Help Center/ Cloud Bastion Host/ FAQs/ User, Resource, and Policy Configuration in a CBH System/ Adding Resources to a CBH System/ How Can I Start Database Maintenance in a CBH System?
Updated on 2026-07-30 GMT+08:00
View PDF
Share

How Can I Start Database Maintenance in a CBH System?

You can manage a variety of databases in the host operation or application operation module. For details, see Which Types of Databases Can I Manage in a CBH System?. In the host operation module, you can audit database operations, such as adding, deleting, modifying, and querying database operations. In the application operation module, you can audit operation sessions through videos.

  • In CBH standard editions, directly managing databases is not available. To manage databases, an application publish server must be set up.
  • In CBH professional editions, directly managing databases is available in the host operation and application operation modules.

Prerequisites

  • You have purchased a CBH instance and the CBH system can be logged in. To manage databases by command, purchase a professional CBH instance. You can then manage databases by command in the host operation module.
  • The network connection between the databases and CBH instance is normal.

Managing Databases in the Host O&M Module

The host operation module makes it easy for you to maintain MySQL, SQL Server, Oracle, DB2, and other types of databases by Single Sign-On (SSO) authentication.

  1. The administrator creates a host resource for databases.

    Choose Resource > Host, configure Protocol Type based on the databases you need to manage, and add or let the system generate a database account. For details, see Managing Host and Database Resources with a Bastion Host.

  2. Assign access control permissions to users as an administrator.

    • Choose Policy > ACL Rules. Assign access permissions to users and associate the created database resource accounts. For details, see Creating an ACL Rule.
    • Choose Policy > DB Rules. For MySQL, Oracle, PostgreSQL, and GaussDB databases, you can configure key operation control rules to perform command interception. For details, see Database Control Rules.

  3. Log in to the database as an O&M user.

    Choose Operation > Host Operations and log in to the database as an authorized user. For details about the login method, see Using an SSO Client to Log In to Database Resources for O&M.

    O&M users can add, delete, modify, and query managed databases, view the commands that are being executed on the Live Session page, and view history command operation records on the History Session page.

    When an O&M user runs a critical operation command, the system automatically initiates command interception and generates a database authorization ticket. To continue the O&M operation, the O&M user needs to submit an application to the administrator for approval.

    The host O&M module does not support the generation and download of historical database O&M session videos.

Managing Databases in the Application O&M Module

The application O&M module App Operation allows you to maintain all types of databases through web sessions and automatically inputs account usernames and passwords of databases. Before managing databases in this module, ensure that the network connection between the database to be managed and the application publishing server is normal and the network connection between the application publishing server and the CBH instance is normal.

  1. Create an application for databases to be managed as an administrator.

    Choose Resource > Application Publish, configure an application of database type, and add or let system generate a database account. For details about how to configure other parameters, see Managing Application Resources Using a Bastion Host.

  2. Assign access control permissions to users as an administrator.

    Choose Policy > ACL Rules, grant the database access permissions to users, and relate the users to the account generated in the last step. For details, see Creating an ACL Rule.

  3. Log in to the database as an O&M user.

    Choose Operation > App Operations and log in to the database as an authorized user. For details about session operations after login, see Application Operations.

    O&M users can record database O&M sessions by video and download session videos from the History Session module.

    The application O&M module does not support command interception during O&M sessions.