Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions confluence-mdx/etc/korean-titles-translations.txt
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,7 @@ DB 정책 예외 요청하기 (DB Policy Exception Request) | Requesting DB Poli

# Database Access Control
웹 SQL 에디터로 접속하기 | Connecting with Web SQL Editor
웹 SQL 에디터 사용하기 | Using Web SQL Editor
Default Privilege 설정하기 | Setting Default Privilege
에이전트 없이 프록시 접속하기 | Connecting to Proxy without Agent
Google BigQuery OAuth 인증을 통해 접속하기 | Connecting via Google BigQuery OAuth Authentication
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1425,14 +1425,14 @@ outputs:
type: page
kind: mdx
path: user-manual/database-access-control/connecting-via-google-bigquery-oauth-authentication.mdx
- page_id: '544380222'
type: page
kind: mdx
path: user-manual/database-access-control/connecting-with-web-sql-editor.mdx
- page_id: '544380354'
type: page
kind: mdx
path: user-manual/database-access-control/setting-default-privilege.mdx
- page_id: '544380222'
type: page
kind: mdx
path: user-manual/database-access-control/using-web-sql-editor.mdx
- page_id: '544384011'
type: page
kind: mdx
Expand Down
10 changes: 5 additions & 5 deletions confluence-mdx/var/pages.qm.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -322,20 +322,20 @@
- "database-access-control"
- "page_id": "544380222"
"type": "page"
"title": "웹 SQL 에디터로 접속하기"
"title_orig": "웹 SQL 에디터로 접속하기"
"title": "웹 SQL 에디터 사용하기"
"title_orig": "웹 SQL 에디터 사용하기"
"breadcrumbs":
- "사용자 매뉴얼"
- "Database Access Control"
- "웹 SQL 에디터로 접속하기"
- "웹 SQL 에디터 사용하기"
"breadcrumbs_en":
- "User Manual"
- "Database Access Control"
- "Connecting with Web SQL Editor"
- "Using Web SQL Editor"
"path":
- "user-manual"
- "database-access-control"
- "connecting-with-web-sql-editor"
- "using-web-sql-editor"
- "page_id": "544380354"
"type": "page"
"title": "Default Privilege 설정하기"
Expand Down
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
4 changes: 4 additions & 0 deletions src/content-route-redirects.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,10 @@
destination: /support/operational-log-collection-guide
created_on: '2026-07-28'
expires_on: '2026-09-22'
- source: /user-manual/database-access-control/connecting-with-web-sql-editor
destination: /user-manual/database-access-control/using-web-sql-editor
created_on: '2026-08-10'
expires_on: '2026-10-05'
- source: /user-manual/kubernetes-access-control/web-client
destination: /user-manual/kubernetes-access-control/connecting-to-kubernetes-clusters-with-web-client
created_on: '2026-07-28'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -80,19 +80,24 @@ Administrator > Audit > Servers > Access Control Logs > Access Contr
9. **Expiration Date** : Permission grant expiration date (scheduled revocation date)
10. **Account** : Server account
11. **Action By** : Administrator name or System who performed the permission grant/revocation
1. When permissions are granted through Workflow, an Access Request link appears and opens the corresponding Request page in a new window.
2. The bottom lists policies applied to the granted/revoked Permission:
1. Access Control related logs - Policy
1. **Access Time** : Access allowed time
2. **Weekday Access Allow** : Access allowed weekdays
3. **IP Addresses** : Access allowed IP addresses
4. **Command Audit** : Command recording status
5. **Proxy Usage** : Access through Proxy (Agent) availability
6. **Max Sessions** : Maximum number of access sessions
7. **Session Timeout (minutes)** : Session timeout time setting
8. **Protocols** : Access protocols
9. **Command Template** : Applied prohibited command set
5. **Session Recording**: Whether session recording was enabled when the Permission was granted. (Supported from 11.5.8 and 11.6.6)
6. **Session Recording Max Size (MB)**: Maximum chunk size of the session recording file applied when the Permission was granted. (Supported from 11.5.8 and 11.6.6)
7. **Proxy Usage** : Access through Proxy (Agent) availability
8. **Require Privilege** : Whether privilege elevation is required
9. **Allow Local Port Forwarding** : Whether local port forwarding is allowed (Supported from 10.3.0)
10. **Allow RDP Clipboard** : Whether RDP clipboard use is allowed (Supported from 11.5.8 and 11.6.6)
11. **Max Sessions** : Maximum number of access sessions
12. **Session Timeout (minutes)** : Session timeout time setting
13. **Protocols** : Access protocols
14. **Command Template** : Applied prohibited command set
2. Whitelist related logs - Whitelisted Commands
1. **Keyword** : Exception handling keyword
2. **RegEx** : Exception handling regular expression
3. **Whitelist Expiration Date** : Exception handling expiration date

Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,19 @@ title: 'Session Logs'
confluenceUrl: 'https://querypie.atlassian.net/wiki/spaces/QM/pages/544014927/Session+Logs'
---

import { Callout } from 'nextra/components'

# Session Logs

### Overview

Records server access sessions managed by the organization.
Administrators can monitor users' work execution history within servers through video playback.

<Callout type="info">
Starting with 11.5.8 and 11.6.6, the Session Recording option is available, and session recording logs are generated only when this option is set to On.
</Callout>

### Viewing Session Logs

<figure data-layout="center" data-align="center">
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ You can use the query sharing feature on the SQL Editor screen.
* When saving, query files are stored in the linked Repository.
* You can load query files stored in the repository from Queries panel &gt; QueryPie Git Sharing folder.

For detailed description, please refer to [Connecting with Web SQL Editor](../../user-manual/database-access-control/connecting-with-web-sql-editor).
For details, see [Using Web SQL Editor](../../user-manual/database-access-control/using-web-sql-editor).


______
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,7 @@ Therefore, even if you are within the displayed IP range, final access may be de
* **Password Provisioning :** Setting for using password provisioning
* Periodically change passwords for server accounts of registered servers
* When set to On, the following changes occur:
* In [Managing Servers as Groups | 3.-Registering-Accounts](connection-management/server-groups/managing-servers-as-groups#3-registering-accounts), account selection options for password provisioning are added
* In [Managing Servers as Groups | 3.-Registering-Accounts](connection-management/server-groups/managing-servers-as-groups#3.-accounts-%eb%93%b1%eb%a1%9d%ed%95%98%ea%b8%b0), account selection options for password provisioning are added

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Restore the per-locale account anchor

This English link now uses the Korean #3.-accounts-... fragment, but the target English page's section is #### 3. Registering Accounts (src/content/en/administrator-manual/servers/connection-management/server-groups/managing-servers-as-groups.mdx:91), so the fragment does not exist and the link no longer jumps to the account-registration instructions; the Japanese link changed to the same Korean fragment as well. Use the locale-specific anchor (or an explicit stable id) so users following the password-provisioning guidance land on the intended section.

Useful? React with 👍 / 👎.

* [Password Provisioning](server-account-management/password-provisioning) menu is activated and Password change Jobs can be registered
* [Account Management](server-account-management/account-management) menu is activated and provides account list lookup functionality for servers managed by QueryPie
* **Allow RDP Connection without Server Agent :** Setting for allowing access to Windows Servers without RDP Server Agent installed
Expand All @@ -106,7 +106,7 @@ When accessing Windows Servers without RDP Server Agent installed, the following
* Provisioning accounts and One Time Accounts can be registered in the system.
* When accessing servers, the system automatically creates temporary accounts on the server.

#### Default Policy Settings for Server Permission Requests
#### Server Access Request Default Settings

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep inbound links valid after the heading rename

After this heading was renamed, existing inbound links still point at the old section id, for example src/content/en/administrator-manual/servers/connection-management/server-groups/managing-servers-as-groups.mdx:230 links to #default-policy-settings-for-server-permission-requests and the Japanese page has the same stale-anchor pattern. Those links now open the SAC configurations page without jumping to this section, so either update the inbound anchors to the new slug or preserve the old anchor explicitly.

Useful? React with 👍 / 👎.


Manage server access policies applied when assigning Direct Permissions through Workflow requests.

Expand All @@ -122,7 +122,10 @@ For more details, please refer to [Requesting Server Access Request](../../user-
</Callout>

<figure data-layout="center" data-align="center">
<img src="/administrator-manual/servers/sac-general-configurations/Screenshot-2025-07-22-at-3.09.36-PM.png" alt="Screenshot-2025-07-22-at-3.09.36-PM.png" width="729" />
<img src="/administrator-manual/servers/sac-general-configurations/image-20260804-071014.png" alt="Admin &gt; Servers &gt; General &gt; Configurations &gt; Server Access Request Default Settings" width="709" />
<figcaption>
Admin &gt; Servers &gt; General &gt; Configurations &gt; Server Access Request Default Settings
</figcaption>
</figure>

* Maximum Access Duration : Set the maximum usage period for server access permissions
Expand All @@ -138,6 +141,9 @@ For more details, please refer to [Requesting Server Access Request](../../user-
* **Proxy Usage**: Whether to allow proxy access through Agent for this permission
* **Allow Local Port Forwarding**: Whether to allow Port Forwarding from Client
* Used when using Port Forwarding such as VSCode
* **Allow RDP Clipboard**: Whether to allow clipboard use in RDP sessions
* **Session Recording**: Sets whether session recording is enabled by default for server access Permissions granted through Server Access Request. The default is On. When set to Off, the session recording option for Permissions created by the request is set to Off. (Supported from 11.5.8 and 11.6.6)
* **Session Recording Max Size**: Sets the maximum chunk size of session recording files in MB. The default is 100 MB, and you can enter a value from 10 MB to 1024 MB. This item cannot be configured when Session Recording is Off. (Supported from 11.5.8 and 11.6.6)
* **Max Sessions**: Maximum concurrent connections per server
* **Session Timeout**: Server session timeout criteria time (minutes)
* **Show Server Groups in Workflow if Assigned as Member :** When checked, only server groups assigned as Server Group Members are displayed when users apply for Server Access Request
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ If more than 1000 servers are registered in a single server group, add servers t
#### 3. <Badge color="blue">Step 2</Badge>: Set access policies for the selected servers.

<figure data-layout="center" data-align="center">
<img src="/administrator-manual/servers/server-access-control/access-control/granting-and-revoking-permissions/Screenshot-2025-07-27-at-5.28.54-PM.png" alt="Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; Details &gt; Grant Permissions Step 2" width="760" />
<img src="/administrator-manual/servers/server-access-control/access-control/granting-and-revoking-permissions/3.-Permissions-부여-및-회수하기.png" alt="Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; Details &gt; Grant Permissions Step 2" width="760" />
<figcaption>
Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; Details &gt; Grant Permissions Step 2
</figcaption>
Expand All @@ -60,30 +60,30 @@ Administrator &gt; Servers &gt; Server Access Control &gt; Access Control &gt; D
2. Each policy item is as follows:
1. **`{n}` Server(s) selected**: This item displays the number of Servers selected in <Badge color="blue">Step 1</Badge> x the number of Accounts. Clicking shows each item in list format.
2. **Set Permissions by Minute**: When this option is selected, server access permissions can be set in minutes. When the checkbox is selected, the following setting items are activated.
1. Start Trigger : Select the permission grant start condition
1. **Start Trigger** : Select the permission grant start condition
1. Access to the Server : Permissions are activated immediately when the user accesses the server. Regardless of server session maintenance, you can access the server for the specified period from the activation time.
2. Grant : The timer starts immediately upon permission grant, and permissions are valid only for the specified period regardless of the user's actual access.
2. **Duration(Minutes)**: Enter the valid time in minutes for the permission.
3. **Expiration Date**: Set the access permission expiration date. Can be set up to a maximum of 1 year. (Default = 1 year later)
4. **Protocols**: Use the protocol to be used for server access.
5. **Command Template**: Set the command set that cannot be used after accessing the server. You can check the detailed conditions set by clicking Command Template Details below.<br/>*Limitation: (10.2.1) Only Command Templates set to Deny can be used in Grant Permissions.
6. **Configure Whitelist**: Supports exception handling for specific commands in the process of controlling commands through Command Template. When the Configure Whitelist checkbox is checked, the following settings appear:
1. **Commands**: Enter commands that need to be allowed.
1. **Keyword**: Enter as keyword (ls, cat, etc.)
2. **RegEx**: Enter as regular expression (^sudo\b[^&|;\n]*$, etc.)
2. **Whitelist Expiration Date**: Specify a separate exception handling expiration date for the above commands.
7. **Require Privilege**: When this option is activated, users must go through an approval process through Server Privilege Request workflow to access servers with that account. This is useful when temporarily allowing and managing access to high-privilege accounts such as administrator (Admin) accounts on Windows servers.
6. **Configure Server Privilege**: Adds Server Privilege settings to apply to the Permission. When selected, you can configure the commands available through Server Privilege and the Privilege Expiration Date. For minute-based Permissions, you can also configure Privilege Start Trigger and Privilege Duration (Minutes).
7. **Access Start Time**: Set the allowed access start time.
8. **Access End Time**: Set the allowed access end time.
9. **Access Weekday**: Set the days of the week when access is allowed.
10. **IP Addresses**: Set the IP addresses allowed for access.
11. **Command Audit**: Set whether to log commands used in sessions connected through this Permission.
12. **Command Detection**: Set whether to detect prohibited commands within Script/Alias when they are called.<br/>*Limitation: (10.2.1) Only works in Bash Shell, commands that call other Scripts from Script are blocked
13. **Session Recording**: Sets the session recording option for SSH, SFTP, TELNET, and FTP sessions associated with this Permission. The default is `On`. Actual session recording follows the combined result of all policies applied at connection time. (Supported from 11.5.8 and 11.6.6)
14. **Session Recording Max Size (MB)**: Sets the maximum chunk size of session recording files in MB. The default is 100 MB, and you can enter a value from 10 MB to 1024 MB. This item is disabled when Session Recording is Off. (Supported from 11.5.8 and 11.6.6)
15. **Proxy Usage**: Set whether to allow server access through QueryPie Agent with this Permission.
16. **Require Privilege**: When this option is activated, users must go through an approval process through Server Privilege Request workflow to access servers with that account. This is useful when temporarily allowing and managing access to high-privilege accounts such as administrator (Admin) accounts on Windows servers.
* When attempting to access with an account where this option is activated, the `Connect` button is disabled when accessing the server from the user dashboard, and a message is displayed indicating that an access permission request must be submitted.
* The Require Privilege option can be applied to all accounts regardless of the server's OS type.
8. **Access Start Time**: Set the allowed access start time.
9. **Access End Time**: Set the allowed access end time.
10. **Access Weekday**: Set the days of the week when access is allowed.
11. **IP Addresses**: Set the IP addresses allowed for access.
12. **Command Audit**: Set whether to log commands used in sessions connected through this Permission.
13. **Command Detection**: Set whether to detect prohibited commands within Script/Alias when they are called.<br/>*Limitation: (10.2.1) Only works in Bash Shell, commands that call other Scripts from Script are blocked
14. **Proxy Usage**: Set whether to allow server access through QueryPie Agent with this Permission.
15. **Max Sessions**: Limit the number of concurrent sessions a user can have on a single server.
16. **Session Timeout (minutes)**: Sessions are terminated if inactive for the entered time (minutes).
17. **Allow Local Port Forwarding**: Allows clients connected through this Permission to forward local ports to the remote server. This is required for clients that use local port forwarding, such as VS Code Remote SSH. (Supported from 10.3.0)
18. **Allow RDP Clipboard**: Sets whether clipboard redirection is allowed for RDP sessions connected through this Permission. When set to Disable, clipboard redirection is unavailable in the RDP session. (Supported from 11.5.8 and 11.6.6)
19. **Max Sessions**: Limit the number of concurrent sessions a user can have on a single server.
20. **Session Timeout (minutes)**: Sessions are terminated if inactive for the entered time (minutes).
3. Click the `Grant` button in the bottom right to complete permission grant.


Expand Down
Loading
Loading