Setup of Connect
Setup Guide
If Connect is not already configured from the landing page and running, click on the Posit Connect logo.
Connect setup requires application roles POSIT_TEAM_ADMIN or POSIT_CONNECT_ADMIN. See top right corner to see your permissions. If you originally installed the Posit Team Native App, you already have all roles.
Configuration
License
Posit Connect requires a valid Advanced license file. If you think you have a valid license file, just upload via the file input and it will be validated. If you don’t have a license file, please contact Posit sales.
Alternatively, Posit Team supports a free 30-day trial of Connect that you can start by clicking the Get a free trial license button. A modal will appear asking you to agree to the Posit EULA. You will need to contact sales (snowflakemarketplace@posit.co) to purchase a license before the 30-day trial expires to continue normal operation of Connect.
Compute pool
The compute pool size you choose is dependent on how you plan to use your instance of Connect.
For a small team (3-5 users) that produces a few pieces of content each day, use at least a small (CPU_X64_S) compute cluster. To better understand your team’s needs, we recommend starting with a size slightly larger than you may need (which avoids OOM errors), monitoring the resource usage, and then adjusting your compute cluster size accordingly.
Once you click continue, Connect will begin to provision. This will take roughly 10 minutes to create the compute pool and start the Connect container. The compute pool size can be resized later as well, taking about 15 minutes.
Using backups from another Posit Team Native App
You can launch Posit Connect within the Posit Team Native App using a previously created backup. Backups from another installation of the Posit Team Native App are supported.
The target Posit Team Native App needs to be granted the POSIT_TEAM_ADMIN application role in order to enumerate and access the backups associated with your source Posit Team Native App.
Assuming that your source Posit Team Native App is named POSIT_TEAM_SOURCE and your target Posit Team Native App is named POSIT_TEAM_TARGET, run the following Snowflake SQL to grant access:
Snowsight UI
GRANT APPLICATION ROLE POSIT_TEAM_SOURCE.POSIT_TEAM_ADMIN TO APPLICATION POSIT_TEAM_TARGET;After running this code, you can ask that backups from POSIT_TEAM_SOURCE be used when launching Connect in the Posit Team Native App named POSIT_TEAM_TARGET.
OAuth integrations
Administrators
To enable secure access to resources in Snowflake or other service providers, Connect administrators must set up OAuth integrations that content publishers can leverage. See the guides lists here to learn more.
It is strongly recommended that you configure a Snowflake OAuth security integration for Posit Connect. A Snowflake OAuth security integration lets users access Snowflake resources from within Posit Connect without having to manually configure credentials or passwords.
To create and activate the OAuth integration copy the SQL code generated on the OAuth setup step and run it in a Snowflake Worksheet as an ACCOUNTADMIN.
Next, click Continue. This will restart Connect with these credentials and it will be available in 3-4 minutes. Or click Skip to skip the integration and continue with setup.
Once Connect is fully configured and ready, you are redirected to the product management page. Login to the Connect app and create a Snowflake integration in the System > Integrations tab.
Use the client_id, client_secret, and account_url returned by the query to configure a Snowflake OAuth integration in Posit Connect.
Publishers
See the Connect documentation to learn how to associate these integrations with your content once it is published.
Caveats
Currently, it is not possible to set up an AWS Service Account OAuth integration since AWS requires there to be a public OIDC configuration endpoint to use to validate the workload identity tokens created by Connect for assuming IAM roles. All traffic must be authenticated with Snowflake to reach any endpoint exposed by a service on SPCS. You can still use the AWS Viewer authentication type integration since that validation happens external to Connect.
Ready
Once Connect is fully configured and ready, you are redirected to the product management page.
Click on the “Service Endpoint” to be taken to Connect.
Users will typically access Connect from the landing page.
FAQ
Are updates to Connect automatic?
No. When the Posit Team Native App is updated, the administrator still decides when to upgrade each product in their respective “Manage” screens.