ApsaraDB for MyBase:Create a database account

Usage notes

• When you assign permissions to a database account, follow the principle of least privilege. Create accounts based on business roles and grant read-only or read/write permissions accordingly. If necessary, you can further refine access by assigning an account to a specific database, ensuring it can access only data relevant to its function. If an account does not require write operations, grant it only read-only permissions.

• To ensure database security, set a strong password for each database account and rotate it regularly.

1. Log on to the ApsaraDB for MyBase console.

2. In the upper-left corner of the page, select the target region.

3. In the left-side navigation pane, choose Instances > MySQL.

4. Find the target instance and click Details in the Actions column.

5. In the left-side navigation pane, click Accounts. On the page that appears, click Create Account.

6. In the Create Account dialog box, configure the following parameters and click OK.

   Parameter	Description
   database account	Enter a name for the account. The name must meet the following requirements: Must be 16 characters or fewer for MySQL 5.6, or 32 characters or fewer for MySQL 5.7 and 8.0. Must start with a letter and end with a letter or a digit. Can contain only lowercase letters, digits, and underscores (_). Must be unique within the instance.
   Account Type	Privileged Account: An instance can have only one privileged account. Note By default, a privileged account has owner permissions on all databases in the instance. You can modify the permissions of the privileged account. For more information, see Modify account permissions. A privileged account cannot be deleted. Standard Account: You can select Standard Account only after a privileged account is created for the instance. An instance can have multiple standard accounts. Note You must manually grant database permissions to a standard account. A standard account can be deleted.
   authorized databases	You must grant access to one or more databases for a Standard Account. From the Unauthorized Databases list, select the databases that you want to authorize. Note This list is empty if no databases have been created. Click > to move them to the Authorized Databases list. Set the permission level for the account on each database. You can choose from read/write (DML), Read-Only, or Owner. Note An account must have Owner permissions to create or drop tables and modify table schemas in the corresponding database.
   password	Set the password for the account. The password must meet the following requirements: Must be 8 to 32 characters long. Contain at least three of the following character types: uppercase letters, lowercase letters, digits, and special characters. Special characters: !@#$%^&*()_+-=
   Confirm Password	Re-enter the password.
   description	Enter a description for the account, up to 256 characters long.