Prerequisites & Network Configuration

• VPN Tunnel & IP Allowlisting: A site-to-site VPN tunnel is needed and if applicable, allow ambers IP address through your firewall.

• Open Ports: Ensure the specific database port (e.g., 5432 for PostgreSQL) is accessible for amber.

• Encryption: Enable SSL/TLS to ensure all queried data is encrypted in transit.

1. Creating a Dedicated Service Account

• Dedicated User: Create a specific read-only database user (e.g. amber_service_user)
  Do not use root or shared credentials.

• Least Privilege: Grant SELECT permissions only on the specific database(s) that amber needs to access.

• Data Privacy: Refrain from connecting databases containing highly sensitive information (e.g., passwords, PII) that should not be visible in chat context.

2. Configuring the Connection in amber

Add new database connection

Navigate to Company Settings → Connectors → Databases → Add Database and enter the following details:

• Database Connector Name: the name of the connector all the users will see across amber

• Database Description: a description of the contents and purpose of this database
  This helps to improve the accuracy of amberAI

• Hostname / IP Address

• Database Name

• Database Type

• Schema Name

• Port

• Username & Password (for the dedicated service account from Step 2)

Select tables

The database connection will be tested to see if it is reachable, and if the tests are successful, it can be saved. Once the connection is saved, the table selection overview will be available.

Select the tables that amber should have access to via chat and include explanatory descriptions for each table, to improve the quality of the generated answers. Accurate table descriptions are specifically helpful for databases with short or abbreviated table names or if many tables should be used.

Once the connector is saved, you will still be able to update the tables and their descriptions if needed.

When the table selections and descriptions are saved, you will see the database connector card with all the relevant information and options regarding the connector.

4. Updating the Connection and Managing Access

Configuration updates

Once the new database connection is finalized, you can still update any of the previous database configuration fields via the Configure button inside the connector card. The tests will run with the new configuration and the database will get updated.

Connection activation

The connection can get disconnected via the "Connection Active" switch, so the users will not see this connector in their data source settings and chat options. Similarly, the connection can get activated by the admin again, if it was disconnected. For enabled databases, users have the ability to see them and optionally turn them on and off via the chat switches.

User access

By default all users have access to an external database connection, unless it is disconnected by the admin as explained above. Additionally, the admin can enable user access control by the "Limit access to selected users" switch. If enabled, a user needs to be included in the allowed users and groups list in order for the database to be accessible to them. This holds for the currently logged in admin user as well.

Table updates

It is possible to select new tables, deselect existing tables and also to edit the table descriptions via the "Edit" button in the Tables overview.

Column updates

In order to improve amber's answer accuracy further, it is possible to update the column descriptions as well, with a short summary of which information a column contains. This is specifically helpful for databases with short or abbreviated column names.

5. Data Safety & Supported Actions

• Read-Only Operations: amber is designed to be purely read-only for the sql connector. It translates user questions into safe SELECT queries to retrieve the database rows that are relevant to answer the users question.

• No Modifications: The agent cannot and will not execute INSERT, UPDATE, DELETE, or DROP statements.

• Multi-database interactions: amber supports integration to multiple SQL databases and the agent decides which of the connected databases or other data sources and tools are relevant to answer the input question.