starrocks-admin-security

What problem does it solve?

This skill helps you securely manage access in StarRocks so only the right users can query the right data, with protections for PII, tenant isolation, and compliance-grade traceability.

Core Features & Use Cases

• RBAC provisioning: create users and roles, grant/revoke privileges across SYSTEM → CATALOG → DATABASE → TABLE/VIEW/MV/FUNCTION, and use built-in roles safely for least-privilege access.
• Enterprise authentication: integrate LDAP authentication and map group membership to StarRocks roles via an operational sync approach.
• Data protection controls: enforce row-level security policies and column masking for sensitive fields, with SSL/TLS hardening and audit logging configuration.

Quick Start

Set up least-privilege access by creating team roles, granting only required object privileges, enabling row-level access policy for tenant filtering, and applying masking policies to sensitive columns before production launch.