Connection Reservation and Approval
Within the SQL Proxy module, users are required to create a reservation when attempting to connect to a database. This reservation specifies the time frame for access and must be approved by a manager.
Steps to Create a Connection Reservation:
- The policy group must contain approval definitions. First, create an Approval Workflow that indicates what to do if some kind of reservation is created.
- Navigate to Policy > Approval Workflow.
- Click the Add Button.
The PAM interface must be logged into. Specific user groups, such as MSSQL user groups, may exist, and members of these groups are required to obtain approval from a manager before accessing databases.
A reservation must be created by selecting the target database and specifying a Reason for the connection. For example, tasks such as creating tables or retrieving data may need to be performed. This reason will be communicated to the manager for approval.
- Navigate to Devices > Reservation
- Create the reservation.
The reservation request, containing details such as the user's name, the target database, and the reason for the request, will be reviewed by the manager. The manager may approve, reject, or ignore the request. Without approval, database connection will not be permitted.
The User Manager must Navigate to the Dashboard page and approve the request in the My Approvals section.
Once the reservation is approved, the user is allowed to connect to the database within the specified time frame. During this session, additional policies may govern the queries that can be executed.