Skip to main content
In this quickstart, you add a PostgreSQL database to Infisical PAM, connect to it from your browser, review the recording of what you did, and give your team access to the database. Neither you nor your team ever sees the database password.

​
Prerequisites

  • The Product Admin role in PAM
  • A Gateway that can reach your PostgreSQL database
  • The host, port, and database name of the PostgreSQL database, and a username and password for it

​
Step 1: Create a folder

A folder groups the accounts that the same people need to reach.
1
Go to Privileged Access Management > Accounts, select the arrow next to Add Account, and select Add Folder.
2
Enter a name for the folder, such as platform-team, and select Add Folder.
Infisical gives you the Admin role on the folder, so you can add accounts to it.

​
Step 2: Add the database

An account stores the connection details and credentials for one database or server.
1
Select Add Account.
2
Select the folder you created, select the postgres template, and select Next.
3
Enter a name for the account, such as orders-db.
4
Select the Gateway that can reach the database, and enter the database’s host, port, and database name.
5
Enter the username and password, and select Create.

​
Step 3: Connect to the database

1
On the Accounts page, select the rocket icon on the account’s row.
2
Select Browser, then select Connect in Browser.
The database opens in a new browser tab, where you can browse its tables and run SQL queries. Infisical connects as the account’s user, so you don’t enter a password. Run a query or two, then close the tab to end the session.

​
Step 4: Review the session

1
Go to Privileged Access Management > Sessions and select your session.
2
On the Session Logs tab, review the queries you ran and the database’s responses.

​
Step 5: Give your team access

Give your team a role on the folder, so they can connect to the database the same way you did.
Your team members, or a group they belong to, must already be product members of PAM.
1
On the Accounts page, open the folder’s options menu, select Configure, and open the Permissions tab.
2
Select Assign Access.
3
Select your team’s group, or a team member, as the Assignee, and select Connector as the Role.
4
Select Assign.
The Connector role lets your team launch sessions on every account in the folder, including accounts you add later. To let someone add accounts and manage access to the folder, give them the Admin role instead.

​
Next steps

Concepts

Learn how Infisical PAM controls access to your infrastructure.

Access requests

Require approval before a member can use a sensitive account.