Built-in Access Control

Enable built-in access control (BIAC).

Usage

License Required

This module requires a Starburst distribution and license.

Provision the module:

minitrino -e CLUSTER_VER=${version}-e provision -i starburst -m biac

Connect to the coordinator container’s Trino CLI:

minitrino exec -i 'trino-cli --user admin'

Confirm role membership:

SET ROLE sysadmin;
SHOW ROLES;

   Role
----------
 public
 sysadmin

Default Roles

BIAC is deployed with the following default roles:

Role	Description
public	Public role (baseline access granted to all users)
sysadmin	System administrator (baseline access granted to authorized users*)

Note

Authorized users are defined in the starburst.access-control.authorized-users (admin) and starburst.access-control.authorized-groups (clusteradmins) properties.

Dependent Modules

• insights: Enables the Starburst web UI and configures a backend database for persisting BIAC entities.