All Products
Search
Document Center

Accounts and permissions

Last Updated: May 13, 2019

This topic describes the types of DLA accounts and how to create and authorize sub-accounts.

Account types

DLA accounts are divided into root accounts and sub-accounts.

  • A root account is the primary database account that the DLA system automatically creates for you after you activate Alibaba Cloud DLA. You have only one root account in a region, which is valid only within the region. Different root accounts are created for different regions.

    You only need to initialize the password of the DLA primary database account, and then use this account to connect to DLA or create sub-accounts.

  • Sub-accounts are created in the DLA console by using your root account. You can execute the GRANT statement to authorize the sub-accounts.

Create sub-accounts

You can create a sub-account in the DLA console or by calling AddAccount.

Create sub-accounts in the DLA console

  1. Log on to the Data Lake Analytics console.

  2. In the left-side navigation pane, click Account. On the Accounts page that appears, click Create child account.

    1

  3. In the Create child account dialog box that appears, set a name and password for the account.

    2

    DLA allows you to set the sub-account password in either of the following ways:

    • Random password: Use a random password that is generated by the DLA system. Select Use System-generated password and click OK. The system then automatically generates a password.

    • Password: Manually set a password. Enter a password for the sub-account and click OK.

    1

Execute the GRANT statement to authorize the sub-account

Use the root account to log on to the Data Lake Analytics console, and choose Execute from the left-side navigation pane. On the Execute page that appears, execute the GRANT statement to authorize the sub-account.

You can also connect to DLA with the root account by using code, a MySQL CLI tool, or a MySQL client, and then execute the GRANT statement to authorize the sub-account.

Note: Only the root account can authorize sub-accounts.

For more information about how to grant permissions, see GRANT.

Execute the REVOKE statement to revoke permissions

For more information about how to revoke permissions, see REVOKE.