Snowflake Troubleshooting and Validation

Validation Steps

1. Confirm integration status

   Ensure the integration status shows Verified in SailPoint Entro.

2. Check last synchronization

   Verify the Last Synchronization Timestamp for recency.

3. Confirm metadata ingestion

   Ensure metadata from Snowflake appears under NHI Tokens Inventory.

4. Validate ENTRO_ROLE grants

   Run the following in Snowflake:

   SHOW GRANTS TO ROLE ENTRO_ROLE;
   DESC USER ENTRO;
   -- Confirm RSA_PUBLIC_KEY_FP is set and DEFAULT_ROLE is ENTRO_ROLE
   

Common Issues and Resolutions

Issue	Possible Cause	Resolution
Access denied	Missing privileges on ENTRO_ROLE	Re-run the role creation and grant script from the onboarding documentation
No metadata visible	First synchronization not yet completed	Wait for the next sync cycle and retry
Invalid credentials	RSA public key not set on the ENTRO user, or the onboarding key expired before completion	Reopen the SailPoint Entro form to generate a new key and re-run the ALTER USER ENTRO SET RSA_PUBLIC_KEY statement in the Query Data in Snowflake
Network timeout	Restricted outbound access from the SailPoint Entro worker	Allow HTTPS (443) connectivity from the worker to your Snowflake account URL