Skip to content

Integrating SailPoint with DataStax Astra DB

DataStax Astra DB is a cloud-native database-as-a-service built on Apache Cassandra, designed for scalable, secure, and globally distributed applications. It provides centralized management for databases, organizations, roles, and access policies across environments. This document provides instructions to configure a new direct connection to a DataStax Astra DB source. For a reference to the terminology specific to SailPoint products, refer to Source and Connector Definitions.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

Supported Features

The DataStax Astra DB connector supports the following:

Account Management

  • Aggregate Users

Entitlement Management

  • Aggregate Roles

Important

Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:

  • Organization Admins: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
  • Regular Users: Limited to 1 manual account or entitlement aggregation per day per source.

These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

  1. Log in to the Astra Portal.
  2. Go to Account Settings > Tokens.
  3. Select your desired role from the dropdown menu.
  4. Select Generate Token to create your application token.
  5. Copy the Token value immediately, it will not be shown again. For more information about managing application tokens, refer to the DataStax Astra DB Application Tokens documentation.

Required Permissions

  • To integrate Astra DB for identity governance, generate an Application Token with organization-level scope and only the read permissions required for aggregation.
  • Service Account Integration - Use a dedicated non-personal service/integration account for programmatic access so the integration remains stable regardless of individual user status.
  • Organization-Level Scope - Assign an organization role (or custom least-privilege role) that provides required governance visibility, typically including Read User and Read Custom Role (and Read Organization when organization metadata is needed).
  • For more information about roles and permissions, refer to the DataStax Astra DB Roles and Permissions documentation.

Note

The linked document is not maintained by SailPoint and is subject to change without notice.