# Integrating SailPoint with Firebolt

Firebolt is a fully managed cloud data warehouse service where customer infrastructure operations (deployment, scaling, maintenance, and platform reliability) are handled by Firebolt, while tenant administrators manage data access through SQL-based users, roles, and grants. This document provides instructions to configure a new direct connection to a Firebolt source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Firebolt connector supports the following:

### Account Management

- Aggregate Users

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

1. **System engine URL as Base URL** - Use the following endpoint to return the system engine URL for the account whose users you need to manage:

   ```text
   curl https://api.app.firebolt.io/web/v3/account/<account_name>/engineUrl \
   -H 'Accept: application/json' \
   -H 'Authorization: Bearer <access_token>'
   ```
2. **Client ID and Client Secret** - To get the Client ID and Client Secret, create a new service account from the **Create new user** tab. Use the service account ID as the Client ID and the account secret as the Client Secret. For more information about the Firebolt REST API, refer to the [Firebolt REST API documentation](<https://docs.firebolt.io/guides/developing-with-firebolt/using-the-api>). !!! note The linked document is not maintained by SailPoint and is subject to change without notice.

## Required Permissions

- The created service account must have the `account_admin` role to list all users.