ErrorCode=SnowflakeFailToAccess,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Snowflake fails to access remote file. Please make sure you grant proper access permission to Snowflake in Azure Blob storage when using shared acce

Question

Hi Team, We are trying to copy data from Blob storage(Public access disabled only connectivity via private endpoint allowed on it ) to Snowflake and getting the below error: We have created separate linked services in the ADF for Blob( using SAS token) and Snowflake(using generic account) from ADF and both are working as expected. "ErrorCode=SnowflakeFailToAccess,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Snowflake fails to access remote file. Please make sure you grant proper access permission to Snowflake in Azure Blob storage when using shared access signature. To learn more about this, see https://docs.snowflake.com/en/user-guide/data-load-azure-config.html#option-2-generating-a-sas-token.,Source=Microsoft.DataTransfer.Common,''Type=System.Data.Odbc.OdbcException,Message=ERROR [22000] Failure using stage area. Cause: [This request is not authorized to perform this operation. (Status Code: 403; Error Code: AuthorizationFailure)],Source=SnowflakeODBC_sb64.dll,'"

Answer 1

Hello Eashendra Singh, Welcome to the MS Q&A platform. It seems like the error is caused by missing access permissions on the source (Azure Blob Storage) when executing the Snowflake COPY command. To resolve this issue, you need to make sure that you have granted proper access permissions to Snowflake in Azure Blob Storage Since you're using a shared access signature (SAS) for authentication in your Azure Blob Storage linked service, please make sure that the SAS token has the necessary permissions and IP addresses allowed for Snowflake. Refer to this article for more information on generating a SAS token with the correct permissions. Additionally, double-check that your Snowflake linked service has the necessary USAGE access on the database, read/write access on the schema, and the tables/views under it. It should also have CREATE STAGE permission on the schema to create the External stage with the SAS URI document: https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/data-factory/connector-snowflake.md

I hope this helps. Please let me know if you have any further questions.