Set up a dbt Cloud connector

C1 provides identity governance for dbt Cloud. Integrate your dbt Cloud account with C1 for unified visibility and governance over user access.

C1 provides identity governance for dbt Cloud. Integrate your dbt Cloud account with C1 for unified visibility and governance over user access.

Capabilities

Resource	Sync	Provision
Users
Groups

The connector syncs the users in a dbt Cloud account as identities. Each user carries their account status and license type, so you can see who holds a paid developer seat versus read-only access. It also syncs the account’s groups (permission sets) and who belongs to each one, so group membership is visible and reviewable in C1.

Gather dbt Cloud credentials

You need a dbt Cloud API token and your numeric account ID. The token grants access to your dbt Cloud account, so treat it as a secret. A service token with the Account Viewer permission set is recommended over a personal token.

1. Sign in to dbt Cloud as an account administrator.

2. Open Account Settings > Service Tokens and create a token. Give it the Account Viewer permission set so it can read the account’s users and groups. Copy the token — you will use it to configure the connector.

3. Find your account ID: it is the number after /accounts/ in your dbt Cloud URL (for example, 12345 in https://cloud.getdbt.com/api/v3/accounts/12345/). You will enter it alongside the token.

4. If your account is hosted on a regional instance (for example https://emea.dbt.com or https://au.dbt.com) or a single-tenant deployment, note that host — you will enter it as the optional base URL. Otherwise leave the base URL blank to use the default dbt Cloud host.

Configure the dbt Cloud connector

Cloud-hosted

Follow these instructions to use a built-in, no-code connector hosted by C1.

1. In C1, navigate to Integrations > Connectors and click Add connector.

2. Search for dbt Cloud and click Add.

3. Choose how to set up the new dbt Cloud connector.

4. Set the owner for this connector.

5. Click Next.

6. Find the Settings area of the page and click Edit.

7. Enter the dbt Cloud credentials:

   • API token: The service token you created in dbt Cloud.
   • Account ID: Your numeric dbt Cloud account ID.
   • Base URL (optional): Your regional or single-tenant host. Leave blank to use the default dbt Cloud host.
8. Click Save.

9. The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.

Done. Your dbt Cloud connector is now pulling access data into C1.

Self-hosted

Follow these instructions to run the dbt Cloud connector in your own environment.

1. Create a secret for the dbt Cloud API token.

2. Configure the connector environment variables:

   • BATON_DBTCLOUD_API_TOKEN: The dbt Cloud API token (store this as a secret).
   • BATON_DBTCLOUD_ACCOUNT_ID: Your numeric dbt Cloud account ID.
   • BATON_DBTCLOUD_BASE_URL (optional): Your regional or single-tenant host. Omit to use the default dbt Cloud host.
3. Deploy the connector using your standard self-hosted connector process.

Done. Your dbt Cloud connector is now pulling access data into C1.