Database Autonomy Service:Permissions

Self-managed MySQL databases

Run the following commands to create the account and grant the required permissions:

CREATE USER 'das_test'@'%' IDENTIFIED BY 'password';
GRANT SHOW DATABASES, PROCESS, REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'das_test'@'%';
GRANT SELECT ON *.* TO 'das_test'@'%';

Self-managed PostgreSQL databases

Run the following commands to create the account and grant the required permissions:

CREATE USER das_test PASSWORD 'password';
GRANT SELECT ON ALL TABLES IN SCHEMA PUBLIC TO das_test;

To also collect slow query logs and SQL statements, grant superuser privileges:

-- Optional: required only for slow query log and SQL statement collection
ALTER USER das_test WITH SUPERUSER;

Self-managed MongoDB databases

Run the following commands to create the account and grant the required permissions.

Step 1: Create the user with required roles

use admin;
db.createUser({
  user: 'das_test',
  pwd: 'password',
  roles: [
    { role: 'readAnyDatabase', db: 'admin' },
    { role: 'clusterMonitor', db: 'admin' },
    { role: 'hostManager', db: 'admin' },
    { db: 'local', role: 'dbAdmin' },
    { db: 'config', role: 'dbAdmin' },
    { db: 'admin', role: 'dbAdminAnyDatabase' }
  ]
});

The following table describes the purpose of each role:

Step 2: Verify the connection

After creating the user, verify that DAS can connect by running the connectivity test in the DAS console. If the test returns an insufficient permissions error, confirm that all roles in Step 1 were granted successfully.