This topic describes how to modify the permissions of a standard account on an ApsaraDB RDS for MySQL instance. The permissions of a privileged account can only be reset to the default settings but cannot be modified.

Note You can use the Account Authorization and Management feature of Alibaba Cloud Data Management (DMS) to define permission combinations. You can also use this feature to manage the permissions on specific tables. For information, see Manage user permissions on MySQL databases.

Method 1: Modify the permissions of a standard account in the ApsaraDB RDS console

  1. Access RDS Instances, select a region at the top, and then click the ID of the target RDS instance.
  2. In the left-side navigation pane, click Accounts.
  3. Find the standard account whose permissions you want to modify. Then, click Edit Permissions in the Actions column.
  4. In the Modify Account Permissions panel, modify the permissions of the standard account.
    • If you want to add or remove an authorized database, select the database and click the > or < icon.
    • If you want to modify the permissions on an authorized database, select the database. Then, select the Read/Write (DDL + DML), Read-only, DDL Only, or DML Only permissions in the Authorized Databases section.
      Note You can use SQL statements to modify permissions at higher levels of granularity. For more information, see Account permissions.
  5. Click OK.

Method 2: Modify the permissions of a standard account in the DMS console

You can modify the permissions of a standard account in the DMS console. For more information, see Manage user permissions on MySQL databases

Method 3: Modify the permissions of a standard account by using SQL statements

Prerequisites

A privileged account is created for the RDS instance and is used to modify the permissions.

  1. Use a database client or the CLI to connect to the RDS instance. For more information, see Use a database client or the CLI to connect to an ApsaraDB RDS for MySQL instance.
  2. Execute the GRANT statement to grant permissions to the standard account.
    Note

FAQ

Why am I unable to create a database on an ApsaraDB RDS for MySQL instance by using a standard account? What do I do if the ERROR 1044 (42000): Access denied for user 'xxxx'@'%' to database 'xxxx' error message is displayed when I create a database on an ApsaraDB RDS for MySQL instance by using a standard account?

By default, a standard account for an ApsaraDB RDS for MySQL instance has only the permissions to log on to databases. If you want to use the standard account to create a database, you must first use a privileged account to grant the CREATE permission to the standard account. Example statement:
GRANT CREATE ON *.* TO '<Name of the standard account>'@'%';