Skip to content

Secure Data Sharing

You can access your Identity Security Cloud data from Snowflake. Prerequisites to using this functionality are purchasing the Secure Data Sharing add-on and providing your Snowflake account ID / locator so that SailPoint can share the right data with the right customer.

Your Identity Security Cloud data is stored in a Snowflake database, and the Secure Data Sharing add-on shares access to that.

This is a read-only view that is only available to AWS customers who are using Identity Security Cloud and Snowflake. Azure, GCP, or other cloud providers are currently not supported.

Installing and Configuring Secure Data Sharing

After you provide your Snowflake account identifiers, SailPoint can map Identity Security Cloud data to your account so you can use SailPoint’s private listing.

  1. Log in to your Snowflake SnowSight account as an AccountAdmin.
  2. Navigate to Data > Private Sharing.
  3. Find SailPoint Identity Data and select the Get icon to the right of the title.
  4. Select the database name.
  5. Assign additional roles (besides AccountAdmin) that need to access the database.
  6. Select the Get button. The Ready to Use message displays.
  7. Select the Query Data button to seamlessly access your live Identity data. Refer to Snowflake documentation for information about using that tool.

Secure Data Sharing Data Model

SailPoint’s dataset is composed of structured Identity and audit data. It includes relationship tables that connect Identity with other domain entities like entitlements, roles, access profiles, accounts, and apps. This dataset has an additional Audit events table that is a flattened representation of all the events happening for your organization in Identity Security Cloud.

Refer to the Secure Data Share Entity Relationship Diagram.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.