--- title: How Database Access Controls Evolved to Meet Modern... description: Teleport's Database Access Controls have expanded with automated user provisioning, object-level permissions, and integration with Teleport Identity Security... canonical: https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How Database Access Controls Evolved to Meet Modern Security Needs | daily.dev og:description: Teleport's Database Access Controls have expanded with automated user provisioning, object-level permissions, and integration with Teleport Identity Security... og:url: https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw og:image: https://api.daily.dev/og/posts/qCzBfbdfw.png og:image:alt: How Database Access Controls Evolved to Meet Modern Security Needs og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How Database Access Controls Evolved to Meet Modern Security Needs **[Teleport](https://daily.dev/sources/teleport)** · 6 min read · 0 upvotes · 0 comments ## Summary Teleport's Database Access Controls have expanded with automated user provisioning, object-level permissions, and integration with Teleport Identity Security (Policy) for visualizing access. The post walks through role-based access control configs, shows how to grant per-user database accounts automatically, demonstrates table/schema-level permission rules, and explains how custom import rules can enforce compliance policies like restricting non-EU personnel from EU-citizen data. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What are object-level permissions in Teleport's database access controls? Object-level permissions let administrators define which specific database objects, such as tables or schemas, a user can access using a label-based approach. A role can grant SELECT on all tables by default, allow SELECT, UPDATE, DELETE, and INSERT on a specific schema like scratchpad, while explicitly denying all access to a schema like secrets. _daily.dev helps security teams track evolving database access control features like this one._ ### How does Teleport automate database user provisioning? Teleport automates user provisioning by creating and managing individual database accounts per user instead of relying on shared accounts. Setting create_db_user_mode to keep in a role definition enables this, which improves auditability by tracing specific database activity back to individual users and removes manual, time-consuming account setup. _Developers evaluating access provisioning tools can follow updates like this on daily.dev._ ### Which Teleport Policy version added database object-level permissions to its visualizations? Teleport Identity Security's Policy visualization added support for database object-level permissions in release v16.2.0. This lets security teams and auditors view exactly which database objects a specific user, such as a developer role, can access and at what permission level, improving transparency across infrastructure. _daily.dev keeps infrastructure and security teams current on access-visibility releases like this._ ## Similar posts on daily.dev - [4 Best Practices for Effective Data Access Control](https://daily.dev/posts/4-best-practices-for-effective-data-access-control-ono37zs3b) · Decube · 0 upvotes · 0 comments - [Database, Kubernetes, and SSH access without passwords](https://daily.dev/posts/database-kubernetes-and-ssh-access-without-passwords-nqazd6vpp) · Tailscale · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#backend](https://daily.dev/tags/backend) [View this post on daily.dev](https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How Database Access Controls Evolved to Meet Modern Security Needs","url":"https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw"},"datePublished":"2026-08-23T12:22:50.466Z","dateModified":"2026-08-23T12:51:35.169Z","description":"Teleport's Database Access Controls have expanded with automated user provisioning, object-level permissions, and integration with Teleport Identity Security...","image":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","thumbnailUrl":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,backend","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"How Database Access Controls Evolved to Meet Modern Security Needs"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-database-access-controls-evolved-to-meet-modern-security-needs-qczbfbdfw#faq","mainEntity":[{"@type":"Question","name":"What are object-level permissions in Teleport's database access controls?","acceptedAnswer":{"@type":"Answer","text":"Object-level permissions let administrators define which specific database objects, such as tables or schemas, a user can access using a label-based approach. A role can grant SELECT on all tables by default, allow SELECT, UPDATE, DELETE, and INSERT on a specific schema like scratchpad, while explicitly denying all access to a schema like secrets. daily.dev helps security teams track evolving database access control features like this one."}},{"@type":"Question","name":"How does Teleport automate database user provisioning?","acceptedAnswer":{"@type":"Answer","text":"Teleport automates user provisioning by creating and managing individual database accounts per user instead of relying on shared accounts. Setting create_db_user_mode to keep in a role definition enables this, which improves auditability by tracing specific database activity back to individual users and removes manual, time-consuming account setup. Developers evaluating access provisioning tools can follow updates like this on daily.dev."}},{"@type":"Question","name":"Which Teleport Policy version added database object-level permissions to its visualizations?","acceptedAnswer":{"@type":"Answer","text":"Teleport Identity Security's Policy visualization added support for database object-level permissions in release v16.2.0. This lets security teams and auditors view exactly which database objects a specific user, such as a developer role, can access and at what permission level, improving transparency across infrastructure. daily.dev keeps infrastructure and security teams current on access-visibility releases like this."}}]} ```