• SECURITY
  • COMPLIANCE
  • GOVERNANCE
  • HUMAN

How to audit data access and roles with your AI

Connect Starburst to your AI client to run security checks across your data estate. Once connected, your agent handles the heavy lifting of scanning permissions and identifying misconfigurations.

Ask AI about this page

Short answer

How can I audit my Starburst data access with AI?

Your AI uses Starburst tools to pull lists of roles, data products, and domains to map out who has access to what. You get a clear view of your security posture and where permissions might be too broad.

Where every issue lands.

Audit outcomes

The AI organizes its findings into these specific areas.

SECURITY

Permission gaps found

The AI identifies roles that have more access than they should. You get a list of specific users or groups that need their permissions tightened.

COMPLIANCE

Domain coverage check

The AI checks if data products are correctly assigned to their parent domains. This helps you ensure data governance rules are actually being followed.

GOVERNANCE

Data product inventory

The AI catalogs all available data products. You'll see exactly what is exposed and which roles are interacting with them.

HUMAN

Manual remediation

The AI flags the risks, but you decide which roles to change. You'll need to log into Starburst to actually modify any permissions.

The workflow

What your AI does when the audit starts.

The AI moves through your Starburst environment to build a map of your security landscape.

  1. Map the hierarchy

    The agent looks at how your data is organized into logical groups.

    list_domains

  2. Inventory data assets

    It pulls a full list of all data products currently active in the system.

    list_data_products

  3. Identify access points

    The AI scans the existing roles to see how they are structured.

    list_roles

  4. Cross-reference permissions

    The agent compares roles against data products and domains to find mismatches or over-privileged accounts.

    list_roleslist_data_products

Try it

Copy these to start.

Use these prompts to kick off your audit.

Starting points

These are basic starting lines. Swap out the specific domain or role names to target your audit.

Starburst Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_O3fkMMqaRDxXU8YcUOdnSQyixPMchBfro4bAKlB1/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Starburst capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "starburst-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_O3fkMMqaRDxXU8YcUOdnSQyixPMchBfro4bAKlB1/mcp"
    }
  }
}
Copy into chat04

  • List all the data products in my Starburst instance and tell me which domains they belong to.

  • Check the current roles and tell me if any of them have access to the 'finance' domain.

  • Show me all data products that aren't assigned to a specific domain.

  • Review the roles in Starburst and flag any that seem to have broad access to all data products.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Starburst once, then ask.

Just link your account once. Your credentials stay encrypted, and you can immediately start asking your AI about your data permissions.

Connect Starburst to your AI

FAQ

Common questions about Starburst auditing

  • 01

    Can the AI change my Starburst permissions?

    No. The AI can only read roles, products, and domains. You must manually change permissions in Starburst.

  • 02

    Can the AI delete data products?

    No. This MCP only has read-only capabilities for listing assets and roles.

  • 03

    Does the AI see my actual data content?

    No. The AI only sees the metadata, such as role names, product names, and domain structures.

  • 04

    How does the AI know which roles are 'too broad'?

    You define what 'too broad' means. You tell the AI your security policy, and it compares the listed roles against that policy.

  • 05

    Can I audit specific domains only?

    Yes. You can ask the AI to focus its search on a specific domain or a subset of data products.

  • More questions about Starburst? The Connector page answers them. See everything the Starburst Connector can do

Connect Starburst to Claude, Cursor, ChatGPT & more