This topic describes how to modify the permissions of a standard account on an ApsaraDB RDS for MySQL instance. The permissions of a privileged account can only be reset to the default settings but cannot be modified.
Method 1: Modify the permissions of a standard account in the ApsaraDB RDS console
- Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.
- In the left-side navigation pane, click Accounts.
- Find the standard account whose permissions you want to modify. Then, click Edit Permissions in the Actions column.
- In the Edit Account Permissions panel, modify the permissions of the account.
- If you want to add or remove an database, select the database and click the > or < icon.
- If you want to modify the permissions on an authorized database, select the database in the Authorized Databases section. Then, select the Read/Write (DDL + DML), Read-only, DDL Only, or DML Only permissions. Note You can use SQL statements to modify permissions at a fine-grained granularity. For more information, see Account permissions.
- Click OK.
Method 2: Modify the permissions of a standard account in the DMS console
You can modify the permissions of a standard account in the DMS console. For more information, see Manage user permissions on MySQL databases
Method 3: Modify the permissions of a standard account by using SQL statements
PrerequisitesA privileged account is created for the RDS instance and is used to modify the permissions.
- Use a database client or the CLI to connect to the RDS instance. For more information, see Use a database client or the CLI to connect to an ApsaraDB RDS for MySQL instance.
- Execute the GRANT statement to grant permissions to the standard account. Note
- For more information about the GRANT statement, see official MySQL documentation.
- For more information about permissions that can be granted, see Account permissions.
FAQ
Why am I unable to create a database on an ApsaraDB RDS for MySQL instance by using a standard account? What do I do if the ERROR 1044 (42000): Access denied for user 'xxxx'@'%' to database 'xxxx'
error message is displayed when I create a database on an ApsaraDB RDS for MySQL instance by using a standard account?
GRANT CREATE ON *.* TO '<Name of the standard account>'@'%';