# Required permissions

This topic describes the permissions required for working with the Snowflake target endpoint.

## Required permissions

The required permissions differ according to whether or not the schema and/or the target tables already existed before the Replicate task started.

### Tables created by Replicate

Permissions required if you want schemas that do not exist to be created automatically

* USAGE ON DATABASE
* CREATE SCHEMA ON DATABASE

Permissions required if the schema already exists

* USAGE ON DATABASE
* USAGE ON SCHEMA
* CREATE FILE FORMAT ON SCHEMA
* CREATE STAGE ON SCHEMA
* CREATE TABLE ON SCHEMA

### Tables that existed before the Replicate task started

Although not recommended, if you wish data to be replicated to existing tables that were created by a user with a different role, the Snowflake user specified in the endpoint settings must have the following table privileges:

* SELECT
* INSERT
* UPDATE
* TRUNCATE
* DELETE
* REFERENCES

## Additional permissions when using Google Cloud Storage for staging

When using Google Cloud Storage as your staging provider, the JSON credentials that you need to specify in the [General tab's JSON credentials field](https://help.qlik.com/en-US/replicate/May2026/Content/Replicate/Main/Snowflake-Target/Snowflake-target-genprop.htm) must be for an account that has read and write access to the specified bucket and folder.