Docs

Connect a database

These are the same instructions the product shows you when a credential check fails, so there is only ever one version of them.

• start here Why read-only, and what we check the gate, per engine
• postgres PostgreSQL CREATE ROLE … LOGIN, default-privilege grants
• mysql MySQL / MariaDB GRANT SELECT, and the privileges to avoid
• snowflake Snowflake a reader role, and pinning the warehouse
• bigquery BigQuery dataViewer + jobUser, and the scan cap

Concepts

• The semantic model what your numbers mean, versioned
• The eval gate how a change is blocked, and by what
• Connectors agent-written, sandbox-validated
• Glossary the words this product uses