Hologres:Manage databases

Create a database and specify a permission model

On the Database Authorization page, you can create databases in a visualized manner.

1. Log on to the Hologres console. In the left-side navigation pane, click Go to HoloWeb.

2. In the top navigation bar of the HoloWeb console, click Security Center. On the page that appears, click Database Authorization in the left navigation menu.

3. Select a Hologres instance from the Instance Name drop-down list. In the upper-right corner of the page, click Create Database.

4. In the Create Database dialog box, confirm your instance selected, enter a database name, and set Permission Model.

   We recommend that you select SPM (simple permission model) to simplify authorization.

   Hologres provides the following permission models:

   • Expert: This model adheres to the standard PostgreSQL authorization model. Permissions can be granted to RAM users using standard PostgreSQL GRANT statements.

   • SPM: A coarse-grained model that extends PostgreSQL authorization by managing permissions at the user group level for enhanced experience. For more information, see SPM.

   • SLPM: Schema-level permission model. A fine-grained model that divides permissions by schema. Recommended for strict permission management and ease of granting. For more information, see SLPM.

   Note

   When you purchase a Hologres instance, a postgres database is automatically created for management. This database has limited resources and is not shown on the HoloWeb Database Authorization page. You should create separate databases to meet your business requirements.

Grant permissions to a user

With the SPM permission model, you can grant permissions to users visually on the Database Authorization page.

1. On the Database Authorization page, click Authorize User in the Actions column of your database.

2. Click Grant Permissions in the upper-right corner.

3. In the Grant Permissions dialog box, configure the User and User Group parameters.

   Valid values of the User Group parameter:

   • Admin: Users in this group are the owners of the current database and are authorized to manage all objects and user groups in the current database.

   • Developer: Users in this group are authorized to read and write data in the current database, and create, delete, or modify objects by executing data definition language (DDL) statements.

   • Writer: Users in this group are authorized to read and write data in the current database.

   • Viewer: Users in this group are authorized to read data in the current database.

4. Click OK. Then, the user can connect to the Hologres instance by using a development tool to analyze data.

   Note

   If you cannot find the target RAM user in the User drop-down list, add the RAM user on the User Management page.

Revoke permissions from a user

If you specify SPM for a created database, you can revoke permissions from a user in the current instance in a visualized manner on the Database Authorization page.

1. On the Database Authorization page, click Authorize User in the Actions column of your database.

2. Click Revoke Permission in the Actions column of the user from which you want to revoke permissions.

3. In the dialog, click OK.

   For more information about the permissions that are granted to a RAM user after you revoke permissions, see Use the SPM.

Delete a database