Skip to main content
SQLWorkspace engine access controls what a SQL identity can query or administer inside a workspace.

Cloud user access

Understand how qualifying organization roles map cloud users to engine administrators.

Machine-to-machine access

Create dedicated engine users for applications and automation.

​
Identity models

​
Query paths

SQL Studio and the native PostgreSQL endpoint are two connection paths to the same engine. Changing the client does not elevate permissions:
  • SQL Studio uses the SQL identity associated with the authenticated experience.
  • Native PostgreSQL clients use the supplied SQL username and password.
  • The SQLWorkspace engine evaluates permissions for both paths.
Permission to manage a SQLWorkspace in StreamNative Cloud does not otherwise grant permission to query or administer its engine. See Cloud Resource Access for the separate cloud permission layer.