mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-04 19:12:46 +08:00
17cdeadd74
* sort list of db guides alphabetically * add Elastic guide * Apply suggestions from code review Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com> * additional edits from review * add spaces to next steps include This is so that additional ul items added to a guide using this partial will have consistent spacing * remove instructions and add tip Resolves #r995144908 and #r995566035 * fix Database Access config and add scopes * Move note into relevant tab * adjust example user mapping * incorporate more feedback * incorporate feedback from @tener * Update docs/pages/database-access/guides/elastic.mdx Co-authored-by: Krzysztof Skrzętnicki <krzysztof.skrzetnicki@goteleport.com> * bypass linter rule Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com> Co-authored-by: Krzysztof Skrzętnicki <krzysztof.skrzetnicki@goteleport.com>
29 lines
1.4 KiB
Plaintext
29 lines
1.4 KiB
Plaintext
<Admonition type="tip">
|
|
|
|
To modify an existing user to provide access to the Database Access service, see [Database Access Access Controls](../../database-access/rbac.mdx)
|
|
|
|
</Admonition>
|
|
|
|
Create a local Teleport user with the built-in `access` role:
|
|
|
|
```code
|
|
$ tctl users add \
|
|
--roles=access \
|
|
--db-users=\* \
|
|
--db-names=\* \
|
|
alice
|
|
```
|
|
|
|
| Flag | Description |
|
|
|---------------------------|------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| <nobr>`--roles`</nobr> | List of roles to assign to the user. The builtin `access` role allows them to connect to any database server registered with Teleport. |
|
|
| <nobr>`--db-users`</nobr> | List of database usernames the user will be allowed to use when connecting to the databases. A wildcard allows any user. |
|
|
| <nobr>`--db-names`</nobr> | List of logical databases (aka schemas) the user will be allowed to connect to within a database server. A wildcard allows any database. |
|
|
|
|
<Admonition type="warning">
|
|
Database names are only enforced for PostgreSQL and MongoDB databases.
|
|
</Admonition>
|
|
|
|
For more detailed information about database access controls and how to restrict
|
|
access see [RBAC](../../database-access/rbac.mdx) documentation.
|