What was said
What this says
As at Fri 9 Oct 2026First technical onboarding session with Aoife Tuohy. Database, role and a new warehouse were created inside Clonvara's own Snowflake account. The network allow list and CRM admin approval are the open dependencies before the first connector can load.
What happened: Laura Penhaligon walked Aoife Tuohy through creating the database, role and warehouse. The script failed on the existing warehouse because of a resource limit, so a new small warehouse was created and ran cleanly.
Customer view: Aoife valued that the data stays in Clonvara's account, since compliance had asked twice whether it leaves. She wants a tightly scoped role and keeps the policy schema out of reach by loading it as a file.
Commercial: This is delivery of the implementation. The call raises no price or renewal point, but a smooth start protects the first-year relationship.
Watch: Aoife does not own the network allow list and the CRM admin is the sales operations person. Either could slow the first connector load.
Themes
As at Fri 9 Oct 2026Who was there
BG-Demo
Them
Follow-up
Next steps
As at Fri 9 Oct 2026- Aoife to find who owns the allow list and raise it with infrastructure.
- Aoife to bring the sales operations person to the next call.
- Laura to send the public key via the shared password manager.
Risks
As at Fri 9 Oct 2026- The network allow list is owned by another team, which could delay the first connector load.
- The CRM admin who must authorise the connector has not yet joined a call.
Opportunities
As at Fri 9 Oct 2026- The in-account design answers compliance concerns and can be reused as a reference point for the security conversation.
Transcript
- Laura PenhaligonHi Aoife, can you hear me? I'm just seeing you come in. Laura, we haven't spoken yet, Siobhán said you'd join the technical sessions.
- Aoife TuohyHi, yes, I can hear you. Aoife. Sorry, I'm eating a sandwich at my desk, it's been one of those mornings.
- Laura PenhaligonPlease do, I'll talk slowly. So this one's all about Snowflake. By the end I'd like us to have the database, the role and the warehouse sorted, so the first connector can load next time.
- Aoife TuohyOkay. I've done a bit of reading from the doc you sent. I wasn't sure if you wanted a new account or a database in the one we already have.
- Laura PenhaligonA database in your existing account. Everything runs inside it, that's the whole point. We don't hold a copy anywhere else, so you keep control of it.
- Aoife TuohyRight. That'll make life easier with the compliance people. They asked me twice if the data leaves.
- Laura PenhaligonIt doesn't. Let me share my screen, and I'll walk you through what I'd create. One second. There. This is the script. You'll see a database, a schema for raw loads, a schema for the brain's own tables, and a role.
- Aoife TuohyMm, I can see it. The role, what's it allowed to do? I'd rather not hand over anything I'd have to explain in an audit.
- Laura PenhaligonFair. It can create and read tables inside that one database and use one warehouse. It can't see the rest of your account unless you grant it something. If you want to be stricter, tell me which schemas are off limits and I'll leave them out of the script.
- Aoife TuohyThe policy schema, definitely. That one's only meant for our own reporting, and I'll bring it in as a file so the role never touches the source.
- Laura PenhaligonPerfect, that's what Siobhán described. A file that arrives, you drop it into the raw schema, we read from there.
- Aoife TuohyYeah, it's a nightly export. It lands in a bucket first, then I load it. I could automate it but I've been a bit scared to touch it.
- Laura PenhaligonLeave it as it is for now. Automating it is a nice to have, not a blocker. Right, shall we run the script together? I'll wait while you do it on your side.
- Aoife TuohyOkay. Give me a minute, I need to switch to the admin role. Sorry, it logged me out. Mm. Right, I'm in.
- Aoife TuohyIt's run. There's an error on the last line, something about the warehouse.
- Laura PenhaligonCan you read it out? Is it saying it doesn't exist, or it can't be used?
- Aoife TuohyIt can't be used. I think it's the one we already have, and it's got a resource limit on it.
- Laura PenhaligonRight, that's easy enough. Better to give the brain its own small warehouse then, so it doesn't compete with your reporting. Change the name in the script and let it create a new one. A small size is plenty to start with.
- Aoife TuohyOkay, doing that. Sorry, I keep going quiet, I'm checking the names against our standard. We've got a naming convention and the compliance people care about it.
- Aoife TuohyRight, that's all of it, no errors. I can see the database and the role.
- Laura PenhaligonLovely. Now the user. I need a service user for the brain, with key pair authentication rather than a password. Is that something your security people are comfortable with?
- Aoife TuohyKey pair is fine, we already do it for the BI tool. Passwords are the thing they hate.
- Laura PenhaligonGood. I'll generate the public key and send it to you securely, not over email in plain text. We'll sort a way to share it.
- Aoife TuohyWe have a password manager with sharing. If you send it there it'd be fine.
- Laura PenhaligonPerfect. Next, network access. Does your account restrict where connections can come from?
- Aoife TuohyIt does. There's an allow list. I'd have to ask who owns that, it isn't me.
- Laura PenhaligonOkay, that's the one thing that might slow us. Could you find out who owns it before next week? If it's a colleague in IT, it's worth them knowing it's coming.
- Aoife TuohyI'll ask this afternoon. I think it's a ticket to the infrastructure team, but they're good, they'll turn it round in a day or two.
- Laura PenhaligonGreat. Then the CRM connector. Do you have an admin for the CRM who can authorise us, or is that you?
- Aoife TuohyIt's not me. It's the sales operations person, she's sensible. I'll get her added to the next call if that helps.
- Laura PenhaligonThat would help a lot. We need her for about ten minutes to approve the connection and choose which objects we read. Brokers, contacts, activities, the notes.
- Aoife TuohyOkay. And does it write anything back? She'll ask.
- Laura PenhaligonNo, read only. It reads and indexes. Nothing goes back into your CRM.
- Aoife TuohyGood, that'll settle her. Right, so for me: ask about the allow list, bring the sales operations person next time, and put the public key in the password manager when it arrives.
- Laura PenhaligonThat's it exactly. I'll send the key and a short summary of today within the hour. Thanks, Aoife, that went faster than I expected.
- Aoife TuohyCheers, Laura. Speak next week.