SnowFlake Provisioning error: Grant not executed: Insufficient privileges

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

Hi team,

Hope you are doing well. We have set up snowflake ootb connector in sailpoint iiq. While provisioning the entitlement I am facing this issue "openconnector.InvalidConfigurationException: [ InvalidConfigurationException ] [ Possible suggestions ] The server understands the request but is unable to process the contained instructions. [ Error details ] 003102: Grant not executed: Insufficient privileges.
"

We have correct admin privileges for service account. We tried executing the query in snowflake and it worked.
USE ROLE AccountADMIN;
GRANT ROLE myrole TO USER user1;

I am not sure if sailpoint ootb connector executes USE ROLE query before grant. Did anyone face this issue? any help will be appreciated a lot.

2

do you more detailed logs? Have you checked if role accountadmin has privileges on role “myrole”.

Also, are you able to perform test connection and aggregation successfully?

3

Hi Sunny, Thank you for your repy.

Test connection is working fine. However, account aggregation passes if I disable optimization.

Entitlement aggregation is failing with error

Exception during aggregation of Object Type Role on Application snowflake-test1. Reason: openconnector.InvalidConfigurationException: [ InvalidConfigurationException ] [ Possible suggestions ] An error occurred while querying the Snowflake server. Make sure the connection parameters are valid and correct. [ Error details ] org.apache.http.NoHttpResponseException:url:443 failed to respond

Kindly help me here also

4

Did you capture provisioning plan for ootb connector. if yes can u suggest me how