Troubleshoot the Snowflake connector in Azure Data Factory and Azure Synapse

APPLIES TO: Azure Data Factory Azure Synapse Analytics

Tip

Try out Data Factory in Microsoft Fabric, an all-in-one analytics solution for enterprises. Microsoft Fabric covers everything from data movement to data science, real-time analytics, business intelligence, and reporting. Learn how to start a new trial for free!

This article provides suggestions to troubleshoot common problems with the Snowflake connector in Azure Data Factory and Azure Synapse.

Error code: NotAllowToAccessSnowflake

• Symptoms: The copy activity fails with the following error:

  IP % is not allowed to access Snowflake. Contact your local security administrator.

• Cause: It's a connectivity issue and usually caused by firewall IP issues when integration runtimes access your Snowflake.

• Recommendation:

  • If you configure a self-hosted integration runtime to connect to Snowflake, make sure to add your self-hosted integration runtime IPs to the allowed list in Snowflake.
  • If you use an Azure Integration Runtime and the access is restricted to IPs approved in the firewall rules, you can add Azure Integration Runtime IPs to the allowed list in Snowflake.
  • If you use a managed private endpoint and a network policy is in place on your Snowflake account, ensure Managed VNet CIDR is allowed. For more steps, refer to How To: Set up a managed private endpoint from Azure Data Factory or Synapse to Snowflake.

Error code: SnowflakeFailToAccess

• Symptoms:
  The copy activity fails with the following error when using Snowflake as source:
  Failed to access remote file: access denied. Please check your credentials
  The copy activity fails with the following error when using Snowflake as sink:
  Failure using stage area. Cause: [This request is not authorized to perform this operation. (Status Code: 403; Error Code: AuthorizationFailure)
  

• Cause: The error pops up by the Snowflake COPY command and is caused by missing access permission on source/sink when execute Snowflake COPY commands.

• Recommendation: Check your source/sink to make sure that you have granted proper access permission to Snowflake.

  • Direct copy: Make sure to grant access permission to Snowflake in the other source/sink. Currently, only Azure Blob Storage that uses shared access signature authentication is supported as source or sink. When you generate the shared access signature, make sure to set the allowed permissions and IP addresses to Snowflake in the Azure Blob Storage. For more information, see this article.
  • Staged copy: The staging Azure Blob Storage linked service must use shared access signature authentication. When you generate the shared access signature, make sure to set the allowed permissions and IP addresses to Snowflake in the staging Azure Blob Storage. For more information, see this article.

Related content

For more troubleshooting help, try these resources:

• Connector troubleshooting guide
• Data Factory blog
• Data Factory feature requests
• Azure videos
• Microsoft Q&A page
• Stack Overflow forum for Data Factory
• Twitter information about Data Factory