From 7aeb4e19906ef3722efa9bd05884238e7e2c6117 Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Fri, 19 Jul 2024 15:24:09 -0400 Subject: [PATCH 1/7] Adds new marketplace app role --- .../snippets/_enterprise-permissions-table.md | 31 ++++++++++--------- 1 file changed, 16 insertions(+), 15 deletions(-) diff --git a/website/snippets/_enterprise-permissions-table.md b/website/snippets/_enterprise-permissions-table.md index a21a1869498..16ea2bc3678 100644 --- a/website/snippets/_enterprise-permissions-table.md +++ b/website/snippets/_enterprise-permissions-table.md @@ -14,21 +14,22 @@ Account roles enable you to manage the dbt Cloud account and manage the account #### Account permissions for account roles -| Account-level permission| Account Admin | Billing admin | Project creator | Security admin | Viewer | -|:-------------------------|:-------------:|:-------------:|:---------------:|:--------------:|:------:| -| Account settings | W | | R | R | R | -| Audit logs | R | | | R | R | -| Auth provider | W | | | W | R | -| Billing | W | W | | | R | -| Groups | W | | R | W | R | -| Invitations | W | | W | W | R | -| IP restrictions | W | | | W | R | -| Licenses | W | | W | W | R | -| Members | W | | W | W | R | -| Project (create) | W | | W | | | -| Public models | R | R | R | R | R | -| Service tokens | W | | | R | R | -| Webhooks | W | | | | | +| Account-level permission| Account Admin | Billing admin | Manage

marketplace

apps | Project creator | Security admin | Viewer | +|:-------------------------|:-------------:|:------------:|:-------------------------:|:---------------:|:--------------:|:------:| +| Account settings | W | | | R | R | R | +| Audit logs | R | | | | R | R | +| Auth provider | W | | | | W | R | +| Billing | W | W | | | | R | +| Groups | W | | | R | W | R | +| Invitations | W | | | W | W | R | +| IP restrictions | W | | | | W | R | +| Licenses | W | | | W | W | R | +| Marketplace app | | | W | | | | +| Members | W | | | W | W | R | +| Project (create) | W | | | W | | | +| Public models | R | R | | R | R | R | +| Service tokens | W | | | | R | R | +| Webhooks | W | | | | | | #### Project permissions for account roles From 2045b4799d614940e23624acb95e806185133ae3 Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Fri, 19 Jul 2024 15:37:22 -0400 Subject: [PATCH 2/7] ADding new information --- .../docs/cloud-integrations/set-up-snowflake-native-app.md | 2 +- website/docs/docs/dbt-cloud-apis/service-tokens.md | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md index 2118f946779..e3905101ec0 100644 --- a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md +++ b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md @@ -28,7 +28,7 @@ The following are the prerequisites for dbt Cloud and Snowflake. - You must have a dbt Cloud account on the Enterprise plan that's in an AWS Region or Azure region. If you don't already have one, please [contact us](mailto:sales_snowflake_marketplace@dbtlabs.com) to get started. - Currently, Semantic Layer is unavailable for Azure ST instances and the **Ask dbt** chatbot will not function in the dbt Snowflake Native App without it. -- Your dbt Cloud account must have permission to create a [service token](/docs/dbt-cloud-apis/service-tokens). For details, refer to [Enterprise permissions](/docs/cloud/manage-access/enterprise-permissions). +- Your dbt Cloud account must have permission to create a [service token](/docs/dbt-cloud-apis/service-tokens) assigned the `Manage marketplace apps` role. For details, refer to [Enterprise permissions](/docs/cloud/manage-access/enterprise-permissions). - There's a dbt Cloud project with [Semantic Layer configured](/docs/use-dbt-semantic-layer/setup-sl) and metrics declared. - You have set up a [production deployment environment](/docs/deploy/deploy-environments#set-as-production-environment). - There has been at least one successful job run that includes a `docs generate` step in the deployment environment. diff --git a/website/docs/docs/dbt-cloud-apis/service-tokens.md b/website/docs/docs/dbt-cloud-apis/service-tokens.md index 26b0e58caa2..068808742f7 100644 --- a/website/docs/docs/dbt-cloud-apis/service-tokens.md +++ b/website/docs/docs/dbt-cloud-apis/service-tokens.md @@ -69,6 +69,9 @@ Security Admin service tokens have certain account-level permissions. For more **Billing Admin**
Billing Admin service tokens have certain account-level permissions. For more on these permissions, see [Billing Admin](/docs/cloud/manage-access/enterprise-permissions#billing-admin). +**Marketplace app**
+Used only for apps on the marketplace (for example, the [Snowflake Native app](/docs/cloud-integrations/snowflake-native-app)). + **Metadata Only**
Metadata-only service tokens authorize requests to the Discovery API. From 2c3ab7bf1d6c5ba28748a2b6c8875c658a5101be Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Fri, 19 Jul 2024 15:39:30 -0400 Subject: [PATCH 3/7] Adding more info --- .../docs/docs/cloud-integrations/set-up-snowflake-native-app.md | 1 + 1 file changed, 1 insertion(+) diff --git a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md index e3905101ec0..d7595969fc6 100644 --- a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md +++ b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md @@ -68,6 +68,7 @@ Configure dbt Cloud and Snowflake Cortex to power the **Ask dbt** chatbot. Collect three pieces of information from dbt Cloud to set up the application. 1. From the gear menu in dbt Cloud, select **Account settings**. In the left sidebar, select **API tokens > Service tokens**. Create a service token with access to all the projects you want to access in the dbt Snowflake Native App. Grant these permission sets: + - **Manage marketplace apps** - **Job Admin** - **Metadata Only** - **Semantic Layer Only** From dfe4728df237ba6f613796a7f2a120382cc165d5 Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Fri, 19 Jul 2024 15:40:12 -0400 Subject: [PATCH 4/7] Update website/docs/docs/dbt-cloud-apis/service-tokens.md --- website/docs/docs/dbt-cloud-apis/service-tokens.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/docs/dbt-cloud-apis/service-tokens.md b/website/docs/docs/dbt-cloud-apis/service-tokens.md index 068808742f7..6c1d3a3b6c9 100644 --- a/website/docs/docs/dbt-cloud-apis/service-tokens.md +++ b/website/docs/docs/dbt-cloud-apis/service-tokens.md @@ -69,7 +69,7 @@ Security Admin service tokens have certain account-level permissions. For more **Billing Admin**
Billing Admin service tokens have certain account-level permissions. For more on these permissions, see [Billing Admin](/docs/cloud/manage-access/enterprise-permissions#billing-admin). -**Marketplace app**
+**Manage marketplace apps**
Used only for apps on the marketplace (for example, the [Snowflake Native app](/docs/cloud-integrations/snowflake-native-app)). **Metadata Only**
From 4308ef639ad222a2dab76f12d8148269d0ff8ab5 Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Fri, 19 Jul 2024 15:40:47 -0400 Subject: [PATCH 5/7] Update website/docs/docs/dbt-cloud-apis/service-tokens.md --- website/docs/docs/dbt-cloud-apis/service-tokens.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/docs/dbt-cloud-apis/service-tokens.md b/website/docs/docs/dbt-cloud-apis/service-tokens.md index 6c1d3a3b6c9..1a5920fab8a 100644 --- a/website/docs/docs/dbt-cloud-apis/service-tokens.md +++ b/website/docs/docs/dbt-cloud-apis/service-tokens.md @@ -70,7 +70,7 @@ Security Admin service tokens have certain account-level permissions. For more Billing Admin service tokens have certain account-level permissions. For more on these permissions, see [Billing Admin](/docs/cloud/manage-access/enterprise-permissions#billing-admin). **Manage marketplace apps**
-Used only for apps on the marketplace (for example, the [Snowflake Native app](/docs/cloud-integrations/snowflake-native-app)). +Used only for service tokens assigned to marketplace apps (for example, the [Snowflake Native app](/docs/cloud-integrations/snowflake-native-app)). **Metadata Only**
Metadata-only service tokens authorize requests to the Discovery API. From 840167eac4595997809788844174516bd0ee2b98 Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Mon, 22 Jul 2024 15:17:23 -0400 Subject: [PATCH 6/7] Update website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md --- .../docs/docs/cloud-integrations/set-up-snowflake-native-app.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md index d7595969fc6..6424c0d69b6 100644 --- a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md +++ b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md @@ -28,7 +28,7 @@ The following are the prerequisites for dbt Cloud and Snowflake. - You must have a dbt Cloud account on the Enterprise plan that's in an AWS Region or Azure region. If you don't already have one, please [contact us](mailto:sales_snowflake_marketplace@dbtlabs.com) to get started. - Currently, Semantic Layer is unavailable for Azure ST instances and the **Ask dbt** chatbot will not function in the dbt Snowflake Native App without it. -- Your dbt Cloud account must have permission to create a [service token](/docs/dbt-cloud-apis/service-tokens) assigned the `Manage marketplace apps` role. For details, refer to [Enterprise permissions](/docs/cloud/manage-access/enterprise-permissions). +- Your dbt Cloud account must have permission to create a [service token](/docs/dbt-cloud-apis/service-tokens). For details, refer to [Enterprise permissions](/docs/cloud/manage-access/enterprise-permissions). - There's a dbt Cloud project with [Semantic Layer configured](/docs/use-dbt-semantic-layer/setup-sl) and metrics declared. - You have set up a [production deployment environment](/docs/deploy/deploy-environments#set-as-production-environment). - There has been at least one successful job run that includes a `docs generate` step in the deployment environment. From c61e942a86562a308e9880d2242351786cfbec16 Mon Sep 17 00:00:00 2001 From: Matt Shaver <60105315+matthewshaver@users.noreply.github.com> Date: Tue, 23 Jul 2024 16:52:27 -0400 Subject: [PATCH 7/7] Update website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md Co-authored-by: Leona B. Campbell <3880403+runleonarun@users.noreply.github.com> --- .../docs/docs/cloud-integrations/set-up-snowflake-native-app.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md index 6424c0d69b6..4f370de6d4d 100644 --- a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md +++ b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md @@ -65,7 +65,7 @@ Configure dbt Cloud and Snowflake Cortex to power the **Ask dbt** chatbot. Make sure to replace `SNOWFLAKE.CORTEX_USER`, `DEPLOYMENT_USER`, and `SL_USER` with the appropriate strings for your environment. ## Configure dbt Cloud -Collect three pieces of information from dbt Cloud to set up the application. +Collect the following pieces of information from dbt Cloud to set up the application. 1. From the gear menu in dbt Cloud, select **Account settings**. In the left sidebar, select **API tokens > Service tokens**. Create a service token with access to all the projects you want to access in the dbt Snowflake Native App. Grant these permission sets: - **Manage marketplace apps**