Creating a User

Scenarios

Multiple users with different permissions can be created to access a DB instance or database, but the permissions of these users cannot exceed the operation permissions of the account.

Procedure

1. On the top menu bar, choose Account Management > User Management.
2. On the displayed page, click Create User. Then, configure required information, such as basic information, advanced settings, global permissions, and object permissions, and click Save. In the displayed dialog box, click OK.

   You can click Add DAS IP Address to add the IP address of the DAS server to the user's host. In the user list, you can view all created users, or locate a user and click Edit and Delete in the Operation column to manage it.

   Table 1 describes the user permissions briefly. For details about permission usages and explanations, visit the official website.

   Table 1 Permission description

   Permission	Description
   SELECT	Permission to query a specified object (such as, a global or single database).
   INSERT	Permission to insert data into a specified object.
   UPDATE	Permission to update data of a specified object.
   DELETE	Permission to delete data from a specified object.
   CREATE	Permission to create databases and tables for a specified object.
   DROP	Permission to delete databases, tables, and views of a specified object.
   RELOAD	Permission to execute FLUSH.
   PROCESS	Permission to execute SHOW PROCESSLIST to view all the processes.
   GRANT	Permission to grant permissions to another account or reclaim permissions from another account.
   REFERENCES	Permission to create foreign keys for a specified object.
   INDEX	Permission to create or delete index for a specified object.
   ALTER	Permission to execute ALTER TABLE for a specified object.
   SHOW DATABASES	Permission to run the SHOW DATABASES command to display all databases.
   CREATE TEMPORARY TABLES	Permission to execute CREATE TEMPORARY TABLE for a specified object.
   LOCK TABLES	Permission to execute LOCK TABLES on the tables with the SELECT permission for a specified object.
   EXECUTE	Permission to execute a stored procedure for a specified object.
   REPLICATION SLAVE	Permission to allow the replica server to read binary log events from the source server.
   REPLICATION CLIENT	Permission to query the location of the source server or replica server.
   CREATE VIEW	Permission to create or alter a view for a specified object.
   SHOW VIEW	Permission to execute SHOW CREATE VIEW for a specified object.
   CREATE ROUTINE	Permission to create a stored procedure for a specified object.
   ALTER ROUTINE	Permission to alter or delete a stored procedure for a specified object.
   CREATE USER	Permission to execute CREATE USER, DROP USER, RENAME USER, and REVOKE ALL PRIVILEGES for a specified object.
   EVENT	Permission to create, modify, delete, or display the event scheduler for a specified object.
   TRIGGER	Permission to execute a trigger for a specified object. Only users with this permission can create, delete, execute, or display the triggers of a table.