Migrating Snowflake connections from Service Account to Key Pair authentication

Service accounts using Username/Password must be set in Snowflake as a "LEGACY_SERVICE" account, and must be moved over to Key Pair authentication by November 2025, per Snowflake.

To migrate from Service Account to Key Pair authentication, follow these steps:

  1. Follow this guide to generate key pair values. ThoughtSpot supports both encrypted and non-encrypted keys.

  2. Navigate to the Data workspace and select Connections from the left menu. Select the desired Snowflake connection that is currently authenticated using a password-based service account.

    Open the Snowflake connection view and select the Edit connection button.

  3. Select Edit connection. The Select tables page appears. Click Back.

    Select Back from the top bar.

  4. The Snowflake connection details page appears.

    Service Account connection details appear.

  5. Click Service Account and select Key Pair from the dropdown.

    Select Key Pair and fill out the connection details.

  6. Enter the required authentication details:

    1. Account name

    2. User (Enter the recently created service account user.)

    3. Private key (Reference the rsa_key.p8 file you created in Snowflake. Include the private key delimiters.)

    4. Passphrase (Mandatory if your key is encrypted.)

    5. Role

    6. Warehouse

    7. Database

  7. Click Continue, then click Save.