SECURITY INTEGRATION AD_SECURITY_INTEGRATION
    TYPE = OAUTH
    OAUTH_CLIENT = CUSTOM
    OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
    OAUTH_REDIRECT_URI = 'https://<ADOC_URL>/ui/oauth-success'
    ENABLED = TRUE
    OAUTH_ALLOW_NON_TLS_REDIRECT_URI = FALSE
    OAUTH_ENFORCE_PKCE = FALSE
    OAUTH_USE_SECONDARY_ROLES = NONE
    OAUTH_ISSUE_REFRESH_TOKENS = TRUE
    OAUTH_REFRESH_TOKEN_VALIDITY = 7776000 -- 90 days
    COMMENT = 'Snowflake OAuth integration for Acceldata';
   

   Set OAUTH_REDIRECT_URI to match your ADOC tenant URL.

2. Capture the client ID and secret:

   SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS('AD_SECURITY_INTEGRATION');
   

3. Register the data source in ADOC. Enable OAuth, and enter the Authorization and Token Endpoints using your Snowflake account URL in place of <snowflake_url>.

4. Authenticate. Select Authenticate to open the Snowflake login screen, and sign in using credentials created for Acceldata — avoid ACCOUNTADMIN, SECURITYADMIN, and ORGADMIN roles for this login.

Known limitations:

• Onboarding a Snowflake data source with the account admin role isn't supported for OAuth.

• Operations requiring account admin privileges — including killing queries and warehouse resizing — aren't supported over OAuth.

• Statement timeouts don't appear in the Snowflake Admin > Guard Rails table when using OAuth.

Authorization expires after 90 days by default, or per your OAUTH_REFRESH_TOKEN_VALIDITY setting. ADOC requests refresh_token scope, allowing token refresh for up to 90 days.

Troubleshooting:

What's next

• Snowflake Costs – Break down account and organization-level spend.

• Snowflake Admin – Review users, roles, and account guardrails.

• Snowflake Performance – Investigate table and warehouse performance.

• Snowflake Query Studio – Analyze and optimize individual queries.

• Snowflake Warehouse – Get sizing recommendations for your warehouses.