This topic describes the least permissions granted to accounts of different database engines from DAS (formerly known as HDM). If the least permissions are not satisfied, a message of insufficient permissions is returned during the DAS connectivity test.

In the following example, the account name is das_test and the password after identified by is user-defined.
GRANT SHOW DATABASES, PROCESS, REPLICATION SLAVE, REPLICATION CLIENT ON *. * TO 'das_test'@'%' identified by 'password';
GRANT SELECT ON *. * TO 'das_test'@'%';

Grant permissions for ApsaraDB RDS for MySQL instances

GRANT PROCESS, REPLICATION SLAVE, REPLICATION CLIENT ON *. * TO 'das_test'@'%' identified by 'password';
GRANT SELECT ON *. * TO 'das_test'@'%';

Grant permissions for ApsaraDB for MongoDB instances

use admin;
db.createUser({user:'${user}',pwd:'${password}',roles:[{role:'readAnyDatabase', db:'admin'}, {role:'clusterMonitor', db:'admin'}]})