Clonvara Insurance Services / BB-Demo – Onboarding
Callcompleted
Clonvara Insurance Services: documents · 2025-11-12 12:00
First technical onboarding session with Aoife Tuohy. Database, role and a new warehouse were created inside Clonvara's own Snowflake account. The network allow list and CRM admin approval are the open dependencies before the first connector can load.
What was said
What this says
Current to 11 Oct 26First technical onboarding session with Aoife Tuohy. Database, role and a new warehouse were created inside Clonvara's own Snowflake account. The network allow list and CRM admin approval are the open dependencies before the first connector can load.
What happened: Laura Penhaligon walked Aoife Tuohy through creating the database, role and warehouse. The script failed on the existing warehouse because of a resource limit, so a new small warehouse was created and ran cleanly.
Customer view: Aoife valued that the data stays in Clonvara's account, since compliance had asked twice whether it leaves. She wants a tightly scoped role and keeps the policy schema out of reach by loading it as a file.
Commercial: This is delivery of the implementation. The call raises no price or renewal point, but a smooth start protects the first-year relationship.
Watch: Aoife does not own the network allow list and the CRM admin is the sales operations person. Either could slow the first connector load.
Themes
Current to 9 Oct 26Theme
Snowflake setup, onboarding
Importance
neutral
Sentiment
positive
Voice
user
Who was there
BB-Demo
CRMmade from
Them
CRMmade from
Follow-up
Next steps
Current to 9 Oct 26- Aoife to find who owns the allow list and raise it with infrastructure.
- Aoife to bring the sales operations person to the next call.
- Laura to send the public key via the shared password manager.
Risks
Current to 9 Oct 26- The network allow list is owned by another team, which could delay the first connector load.
- The CRM admin who must authorise the connector has not yet joined a call.
Opportunities
Current to 9 Oct 26- The in-account design answers compliance concerns and can be reused as a reference point for the security conversation.
Transcript
Laura Penhaligon NoneHi Aoife, can you hear me? I'm just seeing you come in. Laura, we haven't spoken yet, Siobhán said you'd join the technical sessions.
Aoife Tuohy NoneHi, yes, I can hear you. Aoife. Sorry, I'm eating a sandwich at my desk, it's been one of those mornings.- Laura Penhaligon NonePlease do, I'll talk slowly. So this one's all about Snowflake. By the end I'd like us to have the database, the role and the warehouse sorted, so the first connector can load next time.
- Aoife Tuohy NoneOkay. I've done a bit of reading from the doc you sent. I wasn't sure if you wanted a new account or a database in the one we already have.
- Laura Penhaligon NoneA database in your existing account. Everything runs inside it, that's the whole point. We don't hold a copy anywhere else, so you keep control of it.
- Aoife Tuohy NoneRight. That'll make life easier with the compliance people. They asked me twice if the data leaves.
- Laura Penhaligon NoneIt doesn't. Let me share my screen, and I'll walk you through what I'd create. One second. There. This is the script. You'll see a database, a schema for raw loads, a schema for the brain's own tables, and a role.
- Aoife Tuohy NoneMm, I can see it. The role, what's it allowed to do? I'd rather not hand over anything I'd have to explain in an audit.
- Laura Penhaligon NoneFair. It can create and read tables inside that one database and use one warehouse. It can't see the rest of your account unless you grant it something. If you want to be stricter, tell me which schemas are off limits and I'll leave them out of the script.
- Aoife Tuohy NoneThe policy schema, definitely. That one's only meant for our own reporting, and I'll bring it in as a file so the role never touches the source.
- Laura Penhaligon NonePerfect, that's what Siobhán described. A file that arrives, you drop it into the raw schema, we read from there.
- Aoife Tuohy NoneYeah, it's a nightly export. It lands in a bucket first, then I load it. I could automate it but I've been a bit scared to touch it.
- Laura Penhaligon NoneLeave it as it is for now. Automating it is a nice to have, not a blocker. Right, shall we run the script together? I'll wait while you do it on your side.
- Aoife Tuohy NoneOkay. Give me a minute, I need to switch to the admin role. Sorry, it logged me out. Mm. Right, I'm in.
- Aoife Tuohy NoneIt's run. There's an error on the last line, something about the warehouse.
- Laura Penhaligon NoneCan you read it out? Is it saying it doesn't exist, or it can't be used?
- Aoife Tuohy NoneIt can't be used. I think it's the one we already have, and it's got a resource limit on it.
- Laura Penhaligon NoneRight, that's easy enough. Better to give the brain its own small warehouse then, so it doesn't compete with your reporting. Change the name in the script and let it create a new one. A small size is plenty to start with.
- Aoife Tuohy NoneOkay, doing that. Sorry, I keep going quiet, I'm checking the names against our standard. We've got a naming convention and the compliance people care about it.
- Aoife Tuohy NoneRight, that's all of it, no errors. I can see the database and the role.
- Laura Penhaligon NoneLovely. Now the user. I need a service user for the brain, with key pair authentication rather than a password. Is that something your security people are comfortable with?
- Aoife Tuohy NoneKey pair is fine, we already do it for the BI tool. Passwords are the thing they hate.
- Laura Penhaligon NoneGood. I'll generate the public key and send it to you securely, not over email in plain text. We'll sort a way to share it.
- Aoife Tuohy NoneWe have a password manager with sharing. If you send it there it'd be fine.
- Laura Penhaligon NonePerfect. Next, network access. Does your account restrict where connections can come from?
- Aoife Tuohy NoneIt does. There's an allow list. I'd have to ask who owns that, it isn't me.
- Laura Penhaligon NoneOkay, that's the one thing that might slow us. Could you find out who owns it before next week? If it's a colleague in IT, it's worth them knowing it's coming.
- Aoife Tuohy NoneI'll ask this afternoon. I think it's a ticket to the infrastructure team, but they're good, they'll turn it round in a day or two.
- Laura Penhaligon NoneGreat. Then the CRM connector. Do you have an admin for the CRM who can authorise us, or is that you?
- Aoife Tuohy NoneIt's not me. It's the sales operations person, she's sensible. I'll get her added to the next call if that helps.
- Laura Penhaligon NoneThat would help a lot. We need her for about ten minutes to approve the connection and choose which objects we read. Brokers, contacts, activities, the notes.
- Aoife Tuohy NoneOkay. And does it write anything back? She'll ask.
- Laura Penhaligon NoneNo, read only. It reads and indexes. Nothing goes back into your CRM.
- Aoife Tuohy NoneGood, that'll settle her. Right, so for me: ask about the allow list, bring the sales operations person next time, and put the public key in the password manager when it arrives.
- Laura Penhaligon NoneThat's it exactly. I'll send the key and a short summary of today within the hour. Thanks, Aoife, that went faster than I expected.
- Aoife Tuohy NoneCheers, Laura. Speak next week.
Callsmade from