Skip to content

Roles Management options:

This is list of options inside Roles Management in Data Sources.

These options are inside given data source configuration file. For example: postgresTest-source_1.conf. The filename depends on the name of the data source → nameOfDataSource.conf.

⚠️ Note: You can use SHIFT with mouse scroll to scroll horizontally!

Key Requirements Conf File field Description Possible values Default
Database-Native Session Cleanup - databaseNativeSessionCleanup By default, the Central Manager (CM) is responsible for clearing ephemeral user sessions Boolean -
Require Justification Pattern - justification.isRequired If checked, require access requests to have a justification that matches provided regex. If unchecked, use setting from admin tab if that one is enabled. Boolean false
Regex Pattern Require Justification Pattern pattern Provide a regex pattern that justification has to match. Ignored if empty. String -
Invalid justification message Require Justification Pattern errorMessage Error message explaining what pattern should the justification match. String -
Filter system roles - filterDefinedRoles If selected, predefined system roles for databases will not be displayed on the roles names list. Boolean false
Role Name - roleName Used to select a role from the database for which we want to create a configuration. String -
Notification Alias - notificationAlias Here, you indicate the notification entry created in the Admin tab, which will be used to notify users associated with it when an action concerns the specified role. String -
Default Time - defaultTime Specifies the default session duration for the given role. Integer 30
Maximum Time - maximumTime Determines the maximum time for which a particular role can be requested. Must be greater than default time. Integer (see desc.) 60
Approvoals Needed - approvalsNeeded Used to specify the number of approvals required for the requested role to be approved. The default value is 1. Integer 1
Special Roles ( Postgres only ) specialRoles Check to allow for special postgres roles present in this role such as 'rolsuper' or 'rolcreaterole' should be inherited (postgres only). Boolean false