SQL Studio
SQL Studio is Collate’s integrated query execution environment that enables you to run SQL queries directly against your configured database services. With SQL Studio, you can explore data, validate queries, and perform ad-hoc analysis without leaving the Collate platform.What is SQL Studio?
SQL Studio provides a unified interface for executing SQL queries across multiple database services from within Collate. It eliminates the need to switch between different database clients and provides a consistent experience regardless of which database you’re querying.Key Features
- Multi-Service Support: Execute queries across multiple database services from a unified interface
- Database Selection: Choose which ingested database a query runs against from the query toolbar
- SELECT Query Execution: Run SELECT queries and view results in the studio for different services in a single place
- Secure Authentication: Multiple authentication methods with encrypted credential storage
- Query Management: Save, organize, and reuse frequently-used queries
How SQL Studio Works
SQL Studio follows a three-step workflow:- Install the Application: Admins install the SQL Studio (Query Runner) application from the App Marketplace
- Configure Services: Admins configure SQL Studio for each database service and set authentication methods
- Authenticate: Users connect to services using the configured authentication method
- Execute Queries: Users write and run SQL queries, save queries, and explore data
Supported Database Services
SQL Studio currently supports:- BigQuery
- Snowflake
- Trino (Starburst)
- Redshift
- PostgreSQL
- MSSQL
- MySQL
- Athena
Authentication Options per Service
AWS Identity and Access Management (IAM) authenticates connections to Athena, Redshift, and PostgreSQL.
Athena authenticates with AWS IAM only.
Authentication Methods
SQL Studio supports four authentication methods, each designed for different use cases:How to Configure Authentication Methods
Basic Authentication
Best for: Service accounts, automated access, or when OAuth is not available Basic Authentication allows users to provide direct credentials such as Username + Password or Service Account fields. How it works: Admin Setup:- Admin selects authentication type as “Basic” in the database service configuration
- Admin saves the configuration
- Users enter their own credentials in SQL Studio
- Credentials are encrypted and stored securely
- Credentials remain valid until manually changed by the user
- BigQuery (GCP Service Account fields)
- Snowflake (Username + Password OR Username + Key Pair)
- Trino (Username + Password)
- Redshift (Username + Password)
- PostgreSQL (Username + Password)
- MSSQL (Username + Password)
External OAuth
Best for: Organizations that want OAuth authentication but use a different SSO provider or email & password for Collate login External OAuth allows users to authenticate directly with the database service provider (Google (for BigQuery), Snowflake, Starburst (for Trino)) using OAuth 2.0, separate from their Collate login. How it works: Admin Setup:- Admin fills in the OAuth configuration fields:
- Client ID (required)
- Client Secret (required)
- Redirect URL (optional)
- Scope (optional)
- Admin saves the configuration
- Users click “Connect” in SQL Studio for the configured database service
- Users are redirected to the database provider’s authentication page (Google for BigQuery, Snowflake for Snowflake, Azure AD for Trino)
- Users authenticate with their database provider credentials
- Access token exchange happens automatically
- OAuth tokens are securely stored and used for query execution
- BigQuery (Google OAuth)
- Snowflake (Snowflake Security Integration - Custom OAuth)
- Trino (Starburst OAuth Client)
Collate SSO
Best for: Organizations using Google OIDC for Collate login Collate SSO leverages your existing Google SSO configuration in Collate to authenticate with database services. Instead of configuring separate OAuth credentials, SQL Studio automatically uses already configured fields from Collate login. How it works: Admin Setup:- Admin selects authentication type as “Collate SSO” in the database service configuration
- Fields in the UI (Client ID, Client Secret, Scope) are optional and not mandatory to fill
- Once the admin saves the form, these fields are automatically prefetched from Collate’s SSO settings
- Admin can then view the auto-enriched values
- Users click “Connect” in SQL Studio for the configured database service
- A popup opens for users to allow/grant permissions defined in the scope (e.g., BigQuery access)
- OAuth tokens are securely fetched, stored, and automatically used for query execution
- No additional credential entry required from users or admin
- BigQuery (with Google Workspace SSO)
AWS IAM
AWS IAM connections use your AWS credentials or an assumed role to authenticate with Athena, Redshift, or PostgreSQL. For more information, see AWS IAM for Redshift and PostgreSQL and Athena Configuration. For more information, see AWS IAM Authentication.Getting Started
Ready to start using SQL Studio? Follow these guides:- Query Runner Application - Install the Query Runner application to enable SQL Studio (admins only)
- Admin Configuration - Configure SQL Studio for your database services (admins only)
- Team Connections - Share one set of credentials across a team or the whole organization (team owners and admins)
- User Authentication - Connect to database services as a user
- Query Execution - Learn how to write and execute queries in SQL Studio
Next Steps
- Admins: Start with Query Runner Application to install and enable SQL Studio
- Team owners: Set up Team Connections so members query without configuring their own credentials
- Users: Jump to User Authentication to connect to your first service
- Learn More: Explore Query Execution to master SQL Studio features