Skip to content

Sessions Overview

The Sessions tab provides information about all created, approved or started sessions. The tabular layout provides information for each session as follows:

  • Data Source: the corresponding data source for which the session provides access.

  • Selected Roles: lists all roles for which the session provides access.

    Note: If a grayed-out element with the suffix “base_portal_user” appears at the bottom of the selected roles list, it means the session was requested with the "Inherit Objects" option enabled (more info here: Request Access). This means the session user will gain access to objects created during their previous sessions.

  • Status: CREATED, APPROVED or STARTED.

    Note: The APPROVED session with the reaudit role can be delayed due to generating access report. More information here

  • Flags: displays the selected options when requesting a session.

    • Inherit Objects: the user will have access to objects created during previous sessions.

    • Preserve Objects: objects created during the session will be preserved and can be inherited on next sessions.

    • Break Glass Used: the approval process was bypassed and access was granted immediately, as described in Break Glass.

  • Start/End Timestamp: the time at which the session is scheduled to start/end, as requested by the user.

    Note: By default, the time is displayed in the time zone of the Central Manager. This time zone can be identified in the column names Start Timestamp and End Timestamp, where the corresponding time zone information is appended, e.g., "UTC +1". In cases where the client is in a different time zone, the time is still shown in the Central Manager's time zone by default. However, the user can optionally select the Local Timezone checkbox, which will adjust all timestamps to the client's current time zone.

  • JDBC URL: the connection URL to be used to reach the data source through the session. The copy button next to it copies the full URL to the clipboard.

  • Credentials: the username and password of the temporary user created for the session.

    Note: Hovering over this cell opens a tooltip with the session ID, its timestamps, the requested roles and the justification given when the access was requested.

  • Approval Progress: how many of the approvals required by the selected roles have already been given, shown as a bar and as a "given / needed" counter.

  • Access: a DB button that opens the session's data source in CloudBeaver, enabled once the session has started. More info here: CloudBeaver Integration.

  • Terminate: ends the session immediately, revoking its access.

Note: Long values in the JDBC URL and Credentials columns are shortened to keep the table readable. When a value is shortened, an arrow button is displayed next to it: click it to expand the cell to the full value, and click it again to collapse it back. Expanded cells stay expanded while the table refreshes itself.

Important

  • The password can be viewed and copied only by the user who requested the session; the admin does not have this permission.
  • Admins have the authority to terminate such sessions either individually or by pressing the "Terminate All Sessions" button, which will terminate all started sessions. Meanwhile, a user who requested their own session can cancel it at any time before the session expires.

Break Glass

If a session was requested using a Break Glass role, a "Break Glass Used" indicator is displayed for that session. It means the approval process was bypassed and access was granted immediately. Additionally, each such approved role is marked with a warning sign. (More info on this option can be found here: Request Access).