--- title: "DB & Server Access Control quickstart" slug: "dsac-procedure" tags: ["DSAC", "DB and Server Access Control"] updated: 2026-10-08T06:59:30Z published: 2026-10-08T06:59:30Z canonical: "guide.ncloud-docs.com/dsac-procedure" --- > ## Documentation Index > Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # DB & Server Access Control quickstart Available in VPC With NAVER Cloud Platform's DB & Server Access Control, you can easily and conveniently manage access permissions for servers and databases, log task history, and conduct audits. While you can explore the service in detail with [Getting Started with DB & Server Access Control](/docs/en/dsac-start) and Using DB & Server Access Control, we recommend starting with this quickstart overview to understand the complete workflow. Understanding the workflow before reviewing the detailed instructions helps you use DB & Server Access Control more effectively. Here's the entire process for using DB & Server Access Control: [1. Set user permissions](/docs/en/dsac-procedure#1%EC%82%AC%EC%9A%A9%EA%B6%8C%ED%95%9C%EC%84%A4%EC%A0%95) [2. Subscribe and configure a proxy server](/docs/en/dsac-procedure#2%EC%9D%B4%EC%9A%A9%EC%8B%A0%EC%B2%AD%EB%B0%8F%ED%94%84%EB%A1%9D%EC%8B%9C%EC%84%9C%EB%B2%84%EA%B5%AC%EC%84%B1) [3. Register access control targets](/docs/en/dsac-procedure#3%EC%A0%91%EA%B7%BC%EC%A0%9C%EC%96%B4%ED%83%80%EA%B9%83%EB%93%B1%EB%A1%9D) [4. Set access permissions](/docs/en/dsac-procedure#4%EC%A0%91%EA%B7%BC%EA%B6%8C%ED%95%9C%EC%84%A4%EC%A0%95) [5. Install the client and access resources](/docs/en/dsac-procedure#5Client%EC%84%A4%EC%B9%98%EB%B0%8F%EB%A6%AC%EC%86%8C%EC%8A%A4%EC%A0%91%EC%86%8D) [6. Monitor and audit task history](/docs/en/dsac-procedure#6%EC%9E%91%EC%97%85%EC%9D%B4%EB%A0%A5%EB%AA%A8%EB%8B%88%ED%84%B0%EB%A7%81%EB%B0%8F%EA%B0%90%EC%82%AC) [7. Unsubscribe from the service](/docs/en/dsac-procedure#7%EC%9D%B4%EC%9A%A9%ED%95%B4%EC%A7%80) The DB & Server Access Control workflow covers environment configuration by administrators, resource access by users, and task history auditing. For details about the service architecture, how it works, and terminology, see [DB & Server Access Control concepts](/docs/en/dsac-info). ## 1. Set user permissions Set permissions to use the DB & Server Access Control service. Define DB & Server Access Control permissions by assigning policies to sub accounts created in NAVER Cloud Platform's Sub Account service. First, create a sub account in Sub Account in addition to your main account. Note Sub Account is a free service with no additional charges. For more information about Sub Account and pricing, see [**Services > Management & Governance > Sub Account**](https://www.ncloud.com/product/management/subAccount) on the NAVER Cloud Platform portal. The DB & Server Access Control service does not have a separate permission system, and console usage and resource access permissions are managed together through Sub Account. Permissions can be set using predefined **system-managed (System Managed) policies** and **user-defined (User Created) policies**, which you define by selecting the permissions yourself. To use the DB & Server Access Control service safely, it is recommended that you configure and manage the minimum number of permissions required to use the service. For detailed instructions, see: - [DB & Server Access Control permissions management](/docs/en/dsac-subaccount) - [Sub Account user guide](/docs/en/subaccount-overview) ## 2. Subscribe and configure a proxy server When you subscribe to DB & Server Access Control, a proxy server is created in your VPC to relay connections and log task history. During the subscription stage, select the VPC and Subnet for deploying the proxy server, as well as the server specifications suitable for the scale of the access control targets, and set the dashboard analytics criteria (business hours, bulk query criteria). Caution Since the DB & Server Access Control service features access history logging as its core function, you must first subscribe to the Cloud Log Analytics service. For detailed instructions, see: - [Manage subscriptions](/docs/en/dsac-start) - [Proxy Server](/docs/en/dsac-proxyserver) - [Getting Started with Cloud Log Analytics](/docs/en/cla-start) ## 3. Register access control targets Register resources subject to access control and logging as server targets or DB targets. Before creating server targets, configure the usage range. For each target, you can configure the logging scope (Request or Request + Response) and personal information masking. For detailed instructions, see: - [Access Control Target](/docs/en/dsac-accesscontroltarget) - [Masking](/docs/en/dsac-masking) ## 4. Set access permissions User-specific resource access permissions are managed through user-defined policies in Sub Account. Define access permissions for specific server or database targets in policies and assign them to sub accounts or groups. When a user logs in, the proxy server checks these policies to allow or deny access. For detailed instructions, see: - [DB & Server Access Control permissions management](/docs/en/dsac-subaccount) - [Sub Account user guide](/docs/en/subaccount-overview) ## 5. Install the client and access resources Download the dedicated client (Windows or macOS) from the user guide, install it on your PC, and log in with a sub account. Using an access tool (terminal, DB client, etc.) after logging in allows you to connect to an authorized server or DB via the proxy server. For detailed instructions, see: - [Proxy Server](/docs/en/dsac-proxyserver) - [DB & Server Access Control Client](/docs/en/dsac-client) ## 6. Monitor and audit task history On the console dashboard, you can view analytics on anomalies, such as access blocking status, non-business hour access, and bulk query activity. Detailed logs, such as commands, queries, and results executed by users, can be viewed and audited in the Cloud Log Analytics service. If long-term retention is required, you can store data in a bucket using the Object Storage service. For detailed instructions, see: - [Dashboard](/dcos/dsac-dashboard) - [Getting Started with Cloud Log Analytics](/docs/en/cla-start) - [Object Storage overview](/docs/en/storage-storage-6-1) ## 7. Unsubscribe from the service To stop using the service, delete any registered access control targets and then cancel your subscription. When you unsubscribe, the proxy server created in your VPC is automatically deleted. Deleting the proxy server may forcibly terminate ongoing connections and task sessions. For detailed instructions, see: - [Access Control Target](/docs/en/dsac-accesscontroltarget) - [Manage subscriptions](/docs/en/dsac-start)