# Integrating SailPoint with SingleStore

SingleStore is a cloud-native, distributed SQL database platform (delivered as SingleStore Helios) that combines transactional and analytical workloads in a single system. It is used by organizations to power real-time analytics, operational applications, and AI/ML workloads on large volumes of streaming and historical data. This document provides instructions to configure a new direct connection to a SingleStore source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The SingleStore connector supports the following:

### Account Management

- Aggregate Users

### Entitlement Management

- Aggregate Roles

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

Ensure the following prerequisites are met before proceeding with the configuration:

- Administrative access to the SingleStore organization. A user belonging to the Organization Owners team (or an equivalent administrator) is required to create API keys and review role assignments.
- A dedicated service identity (recommended) within the SingleStore organization that will own the API key used by SailPoint. Using a dedicated identity makes credential rotation and auditing easier.
- Supported authentication type: HTTP Bearer authentication using a SingleStore Management API key. The connector sends the API key as a bearer token.
- A reachable Management API base URL. The default for SingleStore Helios is `https://api.singlestore.com`.
- For more information about generating credentials and understanding organization roles, refer to the following resources:

  - [SingleStore Management API Overview](<https://docs.singlestore.com/cloud/reference/management-api/>)
  - [SingleStore Management API Reference](<https://docs.singlestore.com/cloud/reference/management-api/reference/>)
  - [Role-Based Access Control (RBAC) for SingleStore Helios](<https://docs.singlestore.com/cloud/security/administration/role-based-access-control-rbac-for-singlestore-helios/>)

## Required Permissions

- The SingleStore Management API uses an organization-scoped API key as its credential.
- Only users who have permission to manage API keys in the target organization can create the key. In SingleStore Helios, this capability is granted to members of the **Organization Owners** team (the `Owner`role includes the `Manage API Keys` permission). A user with equivalent administrative rights must therefore create or own the API key used by SailPoint.
- The API key inherits the operations permitted to the user/identity that owns it. To allow SailPoint to enumerate users and roles across the organization, the owning identity must have organization-wide administrative scope (for example, scope: `organization members`).
- For more information about built-in roles and their permissions, refer to the [Predefined Organization Teams and Their Corresponding Roles documentation](<https://docs.singlestore.com/cloud/security/administration/role-based-access-control-rbac-for-singlestore-helios/predefined-organization-teams-and-their-corresponding-roles/>).

> [!NOTE]
>
> The linked document is not maintained by SailPoint and is subject to change without notice.