This topic describes the types of DLA accounts and how to create and authorize sub-accounts.
DLA accounts are divided into root accounts and sub-accounts.
A root account is the primary database account that the DLA system automatically creates for you after you activate Alibaba Cloud DLA. You have only one root account in a region, which is valid only within the region. Different root accounts are created for different regions.
You only need to initialize the password of the DLA primary database account, and then use this account to connect to DLA or create sub-accounts.
Sub-accounts are created in the DLA console by using your root account. You can execute the GRANT statement to authorize the sub-accounts.
Log on to the Data Lake Analytics console.
In the left-side navigation pane, click Account. On the Accounts page that appears, click Create child account.
In the Create child account dialog box that appears, set a name and password for the account.
DLA allows you to set the sub-account password in either of the following ways:
Random password: Use a random password that is generated by the DLA system. Select Use System-generated password and click OK. The system then automatically generates a password.
Password: Manually set a password. Enter a password for the sub-account and click OK.
Use the root account to log on to the Data Lake Analytics console, and choose Execute from the left-side navigation pane. On the Execute page that appears, execute the GRANT statement to authorize the sub-account.
You can also connect to DLA with the root account by using code, a MySQL CLI tool, or a MySQL client, and then execute the GRANT statement to authorize the sub-account.
Note: Only the root account can authorize sub-accounts.
For more information about how to grant permissions, see GRANT.
For more information about how to revoke permissions, see REVOKE.