Grant Read-Only Access via a Snowflake Reader Account

Interzoid's tools will access your Snowflake data "read-only" via a connection string. We recommend using a Snowflake Reader Account for access. This guide shows how to give our tool secure, read-only access to your Snowflake data using a Snowflake Reader Account. You only provide access to the data you want us to work with and analyze. You stay in full control and can revoke access at any time.

🔒

Why Reader Accounts?

Reader accounts provide Snowflake-native, read-only access without requiring a separate Snowflake subscription for Interzoid. You decide exactly which objects we can query.

Examples of what can be included in a connection string

The following are all examples of data that may be included in your connection string:

Account name (e.g., interzoid_reader.us-east-1.aws)
User name (e.g., interzoid_tool_user)
Password (the one you set for usage with us)
Warehouse (e.g., interzoid_wh)
Database (e.g., interzoid_db)
Schema (e.g., public or your shared schema)
Role (e.g., interzoid_reader_role)

Step-by-Step

Create a Snowflake Reader Account
Ask your Snowflake admin to create a Reader Account dedicated to Interzoid. You’ll see the generated account identifier in the format <reader_account_name>.<region>.<cloud> (for example, interzoid_reader.us-east-1.aws).
Share Only the Data You Want Us to Work with
From your primary Snowflake account, grant access to the specific databases, schemas, tables, or views that Interzoid should query, and assign that share to the new Reader Account. Access is read-only by design.
Create a Dedicated User & Role for Interzoid
Inside the Reader Account, create a user (for example, interzoid_tool_user) and assign a read-only role (for example, interzoid_reader_role). Point this role to a small warehouse (for example, interzoid_wh) with auto-suspend enabled to control costs.
Send Us the Connection Details
Provide the items listed in What You’ll Provide Us above via your secure channel of choice. We will use these to connect our analytics tool.

Tip: You can remove our access at any time by disabling the user, revoking the role, or unsharing the objects from the Reader Account.

Connection String Format

Our tool uses the standard Snowflake connection URI. Replace the bracketed values with your details:

snowflake://<user>:<password>@<account_name>/?warehouse=<warehouse>&db=<database>&schema=<schema>&role=<role>

Example

interzoid_tool_user:StrongPassword@interzoid_reader.us-east-1.aws/?warehouse=interzoid_wh&db=interzoid_db&schema=public&role=interzoid_reader_role

If your shared schema isn’t public, substitute the correct schema name.

Security & Governance Notes

Read-only by default: Reader Accounts cannot write to your data unless you explicitly enable write paths. Keep the role limited to USAGE/SELECT scopes.
Network controls: If desired, your admin can restrict access via IP allowlists. Contact us for the IP addresses.
Cost management: Use a small warehouse with auto-suspend to minimize compute when idle.

Click here to learn more about the Snowflake Batch API Processing tool.

Consult Snowflake documentation for more information. Questions? Contact support@interzoid.com and we’ll help your admin complete the setup.