Access Control

The right people with the right access

See who has access to what with a visual grant tree. Create users, roles, and profiles through forms instead of writing DDL. Manage indexes and projections without memorizing ALTER TABLE syntax. The DBA toolkit that should have existed from day one.

ClickHouse® database RBAC

See all permissions across all users and roles in a visual tree. Create users, assign roles, grant and revoke privileges through guided forms instead of raw SQL.

App-level access control

Create CHOps accounts for your team with four access levels. Superadmin has full access to everything. Admin has full access except superadmin user management. Editor can build dashboards and run queries but cannot manage users or clusters. Readonly can view and query but cannot create or modify anything.

Single Sign-On (Pro)

Connect your identity provider - Google Workspace, Okta, Azure AD, or any OIDC provider. Team members log in with their existing company credentials. New users are automatically provisioned on first login.

Audit log (Pro)

Every significant action is tracked: who logged in, who created an alert, who deleted a dashboard, who changed a user's role. 50+ action types. Filter by user, action, and date range. Export tamper-proof PDF reports for compliance audits.

Who it's for

Security teams, compliance officers, and engineering managers who need to control and audit access to database infrastructure.