MySQL Schema of Integration Data
The integration data schema defines the structure of the data imported by the MySQL integration. The primary data model entities include Accounts, with mandatory and optional attributes; Credentials Types and Policies applicable at account creation and credentials rotation; Resources, categorized by resource type; and Entitlements, categorized by permission type.
Accounts
Database users stored in the mysql.user system table are retrieved from the MySQL server as the source system during the integration data aggregation process. These users are then normalized and mapped to Account objects within the MySQL integration data model.
Within the integration interface, the aggregated accounts can be accessed at: ObserveID > Identity Automation > Integrations > {specific MySQL integration} > Accounts
The schema of account additional properties is presented in the table below. Properties that are required when creating an account are marked as Required in the On Creation column. Properties that are optional at account creation, or that can be modified later, are marked as Allowed in the On Creation column or in the On Update column, respectively.
Provisioning Rules are used to define the value of a property during account creation or update when the property is required at creation or allowed to be updated. N/A indicates that no provisioning rule is defined for the property.
Custom properties are not listed below can be added on an ad hoc basis together with the corresponding provisioning rule.
|
Account Property |
Type |
Description |
Provisioning Rule |
On Creation |
On Update |
|
PasswordExpire |
Bool |
Whether password must be reset |
Allowed |
Allowed |
Allowed |
Credentials Type and Policies
A password is used as the primary credential type for the Standard (TCP/IP) connection method. The available password policies are listed in the table below. A default password policy can be configured for integration operations such as account creation, credential updates, and password rotation. For Password Change requests, a password policy different from the default can be selected.
|
Password Policy |
Description |
|
Auto Generate Permanent Credentials |
Automatically generates a permanent password. |
|
Auto Generate One Time Credentials |
Automatically generates a one time password required to be changed by the user on the first login to the MySQL server, |
|
Set Specific Permanent Credentials |
A user can establish a permanent password in alignment with the MySQL credentials policy requirements. |
|
Set Specfific One Time Credentials |
A user can establish a one time password in alignment with the MySQL credentials policy requirements. The password must be changed by the user on the first login to the MySQL server. |
Resources
The resource objects are imported from MySQL and displayed as the resources in ObserveID. The attributes of each resource type that a specific resource belongs to are displayed as Additional Properties objects of the Resource.
|
Resource Property |
Type |
Description |
|
Server resource type |
|
|
|
CreatedDateTime |
DateTime |
Date and time when the resource was created. |
|
Database resource type |
|
|
|
CreatedDateTime |
DateTime |
Date and time when the resource was created. |
|
Table resource type |
|
|
|
CreatedDateTime |
DateTime |
Date and time when the resource was created. |
Entitlements
The permission objects are imported from MySQL and displayed as the entitlements in ObserveID. The attributes of each permission type that a specific entitlement belongs to are displayed as Additional Properties objects of the Entitlement.
|
Permission Property |
Type |
Description |
|
Server Role permission type |
|
|
|
CreatedDateTime |
DateTime |
Date and time when the resource was created. |
|
Server Grant permission type |
|
|
|
CreatedDateTime |
DateTime |
Date and time when the resource was created. |
|
Database Grant permission type |
|
|
|
CreatedDateTime |
DateTime |
Date and time when the resource was created. |