Hologres:Manage users

Account types and roles

Hologres supports three account types:

Each user has one of two roles:

• Superuser: Has all permissions on the instance. No additional authorization required.

• Normal: Has no permissions after creation. You must grant permissions before this user can access databases, schemas, or tables.

The Alibaba Cloud account that purchased the instance is the default superuser and has all permissions on that instance. Before you add other users, the User Management page displays only this account.

Prerequisites

Add a user

Add an existing RAM user to a Hologres instance.

1. On the User Management page, select the target instance and click Add User in the upper-right corner.

2. In the Add User dialog box, select a RAM user associated with the current Alibaba Cloud account.

3. Select a role: Superuser or Regular User.

4. Click OK.

Create a custom user

Custom users authenticate with a username and password instead of an AccessKey pair and are valid only within Hologres.

CREATE USER "BASIC$<user_name>" WITH PASSWORD '<password>';

Reset a custom user password

Only custom user passwords can be reset. Alibaba Cloud accounts and RAM users authenticate with automatically generated AccessKey pairs.

ALTER USER "BASIC$<user_name>" WITH PASSWORD '<password>';

Delete a user

Deleting a user removes the user from the instance and revokes all access permissions.

DROP USER "BASIC$<user_name>";

Create a user mapping for MaxCompute access

Custom accounts exist only within Hologres and cannot query MaxCompute foreign tables by default. If a custom account attempts to query a MaxCompute foreign table, the following error occurs:

ERROR:  Query:[xxxxxx] Build desc failed: failed to check permission: Authorization Failed [4002], You don't exist in project hologres_test. Context ID:xxxxxx-xxxx-xxxx-xxxx-xxxxxxx.    --->Tips: Pricipal:INVALID$BASIC$xxx; You don't exist in project xxx

To resolve this, create a USER MAPPING that attaches the custom account to a RAM user with the required permissions on the MaxCompute project and the Hologres database.

CREATE USER MAPPING
FOR "<user_name>"
SERVER odps_server
OPTIONS
(
    access_id '<Access_id>',
    access_key '<Access_key>'
);

CREATE USER MAPPING
FOR "BASIC$test"
SERVER odps_server
OPTIONS (
  access_id 'LTxxxxxxxxxx',
  access_key 'y8xxxxxxxxxxxxx');

CREATE USER MAPPING
FOR CURRENT_USER
SERVER odps_server
OPTIONS (
  access_id 'LTxxxxxxxxxx',
  access_key 'y8xxxxxxxxxxxxx');

User Management page columns

The User Management page displays the following columns:

References

For more information about deleting an account (DROP USER) in Hologres and troubleshooting related errors, see Delete an account.