Databunker Pro: Secure CRM Demo

Interactive demo

This example shows how Databunker Pro secures a CRM backend against malicious insiders, preventing unauthorized bulk data extraction and enforcing strict access controls, even even for privileged users.

Prevention of Data Theft: Stops malicious sales users from extracting the entire client database by enforcing granular access controls and data masking
Context-Aware Access Control: Uses request metadata to validate the context of each access request (e.g., client interaction context, approved reasons)
Data Masking: Ensures sales team members can only access specific fields they need (e.g., email), with all other data automatically masked
Audit Trail: Tracks all access attempts with their associated context for security monitoring

Configuration

Databunker Pro URL:

Tenant Name:

API Token:

Connection Status:

✓ Connected to Databunker Pro ⟳

Step 1: Create Groups and Roles

Create a leads group and necessary roles for sales team and leads.

// Create leads group
const group = await api.createGroup('leads-group', 'Group containing all leads');
// Create sales role
const salesRole = await api.createRole('sales');
// Create lead role
const leadRole = await api.createRole('lead');
return { group, salesRole, leadRole };

Output (press on "Run" to see result):

Step 2: Create sales user

Create a user account for a sales team member.

const salesUser = await api.createUser({
    login: 'sales1',
    email: 'sales1@company.com',
    name: 'Sales User',
    department: 'Sales'
});
return salesUser;

Output (press on "Run" to see result):

Step 3: Add sales user to leads group

Add the sales user to the leads group with sales role.

const groupMembership = await api.addUserToGroup(
    'login',
    'sales1',
    'leads-group',
    'sales'  // role name
);
return groupMembership;

Output (press on "Run" to see result):

Step 4: Create lead user

Create a lead user and automatically add them to the leads group with lead role.

// Create lead user with group and role in one command
const leadUser = await api.createUser({
    login: 'lead1',
    email: 'lead1@example.com',
    name: 'Lead User',
    phone: '+1278917892'
}, {
    groupname: 'leads-group',  // from step 1
    rolename: 'lead',
    finaltime: '90d'  // Optional: expire after 90 days
});
return leadUser;

Output:

Step 5: Initialize Bulk Operations

Get an unlock UUID token for bulk operations.

const bulkInit = await api.bulkListUnlock();
window.stateData.unlockUUID = bulkInit.unlockuuid;
return bulkInit;

Output:

Step 6: List All Users in Leads Group

List all users in the leads group using the bulk operation.

const groupUsers = await api.bulkListGroupUsers(
    window.stateData.unlockUUID,
    'leads-group'  // Using group name instead of ID
);
return groupUsers;

Output:

Step 7: Create sales user policy

Create a policy that allows sales users to access lead information.

✱ Access is granted only to email address. All other fields will be masked.

const policy = await api.createPolicy({
    policyname: 'SalesLeadAccess',
    policy: {
        Effect: 'Allow',
        Principal: { Role: 'sales' },
        Action: ['UserGet', 'UserUpdate'],
        Resource: ['${target_group_members:role/lead}.profile.email'],
        Condition: {
            StringEquals: {
                '${user_group_id}': '${target_group_id}',
                '${request_metadata:reason}': 'admin-approved'
            }
        }
    }
});
// Link policy to sales role
const linkResult = await api.linkPolicy('sales', 'SalesLeadAccess');
return { policy, linkResult };

Output:

Step 8: Create sales user access token

Create and save an access token for the sales user.

const xtoken = await api.createXToken('login', 'sales1');
window.stateData.salesToken = xtoken.xtoken;
return xtoken;

Output:

Step 9: Read lead user with sales token

Use the sales user's token to read lead user information.

✱ Access is granted only to email address. All other fields will be masked.

// Switch to sales user token
api.xBunkerToken = window.stateData.salesToken;
const leadInfo = await api.getUser('login', 'lead1', {
    reason: 'admin-approved'
});
return leadInfo;

Output:

Step 10: Reset access token

Reset the API token back to the original admin token.

// Reset to original token
api.xBunkerToken = document.getElementById('apiToken').value;
return { message: 'Token reset to original value' };

Output:

🎯 Start Your Free Trial Today!

Request free trial to see our secure database in action.

Request Free Trial 🚀