Skip to main content
Nais Docs
  • Home
  • Explanations
    • What is Nais?
    • What is a team?
    • Under the hood
  • Tutorials
    • Hello Nais
  • Workloads
    • 💡 Explanations
      • The runtime environment
      • Good practices
      • HTTP client connection management
      • Image repository
      • Zero Trust
    • 🎯 How-To
      • Set up access policies
      • Communicate with other workloads
      • Reduce costs
      • Debugging workloads
      • Disable read-only file system
      • Overriding user and group that runs container process
      • Troubleshooting
      • Upload third-party image to image repository
    • 📚 Reference
      • Access policy reference
      • Container security
      • Default workload variables
      • Environments
      • Editor schemas for Kubernetes-style manifests
    • Application
      • 💡 Explanations
        • Exposing your application
      • 🎯 How-To
        • Create application
        • Delete your application
        • Expose an application
        • Redirect a client
      • 📚 Reference
        • Automatic Scaling
        • Nais Application example YAML
        • Ingress reference
        • Nais Application reference
    • Nais job
      • 🎯 How-To
        • Create job
        • Delete your job
      • 📚 Reference
        • Nais Job example YAML
        • Nais Job reference
  • Build and deploy
    • 💡 Explanations
      • Applying a manifest
      • Environment mixins
      • Nais manifests
    • 🎯 How-To
      • Build and deploy with GitHub Actions
      • Dependabot with auto-merge
      • Set up a complete deploy pipeline
      • Schema validation and auto-completion
      • Templating (deprecated)
      • Using the image outside of Nais
    • 📚 Reference
      • Deploy with the Nais CLI
      • Manifest reference
  • Auth
    • 💡 Explanations
    • 🎯 How-To
      • Log in users
    • 📚 Reference
    • Workload Identity
  • Observability
    • 🎯 How-To
      • Get started with auto-instrumentation
    • 📚 Reference
      • OpenTelemetry Auto-Instrumentation Configuration
      • Observability Glossary
    • Frontend
      • 🎯 How-To
        • Custom frontend metrics
        • Set up Faro
        • Set up Faro with Next.js
        • Sourcemap deobfuscation
        • Frontend-to-backend trace propagation
      • 📚 Reference
        • Auto-configuration reference
        • Frontend observability troubleshooting
    • Tracing
      • 🎯 How-To
        • Avoid false errors from expected 4xx responses
        • Trace context propagation
        • Correlate traces and logs
        • Get started with Grafana Tempo
      • 📚 Reference
        • Span Metrics
        • OpenTelemetry Trace Semantic Conventions
        • TraceQL Reference
    • Alerting
      • 🎯 How-To
        • Create alert in Grafana
        • Customize Prometheus alerts
        • Create alert with Prometheus
      • 📚 Reference
        • Prometheus Alerting Rule Reference
    • Logging
      • 🎯 How-To
        • Disable persistent application logs
        • View logs from the command line
        • Adding logs to your Grafana dashboard
        • Metrics and alerts for logs
        • Get started with Grafana Loki
        • Get started with Team Logs
      • 📚 Reference
        • Log Destinations
        • LogQL Reference
        • Loki Labels Reference
        • Loki Metrics Reference
    • Metrics
      • 🎯 How-To
        • Create a dashboard in Grafana
        • Expose metrics from your application
        • Push metrics to Prometheus
      • 📚 Reference
        • Global Metrics
        • Grafana Glossary
        • Metrics reference
        • OpenTelemetry Metrics
        • PromQL Reference
    • Tutorials
      • Getting Started with Observability in Nais
      • Adding Custom Spans and Metrics with OpenTelemetry
  • Persistence
    • 💡 Explanations
      • Responsibilities
    • BigQuery
      • 🎯 How-To
        • Using BigQuery from your application
        • Create an instance of BigQuery
    • CloudSQL
      • 💡 Explanations
        • Cloud SQL credentials
        • Cloud SQL Instance
        • Cloud SQL Proxy
        • Cloud SQL System Users and Roles
        • Grants and privileges
        • Non-personal database users
      • 🎯 How-To
        • Additional users
        • Certification sync issues
        • Change the tier of your database instance
        • Connect to a cloned database
        • Postgres database metrics
        • Debugging
        • Deleting the database
        • Enable audit logging
        • Failing to assign private IP to an existing Cloud SQL instance
        • Legacy Cloud SQL migration (deprecated)
        • Change your Cloud SQL instance
        • Workaround for password synchronization issues
        • Personal database access
        • Reset database credentials
        • Restore a database from a daily backup
        • Shrink Cloud SQL disk size
        • Upgrade major version
      • 📚 Reference
    • Buckets
      • 🎯 How-To
        • Create a bucket
        • Deleting a bucket
      • 📚 Reference
    • Kafka
      • 💡 Explanations
        • Working with Kafka Offsets
        • Tiered storage
      • 🎯 How-To
        • Accessing topics from an application
        • Create a Kafka topic
        • Delete Kafka topic and data
        • Using Kafka Streams with internal topics
        • Manage access
        • Remove access to topics from an application
        • Avro and schema
        • Get temporary Kafka credentials
        • How to turn on Tiered Storage for your Kafka topic
        • Troubleshooting
      • 📚 Reference
        • Environment variables for Kafka
        • Kafka metrics
        • Kafka Pools
        • Nais Topic example YAML
        • Nais Topic reference
    • OpenSearch
      • 🎯 How-To
        • Create OpenSearch
        • Create OpenSearch with GitHub Actions
        • Use OpenSearch in your workload
        • Delete OpenSearch
        • Get access to the dashboard
        • Get temporary OpenSearch credentials
        • Upgrade major version
      • 📚 Reference
        • Nais OpenSearch example YAML
        • Nais OpenSearch reference
    • PostgreSQL
      • 💡 Explanations
        • Postgres cluster
      • 🎯 How-To
        • Connect from laptop
        • Postgres database metrics
        • Debugging
        • Deleting the database
        • Upgrade major version
      • 📚 Reference
        • Nais Postgres example YAML
        • Nais Postgres reference
    • Valkey
      • 🎯 How-To
        • Create Valkey
        • Create Valkey with GitHub Actions
        • Use Valkey in your workload
        • Delete Valkey
      • 📚 Reference
        • Nais Valkey example YAML
        • Nais Valkey reference
  • Other services
    • CDN
      • 🎯 How-To
        • Upload assets to the CDN
        • Manage CDN assets
      • 📚 Reference
        • CDN Upload Action
    • Config
      • 🎯 How-To
        • Create and manage configs in Console
        • Use a config in your workload
      • 📚 Reference
    • Secrets
      • 🎯 How-To
        • Create and manage secrets in Console
        • Use a secret in your workload
        • Get a platform-managed secret value using the CLI
      • 📚 Reference
    • Vulnerabilities
      • 🎯 How-To
        • Alert on vulnerabilities
        • Generate SBOM
      • 📚 Reference
    • Feature Toggling
    • Anti-Virus Scanning
    • Leader Election
      • 🎯 How-To
        • Enable Leader Election
  • Operate
    • 💡 Explanations
      • Labels
    • 🎯 How-To
      • Setup command line access
      • Create a Nais team
      • Add labels to your resources
    • 📚 Reference
      • Label reference
    • Nais Console
      • Nais API
    • CLI
    • naisdevice
      • 🎯 How-To
        • Install naisdevice
        • Troubleshooting naisdevice
        • Uninstall naisdevice
        • Update naisdevice
  • Tags
All tags

access

2 pages

  • Grants and privileges

    nais cloudsql prepare grants PostgreSQL privileges, not login access. By default, it grants USAGE on the schema and SELECT on existing tables and sequences to cloudsqliamuser. It also sets default…

  • Personal database access

    Use your personal Google account to access a Cloud SQL database. Database privileges and login access are separate: prepare grants PostgreSQL privileges, but does not create an IAM database user or…