Lindorm allows you to manage users and their permissions. You can add users, delete users, grant users read or write permissions, and revoke permissions from users in the cluster management system of LindormTable.
Prerequisites
Before you begin, ensure that you have:
Logged on to the cluster management system of the target instance. For more information, see Log on to the cluster management system.
Usage notes
Only Lindorm V1 instances support user management in this system. For other Lindorm instances, use the unified user authentication and permission management system.
Add or delete users
Create a user
In the left-side navigation pane of the cluster management system, choose .
On the right side of the page, click + Add user
In the Add user dialog box, enter the Username and Password.
Click OK.
After you create a user, the password of the user cannot be viewed in the system. If you forget the password, you must change the password.
No permission is granted to a user when it is created. You must manually grant permissions to the user. For more information, see Grant and revoke permissions.
Delete a user
Find the user that you want to delete. Click Delete in the Operation column.
Click OK.
Change a user password
Click Change password in the Operation column corresponding to the user whose password you want to change.
In the Change password dialog box, specify the New password.
Click OK.
Permission management
You can grant permissions to or revoke permissions from a user in the cluster management system.
Permission levels
Lindorm provides three hierarchical permission levels. In descending order of scope, they are Global, Database (also known as Namespace), and Table.
For example, if you grant user1 Global read and write permissions, they can read from and write to all tables in all databases of the Lindorm wide table. Similarly, if you grant user2 Database read and write permissions on Database1, they can read from and write to all tables in Database1, including any new tables.
Permission types
The following table lists the available permission types and their corresponding operation syntax.
Permission | Description | Syntax |
WRITE | Operations related to writing data to tables in Lindorm. | PUT, BATCH, DELETE, INCREMENT, APPEND, and CHECKANDMUTATE |
READ | Operations related to reading data from tables in Lindorm. | GET, SCAN, and EXIST |
Operations related to reading the descriptor and namespace information of tables in ApsaraDB for Lindorm. | GETTABLEDESCRIPTOR, LISTTABLES, and LISTNAMESPACEDESCRIPTORS | |
ADMIN | Data Definition Language (DDL) operations other than those related to deleting tables or table data. | CREATETABLE, ENABLETABLE, and DISABLETABLE |
DDL operations related to namespaces. | CREATENAMESPACE | |
TRASH | Operations to delete tables and truncate table data. | TRUNCATETABLE and DELETETABLE |
SYSTEM | O&M operations. Data migration and synchronization operations performed by using LTS. | COMPACT and FLUSH |
Grant and revoke permissions
In the Operation column for the target user, click More.
Select the operation that you want to perform from the drop-down list.
Grant permissions: You can grant the global, namespace, or table permission to the user.
Revoke permissions: You can revoke the global, namespace, or table permission from the user.
In the dialog box that appears, select or deselect the permissions and related information.
Click OK.