---
schema_version: "1"
id: eae67ebd9d1c23a265c9da00bbad9b43a70e73aa0e6acf004d59a59efb8c2b36
title: Create a Data Share Target to Connect with Snowflake
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_create_data_share_target_snowflake.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_create_data_share_target_snowflake.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: ba7b9cab66d1ef788444b608195f6b16751f63cc16c7a4bffc119ff954f6b0ed
description: Create a data share target in Data 360 to establish connectivity with a Snowflake account.
products:
  - Data 360
release: "264"
---
# Create a Data Share Target to Connect with Snowflake

Create a data share target in Data 360 to establish connectivity with a Snowflake account.

### Required Editions

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_important.png)

Important You can’t create legacy Snowflake data share targets. [Create a Snowflake V2 data share target](https://help.salesforce.com/s/articleView?id=data.c360_a_create_data_share_target_snowflakev2.htm&type=5&language=en_US) instead, and link your existing and new data shares to it. Migrate existing data shares that are linked to a legacy Snowflake data share target to a Snowflake V2 data share target. See [Migrate Data Shares with Legacy Snowflake Data Share Target](https://help.salesforce.com/s/articleView?id=data.c360_a_migrate_data_shares_legacy_snowflake.htm&type=5&language=en_US). Don’t unlink an existing data share from its legacy target until you verify that the Snowflake V2 connection works. Downstream processes in Snowflake can refer to the database that was created using the legacy target.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;release=264.0.0&amp;type=5" title="Data 360 is available in several supported Salesforce editions. Some Data 360 features also require additional licenses.">Data 360 edition availability</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d183021e83">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d183021e83 ">To create a data share target:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d183021e83 ">
              <p style="margin-bottom:0;">Data Cloud Architect permission set</p>
            </td>

          </tr>
        </tbody>
      </table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_note.png)

Note Private Connect for Data 360 is a feature that allows you to share data with Snowflake instances without exposing the data to the public internet. If your Snowflake instance is secured in a VPC, you can create a secure connection between your instance and Data 360. To use Private Connect for Data 360, create a private connect network route. The network route is used to validate that you're sharing data with the correct instance.

Private Connect for Data 360 only supports AWS PrivateLink with Snowflake service within the same cloud service provider geographical region. This means that cross-region connectivity is not supported. For example, if your Data 360 instance is in the US West region, then the Private Connect for Data 360 service will only be available for use with Snowflake within the US West region.

1. In Data Cloud, on the Data Shares Target tab, click **New**.
2. For the connection type, select **Snowflake**, and click **Next**.
3. Enter these details.
    
    - Label - The display name of the data share target. There’s no character limit.
    - API Name - This field is auto-populated to match the label name, but you can use a different name.
    - Account Url - Enter the value of OAUTH\_AUTHORIZATION\_ENDPOINT and convert any underscores to hyphens and ignore the subdirectory and subsequent parts. For example, if your OAuth Authorization Endpoint URL is `https://nto_america_dev_instance.example.computing.com/oauth/authorize`, you can use `https://nto-america-dev-instance.example.computing.com` for the Account Url.
        
        ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_note.png)
        
        Note If PrivateLink is enabled on Snowflake account and [IP allowlisting](https://help.salesforce.com/s/articleView?id=data.c360_a_allowlist.htm&type=5&language=en_US) is used for data sharing capability, then use the Public URL of the OAuth Authorization Endpoint for the Account Url.
4. To connect without authenticating, select the **Skip authentication** checkbox or enter the Client ID and Client Secret that are generated in Snowflake.
    
    Refer to [Get User Credentials from Snowflake](https://help.salesforce.com/s/articleView?id=data.c360_a_get_user_details_snowflake.htm&release=264.0.0&type=5 "Gather the user information and authentication details in Snowflake to create a data share target.").
5. Enter a description for the data share target and click **Save**.
6. On the Snowflake login page, enter the username and password from the previous step and authenticate to Snowflake with a Data Cloud architect permission set. You route back to Data Cloud and the data share target turns to active status.
    
    When sharing data with Snowflake via a custodian account, ‌OAuth authentication uses Private Connect for Data 360 to securely authenticate the customer's Snowflake account. After the data share is linked to a data share target, data sharing from Salesforce happens through a secure public IP that follows Hyperforce security and privacy guidelines. Salesforce leverages Snowflake's built-in [secure data sharing](https://docs.snowflake.com/en/user-guide/data-sharing-intro) feature to share data between the Salesforce custodian account and Snowflake customer account. The OAuth authentication process happens only once, hence the security integration object created in Snowflake is no longer necessary for Salesforce Data 360.
    
    ![AWS private link implementation using Data 360 Private Connect feature.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/data_cloud/images/c360_a_private_connect_snowflake.png)

#### See Also

- [_Salesforce Help_: Private Connect for Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_private_connect_data_cloud.htm&release=264.0.0&type=5 "Private Connect uses Amazon Web Services (AWS) PrivateLink to establish a point-to-point network integration between your AWS virtual private cloud (VPC) and your Data 360 tenant. Private Connect provides a connection from Data 360 to your data source without exposing your network traffic to the public internet.")