skills.rest
ivanshamaev
ivanshamaevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

starrocks-admin-security

Configure StarRocks users, roles, and privileges with RBAC, LDAP, and data masking.

14|1|Updated May 5, 2026
Search Tags:#rbac#row-level-security#audit-log#ssl-tls#starrocks#ldap#column-masking
One-click install
npx skills add https://github.com/ivanshamaev/de-agent-skills --skill starrocks-admin-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: starrocks-admin-security
Source: https://github.com/ivanshamaev/de-agent-skills/tree/main/group_skills/starrocks_group_skills/starrocks_admin_security
Command: npx skills add https://github.com/ivanshamaev/de-agent-skills --skill starrocks-admin-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps you securely manage access in StarRocks so only the right users can query the right data, with protections for PII, tenant isolation, and compliance-grade traceability.

Core Features & Use Cases

  • RBAC provisioning: create users and roles, grant/revoke privileges across SYSTEM → CATALOG → DATABASE → TABLE/VIEW/MV/FUNCTION, and use built-in roles safely for least-privilege access.
  • Enterprise authentication: integrate LDAP authentication and map group membership to StarRocks roles via an operational sync approach.
  • Data protection controls: enforce row-level security policies and column masking for sensitive fields, with SSL/TLS hardening and audit logging configuration.

Quick Start

Set up least-privilege access by creating team roles, granting only required object privileges, enabling row-level access policy for tenant filtering, and applying masking policies to sensitive columns before production launch.

Frequently Asked Questions about starrocks-admin-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure RBAC and least-privilege access in StarRocks?▼

RBAC in StarRocks is configured by creating users and roles, then granting or revoking privileges across SYSTEM, CATALOG, DATABASE, and TABLE scopes. You apply built-in roles safely to ensure least-privilege access for BI and ETL workloads.

How do I enforce row-level security and column masking for PII in StarRocks?▼

Row-level security and column masking protect PII in StarRocks by attaching row access policies to tables for tenant filtering and applying masking policies to sensitive columns. These controls enforce data protection and tenant isolation.

Can I integrate LDAP authentication and map group membership to roles in StarRocks?▼

Yes, StarRocks supports LDAP authentication integration. You can map LDAP group membership to StarRocks roles using an operational sync approach, establishing secure enterprise identity and authorization across your deployment.

What is the best way to set up audit logging and SSL/TLS hardening for StarRocks?▼

Audit logging and SSL/TLS hardening provide compliance-grade traceability and secure authentication for StarRocks. Configuring these production hardening steps ensures observability and encrypted communication across your data environment.

Does StarRocks support multi-tenant access control and compliance scenarios?▼

Yes, StarRocks supports multi-tenant access control and compliance scenarios through RBAC inheritance, privilege grant semantics, row access policies, and column masking. These features isolate tenant data and enforce regulatory requirements.

Why are my StarRocks privilege grants not inheriting correctly across catalog and object scopes?▼

Privilege grant inheritance issues in StarRocks occur when RBAC semantics across SYSTEM, CATALOG, DATABASE, and TABLE scopes are misconfigured. Correct RBAC inheritance and privilege grant semantics are required for proper authorization.

Related Skills

Explore More Legal & Compliance Skills→
GoldenWing-360GoldenWing-360
15

kubernetes-security

Analyze Kubernetes cluster configurations for security weaknesses and hardening best practices.

Official
Advanced
kiwamizamuraikiwamizamurai
7

networking

Analyze PCAP captures for data exfiltration and protocol misuse.

Community
Intermediate
vivekganavivekgana
4

unity-catalog-governance

Configure Unity Catalog governance patterns, permissions, and policy enforcement in Databricks workspaces.

Community
Advanced
secondskysecondsky
204

access-control-rbac

Implement RBAC/ABAC policies for Node.js, Python, and Java Spring Security.

Community
Advanced