Back to documentation
Security

Security & access: what PWR can and cannot do

4 min read

A clear overview of PWR's access model: read-only, schema-based isolation, and on-demand purge.

Read-only access only

PWR connects using a read-only PostgreSQL role. It cannot modify your data, change your configuration, or run write commands (INSERT, UPDATE, DELETE, DDL).

Isolation via a dedicated schema

PWR's own metadata (snapshot history, reports) is stored in an isolated schema, separate from your application schemas, so it never interferes with your data model.

Purge on demand

You keep full control over your monitoring data: you can purge the snapshot history at any time from your connections area.