Create a ThoughtSpot connection to an Edge site

To retrieve metadata from ThoughtSpot, create a connection on an Edge site. This connection allows Collibra to authenticate with your ThoughtSpot tenant via the REST API.

Do you use a vault?

You can use a vault to add your data source information to your Edge site connection.

Check the connection property table below to see which information is available for your vault.

Vaults are not available for Collibra Cloud sites.
No vault
AWS Secrets Manager
Azure Key Vault
CyberArk Vault
Google Secret Manager
HashiCorp Vault
  
To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the query value to identify the secret in your vault.
    Example 
    Note The Query must be a string containing the properties required to identify the secret. Each property must be separated by a semicolon (;). For example: Safe=<SafeName>;Folder=<FolderName>;Object=<ObjectName>

    If a property is a folder with sub-folders, use a backslash (\) to define the folder path. For example: Folder=Root\Top Secrets\More Secrets

    For more information about query formats and supported properties, go to the CyberArk Credential Provider documentation.

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Secret Engine Type
    Select one of the following:
    • Key Value
    • Database
    Engine Path
    The engine path to your vault where the value is stored.
    Secret Path
    The secret path to your vault where the value is stored.
    Field
    If your Secret Engine Type is Key Value, enter the name of the field to your vault where the value is stored.
    Role
    If your Secret Engine Type is Database, enter the role specified in the Database engine.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Vault Name
    The name of your Azure Key Vault in your Azure Key Vault service where the value is stored.
    Secret Name
    The name of the secret in your vault where the value is stored.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Secret Name
    The name of the secret in your vault where the value is stored.
    Field
    If the secret stored in your AWS Secrets Manager is a JSON value, for example {"pass1": "my-password", "pass2": "my-password2"}, then you need to specify the Field to point to the exact JSON value that should be used. For example, Secret Name: edge-db-customer; Field: pass.
    Note If the secret stored in your AWS Secrets Manager is a plain string value, for example my-password, then you do not need to specify the Field.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the name of the secret in your vault where the value is stored.
    Example 

Prerequisites

Ensure that the requirements are met in both the Collibra and ThoughtSpot environments.

In your Collibra environment

  • You have Collibra Platform Self-Hosted 2026.03 or newer.
  • You created and installed an Edge site. The Edge version must be 2026.3.14 or newer.
  • The Edge site status must be Healthy.
  • You have a global role that has the Manage connections and capabilities global permission, for example, Edge integration engineer.
  • You have a resource role with the Configure external system resource permission, for example, Owner.
  • If you have defined an outbound (forward) proxy on your Edge site, ensure the configuration allows HTTPS traffic to your ThoughtSpot tenant.
  • You have added a vault to your Edge site.
  • If your data source connection requires a file from your vault, the file must be encoded into Base64 and stored as a regular secret in your vault.

Network and proxy configuration

The following endpoint must be reachable from the Edge host:

https://{tenantName}.thoughtspot.cloud

In your ThoughtSpot environment

  • You have a valid ThoughtSpot Tenant URL.
  • You have a username and password with API access permissions.
  • The credentials must have access to the following assets in the targeted Orgs:
    • Connections
    • Data Models (Worksheets/Views)
    • Liveboards
    • Answers
    Any content restricted or hidden from these credentials are not ingested during synchronization.

Steps

  1. Open a site.
    1. On the main toolbar, click Products icon → Cogwheel icon Settings.
      The Settings page opens.
    2. In the tab pane, click Edge.
      The Sites tab opens and shows a table with an overview of your sites.
    3. In the table, click the name of the site whose status is Healthy.
      The site page opens.
  2. In the Connections section, click Create connection.
  3. Select ThoughtSpot to connect to Databricks.
    The Create connection page appears.
  4. Enter the required information.
    FieldDescriptionRequiredAvailable for Vaults?
    Name

    The name of the Edge site connection for Databricks.

    		 Yes No
    Description

    The description of the connection.

    		 No No
    Vault The vault where you store your data source values. No No
    ThoughtSpot URL The base URL of your tenant, for example, https://collibra.thoughtspot.cloud. Yes Yes
    Username
    		The username with API access permissions. Yes Yes
    Password The password associated with the username. Yes Yes
  5. Click Create.
    The connection is added to the Edge site.

CPSH validates the credentials when synchronizing ThoughtSpot.

What's next

Add the ThoughtSpot synchronization capability.