This topic describes how to modify the permissions of a standard account on an ApsaraDB
RDS for MySQL instance. The permissions of a privileged account can only be reset
to the default settings but cannot be modified.
Note You can use the Account Authorization and Management feature of Alibaba Cloud Data
Management (DMS) to define permission combinations. You can also use this feature
to manage the permissions on specific tables. For information, see
Manage user permissions on MySQL databases.
Method 1: Modify the permissions of a standard account in the ApsaraDB RDS console
- Access RDS Instances, select a region at the top, and then click the ID of the target RDS instance.
- In the left-side navigation pane, click Accounts.
- Find the standard account whose permissions you want to modify. Then, click Edit Permissions in the Actions column.
- In the Modify Account Permissions panel, modify the permissions of the standard account.
- If you want to add or remove an authorized database, select the database and click
the > or < icon.
- If you want to modify the permissions on an authorized database, select the database.
Then, select the Read/Write (DDL + DML), Read-only, DDL Only, or DML Only permissions in the Authorized Databases section.
Note You can use SQL statements to modify permissions at higher levels of granularity.
For more information, see
Account permissions.
- Click OK.
Method 2: Modify the permissions of a standard account in the DMS console
You can modify the permissions of a standard account in the DMS console. For more
information, see Manage user permissions on MySQL databases
Method 3: Modify the permissions of a standard account by using SQL statements
PrerequisitesA privileged account is created for the RDS instance and is used to modify the permissions.
- Use a database client or the CLI to connect to the RDS instance. For more information,
see Use a database client or the CLI to connect to an ApsaraDB RDS for MySQL instance.
- Execute the GRANT statement to grant permissions to the standard account.
FAQ
Why am I unable to create a database on an ApsaraDB RDS for MySQL instance by using
a standard account? What do I do if the ERROR 1044 (42000): Access denied for user 'xxxx'@'%' to database 'xxxx'
error message is displayed when I create a database on an ApsaraDB RDS for MySQL
instance by using a standard account?
By default, a standard account for an ApsaraDB RDS for MySQL instance has only the
permissions to log on to databases. If you want to use the standard account to create
a database, you must first use a privileged account to grant the CREATE permission
to the standard account. Example statement:
GRANT CREATE ON *.* TO '<Name of the standard account>'@'%';