> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Redis accounts

> Give people and agents access to a Redis database without sharing its credentials.

A Redis [account](https://infisical.com/docs/documentation/platform/pam/accounts/overview.md) stores the credentials for one Redis user. Members connect to the database in the browser or through the Infisical CLI, and Infisical records every command they run.

## Prerequisites

* The Admin [role](https://infisical.com/docs/documentation/platform/pam/concepts/access-control.md) on the [folder](https://infisical.com/docs/documentation/platform/pam/folders/overview.md) you'll add the account to
* A [gateway](https://infisical.com/docs/documentation/platform/gateways/overview.md) that can reach the database
* A Redis [account template](https://infisical.com/docs/documentation/platform/pam/templates/overview.md)

## Create the account

**Step 1**

Go to **Privileged Access Management** > **Accounts** and select **Add Account**.

**Step 2**

Select the **Folder** and a Redis **Account Template**, then select **Next**.

**Step 3**

Enter a **Name** and the connection details:

| Field | Description |
| - | - |
| **Host** | The database's hostname or IP address |
| **Port** | The database's port (defaults to `6379`) |
| **SSL Enabled** | Whether to connect over TLS |
| **Reject Unauthorized** | Whether to reject a server certificate that can't be verified (shown when **SSL Enabled** is on) |
| **SSL Certificate** | The CA certificate that signed the server's certificate (shown when **SSL Enabled** is on) |

**Step 4**

Enter the credentials:

| Field | Description |
| - | - |
| **Username** | The Redis ACL user (defaults to `default`, which also works with a `requirepass` password on Redis 6 and later) |
| **Password** | The user's password (leave it empty if the server doesn't require authentication) |

**Step 5**

Select **Create**.

## Connect

To open a session, follow [Connect to an account](https://infisical.com/docs/documentation/platform/pam/accounts/connect.md).

> [tab] Browser
>
> The browser session is a console where you type Redis commands, the same way you would in `redis-cli`. To end the session, type `quit` or `exit`.
>
> The console shortens very long replies, and doesn't support commands that stream results, such as `SUBSCRIBE` and `MONITOR`. To run those commands, use the CLI.

> [tab] CLI
>
> Start the local proxy:
>
> ```bash theme={"dark"}
> infisical pam access backend-team/cache-primary
> ```
>
> The proxy keeps running in that terminal and prints its port. In a second terminal, connect your Redis client to that port:
>
> ```bash theme={"dark"}
> redis-cli -h 127.0.0.1 -p <port>
> ```
>
> The proxy signs in for you, so the client doesn't need a password.

## Next steps

> [card] [Sessions](https://infisical.com/docs/documentation/platform/pam/sessions/overview)
>
> Review and end the connections that people and agents make to your accounts.

> [card] [Access requests](https://infisical.com/docs/documentation/platform/pam/access-requests/overview.md)
>
> Require approval before a member can use a sensitive account.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.