Manage users and their permissions in the Lindorm console, including creating and deleting users, granting read and write permissions, and revoking permissions.
Limitations
This feature is available only for Lindorm instances. For a Lindorm V1 instance, use the User Management system.
Manage users
Create a user
Log on to the Lindorm console. In the upper-left corner of the page, select the region of the instance. On the Instances page, click the ID of the target instance or click View Instance Details in the Actions column for the instance.
-
In the left-side navigation pane, choose User Management.
-
Click Create User. In the Create User dialog box, enter a username and password for the new user. Click Create User.
ImportantThe username and password must meet the following requirements:
-
username: Must be 2 to 30 characters long and can contain only digits, uppercase letters, lowercase letters, underscores (_), and hyphens (-).
-
password: Must be at least 8 characters long and must contain a character from each of the following categories: uppercase letters, lowercase letters, digits, and special characters (for example,
@,#, and$).
-
Delete a user
-
In the Actions column of the target user, click Delete User.
-
Click Determine.
Change a user's password
-
In the Actions column of the target user, click Reset Password.
-
In the Change Password dialog box, enter the new password.
-
Click Determine.
Permission management
Use Permission Management to grant or revoke permissions for Lindorm users.
Permission changes take effect immediately. However, a short synchronization delay may occur.
Engine categories
Lindorm supports engine-level permission management. You can grant a user permissions to one or more engines: wide column, time series, search, vector, AI, and columnar storage.
Permission levels
Lindorm supports three hierarchical permission levels, from highest to lowest: Global, Database (also known as Namespace), and Table. A user with Global permissions for an engine automatically has the same permissions for all databases and tables within it.
For example, granting user1 Global read and write permissions for the wide column engine gives user1 read and write access to all tables in all databases within that engine.
Permission categories
The supported operation permissions are WRITE, READ, ADMIN, TRASH, and SYSTEM.
For detailed descriptions of permissions for each engine, see Wide column engine permissions and Time series engine permissions.
Grant and revoke permissions
-
In the Actions column of the target user, click Permission Management.
-
From the drop-down list, select the desired action:
-
Grant Permissions: Grants permissions at the Global, Database, or Table level.
-
Revoke Permissions: Revokes permissions at the Global, Database, or Table level.
-
-
In the dialog box, select the engine, database or table, and Permission Type.
NoteYou can click
to grant or revoke permissions for multiple engines, databases, and tables at once. -
Click Determine.