Help Center/ Database Security Service/ User Guide/ Database Security O&M/ Series 2/ System Function Configuration and Example Use Cases/ Configuration Example of O&M Bastion Host WebSQL Secure Client
Updated on 2026-07-07 GMT+08:00
View PDF
Share

Configuration Example of O&M Bastion Host WebSQL Secure Client

The database O&M management system provides web authentication for users. After the proxy service is enabled under Ops Asset Management > Ops Asset Proxy Server, database operators can first log in to the database O&M management system, then access the bastion host management interface with one click via Ops Bastion Host Inventory, and access database assets through the web terminal.

Adding Data Assets and Start the Proxy Service

  1. Logging in to the Database Operations and Maintenance Management System using the sysadmin system administrator account.
  2. In the left navigation bar, select Ops Asset Management > Ops Asset DB, then click Add data source in the upper-right corner of the page.
  3. Configure asset information in the Add data source pop-up window.
  4. Click OK.
  5. Select the newly created Ops Asset DB.
  6. Click Automated Security Configuration.

    Figure 1 Automated security configuration

  7. The system automatically creates a corresponding proxy service for this O&M asset library under Ops Asset Management > Ops Asset Proxy Server.
  8. Select the newly created Ops asset DB, hover the mouse over its card, and click Proxy. The system will automatically redirect to the Ops Asset Management > Ops Asset Proxy Server page and locate the target proxy service.
  9. Select the proxy service and click Start.

Onboarding Accounts of Asset Libraries

  1. Logging in to the Database Operations and Maintenance Management System using the sysadmin system administrator account.
  2. In the left navigation bar, select Ops Asset Management > Ops DB Account Binding.
  3. Select the account column of a target O&M asset library, then click Account Binding.
  4. Click the Account Binding button to open the Add Account page, where you can onboard new database accounts for the current asset library.
  5. Configure the asset account information in the account addition dialog box.

    Figure 2 Adding an ccount
    Table 1 Add ccount parameter description

    Parameter

    Description

    Account Name

    Database login user. (Required)

    Password

    Database login password. (Required)

  6. After completing the configuration, click OK. The system will automatically verify the account and password as well as database connectivity. Upon successful verification, the account information of the data asset will be saved.
  7. If you enter an incorrect database username or password, or fail to access the asset library, the system will prompt: Failed to connect to the database. Please verify your username and password.

Associate Database Operators with Asset Library Accounts

This example uses the default system administrator account (sysadmin). In actual use, you need to create individual accounts for each database operator.

  1. In the left navigation bar, select Ops Asset Management > Ops Access Authorization.
  2. Create an authorization group: Click Add Authorization Group and enter the group name.

    Figure 3 Adding an authorization group
    Table 2 Table2 Authorization group adding parameter description

    Parameter

    Description

    Authorization Group Name

    Name of the authorization group. (Required)

  3. Click OK.
  4. Add asset library accounts to the authorization group: In the currently selected authorization group, click Assets/Accounts Count to enter the Authorized Assets/Accounts page.
  5. Click Add Asset and Account to open the Add Asset and Account page. Select the target asset library accounts; multiple entries can be selected at once.
  6. Click OK to add the asset library accounts to the authorization group.
  7. Find the added asset library account and perform the following operations:

    • Delete a single account: Click Delete, then click OK in the confirmation box to remove the account from the permission group.
    • Batch Account Deletion: Select the checkbox before the asset library account to choose multiple accounts. Click the Batch Removal button in the upper-right corner of the page to delete the account from the permission group in bulk.

  8. Add O&M authorized users to the authorization group. On the selected authorization group, click Authorized User to access the Operation and maintenance authorized user page.
  9. You can quickly retrieve authorized O&M users via account name.

    Table 3 Table3 Description of O&M user search parameters

    Parameter

    Description

    Account

    The account names of O&M users support fuzzy matching.

  10. Add O&M authorized users:

    1. Click ADD authroized users for operation and maintenance in the upper-right corner of the page.
    2. The ADD authroized users for operation and maintenance window pops up. Select the O&M users to be added to the authorization group; multiple selections are allowed.
    3. Click OK. A success prompt will appear.

  11. Delete an O&M user:

    1. Select a user from the O&M user list and click Delete.
    2. A prompt shows Deleting cannot be undone, are you sure you want to delete the authorized user? Click OK to complete the deletion.

  12. Batch delete O&M users:

    1. Check the checkboxes before user entries to select multiple users at once.
    2. Click Batch Removal in the upper-right corner of the page to delete operations users in bulk.

  13. Click Back in the upper-right corner to return to the authorization group list page.

Verify Configuration Results

  1. Logging in to the Database Operations and Maintenance Management System using the sysadmin system administrator account.
  2. Access the database successfully via the web terminal of the O&M bastion host.

    • Use the security client: In the left navigation bar, select Ops Bastion Host Inventory and click One-Click Login. A new tab for the O&M bastion host will open in the browser .
    • On the O&M bastion host management page, select the newly added O&M asset and click the WEB terminal icon.
    • A new WebSQL tab will launch in the browser, and the database will be connected successfully through the proxy service.
    • Double-click a table name in the lower area; the corresponding query statement will be automatically filled into the SQL editing area on the right.
    • Click the Execute button.
      Figure 4 WebSQL execution button location
    • The result area displays returned data or permission restriction notifications.
    • Click Authorization application to submit a real-time access request ticket for data permissions. For detailed operations, refer to Example of Real-time Data Access Permission Request/Approval.

Parent Topic: System Function Configuration and Example Use Cases