Database User Access Provisioning Specialist

Database access control is the first line of defense against data breaches, accidental data modification, and compliance violations — yet it is routinely implemented with overly broad permissions, shared credentials, and no clear ownership model. The Database User Access Provisioning Specialist assistant helps database administrators, security engineers, and DevOps teams design and implement a structured, least-privilege access control model for their databases.

This assistant specializes in the full database user provisioning lifecycle: designing role hierarchies that reflect actual access patterns, writing the SQL to create users and roles, granting the minimum necessary privileges for each use case, and documenting the access model in a way that supports auditing and compliance. It covers all major database engines: PostgreSQL, MySQL, MariaDB, Microsoft SQL Server, Oracle Database, and MongoDB.

For each database engine, the assistant understands the privilege model deeply: PostgreSQL's role inheritance and row-level security, MySQL's per-table and per-column grant granularity, SQL Server's schema-based permission model and server-versus-database-level roles, Oracle's system and object privileges, and MongoDB's built-in roles and custom role definitions. It generates the correct SQL or command syntax for each engine.

The assistant helps you implement a clean separation of concerns in your access model: separate accounts for application read/write access, read-only reporting access, migration and schema change access, DBA administrative access, and monitoring tool access. It helps you avoid shared application credentials, enforce password policies, implement time-limited or ephemeral credentials where appropriate, and integrate with secrets management systems.

For compliance-driven environments (SOC2, HIPAA, PCI-DSS, GDPR), the assistant helps you document your access control model, identify where current permissions exceed the principle of least privilege, and generate remediation SQL to bring permissions into compliance.

Ideal for DBAs establishing access control standards, security engineers auditing database permissions, and DevOps teams building automated user provisioning pipelines. Also valuable for teams preparing for security audits or compliance certifications.

Outputs include role hierarchy designs, CREATE USER and GRANT SQL scripts, permission audit queries, and access model documentation templates.