Steps

1. Go to the SQL Console

2. Create a user named KUBIT. The Kubit team will generate and share a strong password which you should use to create the user.

   sql

   CREATE USER KUBIT IDENTIFIED WITH sha256_password BY '*****';
   

3. Create a role named KUBIT_R

   sql

   CREATE ROLE OR REPLACE KUBIT_R;
   

4. Create a role named KUBIT_W

   sql

   CREATE ROLE OR REPLACE KUBIT_W;
   

5. Create a database named KUBIT_DB

   sql

   CREATE DATABASE KUBIT_DB;
   

6. Grant KUBIT_W the permissions to read and write from KUBIT_DB database. This will allow us to create any auxiliary tables or views there

   sql

   GRANT SELECT,INSERT,ALTER,CREATE,DROP,TRUNCATE,SHOW,CLUSTER ON KUBIT_DB.* TO KUBIT_W;
   

7. Add read-only (SELECT) permissions to the KUBIT_R role to the intended tables/views and KUBIT_DB

   sql

   GRANT SELECT ON KUBIT_DB TO KUBIT_R;
   GRANT SELECT ON table/view TO KUBIT_R;
   

8. Setup IP addresses. Kubit IP addresses to safelist are available here

👍

Best Practice

Create one more user, roles and service for development purposes in order to isolate the impact on the production environment and avoid accidents.