> ## Documentation Index > Fetch the complete documentation index at: https://docs.paradime.io/llms.txt > Use this file to discover all available pages before exploring further. # Snowflake **IP RESTRICTIONS** Make sure to allow traffic from one of the Paradime IPs in your firewall depending on the data location selected. 👉 See also: [Paradime IP addresses](https://docs.paradime.io/app-help/developers/ip-restrictions). We recommend creating a dedicated Snowflake service user for the DinoAI agent environment, with the minimum permissions required to create tables and views in your database. ### Create a new Snowflake user Execute the SQL commands below in Snowflake to create a dedicated service user for the DinoAI agent environment. #### Suggested permissions This set of permissions will enable DinoAI to read from and create tables and views during background agent sessions in your Snowflake database. ```sql theme={"system"} use role securityadmin; -- create warehouse if not exists create warehouse transforming warehouse_size = xsmall auto_suspend = 60 auto_resume = true initially_suspended = true; -- create role and grant warehouse permission create role transformer; grant all on warehouse transforming to role transformer; -- create DinoAI agent service user create user paradime_dinoai_user password = '' default_warehouse = transforming default_role = transformer; -- grant role to paradime_dinoai_user grant role transformer to user paradime_dinoai_user; -- grant permission to allow role to read from your source database grant usage on database to role transformer; grant usage on future schemas in database to role transformer; grant select on future tables in database to role transformer; grant select on future views in database to role transformer; grant usage on all schemas in database to role transformer; grant select on all tables in database to role transformer; grant select on all views in database to role transformer; -- grant permission to allow role to write to your database grant all on database analytics to role transformer; ``` ### Add the DinoAI agent environment connection To add the Snowflake DinoAI agent environment connection, follow these instructions: 1. Click **Settings** in the top menu bar of the Paradime interface to access **Account Settings** 2. In the left sidebar, click **Connections** 3. Click **Add New** next to the **DinoAI Background Agent Environment** section 4. Select **Snowflake** and fill out the corresponding fields. ### Using username and password #### Field details | Field | Description | Example | | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------- | | Profile | The profile name set in your `dbt_project.yaml`. See more [here](https://docs.getdbt.com/docs/core/connect-data-platform/connection-profiles). | **`dbt-snowflake`** | | Target | The target name used to identify the DinoAI agent environment connection. See more [here](https://docs.getdbt.com/reference/dbt-jinja-functions/target). | **`dinoai`** | | Account | The Snowflake account to connect to as per [Snowflake's documentation](https://docs.snowflake.com/en/user-guide/admin-account-identifier). | **`vj71689.eu-west-2.aws`** | | Role | The role to assume when running queries as the DinoAI agent service user. | **`transformer`** | | Database | The name of the Snowflake database the DinoAI agent will query and build objects in. | **`analytics`** | | Warehouse | The virtual warehouse to use for running queries during DinoAI background agent sessions. | **`transforming`** | | Username | The DinoAI agent service user created with access to the database. | **`paradime_dinoai_user`** | | Password | The password set for the DinoAI agent service user. | **`password_xyz`** | | Schema | The default schema used to build dbt™ objects during DinoAI background agent sessions. | **`dbt_dinoai`** | | Threads | The number of threads used in this connection. See more [here](https://docs.getdbt.com/docs/running-a-dbt-project/using-threads). | **`8`** | ### Using key-pair authentication In Paradime you can use key-pair authentication to connect your DinoAI agent environment using a private key and optionally a private key passphrase. After [generating an encrypted or unencrypted key pair](https://docs.snowflake.com/en/user-guide/key-pair-auth#configuring-key-pair-authentication), set the `rsa_public_key` for the DinoAI agent service user: ```sql theme={"system"} alter user paradime_dinoai_user set rsa_public_key='MIIBIjANBgkqh...'; ``` #### Field details | Field | Description | Example | | --------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------ | | Profile | The profile name set in your `dbt_project.yaml`. See more [here](https://docs.getdbt.com/docs/core/connect-data-platform/connection-profiles). | **`dbt-snowflake`** | | Target | The target name used to identify the DinoAI agent environment connection. See more [here](https://docs.getdbt.com/reference/dbt-jinja-functions/target). | **`dinoai`** | | Account | The Snowflake account to connect to as per [Snowflake's documentation](https://docs.snowflake.com/en/user-guide/admin-account-identifier). | **`vj71689.eu-west-2.aws`** | | Role | The role to assume when running queries as the DinoAI agent service user. | **`transformer`** | | Database | The name of the Snowflake database the DinoAI agent will query and build objects in. | **`analytics`** | | Warehouse | The virtual warehouse to use for running queries during DinoAI background agent sessions. | **`transforming`** | | Username | The DinoAI agent service user created with access to the database. | **`paradime_dinoai_user`** | | Private Key | The private key generated and linked to the DinoAI agent service user. You **must** include the commented lines when adding the private key. | **`-----BEGIN ENCRYPTED PRIVATE KEY----- < private key content here > -----END ENCRYPTED PRIVATE KEY-----`** | | Private Key Passphrase (Optional) | The passphrase created when generating the encrypted key. | **`passphrase_xyz`** | | Schema | The default schema used to build dbt™ objects during DinoAI background agent sessions. | **`dbt_dinoai`** | | Threads | The number of threads used in this connection. See more [here](https://docs.getdbt.com/docs/running-a-dbt-project/using-threads). | **`8`** | ## Related topics - [Snowflake](/products/settings/connections/development-environment/snowflake.md) - [Snowflake Storage](/integrations/snowflake-storage.md) - [Snowflake Tools](/products/dino-ai/tools-and-features/warehouse-tool/snowflake-tools.md) - [Snowflake OAuth](/products/settings/connections/connection-security/snowflake-oauth.md)