When users access a database with privileged credentials, the chances for data loss or sensitive information misuse go up. The administrators need to ensure that the connection to the database is secure and the database credentials are not misused. Privileged Access Manager provides the database monitoring feature where administrators can protect the database by controlling and monitoring the activities of the users who connect to the database.
In addition, Privileged Access Manager allows you to assign the risk to a specific query or a table in the database. Based on the risk configuration, you can identify any suspicious activities in the database and disconnect the session or block the respective user from accessing the database.
Privileged Access Manager enables you to control and monitor database accesses by granting access to the database as follows:
Database Access Through Credential Checkout:
This method enables you to provide privileged access to the database using the credentials checked out from Privileged Access Manager. In this method, the privileged account credentials are reset after every check-in to avoid misuse of credentials.
NOTE:Credential check out is not supported when Privileged Access Manager is installed on a Windows server as a manager.
Database Access Through Privileged Access Manager Proxy:
Using this method, you can allow users to access the database through Privileged Access Manager proxy where Privileged Access Manager monitors the activities performed on the database.
SSO to the Database:
Using this method, you can allow users to SSO to a database session and monitor the activities performed on the database. For more information about configuring privileged SSO to database, see Configuring Access for Application SSO.
Based on the information in the following table, you can choose the appropriate database access method:
|
Method |
Keystroke Audit |
Command Audit |
Video Capture |
Command Risk |
Manual Disconnect |
||
|---|---|---|---|---|---|---|---|
|
Auto Disconnect |
Block User |
Block Command |
||||
|
Database Access Through Privileged Access Manager Proxy |
✗ |
✓ |
✗ |
✓ |
✓ |
✓ |
✓ |
|
Database Credential Checkout |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
✗ |
|
Privileged SSO to Database |
✓ |
✗ |
✓ |
✗ |
✗ |
✗ |
✓ |