PolarDB:Manage the accounts for the three roles

Limits

Before you use the three-role mode, you must take note of the following limits:

• You cannot run GRANT ROLE or REVOKE ROLE commands on the DBA, DSA, and DAA accounts.
• You cannot run GRANT PRIVILEGES or REVOKE PRIVILEGES commands on the DBA, DSA, and DAA accounts.
• You can change the password of a system account when you use the account to log on to the database. For example, if you want to change the password of the DBA account, you must log on to the database by using the DBA account.
• You cannot run the SET DEFAULT ROLE command on the DBA, DSA, and DAA accounts.

View account information

1. Log on to the PolarDB for Xscale console.
2. In the top navigation bar, select the region where the target instance is located.
3. On the Instances page, click the PolarDB-X 2.0 tab.
4. Find the target instance and click its ID.
5. You can use one of the following methods to view the information about the accounts:
   • Method 1: View account information on the Safety management page.
     1. In the left-side navigation pane, choose ConfigurationManagement > Safety management.
     2. Click the Account powers tab to view the names and descriptions of the database administrator (DBA) account, security administrator (DSA) account, and data audit administrator (DAA) account.
   • Method 2: View account information on the Account Management page.
     1. In the left-side navigation pane, choose ConfigurationManagement > Account Management.
     2. On the Account Management page, you can view information about the DBA account, DSA account, and DAA account, including the account type, databases that the account can access, and permissions that are granted to the account. On this page, you can also view information about standard accounts.

Reset the password of an account

1. Log on to the PolarDB for Xscale console.
2. In the top navigation bar, select the region where the target instance is located.
3. On the Instances page, click the PolarDB-X 2.0 tab.
4. Find the target instance and click its ID.
5. In the left-side navigation pane, choose ConfigurationManagement > Account Management.
6. Click the Account powers tab.
7. Find the account for which you want to change the password and click Change password in the Operation column.
8. In the dialog box that appears, specify and confirm the new password.
   Note The password must meet the following requirements:

   • The password must be 8 to 20 characters in length.
   • The password must contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters.
   • Supported special characters:

     @#$%^&+=

9. Click OK.