Skip to content

Commit 7139cd2

Browse files
authored
Merge pull request #182985 from linda33wj/purview
Tweak wording
2 parents 327cc77 + 12181f3 commit 7139cd2

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

articles/purview/register-scan-snowflake.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -44,14 +44,16 @@ When scanning Snowflake, Purview supports:
4444

4545
### Required permissions for scan
4646

47-
Azure Purview supports basic authentication (username and password) for scanning Snowflake. The default role of the given user will be used. The Snowflake user must have read access to system tables in order to access advanced metadata. Here is a sample walkthrough to set up the permission. If you choose to use an existing user, make sure it has adequate rights.
47+
Azure Purview supports basic authentication (username and password) for scanning Snowflake. The default role of the given user will be used to perform the scan. The Snowflake user must have usage rights on a warehouse and the database(s) to be scanned, and read access to system tables in order to access advanced metadata.
48+
49+
Here is a sample walkthrough to create a user specifically for Purview scan and set up the permissions. If you choose to use an existing user, make sure it has adequate rights to the warehouse and database objects.
4850

4951
1. Set up a `purview_reader` role. You will need _ACCOUNTADMIN_ rights to do this.
5052

5153
```sql
5254
USE ROLE ACCOUNTADMIN;
5355

54-
--create role to allow read only access - this will later be assigned to the purview USER
56+
--create role to allow read only access - this will later be assigned to the Purview user
5557
CREATE OR REPLACE ROLE purview_reader;
5658

5759
--make sysadmin the parent role
@@ -75,7 +77,7 @@ Azure Purview supports basic authentication (username and password) for scanning
7577
GRANT USAGE ON WAREHOUSE purview_wh TO ROLE purview_reader;
7678
```
7779

78-
3. Create a USER `purview` for Purview scan.
80+
3. Create a user `purview` for Purview scan.
7981

8082
```sql
8183
CREATE OR REPLACE USER purview
@@ -91,6 +93,8 @@ Azure Purview supports basic authentication (username and password) for scanning
9193
4. Grant reader rights to the database objects.
9294

9395
```sql
96+
GRANT USAGE ON DATABASE <your_database_name> TO purview_reader;
97+
9498
--grant reader access to all the database structures that purview can currently scan
9599
GRANT USAGE ON ALL SCHEMAS IN DATABASE <your_database_name> TO role purview_reader;
96100
GRANT USAGE ON ALL FUNCTIONS IN DATABASE <your_database_name> TO role purview_reader;

0 commit comments

Comments
 (0)