---
schema_version: "1"
id: 68a03173095eb672852df763900b993af772ac4a82226be45a35a27555c563c4
title: Get User Credentials from Snowflake
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_get_user_details_snowflake.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_get_user_details_snowflake.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a5ce6bb724e0870af5dd64ef6e2f3dd2f85f3abaaa8db3749b2e808ac401f8b3
description: Gather the user information and authentication details in Snowflake to create a data share target.
products:
  - Data 360
release: "264"
---
# Get User Credentials from Snowflake

Gather the user information and authentication details in Snowflake to create a data share target.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-data-data_cloud-264-0-0-production-enus/f3569962-3c9b-4f83-9d0c-b6a574e785da/images/icon_important.png)

Important You can’t create legacy Snowflake data share targets. [Create a Snowflake V2 data share target](https://help.salesforce.com/s/articleView?id=data.c360_a_create_data_share_target_snowflakev2.htm&type=5&language=en_US) instead, and link your existing and new data shares to it. Migrate existing data shares that are linked to a legacy Snowflake data share target to a Snowflake V2 data share target. See [Migrate Data Shares with Legacy Snowflake Data Share Target](https://help.salesforce.com/s/articleView?id=data.c360_a_migrate_data_shares_legacy_snowflake.htm&type=5&language=en_US). Don’t unlink an existing data share from its legacy target until you verify that the Snowflake V2 connection works. Downstream processes in Snowflake can refer to the database that was created using the legacy target.

These steps involve running commands in Snowflake. We recommend contacting your Snowflake admin for any troubleshooting assistance.

1. In Snowflake, create a user for Data 360 admin or Data Aware Specialist.
    
    ```
    
    CREATE OR REPLACE USER  <Data 360 Admin or Data Aware Specialist> 
      PASSWORD = '<string>'
      LOGIN_NAME = <string>
      DISPLAY_NAME = <string>
      FIRST_NAME = <string>
      MIDDLE_NAME = <string>
      LAST_NAME = <string>
      EMAIL = <string>
      DEFAULT_ROLE = <Any Public Role With Low Privileges>;
    ```
    
    If you want to use an existing user, you can skip creating a user. Make sure that the default role isn’t ACCOUNTADMIN, SECURITYADMIN, or ORGADMIN. The user must have USAGE privileges (Read & Query) for the relevant warehouse.
2. In Snowflake, create a security integration.
    
    ```
    
    CREATE OR REPLACE SECURITY INTEGRATION [IF NOT EXISTS]
      <Data Cloud_Snowflake_Security_Integration>
      TYPE = OAUTH
      OAUTH_CLIENT = CUSTOM
      OAUTH_CLIENT_TYPE = 'CONFIDENTIAL'
      OAUTH_REDIRECT_URI = 'https://login.salesforce.com/services/cdpSnowflakeOAuthCallback'
      ENABLED = TRUE 
      OAUTH_ISSUE_REFRESH_TOKENS = TRUE; 
    ```
    
    For a Data Cloud sandbox org, the `OAUTH_REDIRECT_URI` is `https://test.salesforce.com/services/cdpSnowflakeOAuthCallback`
3. In Snowflake, run the DESCRIBE statement to get the OAUTH\_AUTHORIZATION\_ENDPOINT details.
    
    ```
    DESC SECURITY INTEGRATION <Data Cloud_Snowflake_Security_Integration>;
    ```
    
    When you [create a data share target](https://help.salesforce.com/s/articleView?id=data.c360_a_create_data_share_target_snowflake.htm&release=264.0.0&type=5 "Create a data share target in Data 360 to establish connectivity with a Snowflake account.") in Data 360, for Account URL, enter the value of OAUTH\_AUTHORIZATION\_ENDPOINT and convert any underscores to hyphens and ignore the subdirectory and subsequent parts.
    
    For example, if your OAuth Authorization Endpoint URL is `https://nto_america_dev_instance.example.computing.com/oauth/authorize`, enter `https://nto-america-dev-instance.example.computing.com` for the Account Url.
4. In Snowflake, get the client credentials.
    
    ```
    SELECT SYSTEM$SHOW_OAUTH_CLIENT_SECRETS( '<Data Cloud_Snowflake_Integration>');
    ```
    
    Use the Client ID and Client Secret to [create a data share target](https://help.salesforce.com/s/articleView?id=data.c360_a_create_data_share_target_snowflake.htm&release=264.0.0&type=5 "Create a data share target in Data 360 to establish connectivity with a Snowflake account."). Share the credentials with your Data 360 admin.