All Products
Search

This Product

    Data Management:Manage PostgreSQL database account permissions

    Document Center

    Data Management:Manage PostgreSQL database account permissions

    Last Updated:Mar 30, 2026

    Data Management (DMS) provides a graphical interface to manage users and their permissions on PostgreSQL databases, without writing SQL directly.

    Prerequisites

    Before you begin, ensure that you have:

    • A native PostgreSQL or AnalyticDB for PostgreSQL database instance registered in DMS

    • A DMS role of administrator, database administrator (DBA), or instance owner. For details, see System roles

    • The database account and password of the target PostgreSQL database, where the account has permission to create users

    Create a user

    1. Log on to the DMS console V5.0.

    2. Log on to the PostgreSQL database. For details, see Log on to a database instance.

    3. In the left-side navigation pane, right-click the target instance and select Account Management.

      In simple mode, click Database instances in the left-side navigation pane, then right-click the target instance and select Account Management.

    4. On the Account Management page, click Create User in the upper-left corner.

    5. On the Basic settings tab, configure the following parameters.

      Create User dialog box

      Parameter Description
      User name The name of the new user.
      Password The password for logging on to databases in the instance.
      Confirm password Re-enter the password to confirm.
      Time when password expires (Optional) The date and time when the password expires. For example, Dec 30, 2021 00:00:00. By default, the password does not expire.
      Connection limit The maximum number of concurrent connections the user can hold across the instance. The default value is -1, which means no limit. For example, set this to 10 to allow up to 10 simultaneous client connections.
      Remarks A description of the user.

    6. Click the Permission tab and select the permissions to grant. Each permission maps to a PostgreSQL role attribute. DMS runs the corresponding SQL statement when you save the user.

      Permission Default SQL when enabled SQL when disabled Notes
      Allow to Log On Enabled LOGIN NOLOGIN
      Allow to Create Users Enabled CREATEROLE NOCREATEROLE
      Allow to Create Databases Enabled CREATEDB NOCREATEDB Grants permission to create new databases in the instance.

    7. Click Confirm.

    8. In the Preview SQL statement dialog, review the generated SQL, then click Confirm. The SQL preview lets you verify that the role attributes match your intent before DMS runs the statement. If the instance runs in Security Collaboration mode, security rules may block execution. Follow the on-screen instructions, or contact a DBA or DMS administrator. To update security rules, see the FAQ.

    Modify or delete a user

    Use the Account Management page to update the username, password, global permissions, and fine-grained permissions of any user you are authorized to manage.

    1. Log on to the DMS console V5.0.

    2. Log on to the PostgreSQL database. For details, see Log on to a database instance.

    3. In the left-side navigation pane, right-click the target instance and select Account Management.

      In simple mode, click Database instances in the left-side navigation pane, then right-click the target instance and select Account Management.

    4. On the Account Management page, find the user:

      • To edit: click Edit in the Operation column.

      • To delete: click Delete in the Operation column.

    What's next