Before you start
- You need to be an Endgame admin.
- In Snowflake, you need to be an ACCOUNTADMIN or have equivalent permissions.
- You need OpenSSL installed on your computer to create a key pair.
- To connect, you’ll need an account identifier, a username, a warehouse, and the user’s private key. The steps below walk you through creating each one.
Set up Snowflake for Endgame
1
Generate a key pair
Endgame uses key-pair authentication to connect to your Snowflake account. Generate a key pair by running these commands in your terminal:This creates two files:
snowflake_key.p8— your private key, which you’ll give to Endgame.snowflake_key.pub— your public key, which you’ll register in Snowflake.
2
Create a role and service user in Snowflake
Open a SQL worksheet in Snowflake (click + Create > SQL File) and run the following commands.This creates a new role with no permissions. You’ll grant specific permissions in the next steps.Replace For shared or imported databases:
- Create a read-only role:
- Grant warehouse access:
<your_warehouse> with your warehouse name (for example, COMPUTE_WH). This lets the role run queries.- Grant database access. For each database you want Endgame to access, grant the appropriate permissions:
- Create the service user.
snowflake_key.pub and copy the content between the header and footer lines (leave out -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY-----). Remove any line breaks so it’s a single continuous string.Then create the user:- Assign the role to the service user:
3
Find your account identifier
Your Snowflake account identifier is the part before For more details, see Snowflake account identifiers.
.snowflakecomputing.com in your Snowflake URL, and it’s also shown in the account selector. It usually looks like orgname-accountname (for example, myorg-account123).You can also find it by running:Connect Snowflake
- In Settings > Organization > Integrations, find Snowflake and click Connect. You can search for “Snowflake”, or choose Available to show only integrations you haven’t connected yet.
- Enter your Account identifier, the Username of the service user (for example,
ENDGAME_SERVICE_USER), the contents ofsnowflake_key.p8as the Private key (PEM), and your Warehouse. - Click Connect.

Connecting Snowflake needs your account identifier, username, private key, and warehouse.
Choose objects to sync
- In Endgame, on the Snowflake page, go to Data sync.
- In Object identifier, enter the fully qualified name of a table, view, or dynamic table, as
DATABASE.SCHEMA.OBJECT_NAME. - Click Add object.
Tables with 100,000 or more rows, or over about 200 MB, won’t sync. Tables over 50,000 rows or 100 MB get a size warning. Use summarized Snowflake views, not raw event data. For best performance, keep tables under 20k rows.

Data sync is where you add the Snowflake objects Endgame syncs.
Snowflake tables usually describe your whole organization, so Endgame treats
them as organization-wide data rather than tying them to one account.
Update credentials or disconnect
Use the Connection section at the bottom of the Snowflake page. See Manage a connected integration.- Update credentials opens the same dialog as connecting, with nothing prefilled. Use it when you rotate the service user’s key.
- Disconnect stops syncing data from Snowflake.