Submitting a Database Approval Ticket
You can enable dynamic approval of database operations. This enhances a more strict management of critical database operations.
During O&M on databases, if an operation command triggers the database rules for dynamic approval, the system automatically intercepts the operation command and generates a database approval ticket. The command approval ticket is sent to the administrator. After the administrator approves the ticket, you obtain the permission to run the operation command.
This topic describes how to manage database approval tickets.
Constraints
- The database operation audit is available only in professional editions.
- A bastion host can intercept sensitive operation commands and generate tickets only for MySQL and Oracle databases.
- A database approval ticket cannot be manually created. It is automatically generated when a user attempts to run a command which triggers a database rule.
Prerequisites
- You have the management permissions for the DB Tickets module.
- Operation interception has been triggered, and a database approval ticket has been generated.
Procedure
- Log in to your bastion host.
- Choose Tickets > DB Tickets.
Figure 1 Database approval ticket list
- Submit a ticket.
- In the row of the ticket you want to submit, click Submit in the Operation column to submit the ticket to the administrator for approval.
- If the ticket is rejected by the administrator, you can modify the ticket information and submit it again.
Related Operations
- Modifying a ticket: To view or modify the information about a ticket, locate the row of the ticket and click Manage in the Operation column to go to the ticket details page.
For tickets in the approving status, you can only view the details but cannot modify the content. Only the ticket in the Revoked or Not submitted state can be modified.
- Withdrawing a ticket: To modify a submitted ticket, locate the row of the ticket and click Withdraw in the Operation column to cancel the ticket. Then, the ticket status changes to Revoked.
- Deleting a ticket: If a submitted ticket has expired, locate the row of the ticket and click Delete in the Operation column to delete the ticket. You can also select multiple tickets and click Delete in the lower left corner of the list to delete the selected tickets all at once.
Deleted tickets cannot be recovered. Exercise caution when performing this operation.
Follow-up Operations
After a user submits a ticket, the administrator will receive a notification in the message center. The administrator can check ticket details there. The ticket will be displayed on the Ticket approval page. On this page, the administrator can approve, reject, or revoke the authorization for the ticket. For details, see Viewing and Approving Tickets.
- If the administrator approves a ticket, the user then obtains the command operation permissions within the authorization scope and period.
- If the administrator rejects a ticket, the user cannot obtain the corresponding permissions.
- If the administrator revokes the authorization for a ticket, the operation commands allowed by the ticked will be intercepted then.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot