Redshift

1. Create a read-only user

What: Create the database user Querio will use.

CREATE USER querio_reader WITH PASSWORD '<STRONG_PASSWORD>';

You must run this as a superuser or an admin role with permission to create users.

2. Grant schema access

What: Give Querio read access to the schemas it should query.

GRANT USAGE ON SCHEMA your_schema TO querio_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA your_schema TO querio_reader;
ALTER DEFAULT PRIVILEGES IN SCHEMA your_schema
  GRANT SELECT ON TABLES TO querio_reader;

Repeat this for each schema Querio should access.

3. Grant metadata access

What: Let Querio inspect the metadata it needs to understand tables and columns.

GRANT USAGE ON SCHEMA information_schema TO querio_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA information_schema TO querio_reader;

4. Allowlist Querio's IP

Allow Querio's outbound IP to reach your Redshift cluster on port 5439.

5. Share connection details

Provide the host, port, database, username, password, and SSL requirements to Querio.