guardian
Guardian is universal data access management tool with automated access workflows and security controls across data stores, analytical systems, and cloud products.
File Explorer
Download Latest Version (.zip)- bug_report.md
- custom.md
- feature_request.md
- main.yml
- release.yaml
- test.yaml
- CODEOWNERS
- activityService.go
- appealService.go
- approvalService.go
- grantService.go
- namespaceService.go
- policyService.go
- providerService.go
- resourceService.go
- activity.go
- adapter.go
- appeal.go
- appeal_test.go
- approval.go
- approval_test.go
- grant.go
- grant_test.go
- grpc.go
- grpc_test.go
- namespace.go
- policy.go
- policy_test.go
- provider.go
- provider_test.go
- resource.go
- resource_test.go
- guardian.pb.go
- guardian.pb.gw.go
- guardian.swagger.json
- guardian_grpc.pb.go
- appeal.go
- client.go
- config.go
- grant.go
- help.go
- job.go
- policy.go
- provider.go
- resource.go
- root.go
- server.go
- utils.go
- version.go
- auditLogger.go
- providerService.go
- repository.go
- errors.go
- service.go
- approvalService.go
- auditLogger.go
- grantService.go
- iamManager.go
- notifier.go
- policyService.go
- providerService.go
- repository.go
- resourceService.go
- errors.go
- service.go
- service_test.go
- policyService.go
- repository.go
- errors.go
- service.go
- service_test.go
- auditLogger.go
- notifier.go
- providerService.go
- repository.go
- resourceService.go
- errors.go
- option.go
- service.go
- service_test.go
- service.go
- auditLogger.go
- providerService.go
- repository.go
- resourceService.go
- errors.go
- service.go
- service_test.go
- activityManager.go
- auditLogger.go
- Client.go
- dormancyChecker.go
- providerActivityService.go
- repository.go
- resourceService.go
- common.go
- common_test.go
- errors.go
- service.go
- service_test.go
- auditLogger.go
- repository.go
- errors.go
- service.go
- service_test.go
- info.go
- guardian-apis.info.mdx
- guardian-service-add-approver.api.mdx
- guardian-service-cancel-appeal.api.mdx
- guardian-service-create-appeal.api.mdx
- guardian-service-create-namespace.api.mdx
- guardian-service-create-policy.api.mdx
- guardian-service-create-provider.api.mdx
- guardian-service-delete-approver.api.mdx
- guardian-service-delete-provider.api.mdx
- guardian-service-delete-resource.api.mdx
- guardian-service-get-activity.api.mdx
- guardian-service-get-appeal.api.mdx
- guardian-service-get-grant.api.mdx
- guardian-service-get-namespace.api.mdx
- guardian-service-get-policy-preferences.api.mdx
- guardian-service-get-policy.api.mdx
- guardian-service-get-provider-roles.api.mdx
- guardian-service-get-provider-types.api.mdx
- guardian-service-get-provider.api.mdx
- guardian-service-get-resource.api.mdx
- guardian-service-import-activities.api.mdx
- guardian-service-import-grants-from-provider.api.mdx
- guardian-service-list-activities.api.mdx
- guardian-service-list-appeals.api.mdx
- guardian-service-list-approvals.api.mdx
- guardian-service-list-grants.api.mdx
- guardian-service-list-namespaces.api.mdx
- guardian-service-list-policies.api.mdx
- guardian-service-list-providers.api.mdx
- guardian-service-list-resources.api.mdx
- guardian-service-list-roles.api.mdx
- guardian-service-list-user-appeals.api.mdx
- guardian-service-list-user-approvals.api.mdx
- guardian-service-list-user-grants.api.mdx
- guardian-service-revoke-grant.api.mdx
- guardian-service-revoke-grants.api.mdx
- guardian-service-update-approval.api.mdx
- guardian-service-update-grant.api.mdx
- guardian-service-update-namespace.api.mdx
- guardian-service-update-policy.api.mdx
- guardian-service-update-provider-2.api.mdx
- guardian-service-update-provider.api.mdx
- guardian-service-update-resource.api.mdx
- sidebar.js
- architecture.md
- overview.md
- architecture.md
- contribution.md
- development.md
- provider.md
- deployment.md
- notification.md
- bigquery.md
- dataplex.md
- frontier.md
- gcloud_iam.md
- gcs.md
- grafana.md
- metabase.md
- noop.md
- tableau.md
- api.md
- appeal.md
- cli.md
- configuration.md
- glossary.md
- jobs.md
- policy.md
- provider.md
- resource.md
- approve-reject-appeal.md
- complex-use-case.md
- configuration.md
- create-appeal.md
- create-policy.md
- create-provider.md
- introduction.md
- update-resource.md
- installation.md
- introduction.md
- roadmap.md
- support.md
- Container.js
- GridBlock.js
- custom.css
- theme.css
- index.js
- appeal-lifecycle.png
- approval-flow.png
- architecture.png
- bigquery-permissions.png
- grafana-access.png
- grafana-role-1.png
- grafana-role-2.png
- guardian-architecture.svg
- metabase-access-creation.png
- metabase-access-management.png
- overview-bordered.svg
- overview.svg
- tableau-access.png
- banner.svg
- favicon.ico
- homebanner.svg
- logo.svg
- pattern.svg
- gojek.png
- goto.png
- jago.png
- mapan.png
- midtrans.png
- moka.png
- paylater.png
- .nojekyll
- .gitignore
- babel.config.js
- docusaurus.config.js
- package-lock.json
- package.json
- README.md
- sidebars.js
- vercel.json
- yarn.lock
- activity.go
- appeal.go
- appeal_test.go
- approval.go
- approver.go
- encryption.go
- grant.go
- iam.go
- namespace.go
- notifier.go
- policy.go
- policy_test.go
- provider.go
- resource.go
- auth.go
- config.go
- config.yaml
- server.go
- services.go
- 000001_create_providers_table.down.sql
- 000001_create_providers_table.up.sql
- 000002_create_policies_table.down.sql
- 000002_create_policies_table.up.sql
- 000003_create_resources_table.down.sql
- 000003_create_resources_table.up.sql
- 000004_create_appeals_approvals_approvers_table.down.sql
- 000004_create_appeals_approvals_approvers_table.up.sql
- 000005_add_permissions_to_appeal.down.sql
- 000005_add_permissions_to_appeal.up.sql
- 000006_add_appeal_config_to_policies.down.sql
- 000006_add_appeal_config_to_policies.up.sql
- 000007_create_grants_table.down.sql
- 000007_create_grants_table.up.sql
- 000008_move-access-management-to-grant.down.sql
- 000008_move-access-management-to-grant.up.sql
- 000009_add_permanent_flag_colum_to_grant.down.sql
- 000009_add_permanent_flag_colum_to_grant.up.sql
- 000010_add_grant_source_column.down.sql
- 000010_add_grant_source_column.up.sql
- 000011_add_description_to_appeal.down.sql
- 000011_add_description_to_appeal.up.sql
- 000012_add_resource_parent_id.down.sql
- 000012_add_resource_parent_id.up.sql
- 000013_add_activities_table.down.sql
- 000013_add_activities_table.up.sql
- 000014_add_indexes_to_improve_slow_queries.down.sql
- 000014_add_indexes_to_improve_slow_queries.up.sql
- 000015_add_grant_expiration_info.down.sql
- 000015_add_grant_expiration_info.up.sql
- 000016_create_namespace_table_and_add_namespace_in_tables.down.sql
- 000016_create_namespace_table_and_add_namespace_in_tables.up.sql
- 000017_enable_row_level_security_all_tables.down.sql
- 000017_enable_row_level_security_all_tables.up.sql
- 000018_add-indexes-for-approvals-filter.down.sql
- 000018_add-indexes-for-approvals-filter.up.sql
- 000019_create_grant_unique_index.down.sql
- 000019_create_grant_unique_index.up.sql
- 000020_add_policy_title_creator_columns.down.sql
- 000020_add_policy_title_creator_columns.up.sql
- activity.go
- appeal.go
- approval.go
- approver.go
- grant.go
- namespace.go
- policy.go
- provider.go
- resource.go
- activity_repository.go
- activity_repository_test.go
- appeal_repository.go
- appeal_repository_test.go
- approval_repository.go
- approval_repository_test.go
- grant_repository.go
- grant_repository_test.go
- namespace_repository.go
- policy_repository.go
- policy_repository_test.go
- provider_repository.go
- provider_repository_test.go
- resource_repository.go
- resource_repository_test.go
- store.go
- store_test.go
- utils.go
- config.go
- appealService.go
- grantService.go
- providerService.go
- fetch_resources.go
- grant_dormancy_check.go
- grant_expiration_reminder.go
- grant_expiration_revoke.go
- handler.go
- jobs.go
- revoke_grants_by_user_criteria.go
- BigQueryClient.go
- Client.go
- Crypto.go
- Decryptor.go
- Encryptor.go
- GrafanaClient.go
- HTTPClient.go
- IAMClient.go
- IAMManager.go
- MetabaseClient.go
- Notifier.go
- ProviderClient.go
- store.go
- TableauClient.go
- OIDCValidator.go
- email.go
- frontier.go
- oidc.go
- oidc_test.go
- aes.go
- expression.go
- expression_test.go
- scheduler.go
- unique.go
- unique_test.go
- init.go
- http.go
- service.go
- AccessRevoked.json
- AppealApproved.json
- AppealRejected.json
- ApproverNotification.json
- ExpirationReminder.json
- GrantOwnerChanged.json
- OnBehalfAppealApproved.json
- UnusedGrant.json
- client.go
- client_test.go
- client.go
- client_test.go
- BigQueryClient.go
- cloudLoggingClientI.go
- encryptor.go
- activity.go
- activity_test.go
- client.go
- client_test.go
- config.go
- config_test.go
- errors.go
- model.go
- model_test.go
- provider.go
- provider_test.go
- DataplexClient.go
- encryptor.go
- client.go
- config.go
- config_test.go
- errors.go
- model.go
- provider.go
- provider_test.go
- client.go
- client_test.go
- config.go
- config_test.go
- errors.go
- provider.go
- provider_test.go
- resource.go
- encryptor.go
- GcloudIamClient.go
- client.go
- config.go
- config_test.go
- errors.go
- provider.go
- provider_test.go
- resource.go
- Crypto.go
- GCSClient.go
- client.go
- config.go
- config_test.go
- errors.go
- provider.go
- provider_test.go
- resource.go
- client.go
- client_test.go
- config.go
- config_test.go
- errors.go
- http.go
- provider.go
- provider_test.go
- resource.go
- resource_test.go
- client.go
- client_test.go
- config.go
- config_test.go
- errors.go
- http.go
- provider.go
- provider_test.go
- resource.go
- resource_test.go
- config.go
- provider.go
- provider_test.go
- resource.go
- client.go
- client_test.go
- config.go
- config_test.go
- errors.go
- http.go
- provider.go
- provider_test.go
- resource.go
- resource_test.go
- client.go
- policy.yml
- provider.yml
- handler.go
- http.go
- slices.go
- slices_test.go
- strings.go
- struct.go
- struct_test.go
- testutils.go
- time.go
- time_test.go
- utils.go
- utils_test.go
- validator.go
- .dockerignore
- .gitignore
- .golangci.yaml
- .goreleaser.yaml
- buf.gen.yaml
- Dockerfile
- Dockerfile.dev
- go.mod
- go.sum
- LICENSE
- main.go
- Makefile
- README.md
# Installation Guide
1. Get the code
git clone https://github.com/raystack/guardian
Downloads the entire project code from GitHub to your computer.
cd guardian
Moves into the project folder you just downloaded.
2. Official Install Script
Easy RecommendedPrerequisites
- Homebrew A package manager for macOS/Linux.
brew install raystack/tap/guardian
Installs the pre-built package via Homebrew โ no source build required.
After installing, open a new terminal and run the program's version command (e.g. --version) to confirm it worked.
Pulled directly from this repo's README.
3. Docker
EasyPrerequisites
- Git Needed to download the project code from GitHub.
- Docker Desktop Needed to build and run containers. Install it and keep it running in the background.
docker pull raystack/guardian:latest
Type this command into your terminal and run it.
docker pull raystack/guardian:v0.8.0
Type this command into your terminal and run it.
Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.
Pulled directly from this repo's README.
4. Go
MediumPrerequisites
go build ./...
Compiles the Go program into an executable.
go run .
Runs the Go program directly without a separate build step.
If the build finishes without errors, it worked. If you used go run ., check the terminal output.
5. Make
MediumPrerequisites
- Git Needed to download the project code from GitHub.
- Make Usually pre-installed on Linux/macOS. On Windows, install separately (e.g. via MSYS2 or WSL).
make
Compiles the code based on the generated build configuration to produce an executable.
If it finishes without errors, it worked. Try running the generated executable directly.
// repository documentation
Was this content helpful?
(0 ratings)