mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-03 07:40:28 +08:00
a27499f63f
* A handful of smaller fixes. * Oracle Exadata guide. * Apply suggestions from code review Co-authored-by: STeve (Xin) Huang <xin.huang@goteleport.com> * Apply suggestions from code review Co-authored-by: Roman Tkachenko <roman@goteleport.com> * Reorganise, update doc. * Update docs/pages/enroll-resources/database-access/enroll-self-hosted-databases/oracle-exadata.mdx Co-authored-by: STeve (Xin) Huang <xin.huang@goteleport.com> * Update docs/pages/enroll-resources/database-access/enroll-self-hosted-databases/oracle-exadata.mdx Co-authored-by: STeve (Xin) Huang <xin.huang@goteleport.com> * A few minor corrections and clarifications. * Move to 'managed databases' from 'self-hosted'. * Update index page. * include intro for non-self-hosted dbs * extend cspell.json with extra random words * Fix lint warnings which are treated as errors. --------- Co-authored-by: STeve (Xin) Huang <xin.huang@goteleport.com> Co-authored-by: Roman Tkachenko <roman@goteleport.com>
44 lines
1.8 KiB
Plaintext
44 lines
1.8 KiB
Plaintext
<Admonition type="tip">
|
|
|
|
To modify an existing user to provide access to the Database Service, see [Database Access Controls](../../enroll-resources/database-access/rbac.mdx)
|
|
|
|
</Admonition>
|
|
|
|
<Tabs>
|
|
<TabItem scope={["oss","team"]} label="Teleport Community Edition">
|
|
Create a local Teleport user with the built-in `access` role:
|
|
|
|
```code
|
|
$ tctl users add \
|
|
--roles=access \
|
|
--db-users="*" \
|
|
--db-names="*" \
|
|
alice
|
|
```
|
|
</TabItem>
|
|
<TabItem scope={["enterprise", "cloud"]} label="Teleport Enterprise/Enterprise Cloud">
|
|
Create a local Teleport user with the built-in `access` and `requester` roles:
|
|
|
|
```code
|
|
$ tctl users add \
|
|
--roles=access,requester \
|
|
--db-users="*" \
|
|
--db-names="*" \
|
|
alice
|
|
```
|
|
</TabItem>
|
|
</Tabs>
|
|
|
|
| Flag | Description |
|
|
|--------------|------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| `--roles` | List of roles to assign to the user. The builtin `access` role allows them to connect to any database server registered with Teleport. |
|
|
| `--db-users` | List of database usernames the user will be allowed to use when connecting to the databases. A wildcard allows any user. |
|
|
| `--db-names` | List of logical databases (aka schemas) the user will be allowed to connect to within a database server. A wildcard allows any database. |
|
|
|
|
<Admonition type="warning">
|
|
Database names are only enforced for PostgreSQL, MongoDB, and Cloud Spanner databases.
|
|
</Admonition>
|
|
|
|
For more detailed information about database access controls and how to restrict
|
|
access see [RBAC](../../enroll-resources/database-access/rbac.mdx) documentation.
|