Security and compliance #

The following topics cover different ways of managing access to your Starburst Galaxy account.

Manage Galaxy access #

This section covers single sign-on integration, user roles, tags, and more.

• Manage UI access
• Monitor access changes
• Set up OAuth clients

Manage SSO integration #

This section describes how to manage single sign-on integration.

• Single sign-on basics
• Okta SAML setup
• Okta SCIM setup
• Azure SAML setup
• Azure SCIM setup
• Google Workspace SAML setup
• Generic IdP setup
• Manage SSO
• SSO client access
• SSO groups

Manage users, roles, and tags #

• Overview
• Account and cluster privileges
• Create and use attribute tags
• Automatic data classification
• Roles
• Manage users without SSO

Manage data access #

This section covers privileges, policies, row filters,column masks, and service accounts.

• Access control policy types
• Creating policies
• Data privileges
• Using row filters
• Using column masks
• Using service accounts
• Network security

Manage cluster connectivity #

This section covers different ways of managing cluster connectivity, including security, bastion hosts, IP allow lists, and private connections.

• SSH tunnels
• IP allow list

Configure cloud-specific security settings for the following cloud providers:

• AWS
• Azure
• Google

Configure private connections, including AWS PrivateLink:

• AWS PrivateLink
• Connect clients to AWS PrivateLink