Security & access control¶
This section covers authentication, authorization, certificate management, and other security hardening options for your DataRobot installation.
The table below lists the topics included in the security & access control section:
| トピック | 説明 |
|---|---|
| セキュリティのベストプラクティス | A guide to help configure DataRobot following security best practices, including the security banner, tenancy enforcement, seat licenses, and Docker Hub artifacts. |
| Password policies | Configure DataRobot to enforce restrictions on users' passwords. |
| Integrate with LDAP | Integrate DataRobot with an external LDAP server. |
| Integrate SAML single sign-on | Use external Identity Providers for user authentication through SAML-based SSO. |
| OAuth providers | Enable the OAuth2 workflow so DataRobot users can grant access to external resources. |
| Limited admin permissions | Install the DataRobot platform with limited admin permissions using a dedicated Helm chart. |
| ACL service enablement | Enable fine-grained access control for vector database results based on source system permissions. |
| External secrets | Integrate external secret management using the ESO or VSO operators. |
| Secrets Management Service (SMS) | Integrate with client-managed secret storage backends. |
| Configure application-level TLS | TLS for service-to-service communication inside the platform. |
| Custom certificate authority (CA) for TLS | Custom CA bundles, Trust Manager, self-signed certificate migration, and platform-wide trust. |
| Configure cert-manager for TLS on ingress | TLS termination at ingress (for example cert-manager and Let's Encrypt). |