Starburst Galaxy

Overview

The Starburst Galaxy integration connects your Starburst Galaxy account to Oneleet and syncs your users as user account assets, so Oneleet can monitor who has access to your Galaxy account.

What does Oneleet monitor?

• Starburst Galaxy users (user accounts), including the roles granted directly to each user

The Starburst Galaxy API doesn’t expose per-user MFA or SSO status, so Oneleet doesn’t report MFA for Starburst Galaxy accounts.

Setup

To set up the Starburst Galaxy integration, navigate to Integrations > Add integration > Starburst Galaxy.

Oneleet connects to the Starburst Galaxy API with an API auth token that a Galaxy user with the account-level Manage security privilege (such as accountadmin) creates:

1. Note your account domain, the domain you sign in to Galaxy with. For mycompany.galaxy.starburst.io, you enter mycompany.
2. In Galaxy, go to Access > API auth token and click Generate new token.
3. For Role, choose a role with the Manage security privilege (for example accountadmin), enter a description, and click Create token.
4. Copy the Client ID and Secret Key and paste them, with your account domain, into the Oneleet setup form.

Galaxy has no read-only privilege for listing users, so the token’s role needs Manage security.