• ISOLATION
  • SECURITY
  • REMEDIATION
  • COMPLIANCE

How to audit tenant user access with your AI

Connect Nile to your AI client to cross-reference user lists against tenant boundaries. You'll catch isolation leaks before they become security incidents.

Ask AI about this page

Short answer

How can I check if my users are properly isolated by tenant?

Your AI pulls the user and tenant lists from Nile to find mismatches. It flags any user identity that doesn't align with its assigned tenant slice. This gives you a clear map of your multi-tenant security posture.

Audit outcomes

Where isolation gaps land.

What you get after the AI runs the check.

ISOLATION

Verified tenant boundaries

The AI confirms that every user belongs to exactly one tenant. You get a clean report of valid mappings.

SECURITY

Leak detection

The AI identifies users that appear in the wrong tenant slice. These are the specific points where isolation failed.

REMEDIATION

Human-led cleanup

The AI highlights the specific user IDs that need manual correction. You decide how to fix the access in your database.

COMPLIANCE

Audit readiness

You receive a structured list of user-to-tenant relationships. This serves as proof of isolation for security reviews.

The workflow

What your AI does when the audit starts.

The AI uses direct database queries to build a map of your multi-tenant environment.

  1. Inventory tenants

    The AI pulls a complete list of all active tenants in your Nile instance.

    list_tenants

  2. Gather user data

    The AI retrieves the identity records for every user in the system.

    list_users

  3. Map identities

    The AI compares the user list against the tenant list to find the specific slices each user occupies.

    list_userslist_tenants

  4. Identify mismatches

    The AI flags any user that lacks a valid tenant or belongs to multiple slices.

    list_users

Try it

Copy these to start.

Use these prompts to kick off your security check.

Starting points

These are opening lines. Swap out the specific tenant names or user IDs to target your audit.

Nile Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_vAlgznzCycNFdJ60kWnNhU7rsezxSIF5tMfoui7N/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Nile capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "nile-postgresql-for-multi-tenant-apps-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_vAlgznzCycNFdJ60kWnNhU7rsezxSIF5tMfoui7N/mcp"
    }
  }
}
Copy into chat04

  • List all tenants and check if any users are assigned to more than one.

  • Find all users belonging to the 'Acme Corp' tenant and verify they are isolated.

  • Compare the list of all users against the list of all tenants to find orphaned users.

  • Check if any user in the 'Global Logistics' tenant has access to other tenant slices.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Nile once, then ask.

One connection gives your AI access to your Nile data. Your credentials stay encrypted and secure on our side.

Connect Nile to your AI

FAQ

How this task behaves

  • 01

    Can the AI delete users if it finds a mismatch?

    No. The AI can only read data. You must handle all deletions or permission changes manually.

  • 02

    Can the AI change tenant ownership?

    No. The tools provided are read-only. The AI identifies the issues, but it cannot modify your database records.

  • 03

    How does the AI know which user belongs to which tenant?

    The AI uses the data returned by the tools to build a relational map of your users and their slices.

  • 04

    Does the AI see my database passwords?

    No. Your connection is managed through Vinkius, and your sensitive credentials are never exposed to the AI client.

  • 05

    Can I audit a single tenant at a time?

    Yes. You can ask the AI to focus its check on one specific tenant from your list.

  • More questions about Nile? See everything the Nile Connector can do

Connect Nile to Claude, Cursor, ChatGPT & more