Microsoft Entra IDSnowflake Provisioning Tutorial
In brief
With Privileged Identity Management (PIM) for Groups, you can provide just-in-time access to groups in Snowflake and reduce the number of users who have permanent access to privileged groups in Snowflake.
What Entra admins need to know
Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
Open on Microsoft Learn ↗The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.
With Privileged Identity Management (PIM) for Groups, you can provide just-in-time access to groups in Snowflake and reduce the number of users who have permanent access to privileged groups in Snowflake.
Configure your enterprise application for SSOsingle sign-on (SSO) and provisioning
To set up persistent, non-admin access in Snowflake, complete these steps:
- Add Snowflake to your tenant, configure it for provisioning as described in the
article above,previous steps of this tutorial, and start provisioning. - Configure single sign-on for Snowflake.
- Create a group that provides all users access to the application.
- Assign the group to the Snowflake application.
@@ -179,8 +179,11 @@ Snowflake-generated SCIM tokens expire in 6 months. Be aware that you need to re With Privileged Identity Management (PIM) for Groups, you can provide just-in-time access to groups in Snowflake and reduce the number of users who have permanent access to privileged groups in Snowflake. -**Configure your enterprise application for SSO and provisioning**-1. Add Snowflake to your tenant, configure it for provisioning as described in the article above, and start provisioning. +**Configure your enterprise application for single sign-on (SSO) and provisioning**++To set up persistent, non-admin access in Snowflake, complete these steps:++1. Add Snowflake to your tenant, configure it for provisioning as described in the previous steps of this tutorial, and start provisioning. 1. Configure [single sign-on](snowflake-tutorial.md) for Snowflake. 1. Create a [group](/entra/fundamentals/how-to-manage-groups) that provides all users access to the application. 1. Assign the group to the Snowflake application.