AnalyticDB:Bind or unbind RAM users and database accounts

Prerequisites

• You have created an Enterprise Edition, Basic Edition, or Data Lakehouse Edition cluster.

• You have created a database account.

Differences between RAM users and database accounts

• A RAM user operates at the AnalyticDB for MySQL cluster level. An Alibaba Cloud account can grant a RAM user permissions to manage clusters.

  For example, you can create a cluster, configure an IP address whitelist, and create a database account.

• A database account operates on databases within an AnalyticDB for MySQL cluster. Its permissions determine which databases it can manage.

  For example, you can create a database, create a table, and create a view.

For more information, see Account types.

Usage notes

• A privileged account is automatically associated with the currently logged-on Alibaba Cloud account or RAM user.

• When a RAM user uses AnalyticDB for MySQL Spark in the Data Management Service (DMS) console, you must associate the RAM user with a standard account, and associate the RAM user's parent Alibaba Cloud account with a privileged account.

Scenarios for mapping to AnalyticDB for MySQL standard accounts

• SQL editor: When you log on to the SQL editor as a RAM user, the RAM user must be mapped to an AnalyticDB for MySQL standard account to authorize access to databases and tables.

• JDBC connection: When you log on by using an AnalyticDB for MySQL standard account, the standard account must be mapped to a RAM user to authorize access to external tables, such as OSS external tables.

• Spark application: When you start a Spark application as a RAM user, the RAM user must be mapped to an AnalyticDB for MySQL standard account to access AnalyticDB for MySQL databases.

Associate a RAM user with a database account

1. Log on to the AnalyticDB for MySQL console. In the upper-left corner of the console, select a region. In the left-side navigation pane, click Clusters. Find the cluster that you want to manage and click the cluster ID.

2. In the left-side navigation pane, click Accounts.

3. On the Database Accounts tab, find the target account and click Manage RAM Association in the Actions column.

4. In the Manage RAM Association panel, enter the RAM user ID.

   Note

   You can view the RAM user ID on the Users page of the RAM console.

5. Click OK.

Disassociate a RAM user from a database account

1. On the Database Accounts tab, find the target account and click Manage RAM Association in the Actions column.

2. In the Manage RAM Association panel, click the icon next to the RAM User ID and click OK.