Skip to main content

Tutorial: Just-in-Time Database Access

Bytebase is a middleware sitting between users and databases. It provides a fine-grained database permissions. Bytebase enforces database permissions via change approval flow and SQL Editor. You can use Bytebase to manage persistent database permissions as well as implement a Just-in-Time (JIT) database access workflow.
Database permission controls individual users’ or groups’ actions within the database. Below shows the built-in roles’ database permissions. *1 Project Developer can request a time-boxed export through just-in-time data export. SQL Editor User can export directly from SQL Editor. *2 Project Developer don’t have SQL Editor access and should request DDL/DML changes through an issue. *3 SQL Editor User includes the bb.sql.ddl and bb.sql.dml permissions and can run DDL/DML in SQL Editor in the environments the grant covers, but it’s recommended to make these changes through issues for better traceability.
You can also pick out specific permissions to build custom roles. e.g. create a custom role that grants only the EXPLAIN permission.