You can activate and manage Data Lake Analytics (DLA) by using your Alibaba Cloud account or a RAM user. You can connect to DLA, create a schema, and create a table by using your root account and sub-account.

Alibaba Cloud account DLA The Alibaba Cloud account is used to activate and manage DLA. For example, you can use this account to log on to a specific Alibaba Cloud service console, reset the password of your database account, create a network connection address, create a sub-account of your DLA database, and delete the database sub-account.
RAM user DLA After you grant permissions to your RAM user by using your Alibaba Cloud account, you can manage DLA within the scope of permissions as a RAM user. For example, you can log on to a specific Alibaba Cloud service console, create a network connection address, create a sub-account of your DLA database, and delete the database sub-account.

RAM users are created by Alibaba Cloud accounts to fulfill specific functions. RAM users do not own resources. All resources belong to Alibaba Cloud accounts.

Database account DLA database or schema A database account is used to perform operations on databases within the scope of specific permissions. For example, you can create and delete a schema, connect to a schema, and create and delete a table with a database account.

Database accounts:

  • Root account: After you activate DLA, the DLA system creates a root account for your DLA database.

    Each region has a unique root account. A root account is valid only in the region to which it belongs.

  • Sub-account: You can create a sub-account in the DLA console by using your root account.

    After you create a sub-account, you can execute GRANT or REVOKE to grant permissions to or revoke permissions from your sub-account.