设置 Openflow - Snowflake Deployment：核心 Snowflake

Openflow - Snowflake Deployment 需要创建以下 Snowflake 特定资源：

To complete these tasks, Sign in to Snowsight and open a SQL worksheet.

创建 OPENFLOW_ADMIN 角色

创建所需的 Openflow 管理角色。

备注

<OPENFLOW_USER> 表示将用于访问 Openflow 的用户。

USE ROLE ACCOUNTADMIN;

CREATE ROLE IF NOT EXISTS OPENFLOW_ADMIN;

GRANT ROLE OPENFLOW_ADMIN TO USER <OPENFLOW_USER>;

小心

Users with a default role of ACCOUNTADMIN can't login to Openflow - Snowflake Deployment runtimes and will get an error message when attempting to do so. Snowflake recommends assigning a different default role to any user that will login to a runtime. In addition, Snowflake recommends setting default secondary roles to ALL for all Openflow users.

To change the default role and enable all secondary roles, execute the following:

For example:

USE ROLE ACCOUNTADMIN;

ALTER USER <openflow_user> SET DEFAULT_ROLE = <openflow_admin>;
ALTER USER <openflow_user> SET DEFAULT_SECONDARY_ROLES = ('ALL');

配置所需权限

Openflow requires defining specific Snowflake Account level privileges. These privileges are assigned to the ACCOUNTADMIN role as part of the default set of privileges. ACCOUNTADMIN will automatically have the following privileges and will be able to grant them to a role of their choosing for the Openflow admin role, shown as OPENFLOW_ADMIN role in the following example:

USE ROLE ACCOUNTADMIN;

GRANT CREATE OPENFLOW DATA PLANE INTEGRATION ON ACCOUNT TO ROLE OPENFLOW_ADMIN;
GRANT CREATE OPENFLOW RUNTIME INTEGRATION ON ACCOUNT TO ROLE OPENFLOW_ADMIN;
GRANT CREATE COMPUTE POOL ON ACCOUNT TO ROLE OPENFLOW_ADMIN;

后续步骤

Optionally, Set up PrivateLink UI access to access the Snowflake Openflow Runtime UI using private connectivity.

创建部署