Hologres:Grant permissions to RAM users

Grant RAM permissions

After an Alibaba Cloud account grants RAM permissions, the RAM user can view, purchase, or delete instances in the Hologres console. To grant full console access, assign the AliyunHologresFullAccess and AliyunRAMReadOnlyAccess policies to the RAM user in the RAM console.

For information about granting permissions to RAM users, see Manage RAM user permissions.

Grant instance-level developer permissions

An Alibaba Cloud account must grant developer permissions before a RAM user can develop in a Hologres instance. The following example uses the simple permission model to grant permissions through HoloWeb.

1. Log on to the Alibaba Cloud official website using your Alibaba Cloud account.

2. Log on to the Hologres console. On the Instances page, click the name of the target instance to go to the product page.

3. In the navigation pane on the left of the product page, click Account Management.

4. On the Users page, click Add User.

5. In the Add User dialog box that appears, configure the following parameters.

   

   Parameter	Description
   Select Organization Member	Select the RAM user to add to the instance.
   Select Member Role	Superuser: Full permissions on all instance operations. Normal User: No permissions by default. Grant specific permissions to allow the user to connect to and use the instance.

6. Optional: If the new user is a regular user (Normal), grant additional permissions as follows:

   1. In the navigation pane on the left of the product page, click Database Management.

   2. On the DB Authorization page, find the target database and click Authorize User in the Actions column.

      

      Note

      If no database appears in the current list, click Create Database in the upper-right corner.

   3. Go to the permission management page of the database and click Grant Permission.

   4. In the Grant Permission dialog box that appears, configure the following parameters.

      

      Parameter	Description
      User	The target RAM user.
      User Group	Admin: Full access to all database objects and user group management. Developer: Create, modify, and delete database objects using DDL, plus read and write data. Writer: Read and write data in database objects. Viewer: Read-only access to all database objects.

7. Click OK to complete the operation.