Installation
Requirements
Section titled “Requirements”- Snowflake Enterprise Edition or higher (masking policies require Enterprise)
- ACCOUNTADMIN role for installation and initial setup
Install from Marketplace
Section titled “Install from Marketplace”- Find AIQu VEIL in the Snowflake Marketplace
- Click Get and follow the install flow
- Review and approve the requested privileges
Privileges granted at install
Section titled “Privileges granted at install”These are requested through the Snowflake install flow. The consumer approves each one.
| Privilege | Purpose |
|---|---|
| CREATE COMPUTE POOL | CPU pool for inference, training pool for model training |
| BIND SERVICE ENDPOINT | Route queries to the encoding service |
| CREATE WAREHOUSE | Query training data from consumer tables |
| EXECUTE MANAGED TASK | Scheduled retraining |
APPLY MASKING POLICY is not required. The app owns both the masking policies and the feature views they are applied to.
Start services
Section titled “Start services”After installation, start the VEIL services:
CALL veil.core.start_services();Wait for both services to reach ready:
CALL veil.core.wait_for_services();This blocks until the encoding and training containers are running (up to 10 minutes).
Verify
Section titled “Verify”Check service status:
CALL veil.core.service_status();Test encoding:
SELECT veil.core.encode('sample', ARRAY_CONSTRUCT(1.0, 2.0, 3.0, 4.0));Grant application roles
Section titled “Grant application roles”Grant the app_admin role to administrators who will train encoders and manage protection:
GRANT APPLICATION ROLE veil.app_admin TO ROLE my_admin_role;Grant the app_user role to roles that query protected views:
GRANT APPLICATION ROLE veil.app_user TO ROLE analyst_role;Next steps
Section titled “Next steps”- Getting Started to protect your first column
- Configuration for compute and training options