Redshift

IP RESTRICTIONS

Make sure to allow traffic from one of the Paradime IPs in your firewall depending on the data location selected.

👉 See also: Paradime IP addresses.

We recommend creating a dedicated Redshift service user for the DinoAI agent environment, with the minimum permissions required to create tables and views in your database.

Create a Redshift user

Run the script below in Redshift to create a dedicated service user for the DinoAI agent environment. Make sure you run these commands as an Account Admin.

Suggested permissions

This set of permissions will enable DinoAI to read from and create tables and views during background agent sessions in your Redshift database.

-- create group
create group transformer;

-- create user and assign to group
create user paradime_dinoai_user
    password '<generate_password>'
    in group transformer;

-- grant privileges to the user group
grant select on all tables in schema information_schema to group transformer;
grant select on all tables in schema pg_catalog to group transformer;

-- for each schema:
grant usage on schema <schema_name> to group transformer;
grant select on all tables in schema <schema_name> to group transformer;

-- grant privileges to user group to create in database
grant create on database <your_database> to group transformer;

Maintain privileges

In Redshift, after each DinoAI background agent session you need to ensure the correct privileges are granted, as Redshift does not support grant on future schemas.

The paradime_dinoai_user should be able to read new schemas created during agent sessions.

Check this guide on using grants and hooks.

Add the DinoAI agent environment connection

1. Click Settings in the top menu bar of the Paradime interface to access Account Settings

2. In the left sidebar, click Connections

3. Click Add New next to the DinoAI Background Agent Environment section

4. Select Redshift and fill out the corresponding fields.

Field details

Field	Description	Example
Profile Name	The profile name set in your dbt_project.yaml. See more here.	dbt-redshift
Target	The target name used to identify the DinoAI agent environment connection. See more here.	dinoai
Host Name	The hostname of the Redshift database to connect to.	xxx.eu-west-2.amazonaws.com
Port	Usually 5439 for Redshift.	5439
Database	The name of the Redshift database the DinoAI agent will query and build objects in.	analytics
Username	The DinoAI agent service user created with access to the database.	paradime_dinoai_user
Password	The password set for the DinoAI agent service user.	password_xyz
Schema	The default schema used to build dbt™ objects during DinoAI background agent sessions.	dbt_dinoai
Threads	The number of threads used in this connection. See more here.	8