diff --git a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md index 2118f946779..4f370de6d4d 100644 --- a/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md +++ b/website/docs/docs/cloud-integrations/set-up-snowflake-native-app.md @@ -65,9 +65,10 @@ Configure dbt Cloud and Snowflake Cortex to power the **Ask dbt** chatbot. Make sure to replace `SNOWFLAKE.CORTEX_USER`, `DEPLOYMENT_USER`, and `SL_USER` with the appropriate strings for your environment. ## Configure dbt Cloud -Collect three pieces of information from dbt Cloud to set up the application. +Collect the following pieces of information from dbt Cloud to set up the application. 1. From the gear menu in dbt Cloud, select **Account settings**. In the left sidebar, select **API tokens > Service tokens**. Create a service token with access to all the projects you want to access in the dbt Snowflake Native App. Grant these permission sets: + - **Manage marketplace apps** - **Job Admin** - **Metadata Only** - **Semantic Layer Only** diff --git a/website/docs/docs/dbt-cloud-apis/service-tokens.md b/website/docs/docs/dbt-cloud-apis/service-tokens.md index 26b0e58caa2..1a5920fab8a 100644 --- a/website/docs/docs/dbt-cloud-apis/service-tokens.md +++ b/website/docs/docs/dbt-cloud-apis/service-tokens.md @@ -69,6 +69,9 @@ Security Admin service tokens have certain account-level permissions. For more **Billing Admin**
Billing Admin service tokens have certain account-level permissions. For more on these permissions, see [Billing Admin](/docs/cloud/manage-access/enterprise-permissions#billing-admin). +**Manage marketplace apps**
+Used only for service tokens assigned to marketplace apps (for example, the [Snowflake Native app](/docs/cloud-integrations/snowflake-native-app)). + **Metadata Only**
Metadata-only service tokens authorize requests to the Discovery API. diff --git a/website/snippets/_enterprise-permissions-table.md b/website/snippets/_enterprise-permissions-table.md index a21a1869498..16ea2bc3678 100644 --- a/website/snippets/_enterprise-permissions-table.md +++ b/website/snippets/_enterprise-permissions-table.md @@ -14,21 +14,22 @@ Account roles enable you to manage the dbt Cloud account and manage the account #### Account permissions for account roles -| Account-level permission| Account Admin | Billing admin | Project creator | Security admin | Viewer | -|:-------------------------|:-------------:|:-------------:|:---------------:|:--------------:|:------:| -| Account settings | W | | R | R | R | -| Audit logs | R | | | R | R | -| Auth provider | W | | | W | R | -| Billing | W | W | | | R | -| Groups | W | | R | W | R | -| Invitations | W | | W | W | R | -| IP restrictions | W | | | W | R | -| Licenses | W | | W | W | R | -| Members | W | | W | W | R | -| Project (create) | W | | W | | | -| Public models | R | R | R | R | R | -| Service tokens | W | | | R | R | -| Webhooks | W | | | | | +| Account-level permission| Account Admin | Billing admin | Manage

marketplace

apps | Project creator | Security admin | Viewer | +|:-------------------------|:-------------:|:------------:|:-------------------------:|:---------------:|:--------------:|:------:| +| Account settings | W | | | R | R | R | +| Audit logs | R | | | | R | R | +| Auth provider | W | | | | W | R | +| Billing | W | W | | | | R | +| Groups | W | | | R | W | R | +| Invitations | W | | | W | W | R | +| IP restrictions | W | | | | W | R | +| Licenses | W | | | W | W | R | +| Marketplace app | | | W | | | | +| Members | W | | | W | W | R | +| Project (create) | W | | | W | | | +| Public models | R | R | | R | R | R | +| Service tokens | W | | | | R | R | +| Webhooks | W | | | | | | #### Project permissions for account roles