Privileges for using ArcGIS with cloud data warehouses

In ArcGIS, you can view and analyze data from cloud data warehouses. Use the tools available through your cloud data warehouse provider to grant the privileges required to access the data. The credentials you use to connect to a cloud data warehouse from ArcGIS only need to allow the connecting user to select data.

Amazon Redshift

The connecting user requires usage privileges on the schema that contains the data they need to access and select privileges on specific tables in the schema.

Users require additional privileges to create a materialized view.

To enable feature binning on a table in Redshift, you must be the table owner. You also must have privileges to create tables and execute functions on the schema where the table is stored, and be granted USAGE ON LANGUAGE plpythonu.

See Amazon Redshift documentation for specific privileges.

Google BigQuery

The account you use to connect must be a member of a role that has the following privileges:

  • bigquery.datasets.get
  • bigquery.jobs.create
  • bigquery.readsessions.create
  • bigquery.readsessions.getData
  • bigquery.routines.get
  • bigquery.routines.list
  • bigquery.tables.create
  • bigquery.tables.delete
  • bigquery.tables.get
  • bigquery.tables.getData
  • bigquery.tables.list
  • bigquery.tables.update
  • bigquery.tables.updateData
  • resourcemanager.projects.get

In addition, to enable feature binning on a table, the connecting account must have write access to the dataset where the table is stored.

Snowflake

To access data in Snowflake, the connecting user must have usage privileges on the schema that contains the data they need to access and select privileges on specific tables in the schema.

To enable feature binning, the connecting user must have ownership privileges on the table to be enabled for feature binning. The connecting user must also have privileges to create tables, because a table is created in Snowflake to store the bin caches.

To allow other users to access cached feature bins, you must grant select privileges on the cache table. The table name is esri_gh__<the name of the table on which you enabled feature binning>_<srid of the table>.

Users require additional privileges to create a materialized view.

See Snowflake documentation for specific privileges and how to grant them.