Snowflake Telemetry Integration

Integrating your Snowflake data into Finout lets you turn internal business metrics into daily Telemetry that power cost models, shared‑cost allocation, and richer reporting.

Prerequisite: Ensure Finout has access to the relevant tables in your Snowflake environment. These tables should contain business KPIs or metrics that Finout can convert into daily usage telemetry for accurate cost allocation and reporting.

1. Create Permissions in Snowflake

Note: Skip this step if you already granted Finout access during Snowflake Cost‑Center onboarding, or if you plan to reuse the same Snowflake user & role.

Run the following commands as a user with the ACCOUNTADMIN role:

• To set up a dedicated warehouse, role, and user for Finout, paste the following query, ensure secure access by restricting the connection to specific IP addresses used by Finout, and then run the following command:

  CREATE WAREHOUSE IF NOT EXISTS finout_warehouse 
    WITH WAREHOUSE_SIZE = 'XSMALL' 
    AUTO_SUSPEND = 30 
    INITIALLY_SUSPENDED = TRUE;
  CREATE ROLE finout_role;
  CREATE USER finout_user
      DEFAULT_ROLE = finout_role;
  GRANT USAGE ON WAREHOUSE finout_warehouse TO ROLE finout_role;
  GRANT ROLE finout_role TO USER finout_user;
  GRANT IMPORTED PRIVILEGES ON DATABASE snowflake TO ROLE finout_role;
  CREATE OR REPLACE NETWORK POLICY FINOUT_NETWORK_POLICY
      ALLOWED_IP_LIST = (
          '34.196.241.137',
          '212.59.64.84',
          '54.163.113.82',
          '44.196.75.137'
      );
  ALTER USER finout_user SET NETWORK_POLICY = FINOUT_NETWORK_POLICY;

2. Set Up Key‑Pair Authentication

Note: If you already configured key‑pair authentication during Cost‑Center onboarding, you can safely skip this entire section.

Finout authenticates to Snowflake using RSA key-pair authentication, eliminating the need to store a password:

• Key pair generation: Finout securely generates the RSA key pair.

• Private key protection: The private key remains within Finout’s secure storage infrastructure.

• Public key deployment: The public key is added to your Snowflake user account to complete the authentication setup.

1. Key‑Pair Generation (Handled by Finout)

   Finout Support will send you the public key. No action is required on your side for key creation.

2. Update Your Snowflake User

   1. Log in to the Snowflake console and open a worksheet.

   2. Run the following command, replacing placeholders:

      ALTER USER <your_username> SET RSA_PUBLIC_KEY = '<public_key>';  -- Include the full key string

      • <your_username> – the Snowflake user you created for Finout (e.g., finout_user).

      • <public_key> – the public key string provided by Finout (include the BEGIN/END lines if present).

Finout will verify the connection automatically.

3. Grant Access to the KPI / Metric Table

Limit permissions to exactly what Finout needs:

GRANT USAGE  ON DATABASE your_database TO ROLE finout_role;
GRANT USAGE  ON SCHEMA   your_database.your_schema TO ROLE finout_role;
GRANT SELECT ON TABLE    your_database.your_schema.your_table TO ROLE finout_role;

4. Share Snowflake Access Details with Finout

Send the following securely to Finout Support:

• Username (e.g., finout_user)

• Account name (the part before the Snowflake URL)

• Role (e.g., FINOUT_ROLE)

• Warehouse , Database , and Schema.

Result:

Once the setup is finished, Finout starts ingesting your telemetry within 24 hours. You’ll then be able to:

• Use Telemetry as a dimension in reallocation virtual tags.

• Break down shared costs using internal usage metrics from telemetry data.

• Build dashboards and widgets that combine cost and business KPIs using telemetry data to create comprehensive unit economics views. Set up anomaly alerts on unit economic metrics to automatically detect when your cost per customer, company product, team, or other key ratios deviate from expected patterns.

See Connect to Snowflake for more information.