Setup Azure SCIM Integration with Snowflake

Setup_Azure_SCIM_Integration_with_Snowflake.sql

USE ROLE accountadmin;

CREATE ROLE IF NOT EXISTS aad_provisioner;

GRANT CREATE USER ON ACCOUNT TO ROLE aad_provisioner;
GRANT CREATE ROLE ON ACCOUNT TO ROLE aad_provisioner;

GRANT ROLE aad_provisioner TO ROLE accountadmin;

CREATE OR REPLACE SECURITY INTEGRATION aad_provisioning
    type=scim
    scim_client='azure'
    run_as_role='AAD_PROVISIONER'
    comment = 'Azure AD SCIM Provisioning';

CREATE OR REPLACE NETWORK POLICY scim_network_policy
allowed_ip_list = (
    '00.000.000.000'
)
COMMENT = 'The IP list is from AzureActiveDirectory Created for SCIM.' 
;

ALTER SECURITY INTEGRATION AAD_PROVISIONING SET NETWORK_POLICY = scim_network_policy;