Snowflake Connector Instant Flow Fails after app share

Type of Connector

Certified Connector

Name of Connector

Snowflake

Describe the bug

When creating an instant flow within a canvas app. The flow can be used to access the snowflake data with no issues by the flow creator. When the application is shared with others the users are prompted to login to Snowflake with SSO. After login and upon launching the PowerApp the instant flow will load until timeout and never return data unless the user has defined a Default Role in their Snowflake profile. The user can still query via the Snowflake UI and Power BI with no issues even without a Default Role.

Is this a security bug?

No, this is not a security bug

What is the severity of this bug?

Severity 1 - Connector is broken or there's a very serious issue

To Reproduce

Create a canvas app
Add an instant flow that returns data using the Snowflake Connector
Share the application and flow with another user
Ask user to try and load data into the application
Data will never load and timeout

Expected behavior

This should work exactly like the SQL server connector that allows implicit access to the data via the flow creators account. App Users should not have to login to Snowflake after the app has already been shared with them the app should retrieve data using the flow creators account.

Environment summary

Powerapps canvas app
Power automate instant flow
Snowflake Connector

Additional context

This is preventing effective use of the Snowflake functionality. Apps that are created to use the instant flow to retrieve data are only usable by the app creator and cannot be shared.

Start by tracing the Snowflake Connector authentication path for an instant flow used by a shared canvas app, comparing it with the SQL server connector behavior described in the report. Reproduce the timeout with a user who has no Snowflake Default Role, then verify that shared app users can retrieve data without an unnecessary Snowflake login.