Troubleshoot the Snowflake connector in Azure Data Factory and Azure Synapse
APPLIES TO: Azure Data Factory Azure Synapse Analytics
Tip
Try out Data Factory in Microsoft Fabric, an all-in-one analytics solution for enterprises. Microsoft Fabric covers everything from data movement to data science, real-time analytics, business intelligence, and reporting. Learn how to start a new trial for free!
This article provides suggestions to troubleshoot common problems with the Snowflake connector in Azure Data Factory and Azure Synapse.
Error code: NotAllowToAccessSnowflake
Symptoms: The copy activity fails with the following error:
IP % is not allowed to access Snowflake. Contact your local security administrator.
Cause: It's a connectivity issue and usually caused by firewall IP issues when integration runtimes access your Snowflake.
Recommendation:
- If you configure a self-hosted integration runtime to connect to Snowflake, make sure to add your self-hosted integration runtime IPs to the allowed list in Snowflake.
- If you use an Azure Integration Runtime and the access is restricted to IPs approved in the firewall rules, you can add Azure Integration Runtime IPs to the allowed list in Snowflake.
- If you use a managed private endpoint and a network policy is in place on your Snowflake account, ensure Managed VNet CIDR is allowed. For more steps, refer to How To: Set up a managed private endpoint from Azure Data Factory or Synapse to Snowflake.
Error code: SnowflakeFailToAccess
Symptoms:
The copy activity fails with the following error when using Snowflake as source:
Failed to access remote file: access denied. Please check your credentials
The copy activity fails with the following error when using Snowflake as sink:
Failure using stage area. Cause: [This request is not authorized to perform this operation. (Status Code: 403; Error Code: AuthorizationFailure)
Cause: The error pops up by the Snowflake COPY command and is caused by missing access permission on source/sink when execute Snowflake COPY commands.
Recommendation: Check your source/sink to make sure that you have granted proper access permission to Snowflake.
- Direct copy: Make sure to grant access permission to Snowflake in the other source/sink. Currently, only Azure Blob Storage that uses shared access signature authentication is supported as source or sink. When you generate the shared access signature, make sure to set the allowed permissions and IP addresses to Snowflake in the Azure Blob Storage. For more information, see this article.
- Staged copy: The staging Azure Blob Storage linked service must use shared access signature authentication. When you generate the shared access signature, make sure to set the allowed permissions and IP addresses to Snowflake in the staging Azure Blob Storage. For more information, see this article.
Related content
For more troubleshooting help, try these resources:
Feedback
https://aka.ms/ContentUserFeedback.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see:Submit and view feedback for