Skip to main content

Configuration & Setup

Deployed Components & Features​

The Ekai Native App deploys the following onto your Snowflake account:

Snowpark Container Services

ServicePurpose
WebUI frontend
BackendConnects application services
ERDAI functions for schema understanding
ProfilerData profiling
SemanticsBuilds understanding of user requirements
Support servicesNeo4J, MinIO, Redis, Postgres, PgVect — for knowledge graphs, file storage, agent memory, app data, and embeddings

External Access Integration (EAI)

A limited-scope EAI is configured to enable enterprise LLMs. It requests access to:

  • Snowflake Computing
  • AWS Simple Email Service (account creation emails)
  • Google APIs
  • Microsoft Azure OpenAI APIs
  • DBT Package Hub & Git/GitHub (DBT dependencies)

Warehouse & Compute

  • An XS warehouse EKAI_APP_WAREHOUSE is created and accessible by the app by default.
  • An XS compute pool is created to run the Snowpark Container Services.

1. App Installation​

Refer to the Installation guide for full steps.

2. App Configuration​

2.1 LLM Configuration​

ekai supports three LLM modes:

  • Public APIs — provide your own API keys (OpenAI, Anthropic, etc.)
  • Enterprise Cloud LLMs — your Azure / GCP deployed models (recommended for confidentiality)
  • Snowflake Cortex — coming soon

To configure enterprise LLMs:

  1. Navigate to the LLM Configuration tab in the left panel.

    LLM Configuration tab in left panel

  2. Select the Enterprise Cloud option from the configuration window.

    Select enterprise cloud LLM option

  3. Add GCP credentials by uploading your Google Service Account JSON or filling in the fields manually.

    GCP credentials input

  4. Switch to the Azure tab and enter your Azure OpenAI credentials.

    Azure credentials input
Required LLM Models

The following models must be available via your cloud accounts:

GCP (Vertex AI)

  • gemini-3.1-pro-preview
  • claude-sonnet-4-6
  • claude-haiku-4-6

Azure OpenAI

  • gpt-5-mini
  • text-embedding-3-small

2.2 Usage Configuration​

ekai's usage limits (data connections, semantic models, tables, etc.) are configured per your plan. To activate, share your account identifier with the Ekai team by running:


SELECT CURRENT_ACCOUNT();

2.3 Data Access Configuration​

Data connections are created from the Schema Agents section in the left panel. Ekai supports two ways of connecting to consumers' data:

  • User Programmatic Access Token (PAT)
  • Native App Identity

To set up a connection using Native App Identity:

  1. Click Add Data Connection in the upper right.

    Add Data Connection button

  2. Select Native App Identity as the Authentication Type and fill in your connection details. Before clicking Next — ensure the app has access to relevant objects. You can do so with the queries in step 3 below.

    Select Native App Identity auth type

  3. Grant the app access to your warehouse, database, and schema by running the following SQL as ACCOUNTADMIN if needed:


-- Warehouse
GRANT USAGE ON WAREHOUSE <your-wh> TO APPLICATION <APPLICATION_NAME>;

-- Database
GRANT USAGE ON DATABASE <your-db> TO APPLICATION <APPLICATION_NAME>;

-- Schema
GRANT USAGE ON SCHEMA <your-db.schema> TO APPLICATION <APPLICATION_NAME>;

-- Tables
GRANT SELECT ON ALL TABLES
  IN SCHEMA <your-db.your-schema>
  TO APPLICATION <APPLICATION_NAME>;

-- Views
GRANT SELECT ON ALL VIEWS
  IN SCHEMA <your-db.your-schema>
  TO APPLICATION <APPLICATION_NAME>;

  1. Click Next — your data connection is ready.

3. App Access Control​

By default, only ACCOUNTADMIN (the app owner) has access. There are two ways to grant access to other users:

Option A — User Requests Access​

  1. After the ACCOUNTADMIN has installed the app, other users navigate to the app listing.

    App listing page

  2. Instead of Get, they will see Request Access — clicking it notifies the app owner.

  3. The app owner receives an email and navigates to App Settings → Access Management to grant the relevant application roles.

Option B — App Owner Grants Access in Advance​

  1. ACCOUNTADMIN opens Catalog → Apps → Active Apps and clicks the app listing to open its settings.

  2. Navigate to the Access Management tab.

    Access Management tab

  3. Click Add under Account roles with access and select the roles to grant from the popup.

    Add role popup Select roles to grant
Quickest path

Grant the EKAI_APP_USER application role to the PUBLIC role to give all users access in one step.