> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a dbt Cloud connector

> C1 provides identity governance for dbt Cloud. Integrate your dbt Cloud account with C1 for unified visibility and governance over user access.

C1 provides identity governance for dbt Cloud. Integrate your dbt Cloud account
with C1 for unified visibility and governance over user access.

## Capabilities

| Resource | Sync                                                          | Provision |
| -------- | ------------------------------------------------------------- | --------- |
| Users    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Groups   | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

The connector syncs the users in a dbt Cloud account as identities. Each user
carries their account status and license type, so you can see who holds a paid
developer seat versus read-only access. It also syncs the account's groups
(permission sets) and who belongs to each one, so group membership is visible
and reviewable in C1.

## Gather dbt Cloud credentials

<Warning>
  You need a dbt Cloud **API token** and your numeric **account ID**. The token
  grants access to your dbt Cloud account, so treat it as a secret. A **service
  token** with the **Account Viewer** permission set is recommended over a
  personal token.
</Warning>

<Steps>
  <Step>
    Sign in to dbt Cloud as an account administrator.
  </Step>

  <Step>
    Open **Account Settings** > **Service Tokens** and create a token. Give it
    the **Account Viewer** permission set so it can read the account's users and
    groups. Copy the token — you will use it to configure the connector.
  </Step>

  <Step>
    Find your **account ID**: it is the number after `/accounts/` in your dbt
    Cloud URL (for example, `12345` in
    `https://cloud.getdbt.com/api/v3/accounts/12345/`). You will enter it
    alongside the token.
  </Step>

  <Step>
    If your account is hosted on a regional instance (for example
    `https://emea.dbt.com` or `https://au.dbt.com`) or a single-tenant
    deployment, note that host — you will enter it as the optional base URL.
    Otherwise leave the base URL blank to use the default dbt Cloud host.
  </Step>
</Steps>

## Configure the dbt Cloud connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **dbt Cloud** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new dbt Cloud connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the dbt Cloud credentials:

        * **API token**: The service token you created in dbt Cloud.
        * **Account ID**: Your numeric dbt Cloud account ID.
        * **Base URL** (optional): Your regional or single-tenant host. Leave
          blank to use the default dbt Cloud host.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your dbt Cloud connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the dbt Cloud connector in your own
    environment.

    <Steps>
      <Step>
        Create a secret for the dbt Cloud API token.
      </Step>

      <Step>
        Configure the connector environment variables:

        * **BATON\_DBTCLOUD\_API\_TOKEN**: The dbt Cloud API token (store this as a secret).
        * **BATON\_DBTCLOUD\_ACCOUNT\_ID**: Your numeric dbt Cloud account ID.
        * **BATON\_DBTCLOUD\_BASE\_URL** (optional): Your regional or single-tenant host. Omit to use the default dbt Cloud host.
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your dbt Cloud connector is now pulling access data into C1.
  </Tab>
</Tabs>