Skip to main content

After this article

You’ll be able to connect Fivetran to Lumos and sync Fivetran users and roles for visibility and Access Reviews.

Capabilities

Activity tracking: supported (limited). Lumos tracks each user’s last login to Fivetran.

Required plan and roles

  • Fivetran role: the integration authenticates with a Fivetran user API key. API keys inherit the permissions of the user who generates them, so generate the key as a user with the Account Administrator role to make sure all users and roles sync.
  • Permission scoping: this is a read-only integration. Lumos syncs users and roles but doesn’t provision or deprovision anything in Fivetran, so the API key is never used for write operations.

Read-only access vs provisioning

Is read-only possible? Yes, and it’s the only mode. This is a read-only integration: Lumos syncs users and roles but never provisions or deprovisions anything in Fivetran, so the API key is never used for write operations. What read-only requires. A Fivetran user API key generated by an Account Administrator (the key inherits the generating user’s permissions), using the Base64-encoded API key value. Follow the steps below to connect. Watch out for. If users or roles are missing after connecting, the key was likely generated by a user without the Account Administrator role. Regenerating your API key and secret in Fivetran also invalidates the old one, so you’ll need to reconnect the Fivetran card in Lumos with the new Base64-encoded key.

Instructions

Phase 1: Generate an API key in Fivetran
  1. Log into the Fivetran dashboard as an Account Administrator.
  2. Click your username or avatar in the bottom-left corner and select API Key.
  3. Click to generate an API key. See Fivetran’s instructions if you need the detailed steps.
  4. Copy the value of the Base64-encoded API key field. Fivetran shows the key and secret both individually and as a single Base64-encoded value. Lumos needs the Base64-encoded value.
Phase 2: Connect in Lumos
  1. In Lumos, go to Settings > Integrations > Fivetran (reconnect an existing card or add a new one).
  2. Paste the Base64-encoded API key value into the API Key field.
  3. Click Connect.

API Endpoints Used

Troubleshooting

Authentication fails after you paste the key. Make sure you pasted the Base64-encoded API key value, not the raw API key or API secret on their own. Users or roles are missing from the sync. The API key inherits the permissions of the user who generated it. Regenerate the key as a user with the Account Administrator role. The integration stops syncing after you rotate the key. Generating a new API key and secret in Fivetran invalidates the previous one. Reconnect the Fivetran card in Lumos with the new Base64-encoded key.