Connection Reservation & Command Approval

the connection reservation and query approval features have been integrated into the sql proxy module these enhancements ensure that users must receive managerial approval either to access a database or to execute specific queries the following sections detail how these processes function within kron pam connection reservation and approval within the sql proxy module, users are required to create a reservation when attempting to connect to a database this reservation specifies the time frame for access and must be approved by a manager to create a connection reservation the policy group must contain approval definitions first, create an approval workflow that indicates what to do if some kind of reservation is created navigate to policy > approval workflow then click + add button depending on your realm setup, specific user groups, such as mssql user groups, may exist, and members of these groups will be required to obtain approval from a manager before accessing databases users create a reservation by selecting the target database and specifying a "reason" for the connection for example, users may need to perform tasks such as creating tables or retrieving data this reason is communicated to the manager for approval navigate to devices > reservation and create a reservation the manager reviews the reservation request, which includes details such as the user’s name, the target database, and the reason for the request the manager may approve, reject, or ignore the request without approval, the user will not be able to connect to the database user manager needs to be navigate to dashboard page and approve the request in ‘my approvals’ post approval once the reservation is approved, the user is allowed to connect to the database within the specified time frame during this session, additional policies may govern the queries that can be executed query approval and management after connecting to the database, certain sensitive queries may require further approval before they can be executed this ensures that critical data remains protected, with managerial oversight for specific query executions submitting a query users attempting to execute a query, such as extracting data from a sensitive customer table, may be blocked if the query matches predefined policy rules in such cases, an approval request is automatically sent to the manager manager approval the manager receives an approval request via email, sms, or the gui, allowing them to approve or reject the query once the query is approved, it can be executed by the user logging and auditing all connection attempts and query executions are logged for auditing purposes the logs include details of the sessions, the queries executed, and the approvals granted or denied these logs allow for comprehensive monitoring of database access and query execution